We have been doing this for 12 years.
That sentence is the only marketing claim on this page we would defend in an argument. This industry is full of providers that appeared eighteen months ago with a stock photo of a datacentre and will be gone before your annual term expires. Longevity is the one signal that is genuinely hard to fake.
Why this exists
Before any of this existed, one of us was helping a journalist move a document archive off a mainstream cloud provider. The provider had not done anything wrong. It had simply, correctly, complied with a legal request — and in doing so handed over an account record containing a name, a billing address, a card number, and eighteen months of login IP addresses.
None of that was necessary to sell somebody a virtual machine. All of it was collected because collecting it was the default, and all of it existed at the moment somebody asked for it. The archive itself was encrypted and never compromised. The metadata was the whole problem.
VPSDEN started on one premise: build a hosting company where complying fully with a legal order produces nothing of value. Not by resisting orders — we do not, and a company that promises to is lying to you — but by ensuring the file is empty before anyone comes asking.
Everything else follows mechanically. No KYC, because an identity we never collect cannot be disclosed. No email requirement, because a contact address is an identity. Crypto only, because a card network is an identity with a bank attached. Customer-held disk keys, because a key we hold is a key we can be compelled to surrender. RAM-only instances, because a disk that does not exist cannot be imaged.
How we are funded
Entirely by customer revenue. We have taken no venture capital, no debt, and no outside investment of any kind, and we are not looking for any.
This is not a philosophical position, it is a structural safeguard. An investor with a board seat eventually wants growth, and the fastest growth levers available to a hosting company are exactly the ones we have refused: collect identities so you can upsell, accept cards so you can convert impulse purchases, add analytics so you can optimise the funnel, sign enterprise contracts that require audit logging. We would rather grow slowly and stay the thing we said we were.
The practical consequence is that we are smaller than we could be and our prices are lower than they need to be. Both of those are fine.
Who runs it
Seven people. Four with hypervisor access, two on support, one on legal and correspondence. We do not publish names or photographs — several of us have worked on things that make being publicly associated with an offshore host unwise, and a team page with faces on it would be a liability for people we are responsible for.
We understand that anonymity cuts both ways and that you have no reason to trust seven people you cannot name. Which is why the things you can verify are the things we ask you to judge us on:
- 12 years of continuous operation under the same domain.
- A published transparency report that includes the time we lost servers.
- A knowledge base that tells you when we are the wrong choice.
Two things you should not count in our favour yet, because you cannot check them: our OpenPGP key is not published, and neither is the warrant canary. A fingerprint printed on our own website, next to a key served from our own website, proves nothing — which is precisely why we are not printing one until it can be verified against a source that is not us.
What would make us stop
A fair question that nobody in this industry answers. Three things:
- A legal environment that made the model impossible. If our jurisdictions imposed KYC on hosting providers, we would close rather than comply. We would give 90 days' notice and pro-rata refunds, which is written into our terms so that it survives a change of management.
- Running out of money. We are profitable, but no company is immune. The 90-day commitment covers this too.
- Being compelled to lie. If we were ever ordered to keep publishing a warrant canary we knew to be false, we would stop publishing anything and shut down. That is why the canary is structured as individual statements — so a single item can be dropped honestly.
What would not make us stop: an unfavourable news article, pressure from a rights holder, a payment processor declining to work with us, or a customer doing something lawful that somebody powerful dislikes.
Every year, including the bad one
A timeline that omits the year you lost servers is not a timeline.
Founded
Two racks, funded out of savings, serving a handful of customers who mostly knew us personally. One premise: build a host where complying fully with a legal order produces nothing of value.
Bucharest seizure
3 chassis removed under a court order that bound us. Every volume on them was LUKS-encrypted with a key we do not hold. It is why zero-knowledge LUKS became a default rather than an option, and why the GHOST programme exists.
GHOST — RAM-only
The direct product of the seizure. Encrypted disks are a good answer; no disk is a better one.
Dead-man switch, duress PIN
Both built after a customer asked whether we could destroy their data if they stopped checking in. We could not, at the time. Now we can.
Terraform provider, multi-jurisdiction failover
Infrastructure-as-code without a browser, and the automation of what had been a manual seizure runbook.
Metadata-free mode by default
We turned off per-instance graphing for everyone rather than offering it as an option nobody found.
12 years, zero disclosures
412 legal requests received, 23 valid court orders, 0 customer records disclosed — because there are none to disclose.
12 years, no disclosures, from €4.40 a month.
Try it for 72 hours. Full refund, no reason required.
No email · No KYC · Pay in Monero · Deployed in under a minute