The Oksigenia standard
What comes as standard in everything we build
Security, backups, email, accessibility, privacy and European hosting: what comes standard with everything we build and run.
The six points, at work
Demo of the six points of the standard. Access: the server asks for the hardware key and grants access once it is touched. Backups: seven daily, four weekly and three monthly in a second data centre, and a successful test restore. Email: a message impersonating the domain arrives and is rejected by its DMARC policy. Accessible: the axe-core check against WCAG 2.2 AA ends with zero issues. Privacy: every request on the page goes to its own server, none to third parties, and no cookies. Europe: compute is spread across OVHcloud and Hetzner and served through a global delivery network.
01
We administer your servers ourselves, and we only get in with a physical key
No client or third party has access to the servers: we run them. And getting in takes a hardware security key, every time.
- A hardware key on every server
- One isolated container per service
- We are an official Nitrokey reseller
02
Your backups live in a second data centre, and we test-restore them
A backup that has never been restored is an assumption. Ours are kept in a second data centre and test-restored.
- In a second data centre
- 7 days plus GFS rotation: daily, weekly and monthly
- Test restores
03
Your email lands: SPF, DKIM and DMARC set up and monitored
Your domain signs every message and tells other servers what to do with mail that impersonates you. And we watch the reports that come in.
- Strict SPF and signed DKIM
- DMARC set to reject
- DMARC reports monitored
- MTA-STS
04
Accessible to everyone, evaluated against WCAG 2.2 AA
We check it with automated tools and by hand: keyboard, contrast, alternative text, structure and forms.
- WCAG 2.2 AA
- Automated testing with axe-core
- Manual review
- Oksigenia Access, our open-source accessibility panel
05
Your visitors browse without being tracked
No analytics that follow anyone, no third-party cookies and nothing loaded from elsewhere: fonts live on the server itself, and videos and share buttons connect to no one until they are clicked.
- No third-party cookies
- Fonts hosted on the server
- Oksigenia Share, tracker-free share buttons
06
Your data is hosted in Europe
We spread compute across several European providers and serve it through a global delivery network, so it loads fast wherever you are.
- OVHcloud and Hetzner
- Redundancy across independent infrastructures
- A global delivery network
Check it yourself
The Checker reviews the certificate, email and security headers of any domain, for free. Try yours, or ours.
This website, too
- No third-party requests
- No cookies or analytics
- A strict content security policy
- Evaluated against WCAG 2.2 AA