What Is Offshore Hosting?

Offshore hosting is not about hiding from the law. It is about choosing which law applies to your server — and that choice is more practical than ideological.

A working definition

Offshore hosting means renting infrastructure in a country other than your own — more precisely, other than the country whose legal system you are worried about. The word is borrowed from finance, and it misleads people. There is no island with no laws. Every datacenter on earth sits under some jurisdiction. What you are choosing is which jurisdiction, and what that jurisdiction's courts will and won't do with a foreign request.

Three things define an offshore host in practice: where the servers physically are, where the company is legally based, and what the company actually does when a foreign notice arrives. The first two are geography. The third is policy — and policy is where most "offshore" marketing falls apart. A provider can rent racks in eight exotic countries and still suspend your service because of a form letter from a copyright bot, because suspension is cheaper than reading.

Jurisdiction is not location

A server in Amsterdam rented from a US company is, for most practical purposes, a US server. If the provider is American, American courts can compel the provider — the hardware's zip code will not save your data. The reverse is also true: a non-US provider with servers in several countries answers to the jurisdictions those servers sit in, not to your home country, and not to whoever sent the complaint email.

This is why our Terms of Service name the governing law per service: a VPS in Chisinau answers to Moldovan courts, a VPS in Reykjavik to Icelandic ones. That is the entire trick. There isn't a deeper one — and any provider that can't tell you which courts govern your service doesn't know what they're selling you.

The surveillance alliances

You will see "outside the 14 Eyes" in every offshore sales page. Here is what the alliances actually are — intelligence-sharing pacts, not magic backdoors:

Membership does not mean foreign agents browse your VPS. It means a request that would take eighteen months of mutual-legal-assistance paperwork elsewhere moves quickly between allies. If your threat model includes Western state actors, host outside the Fourteen. Of our fifteen locations, only Amsterdam sits inside an alliance (Nine Eyes) — the other fourteen do not. We say that plainly on the Netherlands page, because it matters for some workloads and not at all for others.

Legitimate reasons to host offshore

The use cases we see every week, all of them legal in the jurisdictions that host them:

• Independent media and investigative publishing. DMCA notices and civil takedown threats are routinely used as cheap censorship. Offshore hosting raises the price of that censorship from an email to a court case.
• Whistleblowing archives and document repositories. Material that is lawful to publish but expensive to defend.
• Privacy infrastructure. VPN endpoints, Tor relays, mix networks. Our AUP explicitly allows Tor relays everywhere and exit nodes in Iceland and Switzerland.
• Cryptocurrency nodes and services. Full nodes, explorers, Lightning infrastructure — unremarkable in most of our locations, impossible at some mainstream hosts.
• Communities with lawful-but-controversial speech. Forums that get reported not for breaking laws but for annoying someone with a lawyer.
• Ordinary businesses that want distance. Some companies simply don't want their customer data one foreign subpoena away from a plaintiff they've never heard of.

Privacy is not lawlessness. Spam, botnets, CSAM, network attacks and port scanning are prohibited in every location we operate, full stop. The AUP is one page and we enforce it ourselves.

What offshore hosting does not protect you from

This is the section most providers skip. We won't:

• A valid court order in the hosting jurisdiction. If a Moldovan court orders action on a Moldova-hosted service, we comply. That is the deal that makes the jurisdiction real. Any host claiming they'd ignore their own courts is either lying or won't exist next year.
• Your own operational security. Pay by card, sign up with your real email, administer the box from your home connection — and the offshore hosting is decoration. This is why we take no personal data at signup and accept only crypto.
• The laws where you live. Offshore hosting protects the server. It does not immunize you. Your government may not be able to subpoena us usefully; it can absolutely subpoena you.
• Providers that log. If your host keeps activity logs, there is something to seize or subpoena no matter what flag flies over the datacenter. We keep none — the privacy policy lists the two records we hold, and both are cryptographic artifacts.
• Content illegal in the hosting jurisdiction itself. "Offshore" is a choice of law, not an absence of it.

How to evaluate an offshore provider

The checklist we'd use if we were shopping ourselves:

• Jurisdiction published per location — with a governing-law clause in the ToS, not just flag emojis on a map.
• No KYC at signup. If they verified your identity, that identity is one court order from disclosure.
• Crypto payment rails. Cards and PayPal are identity rails with a payment attached.
• A written log policy and a canary. Ours updates monthly, PGP-signed, unbroken since April 2021 (canary).
• An abuse policy that names the trigger. "We act on a valid court order from the hosting jurisdiction" is a policy. "We reserve the right to suspend for any reason" is a coin flip.
• Real infrastructure. Looking-glass test IPs, own ASN, actual hardware. Resellers can't protect you — the upstream gets the notice and pulls the plug without asking them.
• Years in operation. Offshore hosts fold fast under real pressure. We've run since March 2021 — five years, zero customer identities on file, zero data handed over.

If a provider passes all seven, the flag on the homepage is the least interesting thing about them. If it fails two or more, no datacenter location will compensate.