Compare SiteGround and Swissnode on capabilities, jurisdiction, assurance, and fit for European buyers.
Bulgaria· Web Hosting and Cloud Computing
Needs review
Shortlist when you want managed WordPress or PHP hosting with an EU or UK contract, a named European Google Cloud region, and Site Tools. Skip when you need EU-owned metal with no US-group cloud. Consider IONOS, OVHcloud, Scaleway, or Hetzner instead in that case.
Switzerland· Email Services
Needs review
Shortlist Swissnode for lean European cPanel domain email plus shared web or KVM VPS when Spain/EU residency is acceptable and you do not need enterprise compliance packs. Skip when you require live Swiss territorial hosting, E2EE mail, or published DPA/subprocessor inventories—consider Hostpoint, Infomaniak, or Proton Mail instead.
Highlighted rows differ between the two products.
| Feature | SiteGround | Swissnode |
|---|---|---|
| Country of origin | Bulgaria | Switzerland |
| Category | Web Hosting and Cloud Computing | Email Services |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Bulgaria | Switzerland |
| Legal entity | SiteGround Hosting EOOD (BG UIC 204181297). EU: Spain S.L. B-87194171. UK: Hosting Ltd 09348602. US storefront: SG Hosting Inc. | Swissnode (legal form/registry name not clearly published on marketing site) |
| Governing law | Not listed | Not clearly stated on marketing pages; confirm in contract (CH contact vs ES ops) |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Primary hosting: Google Cloud Platform in customer-chosen SiteGround regions (Europe: Madrid, Eemshaven, Frankfurt, Paris, London; plus US and APAC). CDN: SiteGround CDN on the Google Cloud edge network (global, including US). Backups: vendor says geographically separate / offsite on Cloud. No public dated subprocessor register found. Payments, analytics, and third-party AI models are mentioned in privacy/TOS. | Vendor states primary hosting moved to a Spain data center after Swiss DC closure; homepage cites Spanish privacy laws. Site IP geolocates to Spain (Ipcore Datacenters). Optional Cloudflare CDN on web plans (US-group). Off-site backup provider not named. No public subprocessor inventory. |
| Summary | Sofia-origin managed web and WordPress hosting on Google Cloud, with Site Tools, SuperCacher, and EU or UK contracting entities depending on storefront. | European cPanel email, shared web hosting, and KVM VPS under the Swissnode brand—vendor-stated Spain data center after Swiss DC closure, with optional Cloudflare CDN on web plans. |
| Tags |
| At a glance | SiteGround | Swissnode |
|---|---|---|
| HQ / origin | Sofia, Bulgaria (founded 2004, privately owned) | Not listed |
| EU contract | SiteGround Spain S.L. (CIF B-87194171, Madrid) | Not listed |
| UK contract | SiteGround Hosting Ltd (09348602) | Not listed |
| BG operating company | SiteGround Hosting EOOD (UIC 204181297) | Not listed |
| US storefront | SG Hosting Inc. (Delaware) | Not listed |
| Infrastructure | Google Cloud (customer-chosen region + global CDN) | Not listed |
| Control panel | Site Tools (not cPanel) | Not listed |
| Open source / self-host | No / no | Not listed |
| Commercial model | Prepaid subscription (shared StartUp/GrowBig/GoGeek and Cloud). Confirm live site. | Package tiers (monthly/yearly); optional antispam add-on |
| Contact address | Not listed | Binzallee 6, 8055 Zurich, CH (public contact page) |
| Footer / ops address | Not listed | Mutilva Baja, Navarra, Spain |
| Primary hosting (vendor) | Not listed | Spain data center after Swiss DC closure |
| Core products | Not listed | Domain email, cPanel web hosting, KVM VPS |
| Control panels | Not listed | cPanel (shared); Virtualizor (VPS) |
| Open source | Not listed | No |
| Self-hosted product | Not listed | No (provider-hosted; VPS gives root on rented VM) |
| Key capabilities | SiteGround | Swissnode |
|---|---|---|
| EU-operated (BG origin, ES/UK contracts) | Yes | Not listed |
| Managed WordPress / PHP hosting | Yes | Not listed |
| Google Cloud regions (not EU-only) | Yes | Not listed |
| Site Tools control panel | Yes | Not listed |
| SuperCacher | Yes | Not listed |
| DPA in TOS pack | Yes | Not listed |
| cPanel domain email | Not listed | Yes |
| KVM VPS | Not listed | Yes |
| Spain data center (vendor) | Not listed | Yes |
| Optional Cloudflare CDN | Not listed | Yes |
| SMB hosting packages | Not listed | Yes |
Customer-chosen Google Cloud data center
You pick a SiteGround location at signup and can relocate later from the Client Area (per site on shared plans, per plan on Cloud). Documented European data-center cities include Madrid, Eemshaven, Frankfurt, Paris, and London. US and APAC locations exist on the same map. The fleet runs on Google Cloud. This is not an EU-only host.
