# GDPR-friendly Node.js hosting in Europe in 2026

Last updated: 2026-11-10

If your Node.js backend talks to a database you already host, **Eurobase** runs it as a container on European infrastructure for a flat €10 or €20 a month. If you want the database managed next to the app, **Scalingo** and **Clever Cloud** are French platforms that sell both. **Sliplane** fits Docker setups at a fixed server price, **Scaleway Serverless Containers** fits teams that build their own images, and a **Hetzner** server fits teams that want to run everything themselves.

## Node.js hosts at a glance

| Platform | Company | Where your app runs | Starts at | Managed Postgres | DPA |
|---|---|---|---|---|---|
| Eurobase | Warsaw, Poland | European infrastructure operated by Scaleway | Free, then €10 a month + VAT | No | Yes |
| Scalingo | France | Outscale datacenters in France | €7.20 a month for 256 MB, excl. VAT | Yes | Yes, Art. 28 |
| Clever Cloud | France | Its own datacenters in France, plus other regions | Free credits, then by instance size | Yes | Yes, part of the terms |
| Sliplane | Berlin, Germany | Germany or Finland if you pick them | €9 for 1 vCPU and 1 GB, excl. VAT | Yes, from €19 a month | Yes, accepted in the dashboard |
| Scaleway Serverless Containers | France | Paris, Amsterdam, Warsaw or Milan | Free tier, then billed by use | Sold separately | Yes, part of its terms |
| Hetzner | Gunzenhausen, Germany | Germany or Finland if you pick them | €5.49 a month excl. VAT, if available to order | No | Yes, in the account |

Prices and terms are from each provider's own pages, checked on 9 and 10 November 2026.

## What GDPR asks of your host

GDPR doesn't certify hosts, so a "GDPR compliant" badge on its own tells you little. These are the questions that decide whether your setup holds up:

- **Is there a data processing agreement?** Your host processes personal data for you, so Article 28 requires a contract. Check how you get it: accepted with the terms, signed in the dashboard, or requested.
- **Which company signs it?** A provider based in the EU answers to EU law first. A US company with a Frankfurt region is still a US company. See [EU region vs EU company](/i/eu-region-vs-eu-company-cloud-act).
- **Who are the subprocessors?** Read the list. A European platform may still send repository data to GitHub or support chats to a US tool.
- **Which region did you pick?** Sliplane, Hetzner and Clever Cloud also run outside Europe. The region is your choice, and it stays your responsibility.
- **Where do the logs and backups go?** Request logs hold IP addresses, which usually count as personal data. Ask where they are stored and for how long.

## 1. Eurobase

Eurobase builds an Express, Fastify, NestJS, Koa or plain Node.js server from your repository with Paketo buildpacks and runs it as a container that scales to zero when idle. You connect GitHub, GitLab, Codeberg, Forgejo or Gitea, confirm the build and start commands it detects, and the deployment goes live only once your health path answers. Coding agents can deploy through its MCP server and CLI.

- **Best for:** APIs and backends that use a database hosted elsewhere, and teams that want one fixed monthly price.
- **Price:** a Free plan, then €10 or €20 a month + VAT for the workspace, with no charge per container or per seat. There are no usage charges today: work over a limit is refused, apps on V8 isolates and Functions stop until the monthly reset, and containers and static sites keep serving.
- **Data:** a business registered in Warsaw, Poland, on European infrastructure operated by Scaleway. A DPA and a public subprocessor list are published. GitHub and GitLab Inc. are US subprocessors when you connect them, while Codeberg is in Germany.
- **What it lacks:** managed Postgres, MySQL or Redis, Dockerfile builds and preview deployments. Builds accept npm or Yarn 1 on Node.js 20, 22 or 24, so pnpm and Bun projects are refused. The first request after an idle period waits for the server to start. ISO 27001 and SOC 2 are in progress.

Follow [Deploy a Node.js server](/docs/guides/nodejs-server), and read [Containers and static sites](/docs/containers) for ports, health checks and limits.

## 2. Scalingo

Scalingo runs Node.js from a Git push, reading the start command from a Procfile or the `start` script in `package.json`. Its DPA follows Article 28 and says personal data, database backups and logs are stored in Outscale datacenters in France.

- **Best for:** a Node.js app with a managed Postgres database, and regulated French workloads that need its SecNumCloud region.
- **Price:** 256 MB containers at €7.20 and 512 MB at €14.40, estimated over 30 days and excluding VAT. Starter databases begin at €7.20 a month. The SecNumCloud region costs about 20% more.
- **What it lacks:** documented pnpm and Bun support. Its Node.js docs describe npm and Yarn. Some of its own subprocessors, such as Cloudflare and Intercom, are in the US, and the DPA lists those transfers.

## 3. Clever Cloud

Clever Cloud deploys Node.js on any stable version, with npm, pnpm, Bun or Yarn Berry chosen from your lockfile or a variable. The company runs datacenters of its own in France, with ISO/IEC 27001:2022 and HDS certification. Its DPA is part of the general terms, so it applies as soon as you accept them.

