Contabo Object Storage vs STACKIT

Vergelijk Contabo Object Storage en STACKIT op mogelijkheden, rechtsgebied, waarborgen en geschiktheid voor Europese kopers.

Beide vermeld als alternatief voor: DigitalOcean

Logo: Contabo Object Storage

Contabo Object Storage

Germany· Cloud Computing

Needs review

Shortlist when you want a Ceph S3 bucket next to Contabo VPS or VDS, can use path-style endpoints, and can live without S3 logging. Skip when you need Amazon-complete S3, a first-party custom TLS hostname, company-wide ISO 27001 or SOC 2, or a store with no US parent and no US region. Consider Hetzner Object Storage or OVHcloud Object Storage instead.

S3-compatible (partial)Ceph backendEU region availableGerman GmbHIn-panel DPA
Contabo Object Storage vs STACKIT: Overzicht
KenmerkLogo: Contabo Object StorageContabo Object StorageLogo: STACKITSTACKIT
Land van herkomstGermanyGermany
CategorieCloud ComputingCloud Computing
Open sourceNeeNee
Self-hostedNeeNee
HoofdkantoorGermanyNiet vermeld
Juridische entiteitContabo GmbH (Welfenstrasse 22, 81541 Munich; AG Munich HRB 180722; VAT DE267602842)Niet vermeld
VS-moeder / zeggenschapVS-moeder of zeggenschapNiet vermeld
CLOUD Act-blootstelling (indicatief)HoogNiet vermeld
Hosting / residentieObject storage sold in the EU (eu2.contabostorage.com), United States (usc1.contabostorage.com), and Singapore (sin1.contabostorage.com). Contabo operates its own data centers. No public object-storage subprocessor list. Management API auth is at auth.contabo.com. Official custom-domain docs use Cloudflare as an optional customer-side proxy, not as the S3 data plane.Niet vermeld
Samenvatting

S3-compatible object storage from Munich-based Contabo GmbH, running on Ceph with EU, US, and Singapore endpoints.

German sovereign cloud from Schwarz Digits (Schwarz Group): IaaS, managed Kubernetes, databases, and colocation on group-owned data centers in Germany and Austria.

Tags
In één oogopslag: Contabo Object Storage vs STACKIT
In één oogopslagLogo: Contabo Object StorageContabo Object StorageLogo: STACKITSTACKIT
HQMunich, Germany (Contabo GmbH, HRB 180722)Niet vermeld
ProductHosted Ceph S3 object storageNiet vermeld
S3 regionsEU (eu2), United States (usc1), Singapore (sin1)Niet vermeld
AddressingPath-style; HTTPS onlyNiet vermeld
Commercial modelPurchased capacity with optional auto-scale; no per-GB egress on Contabo's stated modelNiet vermeld
OwnershipKKR majority (2022), Oakley Capital Fund V minorityNiet vermeld
Key capabilities: Contabo Object Storage vs STACKIT
Key capabilitiesLogo: Contabo Object StorageContabo Object StorageLogo: STACKITSTACKIT
S3-compatible (partial)JaNiet vermeld
Ceph backendJaNiet vermeld
EU region availableJaNiet vermeld
German GmbHJaNiet vermeld
In-panel DPAJaNiet vermeld

Contabo Object Storage

  • Ceph S3 API with path-style buckets

    Contabo states the store is Ceph-based and largely S3 compatible, not fully equivalent to Amazon S3. Logging is not supported. Official tool notes require Contabo S3 URLs, path-style buckets, and access_key/secret_key mapped to aws_access_key_id/aws_secret_access_key.

  • EU, US, and Singapore S3 endpoints

    Documented base URLs are eu2.contabostorage.com (European Union), usc1.contabostorage.com (United States), and sin1.contabostorage.com (Singapore). The management API allows one object-storage purchase per location. All locations on an account share the same S3 credentials.

  • Bucket versioning and Object Lock

    Versioning is enabled per bucket via s3api put-bucket-versioning on the regional endpoint. Suspending versioning stops new versions but does not delete old ones. Object Lock can be turned on at bucket creation (example uses GOVERNANCE mode) so objects cannot be overwritten or deleted for a retention period.

  • Capacity auto-scale via management API

    The Contabo API (not the S3 API) orders, upgrades, cancels, and auto-scales purchased space up to a monthly size limit. Usage statistics are exposed there. The open-source cntb CLI (GPL-3.0) wraps the same management API. S3 keys come from the User Management API or the Object Storage panel.

  • Published client list and hard limits

    Documented working tools include cntb, aws cli, rclone, Cyberduck, goofys, s3fs-fuse, s3cmd, WinSCP, Cloudberry Explorer, BucketAnywhere, Virtualmin, Velero, and Plesk. FileZilla Pro is listed as incompatible. Defaults include 5 TB max object size, 100 buckets, 3 million objects (increasable on request), 250 requests per second, and 10 MByte/s default bandwidth.

STACKIT

  • Comprehensive IaaS: Compute and Storage

    STACKIT's Compute Engine provides virtual machines and GPUs for workloads from general computing to AI training. Storage options include object for unstructured data, block for high-performance databases, file sharing, and automated backups. These run in EU data centers, offering low-latency access and scalability without vendor lock-in. Users benefit from predictable performance in regulated environments.

  • Managed Kubernetes and PaaS

    The STACKIT Kubernetes Engine (SKE) deploys CNCF-compliant clusters with automated scaling and updates. Cloud Foundry supports application development and operations. Databases and messaging services like RabbitMQ integrate seamlessly. Developers focus on code while STACKIT handles infrastructure, reducing setup time and operational overhead for containerized apps.

