← Zurück zum Verzeichnis
Logo: Hostinger

Hostinger

Lithuania-founded web hosting for WordPress, managed cloud, and KVM VPS, with selectable European data centers and Cyprus contracting for EU customers.

web-hostingwordpressvpskvmcloud-hostingdomainsgdprlithuania
Webseite besuchenAsk an EU migration specialistFeedback & Korrekturen

Hostinger is a Lithuania-founded platform for managed web and WordPress hosting, managed cloud hosting, and KVM virtual private servers. It also sells domains, business email, and an in-house website builder, including the prompt-based Horizons product. The company started in Kaunas in 2004 as Hosting Media and launched the Hostinger brand with its own hPanel control panel in 2011.

European buyers should treat Hostinger as a European group with a split legal map. Headquarters and Lithuanian affiliates sit in Vilnius. The public Terms of Service say customers in EU countries contract with Hostinger International Ltd, a Cyprus company. The public data processing addendum is executed by that Cyprus company, Hostinger UK Limited, or Hostinger Global S.a r.l. in Luxembourg.

The concrete differentiator is a managed LiteSpeed and hPanel stack plus customer-chosen data centers that include France, Germany, Lithuania, the Netherlands, and the United Kingdom. It is not an EU-only host. The same catalog offers United States, Brazil, and Asia regions, and the DPA names US-group subprocessors including AWS EMEA, Google Cloud EMEA, Cloudflare, and Proofpoint.

EU-operated (Cyprus contract)ISO 27001 (claimed)Managed WordPressKVM VPS + public APIPublic DPASelectable EU data centers

Shortlist Hostinger when you want managed WordPress or a simple KVM VPS with an EU data-center option and a published DPA. Skip it when you need HIPAA or PCI, an EU-only data path, or a custom enterprise SLA. Consider Hetzner or OVHcloud instead for more operator-centric European infrastructure.

Key capabilities

Web and cloud plans can be placed in France, Germany, Lithuania, the Netherlands, or the United Kingdom, or in the United States, Brazil, India, Indonesia, or Malaysia. VPS omits the Netherlands. Location is chosen at setup and can be moved later on web and cloud, but not on VPS without rebuild.

Plans include one-click install, staging, automatic updates, malware scanning, WAF, Let's Encrypt, WP-CLI, SSH, and Git. WordPress.org lists Hostinger as a recommended host. Shared plans isolate accounts with CloudLinux LVE. Not a self-hosted WordPress appliance you run elsewhere.

KVM guests use AMD EPYC and NVMe, weekly backups, snapshots, a managed firewall, Wanguard DDoS filtering, and one-click OS or app templates (Docker, n8n, Ubuntu, and others). A documented public API and MCP server support automation. The guest is unmanaged: you patch the OS.

Cloud plans keep hPanel and add more CPU, RAM, NVMe, PHP workers, inode headroom, a dedicated IP, CDN, and daily or on-demand backups. Aimed at agencies and busier WordPress or Node.js sites that do not want root. Upgrade path from shared hosting is in-panel.

hPanel is Hostinger's control plane for sites, DNS, mail, backups, and collaborators. Access Manager shares scoped access without handing over the account password. Website migration is a supported request flow for common CMS stacks. Developer tools (SSH, Git, PHP versions) live in the same panel.

A click-through DPA covers hosting, VPS, email, domains, Website Builder, Horizons, and Reach. Appendix 3 lists AWS EMEA, Google Cloud EMEA, Cloudflare, MailChannels, Proofpoint, Anthropic Ireland, and spectra tech UAB. New sub-processors can be added with a 10-day objection window.

Auf einen Blick

HQ / operations
Vilnius, Lithuania (also Kaunas; Yogyakarta office)
EU contracting entity
Hostinger International Ltd (Larnaca, Cyprus)
Founded
2004 as Hosting Media; Hostinger brand in 2011
Product shape
Managed web/WordPress, managed cloud, KVM VPS, domains, email
Open source / self-host
Neither. Proprietary platform; VPS guests are customer-managed
Commercial model
Prepaid subscription with auto-renew; 30-day money-back on eligible hosting

Best fit when

  • SMBs and creators who want domain, SSL, mail, and a WordPress or builder site in one hPanel
  • Teams that can pick an EU data center (FR, DE, LT, NL, or UK) and still accept named US-group subprocessors
  • Agencies managing multiple client WordPress sites on Hostinger Pro or cloud plans
  • Developers who want a straightforward KVM VPS with templates, weekly backups, and a public API
  • Buyers who need a click-through DPA and published sub-processor list before legal review

Poor fit when

  • Workloads that require a HIPAA or PCI environment (explicitly excluded in the hosting agreement)
  • Organisations that mandate EU-only processing with no US-group cloud, CDN, email, or analytics vendors
  • Buyers who need a custom enterprise SLA, dedicated account team, or AWS/GCP-scale IaaS catalog
  • Operators who need to relocate a VPS between regions without a backup-and-reinstall

Consider instead when

  • When: You want German-operated dedicated servers, object storage, or more operator-centric VPS without a consumer website-builder overlay

    Consider: Hetzner

    Hetzner is in the catalog as German web hosting and cloud.

  • When: You need a large European public cloud with many regions and a stronger IaaS and public-sector posture

    Consider: OVHcloud or IONOS

    Both are catalog EU clouds; IONOS also covers consumer-style web hosting.

