For manufacturers and suppliers outside the EU — especially from China — whose products include an app, a web portal or a cloud backend. We adapt the software to EU requirements, host it in clouds in Slovenia, Germany and Finland, and keep it running.
One partner in the EU — from adaptation to operation
A product that works in its home market often needs changes to the app and backend before it can be sold in the EU: where the data is kept, how it is protected and how the product is updated.
Software adaptation
We adapt your app, portal or backend to the requirements and expectations of the EU market.
Data protection by design (GDPR): data minimisation, consent, data export and deletion
Multilingual user interface and localisation for EU languages
Connections to EU systems: e-invoicing, SEPA payments, tax and business systems
Hosting in EU clouds
Your services and your EU users' data stay in the EU — in data centres in Slovenia, Germany and Finland.
Location of your choice: Slovenia, Germany or Finland
Container deployment (Podman, Red Hat OpenShift)
Operations monitoring, upgrades and security patches
End-to-end service
One technical point of contact in the EU — from the first review to day-to-day operation and support.
Maintenance and further development after the move to the EU
Technical cooperation with your EU importer, distributor or representative
A contract with an EU company — Mibesis d.o.o., Slovenia
Technical documentation and certification managed with test laboratories
Key facts
Key facts at a glance
What your technical, legal and procurement teams will ask first.
Team
5 people
Architect Miroslav Beranič is your point of contact; the team handles development, operations and support.
IoT experience
5+ years
For small and medium-sized companies: up to 100,000 devices a year and up to 1,000,000 users.
Locations
SI · DE · FI
Our own equipment in a secured colocation facility in Slovenia; Hetzner in Falkenstein and Nuremberg (Germany) and in Helsinki (Finland).
Certification
ISO/IEC 27001
Hetzner data centres in Germany and Finland.
Availability
99.9%
Agreed service availability, including planned maintenance.
Support
24/7
Incident response at any time. Regular support for non-urgent matters: Monday to Friday, 7:00–18:00 Central European Time.
Response
1 hour
At any time, including nights and weekends. Resolution by priority, within 24 hours at the latest.
Backups
Every 4 hours
Plus daily, weekly, monthly and yearly backups, kept in secured cold storage.
Data access
EU staff only
Your staff can use VPN access to the test environment only; production access is agreed separately.
When you leave
Full data export
In agreed standard formats. Three months after the contract ends we delete all data, including backups, and confirm the deletion in writing.
Processing agreement
DPA
A data processing agreement under Article 28 GDPR.
Pricing
On request
We send a quote after the free readiness review.
Regulation
What the EU requires of connected products
The regulations that affect a product's software, and what we do for each on the technical side. The list is not exhaustive; leave the legal assessment to your legal adviser.
GDPR — personal data protection
Applies since 25 May 2018
Personal data of users in the EU must be processed lawfully and securely. Transfers to countries outside the European Economic Area are subject to additional conditions — remote access to the data from a third country is also a transfer.
Our part: hosting and storing the data in the EU, and data export and deletion features in the app.
RED — cybersecurity of radio equipment
Applies since 1 August 2025 (Delegated Regulation (EU) 2022/30)
Devices with Wi-Fi, Bluetooth or mobile connectivity that communicate over the internet must meet requirements for network protection, data protection and fraud prevention (harmonised standards EN 18031). The standards are cited in the Official Journal with restrictions; where they cannot be applied in full, a notified body carries out the conformity assessment.
Our part: reviewing and adapting the app and backend — authentication, encryption, secure updates — plus preparing the technical documentation and managing certification with test laboratories.
Data Act
Applies since 12 September 2025; design requirements from 12 September 2026
The user of a connected product has the right to the data the product generates and can share it with third parties — this already applies. Products placed on the market after 12 September 2026 must be designed so that the data is directly accessible to the user.
Our part: APIs and a portal for accessing and exporting the data.
CRA — Cyber Resilience Act
Vulnerability reporting applies since 11 September 2026, also to products already placed on the market; all requirements from 11 December 2027
Manufacturers of products with digital elements must handle vulnerabilities throughout the product's support period. Actively exploited vulnerabilities and severe incidents are reported through ENISA's single reporting platform: an early warning within 24 hours, a notification within 72 hours and a final report within 14 days (vulnerabilities) or one month (incidents).
Our part: a software bill of materials (SBOM), a vulnerability handling process and security update infrastructure in the EU.
!
What we do not take on
We are an IT and engineering partner. We are not an authorised representative, importer, notified body or law firm, and we do not take on those roles. For certification, we prepare the technical documentation and manage the process with test laboratories; test reports and certificates are issued by the laboratories or notified bodies.
How it works
Four steps to operating in the EU
01
Readiness review
We review the app, backend and data flows: where the data is stored, who has access and what has to change for the EU market. The result is a list of required changes with an estimate of the scope. The review is free of charge.
02
Adaptation
We implement the agreed changes in the app and backend — from data protection and security to languages and connections to other systems.
03
Move to an EU cloud
We set up the services in a data centre in Slovenia, Germany or Finland and prepare the transition of your existing users in the EU.
04
Operation and support
We take care of operation, upgrades and security patches, and of further development when market requirements or regulations change.
Why Mibesis
Experience with systems that must not fail
For 20 years we have worked with the largest Slovenian systems in telecommunications and energy — environments where reliability and security are mandatory.
A company in the EU
Mibesis d.o.o. is based in Maribor, Slovenia — a member state of the EU and the euro area, bordering Austria, Italy, Hungary and Croatia.
20 years of experience
In the field since 2006 — first as a sole proprietorship, since 2008 as Mibesis d.o.o.: integration, development and support of critical systems.
EU regulation in our own products
We develop and run Akruma, a cloud accounting application with e-invoicing, VAT and direct connections to the tax authority and banks.
Our own home energy app
We develop and run HEMS: real-time energy use, solar power, device control and home security.
Contact
Let's talk about your product
Describe your product and the market you want to enter. We'll suggest first steps and estimate the scope — free of charge and with no obligation.
