Our mission
Digital privacy is a right.
Not a premium feature.
We founded XeniaCloud with a straightforward purpose: to give Dutch and European businesses a genuinely private, affordable alternative to US-dominated cloud services. No algorithms scanning your emails. No behavioural profiling. No data sold to advertisers. You pay for a service — we deliver it, and we keep your data in Europe. That is the entire business model.
XeniaCloud is operated by Krateos B.V., registered in the Netherlands (Nieuw-Vennep). We are an independent company — no outside investors, no Big Tech affiliations, no pressure to monetise your behaviour. We operate under Dutch law and are supervised by the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority, under the GDPR. Our Data Protection Officer is reachable at dpo@xeniacloud.eu.
This is not a hobby project, a reseller, or a Big Tech product with a privacy sticker on it. It is a professionally operated cloud service, built by people whose careers have always been about protecting data — not exploiting it.
What we stand for
Our values
Privacy by design
We don't collect what we don't need. GDPR isn't a checkbox for us — it's the foundation every feature is built on — from how we store data to what we log, and what we don't.
EU infrastructure only
Your data never leaves Europe. We run on Hetzner datacenters in Germany — EU jurisdiction, GDPR-compliant by design, not by checkbox.
Open source core
Our stack is built on auditable open source software. No black boxes. Anyone can verify what we run.
Independent of Big Tech
We have no ties to Microsoft, Google, or Amazon. No investor pressure to sell your data. Ever.
Built for SMBs
Not a watered-down enterprise product. Designed from the start for teams of 1 to 100.
Fair pricing, always
No hidden fees. No auto-upgrades. No bait-and-switch. We grow when our customers grow.
What we offer
Everything you need to work and communicate — in one place.
From free to professional plans, XeniaCloud gives you a complete digital workspace without handing your data to a US tech giant.
Sync files across all your devices. Share securely. Access from any browser, desktop, or mobile app.
A real @xeniamail.eu mailbox on paid plans. Full IMAP/SMTP. No ads, no scanning, no profiling.
Full CalDAV and CardDAV sync with all your devices. Shared calendars included on family and team plans.
Create and co-edit documents, spreadsheets, and presentations in the browser. No Microsoft Office required.
Secure video meetings and voice calls, built into your cloud. No Zoom account needed.
Manage to-dos synced across every device. Native iOS and Android apps for files, mail, calendar, and more.
Who's behind XeniaCloud
Meet the founders
Vasilis Giannakopoulos
Co-founder & Infrastructure LeadVasilis brings a background spanning infrastructure engineering, security architecture, privacy, and risk management. He designed and built the XeniaCloud platform from the ground up — from network architecture and hardened mail infrastructure to GDPR-compliant provisioning and automated security monitoring. His approach is shaped by the same principles that run through everything at XeniaCloud: fail-closed, privacy-first, and auditable by design.
LinkedIn profile →Vaughan-Lyle Mackolisky
Co-founder & Compliance LeadVaughan-Lyle is a Fellow of Information Privacy (FIP) and a Certified Information Privacy Professional — Europe (CIPP/E). His career spans information security officer roles in regulated industries — including IT Security at Lockheed Martin Commercial Flight Training — and over two decades of IT security consulting and risk management across Europe. At XeniaCloud he leads compliance, legal, and data governance: making sure the privacy promises we make are the ones we actually keep.
LinkedIn profile →Our certification roadmap
We are working towards ISO 27001 (Information Security Management System) and ISO 27701 (Privacy Information Management — the GDPR Article 25 extension) certification. These are not marketing badges. They are independently audited frameworks that require us to document our controls, prove they work, and submit to external verification on an ongoing basis.
We are honest about where we are: we launched in June 2026 and certification takes time to do properly. Our target is to begin the formal gap assessment within the first six months of operation and reach certification within 12 months. We will publish our progress.
For customers in regulated sectors or public procurement — this matters. An ISO 27001-certified supplier means audit-ready documentation and independently verified controls, not a self-assessment checklist.