Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Contabo

VERIFIED
Cloud & hosting · Germany
Founded 2003 · contabo.com ↗

Munich-based budget VPS / dedicated hosting (Contabo GmbH); KKR + Oakley-owned since 2022; 11 global DCs; VPS from <€5/month.

In short

Contabo, in the Cloud & hosting category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Munich-based German GmbH (Contabo GmbH, HRB 180722 AG München, VAT DE267602842, founded 2003 by Stephan Wolfram and Mario Wilhelm) running 450k+ servers across 11 global locations; in June 2022 KKR (US private equity) together with Oakley Capital (UK) acquired the majority of the company, and the data-centre footprint includes three US locations plus Singapore/Japan/India/Australia alongside the EU regions; the US-PE majority parent means material CLOUD Act exposure at the parent-jurisdiction layer, and ownership is classified as eu_hq_us_funded rather than eu_owned.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Contabo

Contabo is a Munich-based German cloud-and-hosting provider operated by Contabo GmbH (Welfenstrasse 22, 81541 Munich; HRB 180722 at Amtsgericht München; VAT DE267602842; managing directors Stephan Wolfram and Mario Wilhelm). Founded in 2003 and positioned in the budget VPS / dedicated-server tier, Contabo reports more than 225,000 customers across 190 countries running on 450,000+ servers in nine global regions and eleven data-centre locations: European Union, United Kingdom, three United States locations, Singapore, Japan, India, and Australia. Pricing is the headline feature: Cloud VPS 10 starts at less than €5/month on annual billing (4 vCPU, 8 GB RAM), and the product surface covers Cloud VPS, Virtual Dedicated Servers, bare-metal dedicated servers, object storage, domain registration, and managed application hosting for n8n, Nextcloud, GitLab, and similar.

For an EU-sovereignty audit the listing is mixed. The German GmbH legal structure, Munich HQ, Frankfurt-area data centres, and EU footprint look natively European, but in June 2022 a consortium led by KKR, the US private-equity giant (Kohlberg Kravis Roberts, New York), together with Oakley Capital (UK) acquired the majority of Contabo alongside the management team. KKR's US-incorporation gives Contabo material CLOUD Act exposure at the parent-jurisdiction layer regardless of where the EU customer's specific VM runs. Additionally, three of Contabo's eleven data centres are in the United States, which means buyers who don't pin their workloads explicitly to EU regions may end up on US infrastructure. The DPA and security URLs returned 404 at audit; certifications are not advertised on accessible public pages.

Best fit: indie developers, small SaaS builders, gamers, and prosumers who prioritise low VPS price over enterprise compliance. Contabo is one of the cheapest credible European VPS providers globally. Procurement-grade EU buyers needing a strict EU-controlled cloud should prefer Hetzner (DE, family-owned), Scaleway (FR, Iliad), OVHcloud (FR, public Euronext), or STACKIT (DE, Schwarz Group / Lidl), listed above in this category. Contabo serves a complementary, price-led use case rather than a compliance-led one.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-18).
FEATURES

Capability matrix

Dedicated / bare-metal Yes
Object storage (S3) Yes
Managed Kubernetes No
Managed databases No
GPU instances Yes
Hourly billing No
API / Terraform Yes
Countries 7 countries
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €5/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    contabo.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Aruba Cloud
Italy · Founded 1994
EU-SOVEREIGN

Italian sovereign cloud (Aruba S.p.A.), 4 Italian DCs (Arezzo/Bergamo/Rome), ACN-qualified up to AI3/QC3 for public administration.

Public DPA Sub-processors Open source
FROM
€1/mo
CLOUD ACT
NONE
Cleura
Sweden · Founded 2005
EU-SOVEREIGN

Swedish OpenStack public + compliant cloud (Cleura, ex-City Network, Iver-owned), ISO 27001/27017/27018, EU-only residency.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Clever Cloud
France · Founded 2010
EU-SOVEREIGN

French sovereign PaaS/IaaS: deploy apps and managed databases on EU infrastructure, billed per second.

Public DPA Sub-processors Open source
FROM
€4.8/mo
CLOUD ACT
NONE