Hosting provider jurisdiction: what it affects
Every server has two countries: the one where the data centre stands and the one where the company renting it out is registered. According to the accsly.io catalog as of November 2026, these are different countries for 15% of VPS hosts. The first determines latency and the rules on where data is stored; the second determines the law of the contract, the court for disputes, the documents your accountant receives and whose authorities can request your data. Here is what each of them changes.
A host's jurisdiction is the law of the country that governs the hosting company and its contract with the customer. It is easy to confuse with the place where the server stands: a Dutch brand may rent out machines in Germany, a British company in Moscow and a Russian one in Kazakhstan. Below is how to find out where a host is registered, what that affects and what to check in the terms before paying. This article explains general rules and is not a substitute for advice from a lawyer.
Two countries: the company and the data centre
In the accsly.io catalog, the country of a plan is always the place where the server stands. The company's country has to be looked up separately: in the contract or terms of service, on the legal information page, in the site footer or on the invoice. Hosts do not always state it. According to the accsly.io catalog as of November 2026, 1,935 of 2,242 VPS hosts (86%) name their legal entity, the country of registration can be established for 1,565 (70%), and 1,029 (46%) publish a company registration number or VAT number.
Where both countries are known, 208 of 1,397 hosts, or 15%, are registered in a country that is not among the countries of their servers. It is even more common for one company to have servers in several countries: that is the case for 975 hosts, half of those whose locations are known. The most common countries of registration are the US (139), the UK (136), Russia (124), Germany (75) and India (63).
The practical rule is simple. The data centre's country determines latency to your users and where the data physically sits; that is covered in the article How to choose a country for your server. The company's country determines everything legal: the contract, the court, taxes and obligations towards the state. A host is subject to the laws of both countries: the one where it is registered and the one where its equipment operates.
Which law governs the contract
The governing law is usually stated in the terms in a single line: "this agreement is governed by the laws of…" and "disputes shall be resolved by the courts of…". For a company or a sole trader this choice is normally binding: by accepting the terms you agree to argue under the law and in the courts of the host's country. Suing abroad over a VPS that costs a modest monthly fee is almost never worth it, so for a business a clear complaints procedure matters more than the formal choice of law: where to write, how quickly they reply and how refunds are made.
Private customers have more protection. In the EU, under Article 6 of the Rome I Regulation, a choice of foreign law does not deprive a consumer of the protection of the mandatory rules of the country where they live, provided the seller does business in that country or directs its activities there, for example with a site in the local language and prices in the local currency. Russia has a similar rule in Article 1212 of the Civil Code; in the catalog, 161 hosts list roubles among their currencies. How this works for refunds is covered in the article Free trials and money-back guarantees. In other countries, it all depends on local law and the host's terms.
Data requests from authorities
Every host complies with lawful requests from the authorities of its own country, and often of the country where the server stands as well. This is a normal part of the business, and what matters is not whether such obligations exist but what they are and how the host communicates them.
- Russia. Under Article 10.2-1 of the Russian law on information, hosting providers operating in Russia are entered in the Roskomnadzor register, identify their customers in the manner set by the government and cooperate with the bodies that carry out operational investigations. That is why a Russian host asks you to confirm your identity or company details at sign-up.
- European Union. Since 18 August 2026, the e-evidence Regulation 2023/1543 applies: a court or prosecutor in one EU country can request data directly from a provider offering services in the EU, including when the provider is registered in another member state.
- United States. Under the CLOUD Act, a US company must hand over data at the request of US authorities even if the server is located outside the country. How this relates to European rules was analysed by the European Data Protection Board and the European Data Protection Supervisor.
The conclusion for your choice: data on a server is subject to at least two legal systems, and the more countries in the chain of company, data centre and support team, the more rules apply to it. If you store other people's personal data, take this into account in your own documents: see the articles 152-FZ and hosting and GDPR and choosing a host. In the host's terms, it is worth finding the section on how it handles requests from authorities and whether it notifies the customer where the law allows.
Payments and restrictions
The company's country also shapes the payment side. A host works with the banks and payment systems of its country and follows its sanctions and currency rules. In practice this means that hosts have different rules on which countries they accept customers from and which cards and payment methods are available. 271 hosts in the catalog state explicitly that they accept customers from Russia. If the terms say nothing about your country, ask support before paying, not after.
Restrictions change along with laws and payment system rules, so for an important project keep a backup with another host in another jurisdiction: that way a change of rules at one company will not stop your work. How to set up copies is described in the article VPS backups. And give your real details at sign-up: if they do not match, the host is entitled to block the account under its terms.
Invoices, VAT and documents
For a company or a sole trader, the host's jurisdiction decides which documents the accounts department will receive.
- Within the EU, hosting is an electronically supplied service, and under the VAT Directive it is taxed where the customer is. A company with a VAT number usually receives an invoice from a European host without VAT under the reverse-charge mechanism and accounts for the tax itself, while a private customer pays the VAT of their own country.
- A host outside your country issues an invoice under its own rules. Many countries have their own regime for digital services bought from abroad, so check whether the price includes VAT or sales tax or whether you have to account for it yourself. Plans from hosts that invoice companies are collected in VPS paid by invoice.
- A Russian host invoices in roubles and issues Russian closing documents. Under Article 174.2 of the Russian Tax Code, hosting is an electronic service: when a Russian company buys it from a foreign host, the buyer calculates and pays the VAT as a tax agent, and when a private person buys it, the foreign company registered with the Russian tax authority pays the tax.
Because of tax and currency, prices that look the same at two hosts can differ by a fifth or more. How to compare them with this in mind is explained in the article How to compare VPS prices, and plans you can pay for with an international card are collected in VPS paid by international card.
What to check before paying
- the full company name, country and registration number, in the terms or on the legal information page, not only in the site footer;
- the country and city of the data centre for the chosen plan, and where the host keeps its own backups;
- the governing law and the court for disputes, the complaints procedure and response times;
- the terms for refunds and account closure, including closure at the host's initiative;
- which documents you will receive and whether VAT is included;
- whether customers from your country are accepted and which payment methods are available;
- whether there is a section on requests from authorities and a data processing agreement, if you handle personal data.
If a host does not name its legal entity at all, that is not always a sign of poor service, but it does mean that in a dispute it is unclear whom to turn to. For a server running a business project, weigh this condition as seriously as price and latency.