---
title: "A web stack with European providers only, with Bunny.net"
description: "Servers in Noraina's EU data centres with Bunny.net's CDN and Shield WAF in front, for companies that need every provider in the chain to be European."
url: https://www.noraina.cloud/architectures/european-stack/
language: en
---
# A web stack with European providers only, with Bunny.net

For companies whose regulator, customers or policy require every provider serving an application to be European. The servers run on our platform in our EU data centres, and Bunny.net, a CDN and edge security company based in Europe, delivers and protects the traffic with its CDN and its Shield web application firewall.

## The problem

The application must be protected and delivered quickly, and the policy is that no provider in the chain is headquartered outside Europe. That rules out the big cloud providers and the most common CDN and WAF services, and leaves the work of putting together a European alternative that is as easy to run.

## How the pieces fit

1. **Bunny.net CDN** receives every request and serves cached content from its network, close to each user.
2. **Bunny Shield** filters the traffic before it reaches your servers: a web application firewall against the OWASP Top 10, SQL injection and cross-site scripting, DDoS protection, rate limiting, bot mitigation and access lists.
3. **Efficient Cloud Instances** run the application in one of our EU data centres, Dublin, Paris or Barcelona, and can replicate every five minutes to a second EU site.
4. **Administration** goes through private addresses behind our managed firewall, not through the internet.

As a Bunny.net partner, we design the setup with you, configure Bunny.net and our platform together, and run both if you want us to.

## What you get

- Delivery, web application protection and servers from European companies only.
- Servers and data in the EU site you choose, with replication to a second EU site.
- Caching rules that decide which content may be stored at the edge and which is always fetched from your servers.
- One team that designs and runs the whole chain.

## Backups

[Efficient Cloud Backup](https://www.noraina.cloud/products/efficient-cloud-backup/) stores its copies in the EU, encrypted before they leave your servers with a key that neither we nor the storage provider hold. The storage provider, Wasabi, is headquartered in the United States, so if your policy also covers who stores encrypted data, tell us and we agree a backup target with you.

## Cost

Instances are quoted for your configuration, and Bunny.net is billed by usage according to its pricing. [Tell us what you run](https://www.noraina.cloud/contact/) and we send a proposal.

## Frequently asked questions

### Can I run a website with a CDN and a WAF using only European providers?

Yes. We run the servers on our platform in Dublin, Paris or Barcelona, and put Bunny.net in front, a European company whose CDN caches and delivers content and whose Shield product adds a web application firewall, DDoS protection, rate limiting and bot mitigation. Noraina is an Irish company and a Bunny.net partner, so every provider in the chain is European.

### Does a European CDN keep my content inside Europe?

Not by itself. Bunny.net is European, but like any CDN it serves cached copies from locations close to each user, including outside Europe. If some content must not be cached outside the EU, we design the caching rules so that it is passed through to your servers instead of being stored at the edge.

## Compliance

Our services support these controls and produce evidence for them. Certification depends on your whole management system and is granted by an accredited auditor, not by a supplier.

- **ISO 27001**: 5.29, 5.30, 8.14 (https://www.noraina.cloud/compliance/iso-27001/)
- **ENS**: op.cont.2, op.cont.3, op.cont.4 (https://www.noraina.cloud/compliance/ens/)
- **NIS2**: 21.2.c (https://www.noraina.cloud/compliance/nis2/)
- **DORA**: art.11, art.12 (https://www.noraina.cloud/compliance/dora/)
- **GDPR**: 32.1.b, 32.1.c (https://www.noraina.cloud/compliance/gdpr/)

Last updated: 2026-10-08