Hostinger vs STACKIT

Comparez Hostinger et STACKIT sur les capacités, la juridiction, les garanties et l'adéquation pour les acheteurs européens.

Tous deux listés comme alternatives à: DigitalOcean

Logo: Hostinger

Hostinger

Lithuania· Cloud Computing

Needs review

Shortlist Hostinger when you want managed WordPress or a simple KVM VPS with an EU data-center option and a published DPA. Skip it when you need HIPAA or PCI, an EU-only data path, or a custom enterprise SLA. Consider Hetzner or OVHcloud instead for more operator-centric European infrastructure.

EU-operated (Cyprus contract)ISO 27001 (claimed)Managed WordPressKVM VPS + public APIPublic DPASelectable EU data centers
Hostinger vs STACKIT: Aperçu
CaractéristiqueLogo: HostingerHostingerLogo: STACKITSTACKIT
Pays d'origineLithuaniaGermany
CatégorieCloud ComputingCloud Computing
Open sourceNonNon
Auto-hébergéNonNon
SiègeLithuaniaNon indiqué
Entité légaleEU customers: Hostinger International Ltd (Cyprus). Affiliates: HOSTINGER, UAB and HOSTINGER operations, UAB (Vilnius). Also Hostinger UK Limited and Hostinger Global S.a r.l. (Luxembourg).Non indiqué
Maison mère / contrôle USAucune maison mère US connueNon indiqué
Exposition CLOUD Act (indicative)MoyenNon indiqué
Hébergement / résidenceCustomer-chosen DCs: FR, DE, LT, NL, UK plus US (Phoenix, Boston, Asheville), Brazil, India, Indonesia, Malaysia (plan-dependent). DPA subprocessors include AWS EMEA SARL, Google Cloud EMEA Limited, Cloudflare, Inc., MailChannels, Proofpoint, Inc., Anthropic Ireland, and spectra tech UAB. Privacy policy also names Google Analytics, Meta ads, Ravelin, and iDenfy.Non indiqué
Résumé

Lithuania-founded web hosting for WordPress, managed cloud, and KVM VPS, with selectable European data centers and Cyprus contracting for EU customers.

German sovereign cloud from Schwarz Digits (Schwarz Group): IaaS, managed Kubernetes, databases, and colocation on group-owned data centers in Germany and Austria.

Tags
En un coup d'œil: Hostinger vs STACKIT
En un coup d'œilLogo: HostingerHostingerLogo: STACKITSTACKIT
HQ / operationsVilnius, Lithuania (also Kaunas; Yogyakarta office)Non indiqué
EU contracting entityHostinger International Ltd (Larnaca, Cyprus)Non indiqué
Founded2004 as Hosting Media; Hostinger brand in 2011Non indiqué
Product shapeManaged web/WordPress, managed cloud, KVM VPS, domains, emailNon indiqué
Open source / self-hostNeither. Proprietary platform; VPS guests are customer-managedNon indiqué
Commercial modelPrepaid subscription with auto-renew; 30-day money-back on eligible hostingNon indiqué
Key capabilities: Hostinger vs STACKIT
Key capabilitiesLogo: HostingerHostingerLogo: STACKITSTACKIT
EU-operated (Cyprus contract)OuiNon indiqué
ISO 27001 (claimed)OuiNon indiqué
Managed WordPressOuiNon indiqué
KVM VPS + public APIOuiNon indiqué
Public DPAOuiNon indiqué
Selectable EU data centersOuiNon indiqué

Hostinger

  • Selectable European and global data centers

    Web and cloud plans can be placed in France, Germany, Lithuania, the Netherlands, or the United Kingdom, or in the United States, Brazil, India, Indonesia, or Malaysia. VPS omits the Netherlands. Location is chosen at setup and can be moved later on web and cloud, but not on VPS without rebuild.

  • Managed WordPress on LiteSpeed and hPanel

    Plans include one-click install, staging, automatic updates, malware scanning, WAF, Let's Encrypt, WP-CLI, SSH, and Git. WordPress.org lists Hostinger as a recommended host. Shared plans isolate accounts with CloudLinux LVE. Not a self-hosted WordPress appliance you run elsewhere.

  • KVM VPS with root, templates, and a public API

    KVM guests use AMD EPYC and NVMe, weekly backups, snapshots, a managed firewall, Wanguard DDoS filtering, and one-click OS or app templates (Docker, n8n, Ubuntu, and others). A documented public API and MCP server support automation. The guest is unmanaged: you patch the OS.

  • Managed cloud with dedicated IP and NVMe

    Cloud plans keep hPanel and add more CPU, RAM, NVMe, PHP workers, inode headroom, a dedicated IP, CDN, and daily or on-demand backups. Aimed at agencies and busier WordPress or Node.js sites that do not want root. Upgrade path from shared hosting is in-panel.

  • In-house hPanel, Access Manager, and migrations

    hPanel is Hostinger's control plane for sites, DNS, mail, backups, and collaborators. Access Manager shares scoped access without handing over the account password. Website migration is a supported request flow for common CMS stacks. Developer tools (SSH, Git, PHP versions) live in the same panel.

  • Public DPA with a named sub-processor list

    A click-through DPA covers hosting, VPS, email, domains, Website Builder, Horizons, and Reach. Appendix 3 lists AWS EMEA, Google Cloud EMEA, Cloudflare, MailChannels, Proofpoint, Anthropic Ireland, and spectra tech UAB. New sub-processors can be added with a 10-day objection window.

STACKIT

  • Comprehensive IaaS: Compute and Storage

    STACKIT's Compute Engine provides virtual machines and GPUs for workloads from general computing to AI training. Storage options include object for unstructured data, block for high-performance databases, file sharing, and automated backups. These run in EU data centers, offering low-latency access and scalability without vendor lock-in. Users benefit from predictable performance in regulated environments.

