Trust
Your data, hosted in France and retrievable.
What we put in place to protect the websites and the data you entrust to us, who processes them and where, and what we commit never to do.
Updated on 15 October 2026.
What we put in place
Six measures, for every site and every plan.
Hosting in France
The websites and accounts are hosted with OVHcloud, in France, under European law; Arko’s management area will be too. Backup copies, encrypted before they leave, are stored with Backblaze, in its European region (the Netherlands).
Encryption in transit
Every connection uses HTTPS, with TLS 1.2 or later; certificates are renewed automatically as soon as a domain is connected.
Passwords and sessions
Passwords stored in hashed form by our identity provider, app-based two-factor authentication offered on password-based accounts (an account opened with Google relies on Google’s 2-Step Verification), sessions protected by secure cookies, an origin check on every form, and a limited number of sign-in and sign-up attempts.
Permissions checked on the server
Each member of an organisation has a role — owner, administrator, editor or viewer. Permissions are checked on every request, never just on screen, and the database itself keeps each organisation’s data apart.
Backups and history
The platform’s databases are backed up continuously and every night, encrypted, with a copy kept off our servers; a full restore is rehearsed every month. Arko keeps a history of your publications and lets you roll back to an earlier version.
Export at any time
Content, catalogue and activity data can be retrieved in documented formats, during and after your subscription.
Processors
The companies that help us run Zenit: what each one does, and where.
- In use
Hosts the websites, the accounts and their data, under European law.
France
- In use
Routes and protects the traffic of both websites.
Global network, EU–US framework
- In use
Stores the backup copies, encrypted before they are sent: it cannot read them.
The Netherlands
- In use
Sends account emails: codes, links and security notices.
Switzerland
Amazon SES
Coming soonWill send the newsletter, once the first issues go out.
Sweden
- Coming soon
Payment and invoicing, once subscriptions open; no card number will pass through our servers.
Partly in the US, EU–US framework
The full, up-to-date list is in the privacy policy.
What we don’t do
- No selling or sharing of data for advertising purposes.
- No marketing trackers on this site; only strictly necessary cookies.
- No access to your content by our team unless you ask, except where the law requires it.
- No retention beyond the periods stated in the privacy policy.
Your rights over your data
Access, rectification, erasure, portability: a reply within one month, as the GDPR requires.