← Zurück zum Verzeichnis
Logo: SiteGround

SiteGround

Sofia-origin managed web and WordPress hosting on Google Cloud, with Site Tools, SuperCacher, and EU or UK contracting entities depending on storefront.

web-hostingwordpress-hostinggoogle-cloudmanaged-hostinggdprbulgaria
Webseite besuchenAsk an EU migration specialistFeedback & Korrekturen

SiteGround is a privately owned managed web host that started in Sofia in 2004 and now sells shared, WordPress-oriented, and dedicated-resource Cloud plans on Google Cloud regions. For a European buyer the contract is usually with SiteGround Spain S.L. (Madrid). UK buyers contract with SiteGround Hosting Ltd. The US storefront is SG Hosting Inc. in Delaware.

The company still presents itself as independently owned, with a group of companies registered in Bulgaria, Spain, the United Kingdom, Cyprus, and the United States. Engineering and the historic headquarters sit in Sofia. That is a European origin story, not a US parent that later opened a sales desk in the EU.

What you actually buy is managed hosting plus SiteGround's own control panel (Site Tools), SuperCacher, daily backups, and a data-center picker that includes Madrid, Eemshaven, Frankfurt, Paris, and London, as well as US and Asia-Pacific locations. Website builder, ecommerce, email marketing, and AI Studio sit on top of that stack. The platform is not self-hosted and is not open source.

EU-operated (BG origin, ES/UK contracts)Managed WordPress / PHP hostingGoogle Cloud regions (not EU-only)Site Tools control panelSuperCacherDPA in TOS pack

Shortlist when you want managed WordPress or PHP hosting with an EU or UK contract, a named European Google Cloud region, and Site Tools. Skip when you need EU-owned metal with no US-group cloud. Consider IONOS, OVHcloud, Scaleway, or Hetzner instead in that case.

Key capabilities

You pick a SiteGround location at signup and can relocate later from the Client Area (per site on shared plans, per plan on Cloud). Documented European data-center cities include Madrid, Eemshaven, Frankfurt, Paris, and London. US and APAC locations exist on the same map. The fleet runs on Google Cloud. This is not an EU-only host.

SiteGround's own caching stack: NGINX Direct Delivery for static files, Dynamic Cache in RAM for generated pages, and Memcached for database and API objects. All clients manage it in Site Tools > Speed > Caching. It is a host-level accelerator, not a substitute for application-level cache plugins when you need custom rules.

The company replaced cPanel with its in-house Site Tools panel for DNS, email, PHP, SSL, Git, backups, and caching. Useful if you want a single vendor UI. Poor fit if your runbooks assume WHM/cPanel, standard cPanel plugin hooks, or reseller WHM.

A one-click staging copy, edit, and push-to-live flow is documented for GrowBig, GoGeek, and Cloud. The company says it takes an automatic backup before a staging push. StartUp is not listed as including this tool. Pair with the SiteGround Security plugin if you want the vendor's WP hardening pack.

Site Tools > Security > Backups lists automatic daily copies: up to 30 on shared plans, up to 7 on Cloud. Restores can be full or files/database only. Academy copy says shared backups are stored in a geographically separate location. Premium Backup is a paid add-on. Destination cloud for those copies is not published as a separate provider list.

The company describes a custom WAF with rules written by its security team for common CMS exploits, plus an AI anti-bot layer that it says blocks large volumes of brute-force traffic before it hits customer sites. These are vendor-operated controls, not a customer-auditable WAF appliance you can export rules from.

Auf einen Blick

HQ / origin
Sofia, Bulgaria (founded 2004, privately owned)
EU contract
SiteGround Spain S.L. (CIF B-87194171, Madrid)
UK contract
SiteGround Hosting Ltd (09348602)
BG operating company
SiteGround Hosting EOOD (UIC 204181297)
US storefront
SG Hosting Inc. (Delaware)
Infrastructure
Google Cloud (customer-chosen region + global CDN)
Control panel
Site Tools (not cPanel)
Open source / self-host
No / no
Commercial model
Prepaid subscription (shared StartUp/GrowBig/GoGeek and Cloud). Confirm live site.

Best fit when

  • Agencies and SMBs that want managed WordPress or PHP hosting with 24/7 vendor support and Site Tools instead of raw VMs
  • EU buyers who will contract with SiteGround Spain S.L. and pin production to Madrid, Eemshaven, Frankfurt, or Paris
  • UK buyers who will contract with SiteGround Hosting Ltd and can use the London Google Cloud location
  • Teams that want SuperCacher, daily self-serve restores, and (on GrowBig/GoGeek/Cloud) one-click staging
  • Workloads that already accept Google Cloud as infrastructure and need a managed layer on top

Poor fit when

  • Organisations that ban US-group clouds (AWS/GCP/Azure) regardless of region
  • Buyers who need a public ISO 27001 or SOC 2 certificate in SiteGround's own name
  • Teams whose automation depends on cPanel/WHM rather than Site Tools
  • IaaS, Kubernetes, or root-server use cases better served by IONOS Cloud, OVHcloud, Scaleway, or Hetzner
  • StartUp-plan sites that require staging (documented on GrowBig, GoGeek, and Cloud only)

Consider instead when

  • When: You need EU-owned infrastructure with no Google Cloud or other US-group IaaS underneath

    Consider: IONOS, OVHcloud, Scaleway, or Hetzner

    Those peers are closer to metal or EU public cloud. SiteGround is a managed host on GCP.

