Logo: IONOS

IONOS

German hosting and cloud provider (IONOS SE): domains and SMB web hosting plus IONOS Cloud IaaS/PaaS with EU and US locations, managed Kubernetes, object storage, and DBaaS.

IONOS is a German web hosting and cloud provider that sells two related lines under one brand: mass-market domains and hosting for freelancers and SMBs, and IONOS Cloud, an IaaS/PaaS platform with a visual Data Center Designer, APIs, object storage, managed Kubernetes, and managed databases.

It exists as a United Internet group alternative to US hosting and hyperscale clouds for European SMBs and builders who want EU locations (with US regions also available on Cloud). The operating company for the German imprint is IONOS SE in Montabaur.

The concrete differentiator is that combination of mainstream German hosting scale with a ProfitBricks-descended cloud, including an AI Model Hub hosted in Berlin. Treat customer-count figures as vendor-reported.

German SE (Montabaur)EU + US cloud regionsManaged KubernetesS3 Object StorageBSI C5 Type 1 (claimed)Domains + SMB hosting

Shortlist IONOS when you want a German-operated hosting + public cloud stack with EU location choice, managed Kubernetes, S3 storage, and public BSI-oriented cloud certifications for DACH buyers. Skip when you need hyperscaler service breadth, EU-only infrastructure with no US regions or US facility partners in the path, or lowest-cost bare metal—consider OVHcloud, Scaleway, Hetzner, or STACKIT instead depending on that gap.

Key capabilities

Build isolated virtual data centers in the browser or via Cloud API: dedicated-core servers, vCPU servers, and Cubes with attached NVMe. Live vertical scaling is supported on many Linux images for cores, RAM, NICs, and volumes without a full rebuild. Locations span DE (Berlin, Frankfurt, Karlsruhe), FR, ES, UK, and US.

Automated cluster and node-pool setup with geo-redundant control plane, admin API access, and optional node auto-scaling. IONOS documents the managed control plane as free of charge; you pay for the underlying compute, storage, and network only—useful for staging and production clusters on the same contract.

Contract-included Object Storage with S3 API compatibility, versioning, object lock, SSE-S3/SSE-C, and lifecycle rules. Documented endpoints include Frankfurt, Berlin, Logroño, and Lenexa (US). German object-storage locations are listed with BSI IT-Grundschutz compliance notes in the service catalog.

DBaaS for PostgreSQL, MongoDB, MariaDB, and in-memory DB; Cloud GPU VMs (NVIDIA H200 templates) in Frankfurt; AI Model Hub with OpenAI-compatible APIs, RAG/vector support, and vendor-stated processing exclusively in Germany (Berlin). Fits teams that want European inference without standing up their own GPU estate.

Classic IONOS portfolio: domain registration, shared/VPS/dedicated hosting, site builders, and optional Microsoft 365 or Google Workspace. Differentiator for non-cloud buyers is a dedicated personal consultant plus 24/7 support channels—not pure ticket-only self-serve hosting.

At a glance

HQ
Montabaur, Germany (IONOS SE)
Group
United Internet / IONOS Group SE (listed)
Product lines
Domains & hosting + IONOS Cloud IaaS/PaaS
Cloud regions
DE, FR, ES, UK + US (e.g. LAS, EWR, MCI)
Open source
No (proprietary platform)
Self-host
No
Commercial model
Hosting packages + cloud usage (per-minute style)

Best fit when

  • SMB and agencies needing domains, hosting, email/office resale, and a personal consultant under one German brand
  • Teams building IaaS workloads in selectable EU locations with a visual Data Center Designer and full Cloud API
  • Organizations that want managed Kubernetes, DBaaS, and S3-compatible storage without a hyperscaler contract
  • DACH public-sector or regulated buyers who need documented BSI C5 / IT-Grundschutz posture on scoped cloud products (confirm current report)
  • AI or inference pilots that prefer vendor-stated Germany (Berlin) hosting for AI Model Hub

Poor fit when

  • Buyers requiring a guarantee of no US legal entities, no US regions, and no US-group facility partners anywhere in the path
  • Workloads that depend on the full AWS/Azure/GCP marketplace, global region density, or niche managed services IONOS does not offer
  • Price-only bare-metal or Hetzner-style DIY shops that do not need managed PaaS or SMB hosting layers
  • Teams that refuse any US-group SaaS (Microsoft 365 / Google Workspace) if those bundles are part of the intended stack

Consider instead when

  • When: You want French-operated cloud with strong developer packaging and EU focus without a mass-market hosting brand

    Consider: Scaleway

    Different product mix; compare region map and managed services side by side.

  • When: You prioritize large European hosting/cloud scale and multi-country DC ownership narratives

    Consider: OVHcloud

    Both are EU groups with non-trivial international footprints—read residency options carefully.

  • When: You mainly need cost-efficient dedicated servers or simple cloud in DE/FI with minimal PaaS

    Consider: Hetzner

    Thinner managed layer; different support and SMB hosting model.

