Distance is not the variable
A server two thousand miles away is not safer than one nearby. What changes is the chain somebody has to walk to reach it: which court, against which company, under which law, and with what obligation on that company to have kept anything worth handing over.
So the useful comparison has three columns, and none of them is a map.
- Who is the counterparty. A single company with servers in eight countries is one legal target. Eight companies is eight, and a judgment against one does not travel.
- What must be retained. A general data-retention obligation forces records to exist whether or not anybody asks for them. No obligation means the honest answer to a valid order can be that there is nothing to give.
- How the request arrives. A foreign authority usually has to go through a mutual legal assistance process, which is slow, formal, and reviewable — unlike an email.
The eight, and what each is for
Every region on this estate costs the same, which is deliberate: it makes the choice a legal one rather than a budget one. The full detail per site is on the locations page.
| Jurisdiction | Chosen for | Typical fit |
|---|---|---|
| Iceland | Constitutional press-freedom protections; outside the major intelligence-sharing arrangements | Publishing, journalism, leak sites |
| Switzerland | Federal data-protection act; disclosure runs through judicial review | Records you need to survive a demand |
| Panama | No general data-retention obligation on hosting | Maximum legal distance from EU and US process |
| Moldova | Outside EU disclosure directives entirely | Isolation from European instruments |
| Romania | Offshore-friendly host regime, dense regional transit | EU latency without EU-typical takedown pressure |
| Bulgaria | Low-cost EU capacity, independent abuse handling | Volume workloads that still want Europe |
| Netherlands | AMS-IX adjacency, lowest European latency | When performance is the constraint |
| Singapore | APAC gateway, direct carrier peering | Asian audiences; the strictest of the eight on copyright |
Europe is not one jurisdiction
Three of the eight are in the European Union, and the EU has its own notice-and-action regime that has nothing to do with the DMCA and does apply. Treating “offshore” as a synonym for “beyond process” is the single most common error in this market. What actually differs between the EU sites and the non-EU ones is how formal and how reviewable the route is — not whether one exists.
How to choose in practice
- Decide who you are actually worried about: a rights holder, a competitor, a civil claimant, or an authority. They arrive by different routes.
- Pick the jurisdiction whose route is longest for that party, not the one furthest away on a map.
- Check what records would exist to hand over at all — the inventory for this estate is published in the privacy and logging policy, and it is short enough to read in a minute.
- Then check latency, because none of the above matters if the thing is unusable. The looking glass lets you measure it from where you actually are.
Questions people actually ask
Which country is best for offshore hosting?
There is no single answer, and a host that gives you one is selling rather than advising. Iceland for publishing, Switzerland for records, Panama for maximum legal distance, the Netherlands for speed. Every region here costs the same so the decision stays a legal one.
Does hosting offshore hide who I am?
No. It changes who can compel the contents and how. Anonymity comes from what the host never collected in the first place — here an address and a password, with no document at any stage — not from the country the hardware is in.
Can I move a server between jurisdictions later?
Yes, and it costs nothing extra because the price is identical everywhere. That is the main practical reason to make the region choice on law rather than on budget.
Every price on this estate is published in full, in one place. See the whole catalogue