FAQ
Questions Developers & Founders Ask
Direct, technical answers about our multi-cloud mesh, security model, databases, and billing.
How are my cloud keys kept secure? Are credentials stored in a database?
Credentials are never stored in GeoCell's application database. Every customer and tenant receives their own dedicated, isolated cryptographic Vault. Your cloud credentials are encrypted at rest inside your private tenant Vault and accessed strictly when provisioning or managing resources in your accounts. You also scope each key with least-privilege IAM policies and can revoke access anytime from your cloud console.
Am I locked in? Can I export to Terraform or standard containers?
You have zero vendor lock-in. Everything GeoCell creates lives inside your cloud accounts—standard OCI container images, standard Kubernetes clusters, and open-source Postgres/MySQL/MongoDB databases. If you ever decide to stop using GeoCell, your infrastructure continues running undisturbed in your accounts, with no proprietary runtimes required.
What happens if the GeoCell service itself has an outage?
Your cells continue running without interruption. The WireGuard tunnels, Kubernetes clusters, and database replication engines run natively in your cloud accounts and manage their own health and failovers independently. While the GeoCell dashboard is unreachable, you cannot trigger new deployments, but your users experience 100% uptime.
Which databases and drivers are supported?
Postgres, MySQL, and MongoDB are fully supported. Your application code connects with its ordinary database driver and connection string. Reads are served locally in-region by the nearest reader node with sub-millisecond latency, while writes automatically route to the primary writer.
How does multi-cloud reduce cloud costs instead of increasing them?
Hyper-scalers like AWS charge up to $0.09 per GB for data egress and premium rates for compute. By placing non-transactional workloads, heavy egress, and batch compute on budget clouds like Hetzner ($0.001/GB egress, 20TB free) or Vultr while keeping transactional cores on AWS/GCP, teams routinely slash overall cloud infrastructure spend by 40% to 70%.
How does the WireGuard mesh handle cross-cloud security?
Every region in a cell is connected to every other region via a direct point-to-point WireGuard cryptographic tunnel with ChaCha20-Poly1305 authenticated encryption. Database replication streams and internal microservice requests travel solely through these private encrypted tunnels, never exposed across the public internet.
What is the difference between GeoCell's plan fee and my cloud bills?
GeoCell charges a simple, predictable flat fee for the platform control plane (Free, $149/mo Pro, $499/mo Teams). We never mark up compute, RAM, storage, or egress bandwidth. You pay AWS, Google Cloud, Azure, Hetzner, Vultr or OVHcloud directly for whatever resources you consume at their published list prices.
Have a Question Not Listed Here?
Ask GeoCell AI Assist on the homepage. Our conversational AI assistant is trained on multi-cloud SRE architecture, FinOps egress calculations, and automated failover mechanics.