Sovereign Cloud Office & Continuous NIS2 Engine.
Zero per-user license tax. Professional custom domain email, encrypted drive, shared calendars, and automated NIS2 compliance evidence, deployed in the region you choose.
Complete Sovereign Cloud Office. No Per-Seat Tax Ever.
Replace Google Workspace & Microsoft 365 with dedicated isolated containers under your domain. Pool storage dynamically across unlimited team accounts with zero user license fees.
Business Webmail & IMAP
Clean webmail UI with native IMAP/SMTP connectivity for Outlook, Apple Mail, and Thunderbird.
- check Shared mailboxes (contact@, vanzari@)
- check SPF, DKIM and DMARC on your domain
- check Unlimited email aliases per employee
Encrypted Drive & Sync
Secure team file collaboration with granular access control, external password links, and expiration dates.
- check Native WebDAV mount for Windows/macOS
- check Trash with restore
- check Share links with a password and an expiry
Calendars & Contacts
Corporate scheduling, resource management, meeting room reservations, and central company phonebook.
- check Standard RFC 4791 CalDAV / CardDAV
- check 2-way instant sync for iOS & Android
- check Shared calendars across the team
Admin Management Console
Central administrator dashboard to add users, adjust storage quotas, monitor deliverability, and export records.
- check 1-Click provisioning & offboarding
- check Storage quota for the domain
- check Audit log export
Directive (EU) 2022/2555 & Commission Implementing Regulation (EU) 2024/2690
“Being secure and proving it are two different jobs.”
Most companies deploy firewalls and MFA. But when regulatory authorities (DNSC in Romania, BSI in Germany, ANSSI in France) require verifiable audit proof, static PDF policies fail. TotulDigital continuously inspects your technical controls across your infrastructure, building an automated daily evidence ledger tied directly to European legal annexes.
Daily automated morning evidence ledger. Read-only connectors. Zero agent overhead.
Add TotulDigital NIS2 ModuleAccess Rights & Least Privilege
Verifies role-based privileges, detects dormant administrator accounts, and flags orphaned permissions across cloud environments.
Multi-Factor Authentication (MFA)
Enforces continuous hardware token (FIDO2/WebAuthn) coverage, blocking non-MFA endpoints from connecting to core company assets.
Network Security & Isolation
Monitors container and VPS kernel isolation, physical firewall configurations, and cryptographic TLS 1.3 protocol handshakes.
Hardware & Asset Inventory
Dynamically discovers and catalogs servers, mailboxes, workstations, and storage pools with automated patch-level monitoring.
Vulnerability Handling & CVEs
Correlates active packages with EU CSIRTs Network and ENISA vulnerability registries, prioritizing actionable remediation paths.
Incident Telemetry & Early Warning
Fulfills the strict Article 23 24-hour Early Warning and 72-hour Incident Notification window for essential and important entities.
Per-Seat Tax vs. Sovereign Cloud Office
See how quickly license costs compound at Google Workspace/M365 versus TotulDigital's flat single-tenant sovereign model.
Google Workspace / M365
Prices skyrocket whenever you hire contractors, part-time staff, or create operational mailboxes.
Sovereign Cloud Office
Isolated storage volume. Create 10 or 500 accounts for your organization at exactly €0 extra.
Select Your Sovereign Region. Zero Cross-Border Telemetry.
Hyperscalers mix billions of records across multi-tenant regions under extraterritorial jurisdiction laws. TotulDigital provides isolated containers and continuous NIS2 evidence collection inside enterprise-grade-class facilities.
Foreign subpoena orders cannot force third-party access to decrypt your data vaults.
European Union
EU GDPR compliant
Data stored strictly inside European borders under localized sovereign legislation. Uncompromised legal shield preventing extraterritorial data harvesting or overseas cloud subpoenas.
One platform. The region is yours to choose.
Every customer gets their own deployment. You tell us where it should run, and the law of that place is the law that applies to your data — not ours, and not a third country's.
- European UnionGDPR and NIS2 in one jurisdiction
- United KingdomUK GDPR and the Data Protection Act
- United StatesUS federal and state law
- CanadaPIPEDA
- Asia-Pacificthe law of the host country
- Middle EastUAE federal law
An EU customer choosing an EU region gets GDPR and NIS2 inside one jurisdiction, with no third-country transfer to account for. That is the strongest position available, and it is a choice rather than a property of the product.
Flat pricing, per module
Every module is priced on its own page, so what you read is what you pay. No per-seat licence, no egress charge.
The questions worth asking
How do I get my data out?
Mail is reachable over IMAP and files over WebDAV for as long as the account exists, so you can take a complete copy at any time with ordinary tools and without asking us. There is no export request and no queue.
What is actually backed up?
Nothing, today. There are no off-site backups. Your data exists on the infrastructure of your own deployment and nowhere else. If your use needs data to survive the loss of that infrastructure, tell us before you buy and we will tell you what it would cost to arrange.
What happens if you go out of business?
Your deployment runs on infrastructure rented from OVH or Oracle in your own region, on standard software - Postfix, Dovecot, PostgreSQL. Nothing about it is proprietary to us. Because you can take a full copy over IMAP and WebDAV at any time, the worst case is that you move it somewhere else, not that you lose it.
Do you guarantee uptime?
No. We do not publish an availability figure and we do not offer service credits, because we are not yet in a position to stand behind either. If your use needs a contractual availability level, say so before you buy rather than after.
How do I cancel, and what is the notice period?
Cancel whenever you like, with effect from the end of the month you have paid for. There is no minimum term and no notice period. We do not refund part-months. After you cancel you keep at least 30 days to retrieve your data before anything is deleted.
Who can read my data?
We can, technically. Files are stored as ordinary bytes and mail as ordinary maildirs, so an administrator with access to the host could read them. We do not, and administrative actions are written to an append-only audit log, but we are not going to claim an encryption property the system does not have.
Where exactly does my data live?
In the region you pick when you sign up, and only there. The regions and the law that applies to each are listed on this page. If you pick an EU region, your data stays under EU law and there is no third-country transfer to account for.
What is not finished yet?
The NIS2 evidence engine is in development and is not running against any customer estate. There are no backups. VPS instances have no out-of-band console and reverse DNS is a request to us. Everything else described on this site works today.
Reclaim Sovereign Digital Independence Today
Join European enterprises, legal departments, and critical infrastructure operators reducing software fees by up to 80% while proving continuous NIS2 Directive adherence.