Privacy Ratings

Server hosting

OVHcloud privacy rating

French provider of VPS, dedicated servers and public cloud, running its own datacenters in Europe, North America and Asia-Pacific.

Summary

OVHcloud scores 50 out of 100 (grade D) on the server hosting criteria. It meets 6 of 12 criteria: transparency report, tells users about requests, TLS configuration, mail-friendly (port 25), Reverse DNS and IPv6. It partly meets no ads or data sales and independent audit. It does not meet open source, no trackers or telemetry, security headers and anonymous payment. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C-.

Score 50 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    The websites load Piano Analytics without consent and use Commanders Act and advertising cookies.

    ovhcloud.com

  • Partial

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Funded by paid hosting; targeted advertising cookies are set only with consent.

    ovhcloud.com

  • Partial

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    Only a SOC 3 summary report is public; full SOC 2 and ISO audit reports are not.

    us.ovhcloud.com

  • Yes

    Transparency report Weight 2 of 3

    Does the provider regularly publish how many government and legal requests it receives and how it responds?

    Publishes yearly DSA transparency reports with counts of orders from EU authorities.

    corporate.ovhcloud.com

  • Yes

    Tells users about requests Weight 1 of 3

    Does the provider promise to tell users about requests for their data, unless a court forbids it?

    The law enforcement FAQ promises to notify customers of requests unless prohibited by law.

    us.ovhcloud.com

  • Yes

    Mail-friendly (port 25) Weight 1 of 3

    Is outbound port 25 open by default, or opened on request?

    Port 25 is open and only blocked when the anti-spam system detects spam.

    docs.ovhcloud.com

  • Yes

    Reverse DNS Weight 1 of 3

    Can reverse DNS (PTR) records be set for IPv4 and IPv6?

    Reverse DNS for IPv4 and IPv6 is set in the Control Panel.

    docs.ovhcloud.com

  • Yes

    IPv6 Weight 1 of 3

    Is native IPv6 included?

    Every VPS is delivered with an IPv6 address.

    docs.ovhcloud.com

  • No

    Anonymous payment Weight 1 of 3

    Can servers be paid for with cryptocurrency or without identity checks?

    Payment methods are cards, PayPal and SEPA direct debit, with no cryptocurrency option.

    docs.ovhcloud.com

Automated tests

  • Yes

    TLS configuration Weight 2 of 3

    Does the website pass the Qualys SSL Labs test with a grade of A or better?

    Grade A

    ssllabs.com

  • No

    Security headers Weight 1 of 3

    Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?

    Grade C- (45/100+)

    developer.mozilla.org

  • Not tested yet

    Modern web standards Weight 1 of 3

    Does the website score 90% or higher on the Internet.nl website test?

    Not tested yet.

A fire destroyed one of its Strasbourg data centers.

Other server hosting

All 24 server hosting