gatxan.com

What It Is

GATXAN is an internet security and privacy service provider based in Andorra, building its service ecosystem around “real privacy” and “self-owned infrastructure.” Its offerings include encrypted cloud storage and collaborative office tools, email, hosting and large-scale backups, cybersecurity/network defense consulting, blockchain transaction tracing, crypto-asset source identification, helpdesk support, and custom IT solutions.

Core Capabilities and Protection Scope

In terms of protection categories, GATXAN is not just a single-point security product; it is more like a privacy-first security service suite. Its cloud services support end-to-end encryption by default and offer a Zero-Knowledge option where keys are generated on the user side. Email can use PGP encryption, while authentication supports up to three factors, including password, OTP, and PGP key. At the infrastructure level, the text repeatedly emphasizes that its servers are located in GATXAN’s own facilities and data centers in Andorra, with no use of third-party cloud services or external servers, reducing reliance on third-party privacy policies.

Deployment, Management, and Integration

Deployment is mainly based on GATXAN-hosted cloud services, though the company also says it can install dedicated servers on customers’ premises or develop custom software. Management capabilities include continuous monitoring of users, systems, and communication flows, real-time alerts, threat isolation, automated response, tracing, as well as encrypted replicated backups and snapshots. On the integration side, open-source software is a key part of its strategy. GATXAN emphasizes cross-platform use across Windows, macOS, Linux, Android, iOS, and other systems, with support for device synchronization, PGP, OTP, website/email/server migration, and related scenarios.

Pricing and Compliance

Pricing information is limited. The text only states that using open-source software avoids additional software purchase or subscription costs, and that users only pay service subscription fees. However, it does not disclose plans, storage capacity, SLA details, or enterprise pricing. On compliance, the text refers to applicable Andorran law and the LQDP/personal data protection law, and mentions rights such as data access, deletion, and restriction of processing. However, no third-party certifications such as ISO 27001 or SOC 2 were found.

Pros, Cons, and Who It’s For

Its strengths are a clear privacy stance, self-owned infrastructure, Zero-Knowledge encryption options, broad service coverage, and the availability of incident response and tailored consulting. The main downside is that the information disclosed is not yet procurement-grade: pricing, audit certifications, availability metrics, and service boundaries are all unclear. It is better suited for users who prioritize privacy sovereignty and need secure email, encrypted cloud storage, large-scale backups, blockchain tracing, or custom security consulting. Enterprises with strict compliance procurement processes should request contracts, SLAs, audit reports, and data processing agreements before proceeding.

Access from China

The text does not provide information on mainland China network connectivity, payment methods, or Chinese-language support. The FAQ only notes that access may be difficult in some countries due to internet restrictions, so its accessibility from China is rated as unknown. If using it from mainland China, it is recommended to first test domain connectivity, email deliverability, and payment options. Local alternatives may include Alibaba Cloud, Tencent Cloud, Huawei Cloud, and compliant domestic security service providers, though they may not offer the same Zero-Knowledge privacy positioning.