Hetzner: the sovereignty record behind a European alternative to DigitalOcean

Hetzner’s presence in the German commercial register is not up for debate. HRB 6089 at the Amtsgericht Ansbach ties the company to a filed entity, Hetzner Online GmbH, registered in Gunzenhausen, Bavaria. That fact, plus a Legal Entity Identifier (391200XMWUW8G8MXV439), is the kind of thing a sovereignty review can mark verified rather than claimed. Most of what Hetzner says about itself past that point, the data centre locations, the certifications, the environmental numbers, comes from Hetzner’s own pages rather than an independent register. That gap between verified and claimed is exactly what a buyer weighing Hetzner as a European alternative to DigitalOcean needs to see before taking the label on faith.

Hetzner is the obvious first stop for anyone leaving DigitalOcean on price and simplicity grounds. The two compete directly on cheap VPS instances and dedicated hardware, and Hetzner’s German base gives it a jurisdictional argument DigitalOcean, a US company, cannot make. The imprint confirms German law and GDPR apply directly, also verified rather than inferred. Ownership is murkier: Hetzner describes itself as privately held with no disclosed non-EU controlling shareholder, but that statement sits on the same imprint page as everything else, so it counts as a claim rather than a fact established through a shareholder register.

The operational picture follows the same pattern. Hetzner states that its EU data centres, Nuremberg and Falkenstein in Germany, Helsinki and Tuusula in Finland, are all owned and run by Hetzner itself, with no third-party facility in the loop for EU regions. If accurate, that removes a whole category of subcontractor risk that hyperscalers routinely carry. But it is self-declared, sourced to Hetzner’s own site rather than an audit. The same applies to its ISO/IEC 27001:2022 and BSI C5 Type 2 claims. Real certifications exist for real reasons, and BSI C5 is not a badge a hosting company invents for a webpage, but until a certificate number is checked against the issuing body’s own register, FindInEurope logs it as claimed rather than verified. The environmental figures, hydropower since 2008 in Germany and since 2018 in Finland, EMAS certification, a PUE between 1.10 and 1.16, sit outside the sovereignty score entirely; they feed trust, not jurisdiction or independence.

This makes Hetzner a normal candidate rather than a weak one: its foundational facts, who it is, where it is registered, what law binds it, are nailed down at the register level, while its operational claims are plausible but not yet independently checked. That is a stronger starting position on sovereignty than most cloud incumbents outside Europe can offer. It is a lower bar than a fully audited chain of custody, which Hetzner has not yet cleared in the sources reviewed here.

Anyone comparing the two providers on sovereignty grounds should read past the marketing page on both sides, Hetzner’s included. The full dossier at /listings/hetzner/ carries every source link, the confidence rating attached to each claim, and the score as it currently stands, which will move as more of these claims get independently checked against their primary sources.