IRAP assessed hosting

IRAP assessed Node.js hosting

Managed hosting for Node.js applications on infrastructure IRAP assessed at the OFFICIAL:Sensitive level. Run Next.js, Nuxt, SvelteKit, Remix, and Astro with managed databases, CDN, and WAF — plus the audit logging, backups, and sovereignty your agency requires.

Node.js Application docker-compose.yml
Running
Edge: CDN · WAF · DDoS protection
web :3000
node:24-alpine
2 replicas
worker
bullmq
cache
redis:alpine
postgres managed
postgres:16 · Multi-AZ
30-day backups
Volumes: .next_cache · uploads · assets
OFFICIAL:​Sensitive
IRAP Assessed
SSR + API
Workloads
30-day
Backup Retention
AU
Data Sovereignty

Application hosting

Managed Node.js hosting

Deploy any Node.js framework as a container and run it as a fully dynamic application. Server-side rendering, API routes, and background workers run with health checks and autoscaling, the database is provisioned for you, and every request passes through the CDN and WAF.

  • Next.js, Nuxt, SvelteKit, Remix, and Astro
  • Managed PostgreSQL or MySQL with Multi-AZ option
  • SSR, API routes, and workers as separate containers
  • CDN, WAF, and DDoS protection in front of every request

Explore cloud apps

Edge Network
90+ locations
L3/L4 Mitigation
Always on
SYN Floods
Protected
UDP Floods
Protected
Amplification
Protected
Global Distribution
35
Americas
28
Europe
22
Asia-Pac
5
Oceania
Automatic Scaling
Attack traffic distributed globally
Active
No config required Included free
Learn more

What IRAP assessed hosting includes

Your Node.js application inherits the same assessed platform controls.

Immutable audit logging

Multi-region audit trails with log file validation capture every administrative action.

  • 7-year (2,555-day) retention
  • Object Lock in COMPLIANCE mode
  • Network flow logs on every VPC

Automated backups

Daily database backups, plus on-demand database and filesystem backups you control.

  • 30-day automated retention
  • Restore to any environment
  • Multi-AZ database option

Australian data sovereignty

Workloads run in Melbourne with Sydney as the secondary region. Data at rest stays in Australia.

  • Melbourne primary region
  • Sydney secondary region
  • Australian owned and operated

Encryption everywhere

Encryption at rest and in transit for every workload, with managed key infrastructure.

  • AES-256 at rest
  • TLS 1.2 minimum in transit
  • HTTPS-only origins

Access control

Strong authentication and least-privilege access for every account and API client.

  • MFA and passkeys
  • SAML single sign-on
  • Role-based access and scoped API tokens

Network security

Defence in depth from the edge to the container.

  • WAF with OWASP paranoia levels
  • DDoS protection and rate limiting
  • Protective DNS and per-tenant isolation

IRAP assessed Node.js hosting FAQs

Can I run Node.js apps on IRAP assessed infrastructure?

Yes. QuantGov Cloud is IRAP assessed at the OFFICIAL:Sensitive level, and Node.js applications run as managed containers with a provisioned database, CDN, and WAF. Your application inherits the platform controls covered by the assessment.

Which frameworks are supported?

Next.js, Nuxt, SvelteKit, Remix, and Astro in server-rendered mode, as well as any Node.js application packaged with a Dockerfile or Docker Compose definition.

Can I run server-side rendering and APIs together?

Yes. Server-side rendering, API routes, and background workers can run as separate containers in the same application, each with its own resource limits, health checks, and autoscaling.

Which databases are supported?

Managed PostgreSQL and MySQL, with instance sizing options and a Multi-AZ option for higher availability. Automated backups run with 30-day retention and restore to any environment.

Deploy Node.js on assessed infrastructure

Run your framework of choice with the audit logging, backups, and sovereignty your agency requires.

IRAP assessed at OFFICIAL:Sensitive
Next.js, Nuxt, SvelteKit, Remix, Astro
Australian data sovereignty
24/7 P1 support