Vergleichen Sie Contabo Object Storage und Leaseweb nach Funktionen, Rechtsraum, Nachweisen und Einsatzpassung.
Beide als Alternativen zu: DigitalOcean
Germany· Cloud Computing
Needs review
Shortlist when you want a Ceph S3 bucket next to Contabo VPS or VDS, can use path-style endpoints, and can live without S3 logging. Skip when you need Amazon-complete S3, a first-party custom TLS hostname, company-wide ISO 27001 or SOC 2, or a store with no US parent and no US region. Consider Hetzner Object Storage or OVHcloud Object Storage instead.
Netherlands· Cloud Computing
Needs review
Shortlist when you want a Dutch (or other local Leaseweb) B2B contract for dedicated servers, CloudStack public cloud, colo, or regional object storage, and you will pick the DC yourself. Skip when you need EU-only halls with no US affiliate in the group, a hyperscaler-width managed-platform catalog, or self-serve hobby VPS without KYC. Consider Hetzner or OVHcloud for simpler EU-centric IaaS, or AWS if you need the global managed-service surface.
Hervorgehobene Zeilen unterscheiden sich zwischen den Produkten.
| Merkmal | Contabo Object Storage | Leaseweb |
|---|---|---|
| Herkunftsland | Germany | Netherlands |
| Kategorie | Cloud Computing | Cloud Computing |
| Open Source | Nein | Nein |
| Self-Hosted | Nein | Nein |
| Hauptsitz | Germany | Netherlands |
| Rechtsträger | Contabo GmbH (Welfenstrasse 22, 81541 Munich; AG Munich HRB 180722; VAT DE267602842) | Leaseweb Netherlands B.V. (KvK 30141839, Amsterdam). Website: Leaseweb Global B.V. (KvK 60593652). Other local sales entities exist. |
| US-Mutter / Kontrolle | US-Mutter oder Kontrolle | Keine bekannte US-Mutter |
| CLOUD-Act-Exposition (indikativ) | Hoch | Mittel |
| Hosting / Residenz | Object storage sold in the EU (eu2.contabostorage.com), United States (usc1.contabostorage.com), and Singapore (sin1.contabostorage.com). Contabo operates its own data centers. No public object-storage subprocessor list. Management API auth is at auth.contabo.com. Official custom-domain docs use Cloudflare as an optional customer-side proxy, not as the S3 data plane. | Customer-chosen Leaseweb halls (Amsterdam, Frankfurt, London, plus US, CA, SG, HK, AU). Object storage: nl-01, de-01, uk-01, us-01, ca-01, sg-01. Optional Cloud Connect via Megaport to AWS, Google Cloud, Azure. Public Cloud backup row lists Acronis. NL Feb 2026 terms keep that entity on Dutch DCs unless law, written authorisation, or customer action. Sub-processor list on request. |
| Zusammenfassung | S3-compatible object storage from Munich-based Contabo GmbH, running on Ceph with EU, US, and Singapore endpoints. | Dutch B2B IaaS: dedicated servers, CloudStack public cloud, colocation, and S3-compatible object storage on a global hall list under local sales entities. |
| Tags |
| Auf einen Blick | Contabo Object Storage | Leaseweb |
|---|---|---|
| HQ | Munich, Germany (Contabo GmbH, HRB 180722) | Amsterdam, Netherlands |
| Product | Hosted Ceph S3 object storage | Nicht angegeben |
| S3 regions | EU (eu2), United States (usc1), Singapore (sin1) | Nicht angegeben |
| Addressing | Path-style; HTTPS only | Nicht angegeben |
| Commercial model | Purchased capacity with optional auto-scale; no per-GB egress on Contabo's stated model | B2B contract, monthly or hourly cloud, KYC on first order |
| Ownership | KKR majority (2022), Oakley Capital Fund V minority | Nicht angegeben |
| Typical NL contract | Nicht angegeben | Leaseweb Netherlands B.V. (KvK 30141839) |
| Website operator | Nicht angegeben | Leaseweb Global B.V. (KvK 60593652) |
| Founded | Nicht angegeben | 1997 (vendor 2022 press) |
| Product type | Nicht angegeben | B2B IaaS (dedicated, cloud, colo, object storage); not self-hosted, not open source |
| Published dedicated DCs | Nicht angegeben | AMS-01/02, FRA-10, LON-01/11, MTL-02, SIN-01, HKG-10, SYD-10, plus nine US halls |
