Why Luxembourg
We are often asked why Luxembourg and not Frankfurt or Amsterdam. This page answers that, and it also says where Luxembourg is not what some people hope for. NovaNode is a Luxembourg company under Luxembourg and EU law, in a datacenter owned by the Luxembourg State. That makes it a good place to keep data, and a poor place to hide.
The reasons
Who hosts here
Luxembourg ranks 9th of 180 in the 2026 RSF World Press Freedom Index, and its media law (law of 8 June 2004 on freedom of expression in the media) gives journalists the right to refuse to identify a source, and bars searches at a journalist's workplace or home, with exceptions only for crimes against persons, drug trafficking, money laundering, terrorism and attacks on state security (articles 7 and 8). A server here sits under that law and under an operator with no foreign parent to receive an order. Hosting is only one layer. Encrypt source material end to end, and keep in mind that we do answer a lawful Luxembourg court order.
Lawyers, accountants, doctors, fiduciaries: the client file has to stay with one identifiable operator under a law you know. One Luxembourg company runs every system, there are no sub-processors for customer data, and the data processing agreement says so in writing.
Procurement forms ask where the data is, who runs the systems and who can be ordered to hand it over. The three answers are Luxembourg, us, and only under EU law or the law of a Member State that binds us. The contractual version of that sentence is on Hosting under Luxembourg law.
If your users are in Luxembourg, eastern Belgium, Lorraine or Trier, the server is a few milliseconds away and invoiced in the VAT system you already use: 17 % for consumers, reverse charge for EU businesses with a VAT number.
FAQ
No. Luxembourg is an EU Member State with a functioning legal system, and we operate inside it. We have an abuse desk that processes notices under the Digital Services Act, we tell customers about reports and expect a response within 48 hours, and we act when they do not. If you are looking for a provider that ignores abuse reports or court orders, look elsewhere.
No. Orders are placed from an account with real contact details, we may ask for verification before activating a service, and payment is by SEPA transfer, Bancontact, iDEAL, Wero or card; cryptocurrency is not among them. Luxembourg protects your data from unlawful access; it does not make you anonymous to us.
We disclose only where EU law or the law of a Member State that binds us requires or lawfully permits it, which includes European Production and Preservation Orders. Requests go through a single recorded channel and are checked for legal basis. A request from outside the EU has no direct effect on us; it has to come through the channels EU law provides. What we hold and for how long is in the privacy policy.
The DMCA is a US law and does not apply here. Copyright complaints are handled as notices under the EU Digital Services Act: we need the legal ground, the exact location of the content and a good-faith statement, then the customer is informed and can respond. It is a procedure with rights on both sides, neither a takedown button nor a shield.
From a foreign order served on the provider, yes: there is no US or other non-EU company in our chain that could be ordered to hand over data. From a lawful EU request, no. Encrypt what must stay private; the provider's jurisdiction does not replace that.
Anything lawful in Luxembourg and the EU: websites, applications, mail, backups, VPN endpoints, development environments. The Terms of Service list what is not accepted. Outbound mail and some network uses are reviewed before activation to keep our addresses clean for everyone.
Guides
The Terms of Service, Privacy Policy, DPA and the product-specific terms, where each one is published and which version applies to you.
Which payment methods the client area accepts, how VAT is applied to consumers and EU businesses, and why the two price displays on the site differ.
Get started
Pick a plan in the client portal; the server is ready within minutes of payment.
