# Vultr privacy rating

US cloud provider of virtual machines, bare metal servers and GPUs in many locations worldwide.

## Summary

Vultr scores 38 out of 100 (grade F) on the server hosting criteria. It meets 4 of 12 criteria: TLS configuration, Reverse DNS, IPv6 and anonymous payment. It partly meets no ads or data sales, independent audit and mail-friendly (port 25). It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C+.

- Website: https://www.vultr.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Grade: F (38/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy lists Google Analytics and third-party targeting cookies. | https://www.vultr.com/legal/privacy/ |
| No ads or data sales | Partial | Information is shared with third-party advertising partners for targeted advertising. | https://www.vultr.com/legal/privacy/ |
| Independent audit | Partial | SOC 2 and ISO 27001 audit documents are only available to customers in the control panel. | https://www.vultr.com/legal/compliance/ |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=www.vultr.com&hideResults=on |
| Security headers | No | Grade C+ (60/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.vultr.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Partial | Port 25 is blocked by default, and unblocking is reviewed case by case on request. | https://docs.vultr.com/support/products/compute/why-is-smtp-blocked |
| Reverse DNS | Yes | Reverse DNS for IPv4 and IPv6 is set in the Vultr Console. | https://docs.vultr.com/support/products/network/how-do-i-configure-reverse-dns-for-my-vultr-instance |
| IPv6 | Yes | IPv6 can be enabled on Cloud Compute instances. | https://docs.vultr.com/products/compute/instances/cloud-compute/networking/ipv6 |
| Anonymous payment | Yes | Bitcoin and other cryptocurrencies are accepted through BitPay. | https://docs.vultr.com/support/platform/billing/what-payment-methods-do-you-accept |

Forward Email also runs infrastructure on Vultr.

Source: https://privacyratings.com/server-hosting/vultr/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/vultr.md