  • When: You need US-centric SMB WordPress hosting already familiar to North American agencies

    Consider: GoDaddy or Bluehost

    Different jurisdiction. Useful only if European contracting is not a filter.

Gerichtsbarkeit & Eigentum

Rechtsträger
EU customers: Hostinger International Ltd (Cyprus). Affiliates: HOSTINGER, UAB and HOSTINGER operations, UAB (Vilnius). Also Hostinger UK Limited and Hostinger Global S.a r.l. (Luxembourg).
US-Mutter / Kontrolle
Keine bekannte US-Mutter
CLOUD-Act-Exposition (indikativ)
Medium
Hosting / Residenz
Customer-chosen DCs: FR, DE, LT, NL, UK plus US (Phoenix, Boston, Asheville), Brazil, India, Indonesia, Malaysia (plan-dependent). DPA subprocessors include AWS EMEA SARL, Google Cloud EMEA Limited, Cloudflare, Inc., MailChannels, Proofpoint, Inc., Anthropic Ireland, and spectra tech UAB. Privacy policy also names Google Analytics, Meta ads, Ravelin, and iDenfy.

No known US parent. German PE vehicle ConHostinger took a minority stake around 2021. CLOUD Act row is medium because of optional US regions and US-group subprocessors, not because of HQ. Indicative only, not legal advice. Catalog country is Lithuania because Cyprus is not in the country list.

  • Independent security / no-logs auditNot found
  • ISO 27001Vendor claimed
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +4

Considerations & known limitations

  • MediumOptional non-EU hosting regions

    US, Brazil, and Asia data centers are first-class options. An operator can place production outside the EEA at checkout. Lock region in procurement if residency is required.

  • MediumUS-group cloud, CDN, email, and security vendors

    Even an EU VM still depends on AWS EMEA, Google Cloud EMEA, Cloudflare, Proofpoint, MailChannels, plus Google/Meta marketing tools. This is why CLOUD Act exposure is not low.

  • LowCyprus contract vs Lithuanian operations

    HQ and affiliates are Lithuanian; EU paper is usually Hostinger International Ltd (Cyprus). Invoices may also be charged by other group entities. Confirm the contracting party before security review.

  • LowISO 27001 certificate not independently verified here

    The cert is claimed on the Trust Center but gated. Download it before treating ISO as verified.

  • MediumCustomer still owns CMS, guest OS, and backups

    VPS is unmanaged. Terms require you to keep your own backups even when Hostinger offers weekly copies. Shared and cloud plans are not HIPAA/PCI environments.

Open questions for due diligence

  • Which Hostinger group entity will appear on our invoice and DPA counterparty line?
  • Can we obtain the ISO/IEC 27001:2022 certificate and statement of applicability without NDA friction?
  • Which subprocessors and regions actually touch our account if we pin web hosting to Lithuania or Germany and disable AI, Reach, and Dark Web Monitor?
  • Is a SOC 2 or equivalent report available under NDA?
  • What is the exact SLA credit process and exclusion list for our plan versus the 99.9% marketing figure?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Webseite besuchenCompare similar toolsView alternativesFeedback & Korrekturen

Häufig gestellte Fragen

The Terms of Service assign EU-country customers to Hostinger International Ltd (Cyprus, 61 Lordou Vironos str., 6023 Larnaca). UK residents contract with Hostinger UK Limited. Some other country groups use Hostinger Global S.a r.l. (Luxembourg) or Hostinger Pte Ltd (Singapore). Lithuanian companies HOSTINGER, UAB and HOSTINGER operations, UAB appear as affiliates and as the domain-registrar office, not as the default EU contracting party. Confirm the entity on your order and invoice.

No. Site files can sit in the region you select, but account, support, email, CDN, fraud, identity, analytics, and AI features use other processors. The privacy policy allows processing in the United Kingdom, Netherlands, Lithuania, and Cyprus. It also names non-EEA server locations (United States, Brazil, Singapore, Indonesia) with SCCs. The DPA lists Cloudflare, Proofpoint, AWS EMEA, and Google Cloud EMEA. Do not treat a European DC choice as an EU-only architecture.

Yes. The DPA at hostinger.com/legal/dpa is incorporated into the Terms of Service. It applies EU SCCs (Cyprus law and Cyprus courts) and a UK addendum. Appendix 3 is the public sub-processor list. Hostinger may add processors and you may terminate covered services within 10 days if you object. Ask for the current list and region mapping before you store special-category data.

The hosting agreement states the services are not intended to provide a PCI or HIPAA compliant environment and should not be used as one. If those regimes apply, do not shortlist Hostinger shared, cloud, or VPS plans as the system of record.

Use managed web or WordPress hosting when you want LiteSpeed, hPanel, staging, and automatic updates without root. Move to managed cloud when you need a dedicated IP, more PHP workers and NVMe, and still want Hostinger to run the stack. Choose KVM VPS when you need a chosen OS, Docker or n8n, full root, or the public API. VPS location cannot be changed without backup and reinstall.

Paid plans are prepaid subscriptions (monthly through multi-year) with auto-renew as the default. You can disable auto-renew in hPanel. Hostinger states a 30-day money-back path for eligible hosting, with a separate and shorter window for many domain registrations. Current list prices and renewal rates belong on the official pricing page, not in this catalog.