Vergelijk Contabo Object Storage en Hostinger op mogelijkheden, rechtsgebied, waarborgen en geschiktheid voor Europese kopers.
Beide vermeld als alternatief voor: DigitalOcean
Germany· Cloud Computing
Needs review
Shortlist when you want a Ceph S3 bucket next to Contabo VPS or VDS, can use path-style endpoints, and can live without S3 logging. Skip when you need Amazon-complete S3, a first-party custom TLS hostname, company-wide ISO 27001 or SOC 2, or a store with no US parent and no US region. Consider Hetzner Object Storage or OVHcloud Object Storage instead.
Lithuania· Cloud Computing
Needs review
Shortlist Hostinger when you want managed WordPress or a simple KVM VPS with an EU data-center option and a published DPA. Skip it when you need HIPAA or PCI, an EU-only data path, or a custom enterprise SLA. Consider Hetzner or OVHcloud instead for more operator-centric European infrastructure.
Gemarkeerde rijen verschillen tussen de twee producten.
| Kenmerk | Contabo Object Storage | Hostinger |
|---|---|---|
| Land van herkomst | Germany | Lithuania |
| Categorie | Cloud Computing | Cloud Computing |
| Open source | Nee | Nee |
| Self-hosted | Nee | Nee |
| Hoofdkantoor | Germany | Lithuania |
| Juridische entiteit | Contabo GmbH (Welfenstrasse 22, 81541 Munich; AG Munich HRB 180722; VAT DE267602842) | EU customers: Hostinger International Ltd (Cyprus). Affiliates: HOSTINGER, UAB and HOSTINGER operations, UAB (Vilnius). Also Hostinger UK Limited and Hostinger Global S.a r.l. (Luxembourg). |
| VS-moeder / zeggenschap | VS-moeder of zeggenschap | Geen bekende VS-moeder |
| CLOUD Act-blootstelling (indicatief) | Hoog | Middel |
| Hosting / residentie | Object storage sold in the EU (eu2.contabostorage.com), United States (usc1.contabostorage.com), and Singapore (sin1.contabostorage.com). Contabo operates its own data centers. No public object-storage subprocessor list. Management API auth is at auth.contabo.com. Official custom-domain docs use Cloudflare as an optional customer-side proxy, not as the S3 data plane. | Customer-chosen DCs: FR, DE, LT, NL, UK plus US (Phoenix, Boston, Asheville), Brazil, India, Indonesia, Malaysia (plan-dependent). DPA subprocessors include AWS EMEA SARL, Google Cloud EMEA Limited, Cloudflare, Inc., MailChannels, Proofpoint, Inc., Anthropic Ireland, and spectra tech UAB. Privacy policy also names Google Analytics, Meta ads, Ravelin, and iDenfy. |
| Samenvatting | S3-compatible object storage from Munich-based Contabo GmbH, running on Ceph with EU, US, and Singapore endpoints. | Lithuania-founded web hosting for WordPress, managed cloud, and KVM VPS, with selectable European data centers and Cyprus contracting for EU customers. |
| Tags |
| In één oogopslag | Contabo Object Storage | Hostinger |
|---|---|---|
| HQ | Munich, Germany (Contabo GmbH, HRB 180722) | Niet vermeld |
| Product | Hosted Ceph S3 object storage | Niet vermeld |
| S3 regions | EU (eu2), United States (usc1), Singapore (sin1) | Niet vermeld |
| Addressing | Path-style; HTTPS only | Niet vermeld |
| Commercial model | Purchased capacity with optional auto-scale; no per-GB egress on Contabo's stated model | Prepaid subscription with auto-renew; 30-day money-back on eligible hosting |
| Ownership | KKR majority (2022), Oakley Capital Fund V minority | Niet vermeld |
| HQ / operations | Niet vermeld | Vilnius, Lithuania (also Kaunas; Yogyakarta office) |
| EU contracting entity | Niet vermeld | Hostinger International Ltd (Larnaca, Cyprus) |
| Founded | Niet vermeld | 2004 as Hosting Media; Hostinger brand in 2011 |
| Product shape | Niet vermeld | Managed web/WordPress, managed cloud, KVM VPS, domains, email |
| Open source / self-host | Niet vermeld | Neither. Proprietary platform; VPS guests are customer-managed |
| Key capabilities | Contabo Object Storage | Hostinger |
|---|---|---|
| S3-compatible (partial) | Ja | Niet vermeld |
| Ceph backend | Ja | Niet vermeld |
| EU region available | Ja | Niet vermeld |
| German GmbH | Ja | Niet vermeld |
| In-panel DPA | Ja | Niet vermeld |
| EU-operated (Cyprus contract) | Niet vermeld | Ja |
| ISO 27001 (claimed) | Niet vermeld | Ja |
| Managed WordPress | Niet vermeld | Ja |
| KVM VPS + public API | Niet vermeld | Ja |
| Public DPA | Niet vermeld | Ja |
| Selectable EU data centers | Niet vermeld | Ja |
Ceph S3 API with path-style buckets
Contabo states the store is Ceph-based and largely S3 compatible, not fully equivalent to Amazon S3. Logging is not supported. Official tool notes require Contabo S3 URLs, path-style buckets, and access_key/secret_key mapped to aws_access_key_id/aws_secret_access_key.
