Your Server, Your Data: Why Where Software Runs Is a Question of Principle
Where software runs determines who can access your data, who has the final say over it, and how easily you can leave again. A look at the question that should come before every software decision.
A psychotherapy practice stores appointment requests, a cultural association its membership list, a law firm its case files. Before any question about features comes the same fundamental one: where does this data live — and who has the final say over it? That is precisely what data sovereignty means.
What data sovereignty means in practice
Data sovereignty means your organisation itself controls where its data is stored and who has access. It becomes concrete in three places:
- Access. On your own hosting, only the people you grant access can get in. On a rented platform, the operator always has technical access as well.
- Export and migration. If the data lives with you, moving is a matter of copying a directory. On a platform, the provider decides what can be exported and in which format. A note on my own products: the entire installation lives in one directory – moving means copying that directory.
- End of the relationship. If a platform provider discontinues the service or changes its prices, it dictates the terms. A self-hosted installation simply keeps running, untouched.
Self-hosting does not mean "a server in the basement"
Running software yourself requires neither your own hardware nor IT staff: an ordinary web hosting package from a provider based in Germany is enough — the same kind of package a normal website runs on. The difference lies in the contractual relationship: the provider merely supplies storage and computing power; the software and its data remain yours.
Why the location matters
A practice's health data, religious affiliation in a membership list, confidential mandates — this is specially protected data within the meaning of Art. 9 GDPR, or professional secrets. The shorter the chain of parties involved and the clearer the jurisdiction, the simpler the legal assessment. A server with a German provider under German law is the most straightforward arrangement — with no third-country transfer questions.
In short
Where software is hosted determines how independent your organisation remains — and "running it yourself" today is neither expensive nor complicated. For more depth: Your Own Instance Instead of a Big Platform and the article on US cloud services.
Frequently asked questions
Do I need my own server in the basement for this?
No. An ordinary web hosting package from a German provider is enough in most cases.
What does such a web hosting package cost?
Simple packages with PHP and SSL are available from a few euros a month. What matters is less the price than the provider's location and reputation.
Who takes care of backups?
Good hosts back up automatically; in addition, your organisation should keep its own backups — usually a matter of copying a single directory.
Last updated: August 2026 · This article provides general information and is not legal advice.
Ask a question — I always reply personally.
Sounds like your topic?
Let’s find out – with no obligation – where your biggest lever is.