- **Best for:** teams that want a certified French provider, a wide choice of package managers and managed add-ons.
- **Price:** by instance size and number, billed per second, with free credits and no card needed to start. You can set a maximum spend.
- **What it lacks:** a flat monthly price. Some of its zones run on OVHcloud outside Europe, in Canada, Singapore and Sydney, so pick the region deliberately.

## 4. Sliplane

Sliplane is headquartered in Berlin and deploys to a server you rent from it, with zero-downtime deploys. It detects your framework automatically, and it can also build from a Dockerfile or run a Docker image. Its DPA is concluded when you accept it in the dashboard.

- **Best for:** a Node.js API plus a few other Docker services at one predictable bill.
- **Price:** from €9 for 1 vCPU, 1 GB of memory and 20 GB of storage, excl. VAT. Managed Postgres starts at €19 a month. A demo server is free for 48 hours.
- **What it lacks:** EU-only hosting by default. US and Singapore are on its region list too, so make sure your server lands in Europe.

## 5. Scaleway Serverless Containers

Scaleway is a French cloud provider. Serverless Containers run any container image and scale from zero to 200 instances in Paris, Amsterdam, Warsaw or Milan.

- **Best for:** teams that already build a Node.js image and want to pay only for what runs.
- **Price:** 400,000 GB-s of memory and 200,000 vCPU-s free each month, then €0.20 per 100,000 GB-s and €1 per 100,000 vCPU-s.
- **What it lacks:** a build from Git. You build and push the image, then wire up deployments yourself.

## 6. Hetzner

Hetzner Online GmbH is based in Gunzenhausen, Germany, with cloud servers in Falkenstein, Nuremberg and Helsinki. You conclude its standard DPA directly in your customer account, and its datacenter parks in Germany and Finland are ISO/IEC 27001 certified.

- **Best for:** teams that can run Node.js, a reverse proxy, a database and backups on their own server.
- **Price:** listed from €5.49 a month excl. VAT for a CPX02 in Helsinki, or €6.49 in Falkenstein or Nuremberg. Those cheapest plans showed as unavailable to order on 10 November 2026.
- **What it lacks:** everything above the server. Updates, TLS, process restarts, backups and security fixes are yours. It also has US and Singapore locations.

## How to choose

- Pick **Eurobase** if the backend is stateless or uses a database you already run, and a flat price matters.
- Pick **Scalingo** if you want Postgres managed in France under the same DPA.
- Pick **Clever Cloud** if you need ISO 27001 today or use pnpm or Bun.
- Pick **Sliplane** for several Docker services on one server.
- Pick **Scaleway** if you already ship images and want usage billing.
- Pick **Hetzner** if you have someone to operate the server and want the lowest bill.

## Frequently asked questions

### Is hosting in an EU region enough for GDPR?

It helps, but it isn't the whole answer. You still need a DPA with the provider and a subprocessor list you've read. If the provider is a US company, US law can also reach the data wherever it's stored.

### Which European Node.js host includes a managed database?

Scalingo, Clever Cloud and Sliplane all sell managed Postgres next to your app. Eurobase doesn't, so a Node.js app there connects to a database hosted elsewhere.

### Can I run Express or NestJS without writing a Dockerfile?

Yes. Eurobase, Scalingo and Clever Cloud build a Node.js app from `package.json`. Scaleway Serverless Containers expects you to supply the image, and on Hetzner you set up the runtime yourself.

### Does my Node.js app need a DPA with the host?

Yes, if it handles personal data such as accounts, emails or IP addresses in logs. Each provider here offers one. Ask for it before you deploy anything real.

### Which port should a Node.js server listen on?

Read the `PORT` environment variable and listen on `0.0.0.0`. Eurobase, Scalingo and Clever Cloud all pass the port this way.

## Sources

- [Scalingo pricing](https://scalingo.com/pricing), [Scalingo DPA](https://scalingo.com/data-processing-agreement) and [Scalingo Node.js docs](https://doc.scalingo.com/languages/nodejs/start)
- [Clever Cloud](https://www.clever.cloud/), [Clever Cloud pricing](https://www.clever.cloud/pricing/), [Clever Cloud DPA](https://www.clever.cloud/general-terms-and-conditions-of-use/clever-cloud-data-processing-agreement/) and [Clever Cloud Node.js docs](https://www.clever.cloud/developers/doc/deploy/applications/nodejs/)
- [Sliplane](https://sliplane.io/), [Sliplane pricing](https://sliplane.io/pricing) and [Sliplane DPA](https://sliplane.io/legal/dpa)
- [Scaleway Serverless Containers](https://www.scaleway.com/en/serverless-containers/) and [Scaleway serverless pricing](https://www.scaleway.com/en/pricing/serverless/)
- [Hetzner Cloud](https://www.hetzner.com/cloud/), [Hetzner company details](https://www.hetzner.com/legal/data-processing-agreement/), [Hetzner data privacy FAQ](https://docs.hetzner.com/general/general-terms-and-conditions/data-privacy-faq/) and [Hetzner certification](https://www.hetzner.com/unternehmen/zertifizierung)
- [Eurobase pricing](/pricing), [Plans and limits](/docs/plans), [Eurobase DPA](/legal/dpa) and [Eurobase subprocessors](/legal/subprocessors)