EU, US, and Singapore S3 endpoints
Documented base URLs are eu2.contabostorage.com (European Union), usc1.contabostorage.com (United States), and sin1.contabostorage.com (Singapore). The management API allows one object-storage purchase per location. All locations on an account share the same S3 credentials.
Bucket versioning and Object Lock
Versioning is enabled per bucket via s3api put-bucket-versioning on the regional endpoint. Suspending versioning stops new versions but does not delete old ones. Object Lock can be turned on at bucket creation (example uses GOVERNANCE mode) so objects cannot be overwritten or deleted for a retention period.
Capacity auto-scale via management API
The Contabo API (not the S3 API) orders, upgrades, cancels, and auto-scales purchased space up to a monthly size limit. Usage statistics are exposed there. The open-source cntb CLI (GPL-3.0) wraps the same management API. S3 keys come from the User Management API or the Object Storage panel.
Published client list and hard limits
Documented working tools include cntb, aws cli, rclone, Cyberduck, goofys, s3fs-fuse, s3cmd, WinSCP, Cloudberry Explorer, BucketAnywhere, Virtualmin, Velero, and Plesk. FileZilla Pro is listed as incompatible. Defaults include 5 TB max object size, 100 buckets, 3 million objects (increasable on request), 250 requests per second, and 10 MByte/s default bandwidth.
Selectable European and global data centers
Web and cloud plans can be placed in France, Germany, Lithuania, the Netherlands, or the United Kingdom, or in the United States, Brazil, India, Indonesia, or Malaysia. VPS omits the Netherlands. Location is chosen at setup and can be moved later on web and cloud, but not on VPS without rebuild.
Managed WordPress on LiteSpeed and hPanel
Plans include one-click install, staging, automatic updates, malware scanning, WAF, Let's Encrypt, WP-CLI, SSH, and Git. WordPress.org lists Hostinger as a recommended host. Shared plans isolate accounts with CloudLinux LVE. Not a self-hosted WordPress appliance you run elsewhere.
KVM VPS with root, templates, and a public API
KVM guests use AMD EPYC and NVMe, weekly backups, snapshots, a managed firewall, Wanguard DDoS filtering, and one-click OS or app templates (Docker, n8n, Ubuntu, and others). A documented public API and MCP server support automation. The guest is unmanaged: you patch the OS.
Managed cloud with dedicated IP and NVMe
Cloud plans keep hPanel and add more CPU, RAM, NVMe, PHP workers, inode headroom, a dedicated IP, CDN, and daily or on-demand backups. Aimed at agencies and busier WordPress or Node.js sites that do not want root. Upgrade path from shared hosting is in-panel.
In-house hPanel, Access Manager, and migrations
hPanel is Hostinger's control plane for sites, DNS, mail, backups, and collaborators. Access Manager shares scoped access without handing over the account password. Website migration is a supported request flow for common CMS stacks. Developer tools (SSH, Git, PHP versions) live in the same panel.
Public DPA with a named sub-processor list
A click-through DPA covers hosting, VPS, email, domains, Website Builder, Horizons, and Reach. Appendix 3 lists AWS EMEA, Google Cloud EMEA, Cloudflare, MailChannels, Proofpoint, Anthropic Ireland, and spectra tech UAB. New sub-processors can be added with a 10-day objection window.