  • Managed Kubernetes and PaaS

    The STACKIT Kubernetes Engine (SKE) deploys CNCF-compliant clusters with automated scaling and updates. Cloud Foundry supports application development and operations. Databases and messaging services like RabbitMQ integrate seamlessly. Developers focus on code while STACKIT handles infrastructure, reducing setup time and operational overhead for containerized apps.

  • Security and Observability Tools

    Features like Secrets Manager, Key Management Service, and Network Security protect data at rest and in transit. Confidential Computing safeguards sensitive workloads. Logging via LogMe and Observability stack provide real-time insights. These tools ensure compliance and quick issue resolution, vital for industries facing strict audits.

Assurance & compliance: Hostinger vs STACKIT
Assurance & complianceLogo: HostingerHostingerLogo: STACKITSTACKIT
Independent security / no-logs audit
Not found

Vendor describes internal pentests and a HackerOne-style responsible disclosure programme. No public independent audit PDF found.

Non indiqué
ISO 27001
Vendor claimed

Trust Center and security article claim ISO/IEC 27001:2022. Certificate download requires Trust Center access. Not independently verified here.

Non indiqué
SOC 2 / SOC 3
Not found

No public SOC 2 or SOC 3 report found on Trust Center overview or legal pages.

Non indiqué
GDPR / EU data protection
Vendor claimed

EU/UK/Luxembourg contracting entities; privacy policy cites GDPR; DPA includes EU SCCs and UK addendum. Confirm entity on the invoice.

Non indiqué
US CLOUD Act exposure (indicative)
Partial

European group, no known US parent. Exposure is medium because customers may select US data centers and the DPA names US-group processors (AWS EMEA, Google Cloud EMEA, Cloudflare, Proofpoint). Not legal advice.

Non indiqué
Data processing agreement (B2B)
Vendor claimed

Public DPA incorporated into the Terms of Service. Parties: Hostinger International Ltd, Hostinger UK Limited, or Hostinger Global S.a r.l.

Non indiqué
EU AI Act
Not applicable

Core product is hosting. Horizons, Kodee, and Reach are AI features inside that product, not an AI-centric system of record.

Non indiqué
HIPAA / PCI environment
Not applicable

Hosting agreement: services are not intended to provide a PCI or HIPAA compliant environment.

Non indiqué
Considerations & known limitations: Hostinger vs STACKIT
Considerations & known limitationsLogo: HostingerHostingerLogo: STACKITSTACKIT
Optional non-EU hosting regions
Medium

US, Brazil, and Asia data centers are first-class options. An operator can place production outside the EEA at checkout. Lock region in procurement if residency is required.

Non indiqué
US-group cloud, CDN, email, and security vendors
Medium

Even an EU VM still depends on AWS EMEA, Google Cloud EMEA, Cloudflare, Proofpoint, MailChannels, plus Google/Meta marketing tools. This is why CLOUD Act exposure is not low.

Non indiqué
Cyprus contract vs Lithuanian operations
Low

HQ and affiliates are Lithuanian; EU paper is usually Hostinger International Ltd (Cyprus). Invoices may also be charged by other group entities. Confirm the contracting party before security review.

Non indiqué
ISO 27001 certificate not independently verified here
Low

The cert is claimed on the Trust Center but gated. Download it before treating ISO as verified.

Non indiqué
Customer still owns CMS, guest OS, and backups
Medium

VPS is unmanaged. Terms require you to keep your own backups even when Hostinger offers weekly copies. Shared and cloud plans are not HIPAA/PCI environments.

Non indiqué

Adéquation

Hostinger

Best fit when

  • SMBs and creators who want domain, SSL, mail, and a WordPress or builder site in one hPanel
  • Teams that can pick an EU data center (FR, DE, LT, NL, or UK) and still accept named US-group subprocessors
  • Agencies managing multiple client WordPress sites on Hostinger Pro or cloud plans
  • Developers who want a straightforward KVM VPS with templates, weekly backups, and a public API
  • Buyers who need a click-through DPA and published sub-processor list before legal review

Poor fit when

  • Workloads that require a HIPAA or PCI environment (explicitly excluded in the hosting agreement)
  • Organisations that mandate EU-only processing with no US-group cloud, CDN, email, or analytics vendors
  • Buyers who need a custom enterprise SLA, dedicated account team, or AWS/GCP-scale IaaS catalog
  • Operators who need to relocate a VPS between regions without a backup-and-reinstall

Consider instead when

  • When: You want German-operated dedicated servers, object storage, or more operator-centric VPS without a consumer website-builder overlay

    Consider: Hetzner

    Hetzner is in the catalog as German web hosting and cloud.

  • When: You need a large European public cloud with many regions and a stronger IaaS and public-sector posture

    Consider: OVHcloud or IONOS

    Both are catalog EU clouds; IONOS also covers consumer-style web hosting.

  • When: You need US-centric SMB WordPress hosting already familiar to North American agencies

    Consider: GoDaddy or Bluehost

    Different jurisdiction. Useful only if European contracting is not a filter.

STACKIT

Best fit when

Non indiqué

Poor fit when

Non indiqué

Open questions for due diligence

Hostinger

  • Which Hostinger group entity will appear on our invoice and DPA counterparty line?
  • Can we obtain the ISO/IEC 27001:2022 certificate and statement of applicability without NDA friction?
  • Which subprocessors and regions actually touch our account if we pin web hosting to Lithuania or Germany and disable AI, Reach, and Dark Web Monitor?
  • Is a SOC 2 or equivalent report available under NDA?
  • What is the exact SLA credit process and exclusion list for our plan versus the 99.9% marketing figure?

STACKIT

Non indiqué