# Choose your legal distance
> Incognito VPS operates 16 locations. 8 of them were chosen for their legal properties — Iceland, Switzerland, Netherlands, Romania, Bulgaria, Moldova, Panama and Russia — and 8 were chosen for latency and peering, with no jurisdictional claim attached. Each location page publishes the statutes behind its claims, its measured latency from five sources, and an explicit account of what that jurisdiction does not protect against.
**Source:** https://incognitovps.com/servers
**Updated:** 2026-08-13

## Jurisdiction index

| Country | City | EU member | Eyes alliance | Data retention | Frankfurt latency | Price index |
| --- | --- | --- | --- | --- | --- | --- |
| Iceland | Reykjavík | No | None | No general data-retention obligation applies to hosting providers (2022) | 41 ms | 1.32 |
| Switzerland | Zürich | No | None | See dossier | 8 ms | 1.45 |
| Netherlands | Amsterdam | Yes | nine | Blanket telecom data retention struck down and never re-enacted (2015) | 7 ms | 1.16 |
| Romania | Bucharest | Yes | None | Data-retention law struck down as unconstitutional — twice (2014) | 29 ms | 1.06 |
| Bulgaria | Sofia | Yes | None | Blanket retention provisions annulled as unconstitutional (2015) | 34 ms | 1.00 |
| Moldova | Chișinău | No | None | No general data-retention mandate on hosting providers (2007) | 42 ms | 1.02 |
| Panama | Panama City | No | None | No general data-retention statute covering hosting providers (2009) | 132 ms | 1.24 |
| Russia | Moscow | No | None | See dossier | 38 ms | 1.02 |
| France | Paris | Yes | nine | Connection-data retention is mandatory and applies to hosting providers (2021) | 11 ms | 1.12 |
| United Kingdom | London | No | five | Retention notices may compel operators to keep communications data for 12 months (2016) | 14 ms | 1.18 |
| Germany | Frankfurt | Yes | fourteen | General data retention struck down as unconstitutional and unenforced since (2010) | 1 ms | 1.08 |
| United States | New York | No | five | No federal general data-retention mandate applies to hosting providers (2026) | 84 ms | 1.15 |
| Canada | Toronto | No | five | No general data-retention mandate for hosting providers (2000) | 92 ms | 1.14 |
| Singapore | Singapore | No | None | See dossier | 155 ms | 1.34 |
| Japan | Tokyo | No | None | No general data-retention mandate for hosting providers (1984) | 224 ms | 1.38 |
| Australia | Sydney | No | five | Two-year mandatory retention of telecommunications metadata (2015) | 258 ms | 1.41 |

## Dossiers

### Iceland — Free-speech haven

Iceland pairs constitutional speech protection with the IMMI source-protection framework and no hosting-level data-retention mandate. It sits outside EU enforcement institutions and runs on 100% hydro and geothermal power. It is the strongest legal posture on our network and priced accordingly.

**Trade-off:** The most legally protective address we operate, and the most expensive. Subsea capacity is finite, so bulk-transfer workloads cost more here than anywhere else on the map.

URL: https://incognitovps.com/servers/iceland

### Switzerland — Premium neutrality

Switzerland offers the revised nFADP data-protection regime, mandatory mutual-legal-assistance process with dual-criminality review, and permanent neutrality. It is the strongest "defensible in front of a regulator" address on the network, with 8 ms latency to Frankfurt.

**Trade-off:** Switzerland is not a takedown-immune jurisdiction. Swiss courts issue orders and we comply with valid Swiss ones. What you buy here is process: dual criminality, judicial review, and a state with no alliance obligation to fast-track a foreign request.

URL: https://incognitovps.com/servers/switzerland

### Netherlands — Best peering on earth

Amsterdam gives you AMS-IX-grade peering with over 1,100 direct adjacencies and 25 Gbps uplinks. Dutch blanket data retention was struck down in 2015 and never restored, and US DMCA notices carry no direct legal force. The trade-off is EU membership and Nine Eyes participation.

**Trade-off:** The fastest, best-connected address we sell — and the one with the most enforcement exposure. The Netherlands is an EU member and a Nine Eyes participant. Pick it for network quality, not for legal distance.

URL: https://incognitovps.com/servers/netherlands

### Romania — Anti-retention precedent

Romania is the only EU jurisdiction where the constitutional court struck down mandatory data retention twice, in 2009 and again in 2014, and refused the replacement bill. It combines that precedent with EU-grade connectivity and the lowest cost per core in our EU footprint.

**Trade-off:** EU membership means EU instruments — European Investigation Orders reach Bucharest. What Romania gives you is a constitutional court that has twice refused to let the state retain communications data, plus very good price-per-core.