  • When: You want a European-origin shared host comparison rather than IaaS

    Consider: Hostinger (catalog incumbent) or Swissnode

    Different panels and footprints. Confirm each operator's contracting entity and hoster.

  • When: You need a current ISO 27001 or SOC 2 report from the hosting brand itself

    Consider: IONOS or another certified EU host after checking their live trust center

    SiteGround staff said in 2021 they were not ISO certified. Relying on GCP certs is not the same as a SiteGround cert.

Gerichtsbarkeit & Eigentum

Rechtsträger
SiteGround Hosting EOOD (BG UIC 204181297). EU: Spain S.L. B-87194171. UK: Hosting Ltd 09348602. US storefront: SG Hosting Inc.
US-Mutter / Kontrolle
Keine bekannte US-Mutter
CLOUD-Act-Exposition (indikativ)
Medium
Hosting / Residenz
Primary hosting: Google Cloud Platform in customer-chosen SiteGround regions (Europe: Madrid, Eemshaven, Frankfurt, Paris, London; plus US and APAC). CDN: SiteGround CDN on the Google Cloud edge network (global, including US). Backups: vendor says geographically separate / offsite on Cloud. No public dated subprocessor register found. Payments, analytics, and third-party AI models are mentioned in privacy/TOS.

No known US parent. UK PSC is founder Ivo Latchezarov Tzenov. CLOUD Act exposure is medium because of Google Cloud (any region) and optional US locations, not because of ownership. Indicative only, not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumGoogle Cloud as primary infrastructure

    Since 2020 SiteGround has run hosting on Google Cloud. A European region does not remove US-group cloud exposure. Badging this product as EU-only infrastructure would be wrong.

  • MediumContracting entity depends on storefront

    The same brand signs as Spain S.L., UK Ltd, or Delaware Inc. depending on scid/region. US privacy.htm names SG Hosting Inc. as controller. Procurement must capture the entity on the order, not the brand name.

  • MediumVendor can relocate data centers

    TOS 4.2 allows SiteGround to move accounts between data centers or jurisdictions for quality, continuity, or security. Non-emergency jurisdiction changes have a 10-day objection window. Emergency moves may happen without prior notice.

  • MediumNo public SiteGround ISO/SOC certificate

    Assurance for many RFPs will be Google Cloud's reports plus SiteGround's DPA and internal WAF, not a SiteGround ISO 27001 or SOC 2 badge.

  • MediumThird-party AI may retain Inputs and Outputs

    TOS 4.6.3: third-party AI providers may store and use Inputs and Outputs to provision and improve models. SiteGround advises against putting confidential or personal data in prompts.

  • LowNo standalone public subprocessor register

    Google Cloud is named. A dated annex listing backup, email, support, analytics, and payment subprocessors was not found as a standalone page.

Open questions for due diligence

  • Which exact legal entity and TOS scid will this order use (Spain S.L., UK Ltd, or US Inc.)?
  • Will SiteGround contractually lock the production region (for example Eemshaven or Madrid) and notify before any jurisdiction change?
  • Can they provide a current subprocessor list covering backups, email, support, analytics, payments, and AI vendors?
  • Is there a current ISO 27001, SOC 2, or other audit letter in SiteGround's name, or only Google Cloud shared-responsibility materials?
  • For AI Studio / Coderick: which model vendors are used, is training on customer Input disabled under a B2B addendum, and is there an AI Act position?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Webseite besuchenView alternativesFeedback & Korrekturen

Häufig gestellte Fragen

EU-facing Terms of Service name SiteGround Spain S.L. (CIF B-87194171, Calle Prim 19, Madrid) as the contracting party. UK Terms name SiteGround Hosting Ltd (Companies House 09348602, 50 Broadway, London). The US storefront names SG Hosting Inc. (Delaware). The historic operating company in Sofia is SiteGround Hosting EOOD (UIC 204181297). Confirm the storefront (scid / regional site) on the order you actually sign.

No. Those cities are the customer-visible Google Cloud regions SiteGround offers in Europe. The infrastructure provider is still Google Cloud, a US-group company. SiteGround's own CDN uses Google Cloud edge locations worldwide. The TOS also allows SiteGround to relocate an account, including across jurisdictions, for continuity (with notice and a 10-day objection window in non-emergency cases). Lock the region in writing if residency is a hard requirement.

A current public certificate for SiteGround itself was not found. In 2021 a SiteGround staff comment said they were not ISO 27001 certified and pointed to Google Cloud certifications for the underlying platform. Ask compliance@siteground.com if you need a current letter, GCP shared-responsibility pack, or SOC reports covering only Google's side.

Yes. The TOS pack includes a Data Processing Agreement (linked from the EU and UK terms, historically also at /term/301.htm). Treat it as vendor-supplied standard terms. A standalone, dated public subprocessor register was not found during this review. Google Cloud is the named host. Payment processors, analytics, and third-party AI tools are mentioned in privacy and TOS text.

Choose Cloud when you need dedicated CPU, RAM, and SSD and stronger isolation than shared. SiteGround documents guaranteed resources, daily offsite geo-distributed backups, SSL, CDN, and caching on Cloud. Shared plans remain the default for typical WordPress sites. Staging is documented on GrowBig, GoGeek, and Cloud. Cloud backup retention is shorter (up to 7 daily copies versus up to 30 on shared).