We are a team of 1 developer and 1 sales/marketing and are fully certified. You can hire an external auditor for the internal audit. We have AI code reviews, so we don’t need an extra developer.
Hosted on a simple Debian Linux VPS with https://tilaa.com. Running nginx with Let's Encrypt certs.
Built in Ruby on Rails with PostgreSQL for the database and Stimulus as JavaScript framework. Charts are generated with ChartJS and CSS is using Bulma framework.
Lol, yes it's very ironic. For companies there are more benefits though, so for them it shouldn't be that problematic. Maybe I'll make the private user plan free when I find enough company customers.