EU
company & jurisdiction
GDPR-compliant VPS & hosting with EU data residency on our own network.
Keep regulated data in the EU, under EU law. NODED.CLOUD is run by X ZONE IT SRL, an EU company under Romanian and EU law, on our own AS60982. Choose the EU country your server and captured images stay in, rely on the GDPR DPA built into our Terms, and run on SSD VPS or single-tenant dedicated bare metal. A genuinely European AWS alternative for fintech, healthtech and EU SaaS.
6 EU regionsKVM VPS
ROBucharestEU
BGSofiaEU
PLWarsawEU
NLAmsterdamEU
DEFrankfurtEU
ATViennaEU
€0.0056/hr~60 s deploy6 EU regions
6 EU
countries · pick yours
AS60982
own ASN at RIPE
DPA
GDPR · part of the Terms
01 · Why it’s compliant
Sovereignty you can verify.
An EU company, EU locations, our own ASN and a DPA in the Terms — the jurisdiction answers your auditor asks for.
JURISDICTION
EU company, EU law.
X ZONE IT SRL is a Romanian company (CUI RO48893724), founded in 2023 and operating under Romanian and EU law, including GDPR. Pick an EU location and your server and captured images stay in that country.
- OperatorX ZONE IT SRL · RO
- RegistryCUI RO48893724
- LawGDPR · Romanian/EU
- DPAin the Terms
RESIDENCY
Pin data to one country.
Select the EU location your data must live in: your server stays in that country, and images you capture stay on the node they were captured on — they are not replicated. Our IPv4 space is announced from our own AS60982.
- EU locationsRO · PL · NL · DE · AT
- Residencyper-country
- Networkown AS60982
- Imagesstay on their node
ISOLATION
Single-tenant when you need it.
Shared SSD VPS for most workloads; dedicated bare metal for the ones that need physical isolation — payments, PHI, ledgers. Same EU residency, 100 Gbps DDoS protection, the same support tickets and live chat.
- VPSfrom €0.0056/hr
- Dedicatedsingle-tenant
- DDoS100 Gbps included
- Supporttickets · live chat
02 · The compliance stack
What your DPO will ask for.
An EU operator, per-country residency, a DPA in the Terms and isolation on demand — the answers a security review asks for.
EU company, EU law
Operated by X ZONE IT SRL, a Romanian (EU) company under Romanian and EU law. Pick an EU location and your server and captured images stay in that country.
6 EU countries
Pin workloads to Romania, Bulgaria, Poland, the Netherlands, Germany or Austria, the six EU countries we run VPS in (Ashburn, US East, is also available when you need a US presence). Pick the country your data must stay in: your server and captured images stay there.
Own ASN: AS60982
Our IPv4 space is announced from our own autonomous system, AS60982, registered at RIPE to X ZONE IT SRL, with IP transit from an upstream carrier.
DPA & GDPR
Data Processing Agreement built into the Terms — no signature needed — and every sub-processor listed publicly. The paperwork your auditor and DPO ask for.
Single-tenant option
Move sensitive workloads to dedicated bare metal for physical isolation — no noisy neighbours sharing the silicon under your ledger or PHI.
EU-based support
Support tickets in the client panel and live chat on the site, handled by X ZONE IT SRL, the Romanian company that operates the service.
03 · Who needs it
Teams that can’t let data leave the EU.
Fintech, healthtech, public sector and EU-selling SaaS — anyone whose customers or regulators demand sovereign hosting.
FINTECH
Payments & ledgers under EU law.
Single-tenant bare metal with EU data residency for PSD2, ledgers and risk engines. Isolation and a DPA you can put in front of a regulator.
HEALTH & GOVSensitive data that can’t leave the EU.
Healthtech, public sector and legal workloads that need a clear jurisdiction line. Pick an EU country and your server and captured images stay there, run by an EU company.
EU SaaSA European AWS alternative.
Sell to EU enterprises that demand sovereign hosting. Run your platform with an EU-incorporated operator and answer the jurisdiction questions on the security questionnaire.
04 · EU vs US-owned cloud
European by design, not by region.
A US hyperscaler’s ‘EU region’ still answers to US law. We are an EU company under Romanian and EU law.
NODED.CLOUD
EU operator, own ASN
EU company, EU locations, our own ASN (AS60982) and a GDPR DPA built into the Terms. Pick an EU location and your server and captured images stay in that country.
- OperatorEU (Romania)
- LawRomanian / EU
- Networkown AS60982
- Residencyper-country
- DPAin the Terms
vs
US-OWNED CLOUD
US hyperscaler ‘EU region’
Data may sit in an EU data centre, but the parent company is US-incorporated — so the US CLOUD Act can still compel disclosure regardless of where the bytes live.
- OperatorUS parent
- CLOUD Actapplies
- Networkshared transit
- Residencyregion label
- DPAboilerplate
05 · FAQ
Things people ask.
Quick answers to the questions we get most. Need more? Talk to us.
Q.01
Is NODED.CLOUD hosting GDPR-compliant?
Yes. NODED.CLOUD is operated by X ZONE IT SRL, an EU company registered in Romania (VAT RO48893724). Personal data is processed under GDPR and Romanian/EU law; our Data Processing Agreement (DPA) is part of the Terms and every sub-processor is listed publicly. Pick an EU location (Romania, Bulgaria, Poland, the Netherlands, Germany or Austria) and your server and captured images stay in that country.
Q.02
Where is my data physically stored?
In the location you select. VPS run in Bucharest, Sofia, Warsaw, Amsterdam, Frankfurt and Vienna (plus Ashburn, US East); dedicated servers are available in 10 EU countries plus the United States. Your server’s disks stay in that country, and images you capture stay on the node they were captured on — they are not replicated elsewhere.
Q.03
Which law governs NODED.CLOUD?
Romanian and EU law. NODED.CLOUD is operated by X ZONE IT SRL, a company registered in Romania, and personal data is processed under GDPR. Pick an EU location and your server and captured images stay in that country; we also run a US location in Ashburn for workloads that need one.
Q.04
What makes a VPS GDPR-compliant?
No server is GDPR-compliant on its own: compliance depends on how you, the controller, process personal data. The host covers the processor side, and for a VPS that means four things: a data processing agreement under Article 28 (ours is part of the Terms), a public sub-processor list, a choice of EU location so the server and its captured images stay in that country, and an operator under EU law. NODED.CLOUD covers all four on every VPS in Romania, Bulgaria, Poland, the Netherlands, Germany and Austria. Ashburn, US East, is outside the EU, so do not use it for data that must stay there.
Q.05
Do I need to sign a separate DPA?
No. Our GDPR Data Processing Agreement is part of the Terms, so it covers every customer without a separate signature. Residency follows the location you pick: choose an EU location and your server and captured images stay in that country. That is the artefact your DPO, auditor or enterprise customer’s security questionnaire is asking for.
Q.06
Is dedicated hardware available for compliance isolation?
Yes. For workloads that require physical isolation, move to single-tenant dedicated bare metal — no shared silicon, no noisy neighbours. You still get EU residency, 100 Gbps DDoS protection and the same support tickets and live chat.
Keep it in the EU
Keep your data in the EU country you pick.
Choose your EU country, rely on the GDPR DPA built into our Terms, and run on VPS or single-tenant bare metal — operated by an EU company on our own AS60982.
What you get
OperatorEU company · RO
EU locationsRO · PL · NL · DE · AT
LawGDPR · Romanian/EU
DPApart of the Terms
Networkown AS60982