Gna! hosts, via application software, content in private spaces that are not publicly accessible. Hostea system administrators are committed to not look into those private spaces, even when they have the technical ability to do so, to respect the users privacy.
All publicly available software published on the dedicated Gitea instances provided by Gna! must be published under a [Free Software license](https://www.gnu.org/licenses/license-list.html).
Gna! exclusively uses resources located in France, at the Graveline OVH datacenter (59820 Gravelines, Nord-Pas-de-Calais-Picardie, France) and at 12 bd Magenta, 75010 Paris, France. A copy of the backups is kept at Arndtstr 44, 10965 Berlin, Germany. It is created and maintained using [Enough](https://lab.enough.community/main/infrastructure).
Security updates are applied via [unattended upgrades](https://lab.enough.community/main/infrastructure/-/blob/master/playbooks/misc/upgrades-playbook.yml).
Backups are managed [via the Enough backup playbook](https://lab.enough.community/main/infrastructure/-/tree/master/playbooks/backup) so that there exist at least one backup of each machine in a geographical location that is different from the one where it runs.
Disaster recovery involves rebooting the machine that was lost using a backup, either within a libvirt hypervisor or an OpenStack tenant.