nokyc.hostCompany jurisdiction vs. server location
Every hosting setup involves at least two jurisdictions, and they are often different:
- Company jurisdiction: where the provider is legally incorporated. Courts there can order the company to hand over account data, billing records, and logs.
- Server location: where the data centre is. Authorities there may be able to access or seize the physical hardware, regardless of where the company is based.
A third jurisdiction matters too: your own. The laws that apply to you personally do not change based on where your server is.
Every provider page on nokyc.host lists the company jurisdiction and the server locations separately.
Factors that actually matter
Data retention laws
Some countries require communications and hosting providers to retain certain data (such as connection records) for a set period. In those countries, a provider's no-logs promise may be overridden by law. Retention rules change over time and are often challenged in court, so check the current situation rather than relying on old lists.
How legal requests are handled
Consider how easily authorities can obtain data from providers, whether courts must approve requests, and whether providers are allowed to tell customers about them.
Cross-border cooperation
Countries cooperate on criminal investigations through mutual legal assistance treaties (MLATs) and other agreements. Hosting in another country usually makes foreign requests slower and more formal, not impossible. Intelligence-sharing alliances such as the often-cited "Five Eyes" and its extended groupings are another consideration for some users.
Stability and infrastructure
A privacy-friendly legal system is little use if the network is unreliable or the data centre is prone to outages. Measured uptime and support response times on each provider page help here.
A practical way to choose
- Define what you are protecting against. A private individual avoiding data brokers has very different needs from a journalist protecting sources.
- Start with KYC. Choose a provider at KYC level 0 or 1 so there is little identifying data for anyone to request. See the no-KYC VPS list.
- Then compare jurisdictions among those providers, weighing data retention, legal process, and your threat model.
- Pick server locations for performance. Latency to your users matters; you can often choose a privacy-friendly company with servers near your audience.
- Check the policy wording. A strong jurisdiction does not help if the provider's own terms allow broad data sharing.
Jurisdiction is a second layer of protection, not the first. A provider that never learned who you are protects you better than any legal system can.
Server location, latency, and performance
Privacy considerations should not make your server unusable. Physical distance adds latency: a server on another continent can add 100 to 250 milliseconds to every request, which matters for interactive use, remote desktop, and websites.
- Remote desktop (RDP) and interactive use: choose a server location close to you.
- Websites and services: choose a location close to your visitors, or put a privacy-respecting CDN in front.
- Backups and batch jobs: latency matters little, so jurisdiction can take priority.
Many privacy-focused providers are incorporated in one country but offer servers in several regions, which lets you separate the legal question (company jurisdiction) from the performance question (server location).
Jurisdiction checklist
- Where is the provider incorporated?
- Where are the servers you would use, and can you choose?
- Do data retention laws in either country require the provider to keep connection data?
- Does the provider publish how it handles legal requests, or a transparency report?
- Does the provider's KYC policy mean there is little identifying data to hand over anyway?
- Is the network in that location reliable, based on measured uptime?
Commonly cited privacy jurisdictions
Countries such as Iceland, Switzerland, Romania, Panama, and Seychelles are frequently mentioned in privacy hosting discussions, for reasons ranging from strong constitutional privacy protections to distance from major intelligence alliances. Reputations are not guarantees, and laws change. Treat any "best country" list, including informal ones, as a starting point for your own research.
Jurisdiction pages on nokyc.host appear automatically once enough verified providers are based in a country. Until then, the no-KYC VPS list shows every provider's jurisdiction in the table.
Frequently asked questions
What is the best country for private hosting?
There is no single best country. It depends on what you are protecting against. Start with a no-KYC provider so there is little data to request, then compare jurisdictions for data retention rules and legal process.
Does hosting abroad protect me from my own country's laws?
No. The laws that apply to you personally still apply. Hosting abroad mainly affects which authorities can compel the provider and how easily.
Is server location or company location more important?
Both matter. The company's jurisdiction controls access to account and billing data; the server location controls physical access to the hardware and the data on it.