  • Security and Observability Tools

    Features like Secrets Manager, Key Management Service, and Network Security protect data at rest and in transit. Confidential Computing safeguards sensitive workloads. Logging via LogMe and Observability stack provide real-time insights. These tools ensure compliance and quick issue resolution, vital for industries facing strict audits.

Assurance & compliance: Contabo Object Storage vs STACKIT
Assurance & complianceLogo: Contabo Object StorageContabo Object StorageLogo: STACKITSTACKIT
Independent security / no-logs audit
Not found

Searched About, help, and product docs. No public independent audit PDF for Object Storage.

Niet vermeld
ISO 27001
Partial

Some Contabo location marketing pages list colocation-facility ISO 27001 (for example Singapore). No company-wide Contabo ISO 27001 certificate found.

Niet vermeld
SOC 2 / SOC 3
Not found

No Contabo-issued SOC 2 or SOC 3 report found. Facility-level SOC marks on some non-EU location pages are not treated as a Contabo attestation.

Niet vermeld
GDPR / EU data protection
Vendor claimed

EU legal entity; DPA available in the Customer Control Panel and listed as covering Object Storage. EU region is optional, not exclusive.

Niet vermeld
US CLOUD Act exposure (indicative)
Partial

Contabo GmbH is German, but KKR (US) has been the majority investor since June 2022 and Contabo sells a US object-storage region. Not legal advice.

Niet vermeld
Data processing agreement (B2B)
Vendor claimed

Customer Control Panel wizard. Object Storage is an explicit covered service. Review the generated PDF.

Niet vermeld
EU AI Act
Not applicable

Object storage IaaS, not an AI system.

Niet vermeld
Considerations & known limitations: Contabo Object Storage vs STACKIT
Considerations & known limitationsLogo: Contabo Object StorageContabo Object StorageLogo: STACKITSTACKIT
US private-equity majority owner
High

Oakley Capital announced in June 2022 that KKR would be majority investor, with Oakley Fund V retaining a minority stake. Treat CLOUD Act exposure as high at the ownership layer even when objects sit on eu2.contabostorage.com.

Niet vermeld
Optional United States object region
Medium

usc1.contabostorage.com is a first-party SKU. Shared credentials across locations make it easy to point a client at the US endpoint by mistake. Pin the EU URL if residency is a hard requirement.

Niet vermeld
Partial S3 compatibility
Medium

Contabo states the Ceph API is not fully compatible with AWS S3. Logging is unsupported. Path-style addressing is required. FileZilla Pro does not work. Test SDK features before migrating production.

Niet vermeld
Default request and bandwidth caps
Medium

Published defaults include 250 API requests per second, 10 MByte/s bandwidth, 100 buckets, and 3 million objects. Auto-scale increases purchased terabytes, not those caps.

Niet vermeld
No public company-wide audit
Medium

No independent Object Storage audit, Contabo-issued ISO 27001, or SOC 2 report was found. Facility ISO/SOC marks on some location pages are not a substitute.

Niet vermeld
No first-party custom TLS hostname
Low

HTTPS-only S3 endpoints reject a simple CNAME. Public websites need a customer-operated reverse proxy. Public-to-private ACL changes may remain cached for up to one hour.

Niet vermeld

Geschiktheid

Contabo Object Storage

Best fit when

  • Teams already on Contabo Cloud VPS or VDS that need a same-account backup or media bucket
  • Workloads that speak standard S3 via rclone, aws cli, Velero, Plesk, or s3cmd and can use path-style URLs
  • Buyers who want capacity-tier billing without per-gigabyte egress modelling
  • Operators who can pin eu2.contabostorage.com and sign the in-panel DPA
  • Buckets that need versioning or Object Lock but not S3 server access logging

Poor fit when

  • Applications that require full Amazon S3 feature parity, especially server access logging or virtual-hosted bucket names
  • Public websites that need a first-party custom hostname and TLS without a reverse proxy
  • Procurement that requires company-wide ISO 27001 or SOC 2, or a vendor with no US private-equity majority owner
  • Strict EU-only policies if anyone on the account might create a US or Singapore store
  • High-QPS or multi-gigabit pipelines that will hit the documented 250 rps or 10 MByte/s defaults

Consider instead when

  • When: You want a German hoster's object store with an EU-concentrated footprint and no US majority PE owner

    Consider: Hetzner Object Storage

    Contabo's own comparison places Hetzner object storage in European data centers and notes a thinner APAC story.

  • When: You need a broader EU compliance portfolio (ISO 27001, SecNumCloud) more than a simple capacity bill

    Consider: OVHcloud Object Storage

    Billing and product surface are more complex than Contabo's single-account IaaS stack.

  • When: You need managed Kubernetes or managed Postgres next to S3, not just raw buckets

    Consider: Scaleway Object Storage

    France-first footprint. Contabo does not sell first-party managed databases or Kubernetes.

  • When: You need Amazon-complete S3 (logging, IAM, global regions) and will accept a US cloud

    Consider: Amazon S3

    Use Contabo only after you have tested the Ceph compatibility gaps against your SDK.

STACKIT

Best fit when

Niet vermeld

Poor fit when

Niet vermeld

Open questions for due diligence

Contabo Object Storage

  • Is there a current company-wide ISO 27001 or SOC 2 for Contabo GmbH (not a colocation-facility mark)?
  • Where is the public subprocessor list for Object Storage, backups, support tooling, and the Customer Control Panel?
  • Does Contabo offer server-side encryption at rest and customer-managed keys for objects? Not documented on the pages reviewed.
  • What is the Ceph replication factor / durability target for each object-storage region?
  • The marketing URL https://contabo.com/en/object-storage/ returned Storage VPS content when fetched during research. Confirm the SKU is still sold and the product page has not been retired.

STACKIT

Niet vermeld