| Object storage regions | Nicht angegeben | nl-01, de-01, uk-01, us-01, ca-01, sg-01 |
| Key capabilities | Contabo Object Storage | Leaseweb |
|---|---|---|
| S3-compatible (partial) | Ja | Nicht angegeben |
| Ceph backend | Ja | Nicht angegeben |
| EU region available | Ja | Nicht angegeben |
| German GmbH | Ja | Nicht angegeben |
| In-panel DPA | Ja | Nicht angegeben |
| Dutch sales entity | Nicht angegeben | Ja |
| Dedicated / bare metal | Nicht angegeben | Ja |
| CloudStack KVM public cloud | Nicht angegeben | Ja |
| S3-compatible object storage | Nicht angegeben | Ja |
| Colo + global DCs | Nicht angegeben | Ja |
| ISO 27001 (claimed) | Nicht angegeben | Ja |
Ceph S3 API with path-style buckets
Contabo states the store is Ceph-based and largely S3 compatible, not fully equivalent to Amazon S3. Logging is not supported. Official tool notes require Contabo S3 URLs, path-style buckets, and access_key/secret_key mapped to aws_access_key_id/aws_secret_access_key.
EU, US, and Singapore S3 endpoints
Documented base URLs are eu2.contabostorage.com (European Union), usc1.contabostorage.com (United States), and sin1.contabostorage.com (Singapore). The management API allows one object-storage purchase per location. All locations on an account share the same S3 credentials.
Bucket versioning and Object Lock
Versioning is enabled per bucket via s3api put-bucket-versioning on the regional endpoint. Suspending versioning stops new versions but does not delete old ones. Object Lock can be turned on at bucket creation (example uses GOVERNANCE mode) so objects cannot be overwritten or deleted for a retention period.
Capacity auto-scale via management API
The Contabo API (not the S3 API) orders, upgrades, cancels, and auto-scales purchased space up to a monthly size limit. Usage statistics are exposed there. The open-source cntb CLI (GPL-3.0) wraps the same management API. S3 keys come from the User Management API or the Object Storage panel.
Published client list and hard limits
Documented working tools include cntb, aws cli, rclone, Cyberduck, goofys, s3fs-fuse, s3cmd, WinSCP, Cloudberry Explorer, BucketAnywhere, Virtualmin, Velero, and Plesk. FileZilla Pro is listed as incompatible. Defaults include 5 TB max object size, 100 buckets, 3 million objects (increasable on request), 250 requests per second, and 10 MByte/s default bandwidth.
Dedicated servers with portal, API, and Instant Delivery
Bare metal for databases, analytics, gaming, and e-commerce. The knowledge base lists Windows or Linux images, Volume or Premium transit, interconnects, and Layer 2 private networking. First orders are phone-verified. Instant Delivery SKUs can provision within an hour; custom builds take longer. CPU cannot be upgraded in place.
CloudStack Public Cloud on KVM
Instances run on Leaseweb-owned CloudStack KVM with general-purpose, compute, memory, and GPU-oriented families. Billing is hourly on-demand or monthly. Local NVMe is faster but slower to recover if a hypervisor fails. Central NFS storage is the higher-availability path. Each instance gets one public IPv4. Extra IPv4 is not offered yet.
S3-compatible object storage with named regions
HTTPS/S3 API buckets at nl.object-storage.io, de.object-storage.io, uk.object-storage.io, us.object-storage.io, ca.object-storage.io, and sg.object-storage.io. Leaseweb says objects are stored in three availability zones. The default S3 region name us-east-1 is a compatibility alias, not a geography. Keys are created in the Customer Portal.
Colocation with remote hands
Bring your own servers into Leaseweb halls. Shared 1U to 5U is only in AMS-01 and FR-01. Private racks and cages are for larger or more isolated deployments. Remote hands are 24/7 and included by default, with higher packages available. Colo knowledge base counts six European halls (Netherlands, Germany, UK), seven in Asia-Pacific and Oceania, and twelve in the US and Canada.
