Telemetry that never leaves the jurisdiction you chose.

An exception carries the arguments the function was called with. A request context carries headers, a URL and often a session. A breadcrumb trail carries what the user clicked. On a busy application this adds up to a detailed record of what identifiable people did, minute by minute, and it is collected automatically by a library nobody reviews after the day it is installed.

That is why "it is only telemetry" does not survive contact with a data protection officer. Under the GDPR this is processing of personal data on your behalf, you are the controller, and the company holding it is your processor. Which company that is, and which legal system it answers to, is therefore a decision rather than a detail.

This is the part most European buyers have already been told and most vendor pages avoid. The United States CLOUD Act lets American authorities compel a provider subject to their jurisdiction to hand over data it controls, regardless of where that data is physically stored. An EU region does not change who owns the company, and ownership is what the Act attaches to.

Article 48 of the GDPR points the other way: a judgment or decision from a third country is only enforceable in the Union through a mutual legal assistance treaty. A European company receiving such an order is in a position to refuse it. An American one, or a European subsidiary of one, is not.

Bugtail is run by a Belgian company with no parent, no subsidiary and no branch outside the Union. There is nobody in the group for such an order to be served on. That is the whole claim; it is small, it is checkable, and it is the reason a hospital or a municipality can buy this without a legal memo.

When your organisation is created, so is object storage for it: your own bucket, in an EU region, holding only your payloads. It is not a folder inside a shared bucket where a wrong prefix is the only thing between two customers.

That choice pays off in three ordinary situations. Retention can be set per organisation rather than per platform. A security review can be answered with a boundary the object store enforces rather than with a promise about application code. And when somebody asks you to erase everything, the answer is that the bucket is gone, which is a much better sentence than describing a sweep.

Prices are in euro and exclude VAT, which is what a business price list quotes here. With a valid VAT number from outside Belgium the reverse charge applies and we charge none; the number is checked against VIES and never assumed, because shifting VAT on a number that turns out not to exist leaves the bill with us.

Every payment produces a real invoice with a number from a proper series, your company details as the tax administration holds them, and the period it covers. Subscriptions start on the first of the month, so a billing period is a calendar month and your bookkeeping does not have to pro-rate anything after the first one.