URL: https://incognitovps.com/servers/romania

### Bulgaria — Low-cost EU edge

Sofia is our lowest-cost location. Bulgaria annulled blanket retention in 2015 and now requires per-request judicial authorisation. Good Frankfurt path at 34 ms, EU jurisdiction, and the best price per gigabyte of NVMe on the network.

**Trade-off:** Cheapest euro-adjacent capacity we operate and a real anti-retention precedent, but it is still an EU member state with full mutual-recognition obligations. Transit is thinner than Amsterdam.

URL: https://incognitovps.com/servers/bulgaria

### Moldova — Outside the EU perimeter

Moldova sits outside the EU legal perimeter — European Investigation Orders and DSA obligations do not reach it — while remaining 42 ms from Frankfurt. There is no hosting-level retention mandate and no bilateral copyright-enforcement treaty with the United States.

**Trade-off:** Real legal distance from both Brussels and Washington at a low price. In exchange: thinner transit, a smaller local operations market, and a country actively negotiating EU accession — the legal picture here has a five-year horizon, not a twenty-year one.

URL: https://incognitovps.com/servers/moldova

### Panama — No MLAT with the West

Panama has constitutional communications-privacy protection, no hosting-level retention statute, and no MLAT in force with most EU member states — foreign requests fall back to letters rogatory. Note the existing US MLAT: this is distance from Brussels, not from Washington.

**Trade-off:** Genuine legal distance from Europe, and the letters-rogatory route is slow by design. But Panama does have an MLAT with the United States, so it is the wrong choice if your threat model points at Washington. Latency to Europe is 130 ms.

URL: https://incognitovps.com/servers/panama

### Russia — Beyond Western reach

Russia is outside every Western enforcement channel — Council of Europe cooperation ended in 2022 and neither DMCA nor DSA has force there. In exchange, Russian law applies in full, including mandatory SORM interception at the operator level. Choose it only when your threat model is specifically Western.

**Trade-off:** We publish this one straight because the honest version is the useful version: Russia removes Western legal reach and replaces it with Russian legal reach, including SORM interception obligations at the operator level. It is the right answer for a narrow threat model and the wrong answer for a general one. Assume network-level observation and encrypt accordingly.

URL: https://incognitovps.com/servers/russia

### France — Western Europe, lowest latency

Paris is our lowest-latency Western European site, 9 ms from Amsterdam and 8 ms from London, on France-IX and DE-CIX Paris. It is not a privacy jurisdiction: France sits in the Nine Eyes tier, mandates connection-data retention that reaches hosts, and is fully within EU judicial cooperation. Choose it for speed, not for legal distance.

**Trade-off:** This is a latency choice, not a legal one. France participates in the Nine Eyes tier, imposes connection-data retention that reaches hosting providers, and is fully inside EU judicial cooperation — a European Investigation Order arrives here without friction. Pick Paris because your users are in Western Europe and 9 ms to Amsterdam matters. If jurisdiction is what you are buying, buy Iceland or Switzerland instead.

URL: https://incognitovps.com/servers/france

### United Kingdom — London transit hub

London sits on LINX and LONAP with 7 ms to Amsterdam and 71 ms to New York, which is why it is on the map. Legally it is the weakest position we offer: Five Eyes membership, retention and technical capability notices under the Investigatory Powers Act, and a criminal offence for refusing to disclose a decryption key under RIPA Part III.

**Trade-off:** The most legally intrusive address we operate, and we would rather say it than bury it. The United Kingdom is a founding Five Eyes member, the Investigatory Powers Act permits retention notices and technical capability notices, and RIPA Part III makes refusing to hand over a decryption key a criminal offence. London is here for its transit position — 1 ms local, 7 ms to Amsterdam, 71 ms to New York. Nothing about it is a privacy argument.

URL: https://incognitovps.com/servers/united-kingdom

### Germany — DE-CIX, best peering in Europe

Frankfurt sits on DE-CIX, the largest exchange point in the world by peak traffic, at 1 ms local and 7 ms to Amsterdam. Germany has no enforceable general retention mandate after the Constitutional Court struck it down and the CJEU confirmed, and Art. 10 of the Grundgesetz protects telecommunications secrecy — but it remains a Fourteen Eyes participant inside EU judicial cooperation.

**Trade-off:** The best network position in Europe and a genuinely mixed legal picture. Germany has no enforceable general retention mandate — the Constitutional Court struck it down in 2010 and the CJEU confirmed in 2022 — and Art. 10 of the Grundgesetz protects telecommunications secrecy. Against that: Fourteen Eyes participation and full EU judicial cooperation, so a European Investigation Order reaches Frankfurt directly. Better than Paris or London on paper, still not a substitute for Zürich.