Private network and Cloud Connect to hyperscalers
Layer 2 private networking can join dedicated servers, Public Cloud, VMware products, and colo in the same DC (and some metro pairs). Cloud Connect uses Megaport SDN plus a Leaseweb router to reach AWS, Google Cloud, and Azure from selected halls (including AMS-01/02, FRA, London, WDC-02, Singapore, Montreal, Sydney). Redundant paths are Active-Standby. Delivery is quoted in business days via sales.
Customer Portal, REST API, and Terraform
Operators power-cycle, reinstall, rescue, manage IPs, attach private networks, and watch traffic graphs without a ticket for routine work. developer.leaseweb.com documents the REST API, GitHub integrations, a Terraform provider for Leaseweb Cloud, and S3 compatibility. This is not a self-hosted control plane you run yourself.
| Assurance & compliance | Contabo Object Storage | Leaseweb |
|---|---|---|
| Independent security / no-logs audit | Not found Searched About, help, and product docs. No public independent audit PDF for Object Storage. | Not found IaaS provider, not a no-logs VPN. No public independent audit of logging practices found beyond the named ISO/SOC/PCI reports. |
| ISO 27001 | Partial Some Contabo location marketing pages list colocation-facility ISO 27001 (for example Singapore). No company-wide Contabo ISO 27001 certificate found. | Vendor claimed Vendor: ISO 27001:2022 via EY CertifyPoint for Leaseweb Global B.V., Netherlands B.V., USA, Deutschland, UK, Singapore, Canada, Network B.V. Services listed: corporate infrastructure, bare metal, VPS, private/hybrid cloud, colo, web hosting, domains. Certificate download promised on the marketing security page (SPA). Independent register entry not retrieved in this pass. |
| SOC 2 / SOC 3 | Not found No Contabo-issued SOC 2 or SOC 3 report found. Facility-level SOC marks on some non-EU location pages are not treated as a Contabo attestation. | Partial SOC 2 published for Leaseweb Canada, Inc. colocation (Security and Availability, UHY Forbes Andersen). Several entities have SOC 1 Type II (EY / ISAE 3402) covering cloud, dedicated, colo, and web hosting. |
| GDPR / EU data protection | Vendor claimed EU legal entity; DPA available in the Customer Control Panel and listed as covering Object Storage. EU region is optional, not exclusive. | Vendor claimed NL entity; Clause 8 cites GDPR and the Dutch UAVG. Transfers outside the EEA only with safeguards. Global catalog still includes non-EU regions. |
| US CLOUD Act exposure (indicative) | Partial Contabo GmbH is German, but KKR (US) has been the majority investor since June 2022 and Contabo sells a US object-storage region. Not legal advice. | Partial Dutch group, no known US parent, but the catalog includes US halls, Leaseweb USA, Inc., us-01 object storage, and optional Cloud Connect to AWS/GCP/Azure. NL Clause 8.3 can keep a Netherlands contract on Dutch DCs if you do not choose otherwise. Assessment row, not a vendor claim. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Customer Control Panel wizard. Object Storage is an explicit covered service. Review the generated PDF. | Vendor claimed Privacy page (search snippet) and NL/DE sales terms: processor language in Clause 8; standalone DPA on request in older DE terms. Sub-processor list on request (NL 8.4). |
| EU AI Act | Not applicable Object storage IaaS, not an AI system. | Not applicable IaaS compute, storage, colo, and network. Public Cloud lists small-scale GPU/inference instance types, but the offering is not an AI system product. |
| PCI DSS | Nicht angegeben | Partial Vendor: PCI DSS 4.0 scoped to physical security at named DCs (AMS-01, FRA-01, LON-01, SIN-01, WDC-02, MTL-01/02/03). Services are not meant to process card data by default. |
| NEN 7510 | Nicht angegeben | Vendor claimed Vendor: EY statement for Leaseweb Netherlands B.V. at AMS-01 (physical security, IS policy, risk, resilience, incidents, service deployment). Not inherited by the customer. |
| CISPE IaaS Code of Conduct | Nicht angegeben | Vendor claimed Historical CISPE member listing and lobbyfacts affiliation. Current CISPE public register was not confirmed to contain a live Leaseweb service declaration in this pass. |
| Considerations & known limitations | Contabo Object Storage | Leaseweb |
|---|---|---|
