IONOS Cloud
Cloud infrastructure · cloud.ionos.com · last read 2026-10-12
Identity
No identity observation recorded yet.
Data location
| Region | EU data location | Minimum plan | Source | Observed |
|---|---|---|---|---|
| EU | Terms not stated | — | cloud.ionos.com | 2026-10-08 |
EU: The page says cloud resources run on data centers in the United States and Europe, including Frankfurt, Berlin, Paris and Logroño. It names no plan and no cost for using them.
Subprocessor chain
Processing terms
The vendor's data processing agreement could not be read: the site refused our crawler.
Assurance
| Scheme | Status | Scope | Source | Observed |
|---|---|---|---|---|
| BSI C5:2020 Type 1 · C5 | Available on request | Im Scope: 33 Services in 10 Service-Clustern; 136 Controls – die 121 Basisanforderungen des BSI C5:2020 sowie zusätzliche IONOS CLOUD-spezifische Controls | cloud.ionos.de | 2026-10-08 |
| DSGVO · GDPR | Claimed | — | cloud.ionos.de | 2026-10-08 |
| EU-DSGVO · GDPR | Claimed | IONOS CLOUD Object Storage | cloud.ionos.de | 2026-10-08 |
| ISO/IEC 27001 · ISO27001 | Claimed | Basis für Betrieb und Entwicklung aller Produkte und Prozesse in der gesamten IONOS Gruppe, einschließlich aller Ressourcen von Drittanbietern | cloud.ionos.de | 2026-10-08 |
| Certified Kubernetes Conformance | Claimed | IONOS CLOUD Managed Kubernetes Plattform | cloud.ionos.de | 2026-10-08 |
| CNCF | Claimed | IONOS CLOUD Managed Kubernetes Plattform | cloud.ionos.de | 2026-10-08 |
| ISAE 3000 | Claimed | Die C5-Attestierung wurde gemäß ISAE 3000 durchgeführt | cloud.ionos.de | 2026-10-08 |
| ISO 50001 | Claimed | Alle Rechenzentren von IONOS CLOUD verfügen über ein Energiemanagementsystem (EnMS) | cloud.ionos.de | 2026-10-08 |
| IT-Grundschutz | Claimed | Betrieb der Produkte Compute Engine, IONOS CLOUD Object Storage und Managed Kubernetes in Deutschland; umfasst die eigenen Rechenzentren sowie Co-Locations in Frankfurt und Berlin. BSI-Zertifizierungsreport auf Anfrage. | cloud.ionos.de | 2026-10-08 |
Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.
Official registers
- ACN qualified cloud (Italy): checked 2026-10-12, no entry under IONOS Cloud
- DORA critical ICT third-party providers (ESAs): checked 2026-10-12, no entry under IONOS Cloud
- Data Privacy Framework List (US): checked 2026-10-12, no entry under IONOS Cloud
- EU Cloud Code of Conduct (GDPR Art. 40): checked 2026-10-12, no entry under IONOS Cloud
- FedRAMP Marketplace (US): checked 2026-10-12, no entry under IONOS Cloud
- SecNumCloud qualified services (ANSSI, France): checked 2026-10-12, no entry under IONOS Cloud
What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.
Support window
| Product | Support period | State | SBOM | Source | Observed |
|---|---|---|---|---|---|
| IONOS Cloud (service) | — | Service only | unknown | cloud.ionos.com | 2026-10-11 |
Vulnerability reporting: [email protected] (security.txt, expires 2028-02-11; read 2026-10-11)
Documents
| Document | Disclosure | Transcription | HTTP | Observed |
|---|---|---|---|---|
| certifications | Public | full | 200 | 2026-10-08 |
| dpa | Refused | partial | — | 2026-10-09 |
| identity | Refused | partial | — | 2026-10-09 |
| residency | Public | full | 200 | 2026-10-08 |
| subprocessors | Refused | partial | — | 2026-10-09 |
History
Nothing has moved since we started watching this vendor on 2026-10-08. Changes appear here only after a human has reviewed them.