# OVHcloud privacy rating

French provider of VPS, dedicated servers and public cloud, running its own datacenters in Europe, North America and Asia-Pacific.

## Summary

OVHcloud scores 50 out of 100 (grade D) on the server hosting criteria. It meets 6 of 12 criteria: transparency report, tells users about requests, TLS configuration, mail-friendly (port 25), Reverse DNS and IPv6. It partly meets no ads or data sales and independent audit. It does not meet open source, no trackers or telemetry, security headers and anonymous payment. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C-.

- Website: https://www.ovhcloud.com
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The websites load Piano Analytics without consent and use Commanders Act and advertising cookies. | https://www.ovhcloud.com/en/terms-and-conditions/cookies-policy/ |
| No ads or data sales | Partial | Funded by paid hosting; targeted advertising cookies are set only with consent. | https://www.ovhcloud.com/en/terms-and-conditions/cookies-policy/ |
| Independent audit | Partial | Only a SOC 3 summary report is public; full SOC 2 and ISO audit reports are not. | https://us.ovhcloud.com/sites/default/files/external_files/ovhcloud-us-soc3-report-2025.pdf |
| Transparency report | Yes | Publishes yearly DSA transparency reports with counts of orders from EU authorities. | https://corporate.ovhcloud.com/en/trusted-cloud/ethics-compliance/ |
| Tells users about requests | Yes | The law enforcement FAQ promises to notify customers of requests unless prohibited by law. | https://us.ovhcloud.com/legal/faqs/legal-law-enforcement/ |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=www.ovhcloud.com&hideResults=on |
| Security headers | No | Grade C- (45/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.ovhcloud.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Yes | Port 25 is open and only blocked when the anti-spam system detects spam. | https://docs.ovhcloud.com/en/guides/bare-metal-cloud/dedicated-servers/antispam-best-practices |
| Reverse DNS | Yes | Reverse DNS for IPv4 and IPv6 is set in the Control Panel. | https://docs.ovhcloud.com/en/guides/bare-metal-cloud/virtual-private-servers/configuring-reverse-dns |
| IPv6 | Yes | Every VPS is delivered with an IPv6 address. | https://docs.ovhcloud.com/en/guides/bare-metal-cloud/virtual-private-servers/configure-ipv6 |
| Anonymous payment | No | Payment methods are cards, PayPal and SEPA direct debit, with no cryptocurrency option. | https://docs.ovhcloud.com/en/guides/account-and-service-management/managing-billing-payments-and-services/manage-payment-methods |

A fire destroyed one of its Strasbourg data centers.

Source: https://privacyratings.com/server-hosting/ovhcloud/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/ovhcloud.md