URL: https://incognitovps.com/servers/germany

### United States — North American reach

New York gives 1 ms local latency and 71 ms to London on DE-CIX New York and NYIIX. It is the least protective address we operate: Five Eyes leadership, CLOUD Act disclosure duties reaching data stored anywhere, FISA § 702 collection, and the DMCA applying directly rather than as a foreign notice. Choose it for proximity to US users and nothing else.

**Trade-off:** Every reason our other pages exist. The United States leads Five Eyes, the CLOUD Act compels disclosure of data wherever it is physically stored, FISA § 702 permits collection from US providers without individual warrants, and the DMCA applies here with full force rather than as a letter you can ignore. New York is on the map because 1 ms to Manhattan and 71 ms to London is what some workloads need. If your threat model includes a copyright claimant, this is the one address on our network where they win by default.

URL: https://incognitovps.com/servers/united-states

### Canada — North America, softer copyright

Toronto sits on TorIX with 12 ms to New York and 79 ms to London. Canada has no general retention mandate and runs a notice-and-notice copyright regime — hosts forward complaints instead of removing content — which makes it calmer than the United States for routine notices. It remains a founding Five Eyes member, so treat it as a latency choice.

**Trade-off:** A Five Eyes country with one genuinely useful property: the notice-and-notice regime obliges a host to forward a copyright complaint to the customer, not to remove the content. That makes Toronto materially calmer than New York for the most common complaint type, without making it private — CSE operates under a foreign-intelligence mandate and Canada is a founding Five Eyes member. Good North American latency, mild copyright posture, no jurisdictional protection.

URL: https://incognitovps.com/servers/canada

### Singapore — Asia-Pacific gateway

Singapore is our Asia-Pacific site on SGIX and Equinix, at 1 ms locally and 155 ms to Frankfurt. It sits in no Eyes tier and the PDPA is a genuine data-protection statute, but POFMA lets the executive order corrections and removals of online statements. Take it for reach into Asia, not for editorial freedom.

**Trade-off:** The best latency in Asia-Pacific and a state with a strong appetite for content regulation. Singapore is not in any Eyes tier and the PDPA is a real data-protection statute, but POFMA gives the executive direct power to order corrections and removals, and the Cybersecurity Act imposes binding duties on designated providers. Excellent for reaching Asian users, poor for publishing anything a government might dispute.

URL: https://incognitovps.com/servers/singapore

### Japan — East Asia, constitutional secrecy

Tokyo runs on JPIX and BBIX at 71 ms to Singapore and 168 ms to New York. Japan protects secrecy of communications constitutionally, imposes no general retention duty and joins no Eyes tier — the strongest legal position among our performance sites — but it cooperates readily through mutual legal assistance and has a defined claimant disclosure procedure.

**Trade-off:** Legally the strongest of our performance sites and the most expensive. Japan protects secrecy of communications at constitutional level, has no general retention mandate, and is in no Eyes tier. What it does not give you is distance from a determined claimant: the Provider Liability Limitation Act sets out a working disclosure procedure, and Japan cooperates readily with Western law enforcement through mutual legal assistance. Also 224 ms from Frankfurt — this is a site for Asian users, not a European hedge.

URL: https://incognitovps.com/servers/japan

### Australia — Oceania coverage

Sydney covers Oceania on IX Australia at 94 ms to Singapore and 205 ms to New York. Legally it is near the bottom of our range: two-year mandatory metadata retention, Five Eyes founding membership, and powers under the 2018 Assistance and Access Act to compel provider assistance with encrypted communications. A latency choice only.

**Trade-off:** Oceania coverage with the second-weakest legal posture on the network. Australia mandates two years of telecommunications metadata retention and, under the 2018 Assistance and Access Act, can compel providers to help access encrypted communications — a power with no equivalent in any of our privacy jurisdictions. It is a Five Eyes founding participant. Sydney exists because 94 ms to Singapore and local latency for Australian users cannot be bought anywhere else on this map.

URL: https://incognitovps.com/servers/australia


---

Incognito VPS — Offshore VPS, bare-metal and GPU servers in 16 locations, 8 of them chosen for their legal properties. No identity required, crypto-only payment, deployed in 55 seconds.
Operating since 2020. 16 locations, 8 of them privacy jurisdictions. AS204287.
Payment: BTC, XMR, ETH, USDT, USDC, LTC, TRX, SOL, BNB, DOGE, TON, DAI. No identity verification at any point.
Catalogue: https://incognitovps.com/pricing.md · API: https://incognitovps.com/openapi.json · Index: https://incognitovps.com/llms.txt