# Infomaniak privacy rating

Swiss provider of web hosting, VPS and OpenStack public cloud, running its own datacenters and network (AS29222).

## Summary

Infomaniak scores 45 out of 100 (grade D) on the server hosting criteria. It meets 4 of 12 criteria: no ads or data sales, TLS configuration, Reverse DNS and IPv6. It partly meets no trackers or telemetry, independent audit and mail-friendly (port 25). It does not meet open source, transparency report, tells users about requests, security headers and anonymous payment. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade D+.

- Website: https://www.infomaniak.com
- Jurisdiction: Switzerland. Not in the Five, Nine or Fourteen Eyes. GDPR-style data protection law.
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Also rated: [Infomaniak Mail](https://privacyratings.com/email-providers/infomaniak-mail/) (Email providers), [Infomaniak kDrive](https://privacyratings.com/cloud-storage/infomaniak-kdrive/) (Encrypted cloud storage)
- Grade: D (45/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | Partial | Website analytics use self-hosted Matomo, and it and ad measurement tools load only with consent. | https://www.infomaniak.com/en/legal/confidentiality-policy |
| No ads or data sales | Yes | Funded by paid services, and customer data is not used for commercial purposes. | https://www.infomaniak.com/en/legal/confidentiality-policy |
| Independent audit | Partial | Only the ISO 27001 certificate is public, not the audit report. | https://www.infomaniak.com/documents/iso/27001_1EN.pdf |
| Transparency report | No | No transparency report or dedicated government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=www.infomaniak.com&hideResults=on |
| Security headers | No | Grade D+ (40/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.infomaniak.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Partial | Outgoing port 25 is blocked by default and opened on justified request for Cloud VPS. | https://www.infomaniak.com/en/support/faq/2822/manage-the-cloud-vps-vps-lite-firewall |
| Reverse DNS | Yes | PTR records for the IPv4 and IPv6 addresses are set in the Infomaniak Manager. | https://www.infomaniak.com/en/support/faq/2012/create-a-ptr-record-for-cloud-vps-vps-lite |
| IPv6 | Yes | Each Cloud VPS includes a dedicated IPv6 address. | https://www.infomaniak.com/en/hosting/vps-cloud |
| Anonymous payment | No | Payment is by card, PayPal, Twint or bank transfer, with no cryptocurrency option. | https://www.infomaniak.com/en/support/faq/1385/pay-for-renew-a-product-manually |

Source: https://privacyratings.com/server-hosting/infomaniak/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/infomaniak.md