Server hosting
Infomaniak privacy rating
Swiss provider of web hosting, VPS and OpenStack public cloud, running its own datacenters and network (AS29222).
Summary
Infomaniak scores 45 out of 100 (grade D) on the server hosting criteria. It meets 4 of 12 criteria: no ads or data sales, TLS configuration, Reverse DNS and IPv6. It partly meets no trackers or telemetry, independent audit and mail-friendly (port 25). It does not meet open source, transparency report, tells users about requests, security headers and anonymous payment. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade D+.
Score 45 out of 100. How scoring works
Criteria
- No
-
Partial
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
Website analytics use self-hosted Matomo, and it and ad measurement tools load only with consent.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid services, and customer data is not used for commercial purposes.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Only the ISO 27001 certificate is public, not the audit report.
-
No
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
No transparency report or dedicated government request policy is published.
-
No
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
No published policy on notifying users about data requests.
-
Partial
Mail-friendly (port 25) Weight 1 of 3
Is outbound port 25 open by default, or opened on request?
Outgoing port 25 is blocked by default and opened on justified request for Cloud VPS.
-
Yes
Reverse DNS Weight 1 of 3
Can reverse DNS (PTR) records be set for IPv4 and IPv6?
PTR records for the IPv4 and IPv6 addresses are set in the Infomaniak Manager.
- Yes
-
No
Anonymous payment Weight 1 of 3
Can servers be paid for with cryptocurrency or without identity checks?
Payment is by card, PayPal, Twint or bank transfer, with no cryptocurrency option.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
No
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade D+ (40/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.