Server hosting
UpCloud privacy rating
Finnish cloud provider offering virtual servers, GPU servers, managed Kubernetes, databases and object storage in datacenters in Europe, North America, Asia and Australia.
Summary
UpCloud scores 53 out of 100 (grade D) on the server hosting criteria. It meets 6 of 12 criteria: no ads or data sales, tells users about requests, TLS configuration, security headers, Reverse DNS and IPv6. It partly meets independent audit, transparency report and mail-friendly (port 25). It does not meet open source, no trackers or telemetry and anonymous payment. It is based in Finland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.
Score 53 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The home page loads Google Tag Manager.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid hosting, and the privacy notice says personal data is not sold.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Only the ISO 27001 certificate is public, not the audit report.
-
Partial
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
The privacy notice says data is disclosed only in response to lawful requests or legal process. No request counts are published.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
The privacy notice says customers are informed in advance of disclosures to authorities where possible.
-
Partial
Mail-friendly (port 25) Weight 1 of 3
Is outbound port 25 open by default, or opened on request?
Port 25 is blocked by default on all accounts, and non-trial customers can ask support to unblock it.
-
Yes
Reverse DNS Weight 1 of 3
Can reverse DNS (PTR) records be set for IPv4 and IPv6?
Reverse DNS for every IP address can be changed in the control panel or through the API at no cost.
-
Yes
IPv6 Weight 1 of 3
Is native IPv6 included?
Every cloud server gets one IPv4 and one IPv6 address by default.
-
No
Anonymous payment Weight 1 of 3
Can servers be paid for with cryptocurrency or without identity checks?
Payment is by card, PayPal, Apple Pay or Google Pay. Cryptocurrency is not accepted.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Yes
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade A+ (105/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.