Server hosting
Scaleway privacy rating
French cloud provider, part of the Iliad group, offering virtual instances, bare-metal servers, Kubernetes, storage and AI infrastructure in European datacenters.
Summary
Scaleway scores 30 out of 100 (grade F) on the server hosting criteria. It meets 3 of 12 criteria: TLS configuration, Reverse DNS and IPv6. It partly meets independent audit, security headers and mail-friendly (port 25). It does not meet open source, no trackers or telemetry, no ads or data sales, transparency report, tells users about requests and anonymous payment. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.
Score 30 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The cookie policy lists Hotjar, HubSpot, LinkedIn and Google Ads cookies, loaded after consent.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Optional marketing and advertising personalization cookies are used, though the privacy policy says personal data is not resold.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Scaleway states ISO/IEC 27001 and HDS certification, but no audit report is public.
-
No
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
No transparency report or government request policy is published.
-
No
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
No published policy on notifying users about data requests.
-
Partial
Mail-friendly (port 25) Weight 1 of 3
Is outbound port 25 open by default, or opened on request?
SMTP ports are blocked by default and can be opened in the console after identity verification.
-
Yes
Reverse DNS Weight 1 of 3
Can reverse DNS (PTR) records be set for IPv4 and IPv6?
Reverse DNS for flexible IPv4 and IPv6 addresses is set in the console or through the IPAM API.
-
Yes
IPv6 Weight 1 of 3
Is native IPv6 included?
Flexible IPv6 addresses are generally free, while IPv4 addresses are billed.
-
No
Anonymous payment Weight 1 of 3
Can servers be paid for with cryptocurrency or without identity checks?
Payment is by card or SEPA direct debit. Cryptocurrency is not accepted.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B (75/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.