Do you log IP addresses or session metadata?

We log only what is needed to operate the platform: edge NetFlow for abuse and DDoS triage, retained 14 days, with no per-customer correlation. We do not maintain per-account access logs and do not retain payment metadata after invoice settlement.

Can sources reach our intake server over Tor?

Yes. Every plan supports outbound Tor without restriction, and Onion services run cleanly on KVM VPS plans. We can also route a dedicated IPv4 to a Tor-only listener on request.

What happens if a court orders us to identify a contributor?

Court orders go through our local counsel in the relevant jurisdiction. We do not preserve, disclose, or hand over data without a properly served local order; foreign requests are not auto-honored. Our retention is engineered so there is little to disclose to begin with.

Do you accept anonymous payment?

Yes. Monero is the default privacy-preserving option; Bitcoin via Lightning is a strong second. Accounts can be opened with a working email and nothing else.

Can we host SecureDrop on your infrastructure?

SecureDrop runs well on our VPS-4 or VPS-8 plans in Iceland, Switzerland, or Panama. The journalist workstation should remain on a separate, hardened machine that you control directly.

What about DDoS during a major story?

All plans include scrubbing up to the rated capacity for the tier. Cloudflare in front is recommended for public-facing pages. Premium scrubbing add-ons extend up to 400 Gbps for sustained pressure.

Are there content categories you will not carry?

Yes — see our Acceptable Use Policy. We refuse CSAM, malware command-and-control, doxing platforms, and incitement to violence. Investigative reporting, even on hostile subjects, falls firmly within accepted use.

Use case

Offshore hosting for Journalists & Investigative Reporters — DMCA-resilient & privacy-first

Source-protection-grade hosting for newsrooms, leak inboxes, and exile media.

Explore plans Talk to sales

Source-protection-grade
DMCA-resilient
PGP-friendly mail
Anonymous billing

Quick facts

Plans5recommended

Jurisdictions4best fit

Source-protection-grade
DMCA-resilient
PGP-friendly mail
Anonymous billing

The case

Why offshore for hosting for journalists & investigative reporters

Source protection is a function of jurisdictional friction. Placing sensitive components in Iceland, Switzerland, or Panama puts legal access several treaties deep, and the cost of compelling disclosure usually exceeds the editorial value of any single story. Anonymous signup plus crypto payment closes the obvious civil-process loops.

Source protection

Press-freedom jurisdictions

PGP-friendly clients

No KYC ever

What matters

Specs that move the needle

The four hardware and network attributes that decide whether a hosting for journalists & investigative reporters workload runs smoothly.

Source-grade jurisdictions

Iceland, Switzerland, Panama — narrow takedown procedures.

PGP-friendly mail

End-to-end encryption preserved by every mail tier.

SecureDrop ready

VPS-4 sized for source intake servers behind Tor onions.

Anonymous billing

Email-only signup, Monero or Lightning payment.

Hardware

Plans we'd pick for you

Engineered for hosting for journalists & investigative reporters workloads — pre-warmed by customers running this exact use case.

Shared Pro

Multi-site offshore hosting with room to grow.

Storage25 GB NVMe SSD

Bandwidth250 GB / month

5 websites, 25 mailboxes
Daily backups (7 days retention)
Free SSL + free CDN
Anonymous signup

VPS-2

Workhorse offshore VPS for small projects.

CPU2 vCPU (AMD EPYC)

RAM4 GB DDR4 ECC

Storage60 GB NVMe SSD

Bandwidth3 TB / month

DDoS10 Gbps

IPv41 included

2 vCPU AMD EPYC
4 GB ECC RAM
60 GB NVMe storage
10 Gbps DDoS shield

VPS-4

Mid-tier offshore VPS — sweet spot for production.

CPU4 vCPU (AMD EPYC)

RAM8 GB DDR4 ECC

Storage120 GB NVMe SSD

Bandwidth6 TB / month

DDoS20 Gbps

IPv41 included

4 vCPU / 8 GB RAM
20 Gbps DDoS protection
Free weekly snapshot
Provisioned in < 5 min

Mail Team

Offshore email for small teams or families.

Storage50 GB total

5 mailboxes, 50 GB
Shared contacts & calendar
Custom domain
Anti-spam (rspamd)

DS Lite

Entry-level offshore dedicated server.

CPUIntel Xeon E-2236 (6c / 12t @ 3.4 GHz)

RAM32 GB DDR4 ECC

Storage2× 480 GB NVMe (RAID-1)

Bandwidth30 TB / month

DDoS80 Gbps

IPv41 included

Bare metal, full hardware
RAID-1 NVMe redundancy
80 Gbps DDoS shield
Free IPMI access

View all 35 plans

Geography

Best jurisdictions for this workload

Pick the location that matches your latency, privacy, and legal-posture requirements.

What we don't do to you

Built for people who actually care about privacy.

Four commitments that hold across every plan, every jurisdiction, and every payment method — including when you host hosting for journalists & investigative reporters. They're what makes offshore offshore.

We don't process DMCA takedowns

The DMCA is a US statute. None of our 8 operating jurisdictions are inside US territorial scope. Boilerplate, automated, or speculative takedown notices go to /dev/null. Substantive complaints under local law route through counsel, with a 5-business-day customer-response window.

No KYC. Ever.

No name, no phone, no government ID, no proof of address — at any point, regardless of order size. Sign up with a pseudonym and a password. Email is optional. No KYC for crypto-paid customers, no KYC for card-paid customers (we use Card2Crypto for the card rail to bypass merchant KYC).

Zero logs. Nothing to hand over.

We don't keep server-side logs of customer activity — no access logs, no IP logs, no command-history logs. Tax / billing records follow Seychelles law (7 years, billing-only — never linked to traffic). No third-party trackers, no analytics linked to your account, no data brokerage on any tier. See our transparency report for how many subpoenas this has translated into 'nothing to produce'.

Crypto-native checkout, refunds included

Self-hosted BTCPay Server — no Coinbase Commerce or third-party processor in the loop. 12 cryptos accepted: Bitcoin, Lightning, Monero, Ethereum, USDT, USDC, Litecoin, Dash, Zcash, Solana, TON. 7-day money-back guarantee, refunds settle in the original payment currency within hours.

Acceptable Use Policy·Privacy Policy·How abuse handling works

FAQ