| Assurance & compliance | Contabo Object Storage | Hostinger |
|---|---|---|
| Independent security / no-logs audit | Not found Searched About, help, and product docs. No public independent audit PDF for Object Storage. | Not found Vendor describes internal pentests and a HackerOne-style responsible disclosure programme. No public independent audit PDF found. |
| ISO 27001 | Partial Some Contabo location marketing pages list colocation-facility ISO 27001 (for example Singapore). No company-wide Contabo ISO 27001 certificate found. | Vendor claimed Trust Center and security article claim ISO/IEC 27001:2022. Certificate download requires Trust Center access. Not independently verified here. |
| SOC 2 / SOC 3 | Not found No Contabo-issued SOC 2 or SOC 3 report found. Facility-level SOC marks on some non-EU location pages are not treated as a Contabo attestation. | Not found No public SOC 2 or SOC 3 report found on Trust Center overview or legal pages. |
| GDPR / EU data protection | Vendor claimed EU legal entity; DPA available in the Customer Control Panel and listed as covering Object Storage. EU region is optional, not exclusive. | Vendor claimed EU/UK/Luxembourg contracting entities; privacy policy cites GDPR; DPA includes EU SCCs and UK addendum. Confirm entity on the invoice. |
| US CLOUD Act exposure (indicative) | Partial Contabo GmbH is German, but KKR (US) has been the majority investor since June 2022 and Contabo sells a US object-storage region. Not legal advice. | Partial European group, no known US parent. Exposure is medium because customers may select US data centers and the DPA names US-group processors (AWS EMEA, Google Cloud EMEA, Cloudflare, Proofpoint). Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Customer Control Panel wizard. Object Storage is an explicit covered service. Review the generated PDF. | Vendor claimed Public DPA incorporated into the Terms of Service. Parties: Hostinger International Ltd, Hostinger UK Limited, or Hostinger Global S.a r.l. |
| EU AI Act | Not applicable Object storage IaaS, not an AI system. | Not applicable Core product is hosting. Horizons, Kodee, and Reach are AI features inside that product, not an AI-centric system of record. |
| HIPAA / PCI environment | Niet vermeld | Not applicable Hosting agreement: services are not intended to provide a PCI or HIPAA compliant environment. |
| Considerations & known limitations | Contabo Object Storage | Hostinger |
|---|---|---|
| US private-equity majority owner | High Oakley Capital announced in June 2022 that KKR would be majority investor, with Oakley Fund V retaining a minority stake. Treat CLOUD Act exposure as high at the ownership layer even when objects sit on eu2.contabostorage.com. | Niet vermeld |
| Optional United States object region | Medium usc1.contabostorage.com is a first-party SKU. Shared credentials across locations make it easy to point a client at the US endpoint by mistake. Pin the EU URL if residency is a hard requirement. | Niet vermeld |
| Partial S3 compatibility | Medium Contabo states the Ceph API is not fully compatible with AWS S3. Logging is unsupported. Path-style addressing is required. FileZilla Pro does not work. Test SDK features before migrating production. | Niet vermeld |
| Default request and bandwidth caps | Medium Published defaults include 250 API requests per second, 10 MByte/s bandwidth, 100 buckets, and 3 million objects. Auto-scale increases purchased terabytes, not those caps. | Niet vermeld |
| No public company-wide audit | Medium No independent Object Storage audit, Contabo-issued ISO 27001, or SOC 2 report was found. Facility ISO/SOC marks on some location pages are not a substitute. | Niet vermeld |
| No first-party custom TLS hostname | Low HTTPS-only S3 endpoints reject a simple CNAME. Public websites need a customer-operated reverse proxy. Public-to-private ACL changes may remain cached for up to one hour. | Niet vermeld |
| Optional non-EU hosting regions | Niet vermeld | Medium US, Brazil, and Asia data centers are first-class options. An operator can place production outside the EEA at checkout. Lock region in procurement if residency is required. |
| US-group cloud, CDN, email, and security vendors | Niet vermeld | Medium Even an EU VM still depends on AWS EMEA, Google Cloud EMEA, Cloudflare, Proofpoint, MailChannels, plus Google/Meta marketing tools. This is why CLOUD Act exposure is not low. |
| Cyprus contract vs Lithuanian operations | Niet vermeld | Low HQ and affiliates are Lithuanian; EU paper is usually Hostinger International Ltd (Cyprus). Invoices may also be charged by other group entities. Confirm the contracting party before security review. |
| ISO 27001 certificate not independently verified here | Niet vermeld | Low The cert is claimed on the Trust Center but gated. Download it before treating ISO as verified. |
| Customer still owns CMS, guest OS, and backups | Niet vermeld | Medium VPS is unmanaged. Terms require you to keep your own backups even when Hostinger offers weekly copies. Shared and cloud plans are not HIPAA/PCI environments. |
When: You want a German hoster's object store with an EU-concentrated footprint and no US majority PE owner
Consider: Hetzner Object Storage
Contabo's own comparison places Hetzner object storage in European data centers and notes a thinner APAC story.
When: You need a broader EU compliance portfolio (ISO 27001, SecNumCloud) more than a simple capacity bill
Consider: OVHcloud Object Storage
Billing and product surface are more complex than Contabo's single-account IaaS stack.
When: You need managed Kubernetes or managed Postgres next to S3, not just raw buckets
Consider: Scaleway Object Storage
France-first footprint. Contabo does not sell first-party managed databases or Kubernetes.
When: You need Amazon-complete S3 (logging, IAM, global regions) and will accept a US cloud
Consider: Amazon S3
Use Contabo only after you have tested the Ceph compatibility gaps against your SDK.
When: You want German-operated dedicated servers, object storage, or more operator-centric VPS without a consumer website-builder overlay
Consider: Hetzner
Hetzner is in the catalog as German web hosting and cloud.
When: You need a large European public cloud with many regions and a stronger IaaS and public-sector posture
Consider: OVHcloud or IONOS
Both are catalog EU clouds; IONOS also covers consumer-style web hosting.
When: You need US-centric SMB WordPress hosting already familiar to North American agencies
Consider: GoDaddy or Bluehost
Different jurisdiction. Useful only if European contracting is not a filter.