Engineering
Managed EU infrastructure and PCI-ready hosting
Two distinct services. Managed application infrastructure that we operate, and PCI DSS environment preparation on infrastructure you own. They are never blurred.
A. Managed application infrastructure (we operate it)
Dedicated servers and VPS that Chronos operates and manages, rather than shared hosting or hyperscaler cloud. Applications run in Docker containers orchestrated with Docker Swarm across multiple servers, with self-hosted Gitea, S3-compatible object storage, and separate staging and production.
Your data is stored on EU servers in France, Germany, Italy or Poland — your choice. Edge protection (Cloudflare) and AI tooling are opt-in, and EU-hosted AI models are available.
Tuned for Laravel and PHP applications, from queue workers and scheduled jobs to high-traffic web tiers.
Production systems run under high daily visitor volume alongside live payment processing — over 21,000 daily visitors at peak.
Every change checked before it goes live
Every change passes automatic code-quality, test and security checks, then runs on a private test copy before it goes live. Releases have no downtime: a new version takes over only once its health check passes, and a version that fails never takes over.
Watched around the clock
Every site is checked continuously. Outages and errors reach an engineer within minutes, day or night. Each new kind of error becomes a ticket with a first diagnosis attached: AI-assisted, with every fix reviewed and approved by a person.
Your data, protected and recoverable
Encrypted nightly backups, kept daily for two weeks, then weekly, monthly and yearly for up to three years. An off-site copy that cannot be reached from the internet. One login per person, revoked in one step when someone leaves. Shared credentials in a self-hosted password vault. No Google services in the stack: our own analytics, captcha and file storage.
Your choices, not ours
- Server location: France, Germany, Italy or Poland
- VPS or dedicated hardware, sized to the workload
- Servers held in your own provider account
- Cloudflare edge protection: on or off
- AI-assisted error triage: off, an EU-hosted model such as Mistral, or another provider of your choice
When something breaks
Monitoring alerts reach an engineer within minutes, around the clock. Response times and support hours are agreed in your contract.
No lock-in
Built from open-source components with scripted, repeatable builds. You own the code and the server accounts. If you leave, you take the code, the build scripts, the configuration and a full backup with you.
99.99% measured uptime across our own production systems over the last 180 days.*
*A measurement, not a guarantee: achievable uptime depends on the servers and networks chosen.
| Service | Price |
|---|---|
| Platform setup: first server, staging and production, release pipeline, single sign-on, monitoring and backups | from €1,500 |
| Each additional server | from €500 |
| Managed platform: patching, monitoring, backups and incident response, first server included | from €590/month |
| Each additional managed server | +€150/month |
| Migration of existing applications | quoted per application after a short assessment |
Prices exclude VAT. Server costs are billed to you directly by your provider. The managed platform covers the infrastructure; changes to your application itself are quoted separately or covered by a support plan.
B. PCI DSS environment preparation and maintenance (you own the infrastructure)
For companies whose own servers, or rented servers, must stand up to PCI DSS assessment.
How it works:
- You provide the server — owned, or rented from a provider offering PCI-capable facilities.
- We take SSH access and build the environment: OS hardening, network segmentation, access control and key management, logging and monitoring, patch management, backup and recovery.
- We work alongside your external auditor and your ASV scanning service, remediating findings until the scan is clean.
- We maintain the environment so it stays clean through each quarterly scan cycle.
Chronos is not the assessed entity and does not issue certification. Validation is performed by the client's external auditor and ASV. Chronos builds and maintains the environment that passes.
| Service | Price |
|---|---|
| PCI DSS environment setup and scan remediation | from €2,500 |
| PCI maintenance retainer — patching, hardening, monitoring, quarterly scan remediation | from €750/month |
Backed by direct payments and fintech engineering experience: six server environments prepared and taken through assessment, several maintained for between two and five years.
Frequently asked questions
- What are the two services?
- Managed application infrastructure that we operate, and PCI DSS environment preparation on infrastructure you own. They are never blurred.
- What does managed infrastructure cost?
- Platform setup from €1,500, each additional server from €500, and the managed platform from €590/month including the first server, plus €150/month per additional server. Migrating existing applications is quoted per application. Prices exclude VAT; server costs are billed to you directly by your provider.
- Where is our data hosted?
- On EU servers in France, Germany, Italy or Poland, your choice, held in your own provider account. Cloudflare edge protection and AI tooling are optional, and EU-hosted AI models are available.
- Do you guarantee 99.99% uptime?
- No. 99.99% is what we measured across our own production systems over the last 180 days. What you get depends on the servers and networks chosen. Response terms are agreed in your contract.
- What happens when something breaks?
- Monitoring alerts reach an engineer within minutes, around the clock, and every new error is ticketed with a first diagnosis. Response times and support hours are agreed in your contract.
- What if we want to leave?
- You take the code, the build scripts, the configuration and a full backup with you. Everything is built from open-source components, and the server accounts are already yours.
- What does PCI DSS environment preparation cost?
- PCI DSS environment setup and scan remediation is from €2,500, and the PCI maintenance retainer — patching, hardening, monitoring and quarterly scan remediation — is from €750/month.
- Does Chronos issue PCI certification?
- No. Chronos is not the assessed entity and does not issue certification. Validation is performed by the client's external auditor and ASV; Chronos builds and maintains the environment that passes.
- Do we keep ownership of our code and infrastructure?
- Yes. For managed infrastructure you own the code and the server accounts, and if you leave you take the code, the build scripts, the configuration and a full backup with you. For PCI DSS preparation you own the infrastructure and provide the server.
- What experience backs the PCI DSS work?
- Direct payments and fintech engineering experience: six server environments prepared and taken through assessment, several maintained for between two and five years.
- Can you handle high-traffic production workloads?
- Yes. Production systems run under high daily visitor volume alongside live payment processing — over 21,000 daily visitors at peak.