# UpCloud privacy rating

Finnish cloud provider offering virtual servers, GPU servers, managed Kubernetes, databases and object storage in datacenters in Europe, North America, Asia and Australia.

## Summary

UpCloud scores 53 out of 100 (grade D) on the server hosting criteria. It meets 6 of 12 criteria: no ads or data sales, tells users about requests, TLS configuration, security headers, Reverse DNS and IPv6. It partly meets independent audit, transparency report and mail-friendly (port 25). It does not meet open source, no trackers or telemetry and anonymous payment. It is based in Finland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

- Website: https://upcloud.com
- Jurisdiction: Finland. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Home page trackers: Google Tag Manager
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Grade: D (53/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The home page loads Google Tag Manager. |  |
| No ads or data sales | Yes | Funded by paid hosting, and the privacy notice says personal data is not sold. | https://upcloud.com/privacy-notice/ |
| Independent audit | Partial | Only the ISO 27001 certificate is public, not the audit report. | https://upcloud.com/media/upcloud_iso27001_2026.pdf |
| Transparency report | Partial | The privacy notice says data is disclosed only in response to lawful requests or legal process. No request counts are published. | https://upcloud.com/privacy-notice/ |
| Tells users about requests | Yes | The privacy notice says customers are informed in advance of disclosures to authorities where possible. | https://upcloud.com/privacy-notice/ |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=hub.upcloud.com&hideResults=on |
| Security headers | Yes | Grade A+ (105/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=hub.upcloud.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Partial | Port 25 is blocked by default on all accounts, and non-trial customers can ask support to unblock it. | https://upcloud.com/docs/getting-started/free-trial/ |
| Reverse DNS | Yes | Reverse DNS for every IP address can be changed in the control panel or through the API at no cost. | https://upcloud.com/docs/products/networking/dns/ |
| IPv6 | Yes | Every cloud server gets one IPv4 and one IPv6 address by default. | https://upcloud.com/docs/products/networking/public-network/ |
| Anonymous payment | No | Payment is by card, PayPal, Apple Pay or Google Pay. Cryptocurrency is not accepted. | https://upcloud.com/docs/getting-started/billing/payment-methods/ |

Source: https://privacyratings.com/server-hosting/upcloud/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/upcloud.md