SuperCacher (NGINX, Dynamic Cache, Memcached)
SiteGround's own caching stack: NGINX Direct Delivery for static files, Dynamic Cache in RAM for generated pages, and Memcached for database and API objects. All clients manage it in Site Tools > Speed > Caching. It is a host-level accelerator, not a substitute for application-level cache plugins when you need custom rules.
Site Tools instead of cPanel
The company replaced cPanel with its in-house Site Tools panel for DNS, email, PHP, SSL, Git, backups, and caching. Useful if you want a single vendor UI. Poor fit if your runbooks assume WHM/cPanel, standard cPanel plugin hooks, or reseller WHM.
WordPress staging on mid-tier and Cloud plans
A one-click staging copy, edit, and push-to-live flow is documented for GrowBig, GoGeek, and Cloud. The company says it takes an automatic backup before a staging push. StartUp is not listed as including this tool. Pair with the SiteGround Security plugin if you want the vendor's WP hardening pack.
Daily backups with self-serve restore
Site Tools > Security > Backups lists automatic daily copies: up to 30 on shared plans, up to 7 on Cloud. Restores can be full or files/database only. Academy copy says shared backups are stored in a geographically separate location. Premium Backup is a paid add-on. Destination cloud for those copies is not published as a separate provider list.
Server-level WAF and AI anti-bot
The company describes a custom WAF with rules written by its security team for common CMS exploits, plus an AI anti-bot layer that it says blocks large volumes of brute-force traffic before it hits customer sites. These are vendor-operated controls, not a customer-auditable WAF appliance you can export rules from.
Domain email on cPanel (IMAP/POP/SMTP)
Business mailboxes on your domain with secure webmail, SpamAssassin-style spam control, virus filtering, DKIM, calendars/contacts, autoresponders, forwarders, filters, and mailing lists on mid-tier plans—protocol-compatible with Outlook, Apple Mail, and mobile clients.
cPanel web hosting with Softaculous and LiteSpeed PHP
Shared and reseller web plans with datacenter SSDs, free panel SSL, multi-PHP, SSH above entry tiers, and Softaculous one-click apps—aimed at brochure sites, WordPress, and small PHP apps rather than container platforms.
KVM VPS with RAID-10 enterprise SSDs
Root-level Linux VPS via KVM, enterprise SSDs, RAID-10 arrays, fixed per-VPS network allotments, and Virtualizor-style management for teams that outgrow shared hosting but still want package SKUs.
Optional Cloudflare CDN from the control panel
Web plans advertise easy Cloudflare integration to cache static assets near visitors—useful for performance, with the tradeoff that enabled CDN traffic can traverse a US-group network path.
Backup cadence for VPS (vendor-stated)
Marketing states daily on-site and weekly off-site VPS backups with rebuilds measured in minutes to an hour after failure—restore SLAs and off-site provider identity should be confirmed in the contract.
| Assurance & compliance | SiteGround | Swissnode |
|---|---|---|
| Independent security / no-logs audit | Not found No public independent security or no-logs audit PDF found. Vendor describes in-house WAF and AI anti-bot. | Not found No public independent audit report found on swissnode.ch. |
| ISO 27001 | Not found No current SiteGround ISO 27001 certificate found. 2021 staff comment: not certified; rely on Google Cloud certifications. | Not found No ISO 27001 claim located on official product/security pages. |
| SOC 2 / SOC 3 | Not found No SiteGround SOC 2/3 report found. Historical support replies pointed customers at Google Cloud documentation. | Not found No SOC 2/3 claim found. |
| GDPR / EU data protection | Vendor claimed EU/UK entities and public DPA in the TOS pack. Controller depends on storefront (Spain SL vs UK Ltd vs US Inc). | Partial Spain/EU hosting supports EU data-protection analysis, and homepage references Spanish privacy laws; usable privacy policy/DPA text not published on site. Customer remains controller for lawful basis. |
| US CLOUD Act exposure (indicative) | Partial European HQ and contracting for EU/UK, no known US parent, but primary infrastructure is Google Cloud (US-group) with optional US regions and a global GCP CDN. Not legal advice. | Partial No known US parent; primary host Spain/EU. Optional Cloudflare CDN is a US-group subprocessor for web static delivery; off-site backups and other SaaS paths not published. Not a clean low-exposure bill; not legal advice. |
| Data processing agreement (B2B) | Vendor claimed DPA is incorporated in the TOS pack for EU/UK storefronts. | Not found No public DPA download or B2B processing terms found; request in writing. |
