Private encrypted network. Control planes are never exposed.
SSO + 2FA
Your corporate identity, with single sign-on and two-factor.
Isolation
Every client and every environment, kept apart: network, data and permissions.
Audit
Every change is logged, reviewed and can be reproduced.
Read-only
Elevated privileges are used sparingly and under control.
Anti-abuse
Traffic control across several layers against spikes and abuse.
Engineering
Underneath is a coherent engineering system.
Network and ingress
API gateway
A single front door for traffic, with TLS termination and routing by domain.
Rate limiting
Traffic control across several layers: by domain, by IP and with trust lists. Fail-open by design.
DNS and TLS
Domains and certificates issued and renewed automatically, with nobody touching a thing.
Security and encryption
Secret vault
Highly available: rotation, ephemeral identities and least privilege.
SSO / OIDC
Identity federated against your directory, with two-factor and role-based access control.
Zero trust
A private mesh that denies by default. Control planes never reach the internet.
Delivery and automation
GitOps
Every environment is versioned code: it reconciles on its own, deploys the same way every time and rolls back in an instant.
CI
Tests, static analysis and linting before we build each image, pinned by its digest.
IaC
Clusters, networks and load balancing are provisioned reproducibly and auditably.
Resilience and data
Kubernetes
Orchestration with autoscaling, self-healing and zero-downtime updates.
Multi-tenant
Every client and every environment, isolated. What happens in one does not touch the rest.
Databases
Run cloud-natively, with replication and automatic failover.
Observability
Health probes, metric dashboards and continuous alerts.
IoT connectivity
Connect your devices and sites, without opening your network to the internet.
Sensors, machines, industrial gateways and remote offices reach your Odoo and the rest of your applications through private tunnels, encrypted end to end. Each client gets its own isolated group of devices, with fine-grained permissions.
A private encrypted network mesh (WireGuard) that denies by default.
Secure end-to-end tunnels between your devices and the platform.
One isolated device group per client, with fine-grained permissions.
Private connectivity even through NAT and industrial networks.
private mesh · WireGuard · zero-trust
Client devicesIoT · sites
E2E encrypted tunnel ↓
Dyncloud platformdeny-by-default
Why Dyncloud
Genuinely managed, built in Spain. No surprises.
01
Genuinely managed
Not do-it-yourself. We run the whole stack of complexity for you.
02
Odoo specialists
Odoo plus infrastructure. Not generic hosting: a platform built around your business.
03
In Spain and compliant
Your data in Spain, built to the ISO 27001 and aligned with the GDPR. Deployable in other countries if you need it.
04
Security by design
Encryption, secrets, zero trust, isolation and audit are the foundation, not an add-on.
05
End-to-end automation
From a change in the code to production with no manual steps, fully traceable.
06
IoT and distributed sites
We connect your devices, machines and sites privately and encrypted.
Footprint
From Spain, deployable wherever you need it.
By default, your Odoo lives on infrastructure in Spain, with your data under local guarantees. If you operate internationally, we stand up the same platform in other countries, inside or outside the EU, without you changing how you work.
Spain (Valencia)BelgiumNetherlandsFranceSwitzerlandOther countries, on request
Dyncloud is in the process of ISO/IEC 27001 certification in Spain. Dynapps NV (Belgium), the group parent, is already ISO/IEC 27001 certified, and the platform is built applying every control and guideline of that standard. The Trust Center has the detail.
Where is my data hosted?
Your data sits in data centres in Spain, and your backups in object storage in Spain too. Under normal operation it never leaves the country.
What availability and backups do you offer?
The platform heals itself: it restarts or replaces failing components and reroutes traffic automatically. As standard you get a daily backup of database and files with 10 days of retention, and on Kubernetes environments we add 14 days of point-in-time recovery (PITR) for the database. The policy adapts to what you need.
How do you protect my data and meet the GDPR?
Traffic is encrypted end to end (HTTPS/TLS 1.2–1.3), and credentials and secrets are stored encrypted in a dedicated secrets manager, with rotation and least privilege. Every environment is logically isolated, with its own database, its own identity and a segmented network. With the data in Spain and the EU, the GDPR is met by design.
Can I use my company's single sign-on (SSO)?
Yes. Dyncloud integrates with your corporate identity provider over OIDC, SAML or OAuth2, so your team signs in to Odoo with the credentials they already use.
Is Dyncloud an alternative to Odoo.sh and Odoo Online?
Yes, a managed alternative from end to end. Against the self-service of Odoo Online or the PaaS of Odoo.sh, we run the whole platform for you. The comparison lays out the detail point by point.
Whether you are weighing up options or ready to start now, here we are. No endless forms and no canned demos: a first conversation to see if we are a fit.
