EU-Sovereign Website Hosting for GDPR in Berlin: OVH, Scaleway or AWS (2026)

The verdict in three sentences

For most corporate websites, EU-owned hosting with OVHcloud, Scaleway or Hetzner at 10 to 90 EUR a month solves the sovereignty question without hurting performance, while AWS in Frankfurt costs 60 to 250 EUR a month and remains subject to the US CLOUD Act. Migration costs 1,500 to 5,000 EUR in 2026 depending on complexity, with a recovery time objective (RTO) under 4 hours based on daily off-site backups. A BSI C5 attestation matters when you serve public bodies or regulated clients, and fully sovereign offers add 30 to 80 % to the hosting bill.

Why your GDPR audit flags the hosting provider

A corporate website collects more data than expected: contact forms, job applications with CVs, client portals, login logs, IP addresses in analytics. When that data sits with a US-incorporated provider, even in a Frankfurt data centre, auditors flag a risk of access by US authorities under the CLOUD Act. The 2023 EU-US Data Privacy Framework covers transfers, but its long-term legal stability is debated, and many German legal departments prefer not to rely on it.

A Berlin CFO usually has three concrete reasons to act: tenders from public bodies and large German corporates that ask for the provider's location, ownership and BSI C5 status; the processor register required by Article 28 GDPR; and cost control, since AWS bills often drift 20 to 40 % a year without anyone reviewing them.

Hosting providers compared in 2026

Prices below are 2026 orders of magnitude for a corporate site of 20 to 200 pages with 5,000 to 50,000 visits a month.

Hetzner is the natural local choice in Germany: low prices, German law and data centres in Bavaria and Saxony. OVHcloud brings a wider catalogue and sovereign ranges for sensitive workloads. AWS stays relevant if your site already relies on advanced managed services, but for a corporate or brochure site, the premium is rarely justified.

Migration and disaster recovery: what you pay for

A serious migration involves more than copying files. It includes an inventory, a staging environment, a DNS switchover and a tested disaster recovery plan (DRP).

A credible DRP follows the 3-2-1 rule: three copies, two media, one copy away from the main site, ideally in another region with the same provider. For ongoing upkeep, our public maintenance plans are 35,000, 75,000 or 120,000 FCFA per month (53, 114 or 183 EUR); managed hosting itself is quoted on request based on volume.

Mini case study

Lukas Brandt, CFO of a 120-employee building-technology company in Berlin, learns during a GDPR audit that the website and dealer portal run on AWS for 210 EUR a month, plus 35 EUR for backups, so 2,940 EUR a year. Nobody has tested a restore in three years.

Migrating to a Hetzner server in Nuremberg with backups in a second location costs 3,200 EUR once, then 70 EUR a month, or 840 EUR a year. Annual savings reach 2,100 EUR, so the migration pays back in about 18 months. The decisive gain lies elsewhere: the company can now answer "hosting in Germany, EU law, DRP tested with a 3-hour RTO" in the security questionnaire of a large utility, a point that had been blocking supplier onboarding.

FAQ

Is a US provider with a Frankfurt data centre GDPR-compliant?

It can be, thanks to the Data Privacy Framework and standard contractual clauses, but CLOUD Act exposure remains. Many legal departments prefer EU-owned hosting to avoid the debate, often at around half the cost.

Do we need BSI C5 for a corporate website?

Rarely for a brochure site. It becomes relevant when you serve federal or state bodies, hospitals or regulated finance clients, and sovereign-grade options add 30 to 80 % to hosting.

How long is the site offline during migration?

With prior staging and a prepared DNS switchover, downtime ranges from a few minutes to 1 hour. DNS cache time is lowered 48 h before switching.

What does an RTO under 4 hours actually mean?

It is the maximum time to bring the site back online after a major incident. It requires daily off-site backups and a restore tested at least once a year.

OVHcloud, Scaleway or Hetzner for a Berlin SME?

All three are EU-owned and fall in the 10 to 90 EUR monthly range. Hetzner wins on price and local presence, OVHcloud on catalogue breadth and sovereign ranges, Scaleway on managed-service simplicity.

Let's scope your project. Send us your current hosting setup, your monthly bill and the data your site collects, and we will scope the migration, the DRP and the switchover schedule. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.