| EU AI Act | Not found Product includes Coderick AI and AI Studio. No public AI Act classification or compliance statement found. TOS says third-party providers may use Inputs/Outputs to improve models. | Not applicable Commodity hosting/email/VPS, not an AI product. |
| Swiss territorial hosting | Not listed | Partial Vendor discloses Swiss DC closed; operations from Spain DC. Contact still Zurich. Do not treat as CH-only residency. |
| Considerations & known limitations | SiteGround | Swissnode |
|---|---|---|
| Google Cloud as primary infrastructure | Medium Since 2020 SiteGround has run hosting on Google Cloud. A European region does not remove US-group cloud exposure. Badging this product as EU-only infrastructure would be wrong. | Not listed |
| Contracting entity depends on storefront | Medium The same brand signs as Spain S.L., UK Ltd, or Delaware Inc. depending on scid/region. US privacy.htm names SG Hosting Inc. as controller. Procurement must capture the entity on the order, not the brand name. | Not listed |
| Vendor can relocate data centers | Medium TOS 4.2 allows SiteGround to move accounts between data centers or jurisdictions for quality, continuity, or security. Non-emergency jurisdiction changes have a 10-day objection window. Emergency moves may happen without prior notice. | Not listed |
| No public SiteGround ISO/SOC certificate | Medium Assurance for many RFPs will be Google Cloud's reports plus SiteGround's DPA and internal WAF, not a SiteGround ISO 27001 or SOC 2 badge. | Not listed |
| Third-party AI may retain Inputs and Outputs | Medium TOS 4.6.3: third-party AI providers may store and use Inputs and Outputs to provision and improve models. SiteGround advises against putting confidential or personal data in prompts. | Not listed |
| No standalone public subprocessor register | Low Google Cloud is named. A dated annex listing backup, email, support, analytics, and payment subprocessors was not found as a standalone page. | Not listed |
| Swiss brand vs Spain hosting | Not listed | High Product pages state the Swiss data center closed and services run in Spain; homepage cites Spanish privacy laws. Buyers assuming Zurich colocation from the brand or older materials will mis-classify risk and contractual residency. |
| Empty privacy pages / no public DPA or certs | Not listed | High Privacy and cookie URLs do not present substantive policy text; ISO/SOC and DPA artifacts were not found. Regulated or enterprise buyers face a heavy offline diligence burden. |
| Optional Cloudflare CDN (US-group) | Not listed | Medium Web hosting markets Cloudflare integration from cPanel. Enabling CDN can place static content on a US-group network path even when origin is Spain—document this in transfer assessments. |
| Off-site backup provider not named | Not listed | Medium Daily on-site and weekly off-site backups are claimed for VPS, but the off-site location/provider is not published—ask before trusting disaster-recovery or residency narratives. |
| Aging marketing surface | Not listed | Low Public site still shows 2013–2018 copyright and sparse modern trust pages; may signal limited investment in public assurance UX even if infrastructure remains operational. |
When: You need EU-owned infrastructure with no Google Cloud or other US-group IaaS underneath
Consider: IONOS, OVHcloud, Scaleway, or Hetzner
Those peers are closer to metal or EU public cloud. SiteGround is a managed host on GCP.
When: You want a European-origin shared host comparison rather than IaaS
Consider: Hostinger (catalog incumbent) or Swissnode
Different panels and footprints. Confirm each operator's contracting entity and hoster.
When: You need a current ISO 27001 or SOC 2 report from the hosting brand itself
Consider: IONOS or another certified EU host after checking their live trust center
SiteGround staff said in 2021 they were not ISO certified. Relying on GCP certs is not the same as a SiteGround cert.
When: You need Swiss-resident email/office with a broader product catalog and clearer CH hosting claims
Consider: Hostpoint E-Mail & Cloud Office or Infomaniak kMail
Fuller Swiss platforms; better when territorial Switzerland is non-negotiable.
When: You need end-to-end encrypted mail and open-source clients rather than cPanel hosting
Consider: Proton Mail
Different product class: E2EE vs classic hosted IMAP.
When: You need full collaboration suites, admin compliance tooling, and ecosystem apps
Consider: Microsoft 365 or Google Workspace (US-group control planes)
Richer features; different jurisdiction/CLOUD Act profile.
When: You want a larger EU hosting group with broader cloud SKUs
Consider: IONOS or OVHcloud
Scale and catalog depth over niche Swissnode packaging.