# Bunker privacy rating

French cloud from France Nuage SAS offering virtual machines, managed open-source apps, PostgreSQL and S3-compatible storage in its own datacenters in France.

## Summary

Bunker scores 40 out of 100 (grade D) on the server hosting criteria. It meets 2 of 12 criteria: open source and no ads or data sales. It partly meets no trackers or telemetry, TLS configuration and security headers. It does not meet independent audit, transparency report, tells users about requests, mail-friendly (port 25), Reverse DNS, IPv6 and anonymous payment. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade B.

- Website: https://getbunker.net
- Source code: https://github.com/France-Nuage/plateforme
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Grade: D (40/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All platform code is public, including the control plane, agents and console, under the source-available Server Side Public License (SSPL-1.0), which is not OSI-approved. | https://github.com/France-Nuage/plateforme/blob/master/LICENCE |
| No trackers or telemetry | Partial | No third-party trackers; first-party Matomo analytics run by default in CNIL exemption mode. | https://getbunker.net/legal/privacy-policy |
| No ads or data sales | Yes | Funded by paid subscriptions, with no advertising or data sales described in the privacy policy. | https://getbunker.net/legal/privacy-policy |
| Independent audit | No | Security measures are self-assessed and not certified or audited by a third party. | https://getbunker.net/legal/security-compliance |
| Transparency report | No | No transparency report or dedicated government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=getbunker.net&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=getbunker.net |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | No | Not documented. The documentation does not say whether outbound port 25 is open. | https://getbunker.net/documentation/ressources/faq |
| Reverse DNS | No | Not documented. The documentation does not mention reverse DNS. | https://getbunker.net/documentation/ressources/faq |
| IPv6 | No | Not documented. The documentation does not mention IPv6. | https://getbunker.net/documentation/ressources/faq |
| Anonymous payment | No | Payment is by credit card, bank transfer or SEPA direct debit. | https://getbunker.net/documentation/ressources/faq |

Source: https://privacyratings.com/server-hosting/bunker/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/bunker.md