Sovereignty & security

The facts, on one page.

What your procurement and data protection teams usually ask first. Print it, or pass it on.

Operator: Elba Technologies GmbH, a German company with no US parent company
Infrastructure: STACKIT (Schwarz Group), region eu01, data centres in Germany
Subprocessor: Schwarz Digits Cloud GmbH & Co. KG (STACKIT), Bad Friedrichshall, Germany
Data processing agreement: Available under GDPR Art. 28. Ask us at identify@elba-tech.com.
Approach: Built to be operated in Europe, for organisations that want identity under European law
Standards: Your applications connect over standard OIDC and SAML, with no proprietary SDK
Migration: MFA stays in force at the upstream. Upstream passwords are never collected.

Identify · Sovereignty & security · identify.technology · identify@elba-tech.com · 2026-10-13

Bring your data protection officer.

We'll take them through it in the demo, and send the agreement on request.