  • When: You are already in Schwarz Group ecosystems or need STACKIT-specific public-cloud positioning

    Consider: STACKIT

    Narrower commercial brand than IONOS hosting+cloud combo.

Jurisdiction & ownership

Legal entity
IONOS SE (HRB 24498, Amtsgericht Montabaur); group listed as IONOS Group SE
Governing law
German / EU (confirm per contract and national affiliate)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
IONOS-operated and partner facilities in Europe (e.g. Berlin, Frankfurt—including Equinix-operated sites—Paris, Logroño, London, Worcester, Karlsruhe) and the US (Las Vegas, Newark, Lenexa). Object Storage and compute location chosen per resource. Backup Service uses Acronis technology; managed backup path described as DE ISO 27001 centers. Optional Microsoft 365 / Google Workspace resale.

No known US parent (United Internet is German). Material US presence via subsidiaries, US cloud regions, and US-listed facility partners (e.g. Equinix). Indicative CLOUD Act exposure medium—not legal advice. Pin EU locations for residency; do not market as US-cloud-free.

  • Independent security / cloud audit (beyond marketing)Partial
  • ISO 27001Vendor claimed
  • SOC 2 / SOC 3Not found
  • BSI C5 (Cloud Computing Compliance Criteria Catalogue)Vendor claimed
  • +4

Considerations & known limitations

  • MediumUS regions, US entities, and facility partners

    Selecting US locations places data in the US. Even EU-only deployments sit in a group that has US subsidiaries and uses partners such as Equinix for some EU facilities—material for CLOUD Act / transfer reviews.

  • MediumNo clear public subprocessor catalogue

    Unlike many pure SaaS vendors, a single customer-facing subprocessor list was not found. Buyers must extract partners from location pages, DPA annexes, and product docs (Equinix, Acronis, Microsoft, Google, etc.).

  • LowC5 Type 1 scope and freshness

    Public C5 claim is Type 1 for specific products (Compute Engine, Cubes, Object Storage) as of the 2023 announcement. Not a blanket certificate for every IONOS product; request up-to-date reports.

  • LowNarrower managed ecosystem than hyperscalers

    Strong IaaS and selected PaaS, but not a full AWS/Azure service catalogue. Multi-region global apps and niche managed services may force multi-cloud or a different primary vendor.

  • LowHosting brand vs cloud platform complexity

    SMB hosting contracts, reseller office suites, and enterprise cloud AVVs are different commercial and compliance surfaces—do not assume one DPA covers every SKU.

Open questions for due diligence

  • What is the current BSI C5 report type (Type 1 vs Type 2), validity period, and exact product/location scope?
  • Can IONOS provide a consolidated subprocessor and sub-processor change-notification list under the DPA/AVV?
  • Which contract entity (IONOS SE vs IONOS Cloud GmbH vs national affiliates) will sign for our workload and which TOMs apply?
  • For EU-only deployments, are any support, monitoring, or backup control-plane components processed outside the EU?
  • Is ISO 27001 held by IONOS operating companies for the full service stack, or primarily facility/operator certifications?

Frequently Asked Questions

Yes for customer-chosen resource locations. IONOS Cloud lets you provision in European sites (for example Berlin, Frankfurt, Paris, Logroño, London/Worcester). Vendor FAQ states that data stored in European data centres remains within the EU. You must still avoid selecting US locations (Las Vegas, Newark, Lenexa) and separately assess resold Microsoft/Google products, CDN edges, support tooling, and backup paths.

IONOS states ISO 27001 (and related facility certifications), GDPR alignment for EU processing, BSI IT-Grundschutz for its ISMS (company: since 2022), and a BSI C5 Type 1 certificate (announced November 2023) covering Compute Engine, Cloud Cubes, and S3 Object Storage after an external audit. Type 1 is a point-in-time design attestation—request the current report, product scope, and whether Type 2 evidence exists for your risk model.

Yes, according to product help and cloud docs: hosting accounts can complete a data-processing agreement via account/privacy settings on regional sites, and IONOS Cloud points customers to an Auftragsverarbeitungsvertrag (AVV) via account manager / contract process. Confirm the exact legal entity on the contract (IONOS SE vs IONOS Cloud GmbH affiliates) and which services are in scope.

Classic hosting is typically package/subscription based with flexible monthly terms and a short money-back window on many products. IONOS Cloud bills primarily by usage (docs describe per-minute billing for many resources) with real-time estimates in the Data Center Designer. A trial with credits is offered for cloud evaluation. Do not treat introductory shared-hosting promotions as the cloud commercial model.

No. German HQ and no known US parent reduce ownership-path risk relative to US hyperscalers, but IONOS operates US subsidiaries and US data centers, uses facility partners such as Equinix for some sites, and can place customer data in the US if you choose those regions. Optional Microsoft/Google services and Acronis-powered backup technology add further diligence points. Treat CLOUD Act exposure as indicative medium, not EU-safe by default.