| US private-equity majority owner | High Oakley Capital announced in June 2022 that KKR would be majority investor, with Oakley Fund V retaining a minority stake. Treat CLOUD Act exposure as high at the ownership layer even when objects sit on eu2.contabostorage.com. | Nicht angegeben |
| Optional United States object region | Medium usc1.contabostorage.com is a first-party SKU. Shared credentials across locations make it easy to point a client at the US endpoint by mistake. Pin the EU URL if residency is a hard requirement. | Nicht angegeben |
| Partial S3 compatibility | Medium Contabo states the Ceph API is not fully compatible with AWS S3. Logging is unsupported. Path-style addressing is required. FileZilla Pro does not work. Test SDK features before migrating production. | Nicht angegeben |
| Default request and bandwidth caps | Medium Published defaults include 250 API requests per second, 10 MByte/s bandwidth, 100 buckets, and 3 million objects. Auto-scale increases purchased terabytes, not those caps. | Nicht angegeben |
| No public company-wide audit | Medium No independent Object Storage audit, Contabo-issued ISO 27001, or SOC 2 report was found. Facility ISO/SOC marks on some location pages are not a substitute. | Nicht angegeben |
| No first-party custom TLS hostname | Low HTTPS-only S3 endpoints reject a simple CNAME. Public websites need a customer-operated reverse proxy. Public-to-private ACL changes may remain cached for up to one hour. | Nicht angegeben |
| Global catalog includes US halls and a US affiliate | Nicht angegeben | Medium Even with a Dutch contractor and NL Clause 8.3, the product menu includes US dedicated halls, us-01 object storage, and Leaseweb USA, Inc. Buyers with a residency ban must lock region and entity in the order, not rely on the brand name. |
| No public IaaS subprocessor register | Nicht angegeben | Medium NL terms authorise EEA affiliates and other third parties as sub-processors, with the actual list on request. Known optional paths: Megaport plus AWS/GCP/Azure (Cloud Connect) and Acronis (Public Cloud backup row). Website marketing also uses US SaaS (outside the IaaS path). |
| Certification scope is entity- and service-specific | Nicht angegeben | Low ISO is claimed for listed IaaS services, not automatically for every SKU. SOC 2 is Canada colo. PCI is physical security only. Customers are not certified by association. |
| Public Cloud / VPS IPv4 and Elastic Compute end of sale | Nicht angegeben | Low Docs: one public IPv4 on Public Cloud and VPS, extras not yet available. Elastic Compute is end of sale. Dedicated CPU cannot be upgraded without a new server. |
When: You want a German hoster's object store with an EU-concentrated footprint and no US majority PE owner
Consider: Hetzner Object Storage
Contabo's own comparison places Hetzner object storage in European data centers and notes a thinner APAC story.
When: You need a broader EU compliance portfolio (ISO 27001, SecNumCloud) more than a simple capacity bill
Consider: OVHcloud Object Storage
Billing and product surface are more complex than Contabo's single-account IaaS stack.
When: You need managed Kubernetes or managed Postgres next to S3, not just raw buckets
Consider: Scaleway Object Storage
France-first footprint. Contabo does not sell first-party managed databases or Kubernetes.
When: You need Amazon-complete S3 (logging, IAM, global regions) and will accept a US cloud
Consider: Amazon S3
Use Contabo only after you have tested the Ceph compatibility gaps against your SDK.
When: You want a larger managed-cloud catalog (IAM, managed databases, serverless) and accept a US parent
Consider: Amazon Web Services (AWS) or Google Cloud Platform
Different jurisdiction and product surface. Leaseweb stays IaaS-classic.
When: You want European IaaS with a simpler EU-centric hall list and strong self-serve dedicated servers
Consider: Hetzner or OVHcloud
Still diligence their own non-EU options. Neither is a Leaseweb contract.
When: You want French public cloud with object storage and more developer-cloud SKUs
Consider: Scaleway
Different product mix. Confirm current regions on Scaleway's site.
When: You mainly need a German-group host with a broad SMB catalog
Consider: IONOS
Different ownership and SKU mix than Leaseweb's local-entity IaaS model.
When: You actually needed global content delivery, not origin compute
Consider: Leaseweb CDN
Same group, different data path (partner CDNs and a Washington D.C. shield).