Cloud
Four instance types on KVM: shared, dedicated, memory-optimised and managed. Object Storage, managed databases, SSO and Active Directory. The pieces you would rack yourself, given the time and the racks.
Reply within 24 h
No commitment
An engineer reviews it
The most demanding brands in Europe run on us.
How it works
A company with offices, its own hardware, and workloads in public clouds. Four ways in, and only one of them is public.
Topology: the public internet and your offices enter the DIVERSITY network edge, which connects to instances, managed services, Object Storage and colocation, and to the public clouds over direct peering.
Public internet
Your end users
Head office
Branches and sites
Your own datacenter
Public clouds
AWS, Azure, GCP, Oracle and Cloudflare
DIVERSITY network
Network edge
Madrid, Amsterdam, Munich and Helsinki
Instances
VPS, VDS, MEM and MNG on KVM
Managed services
Databases, IAM and SSO, Active Directory
Object Storage
Assets and archive
Colocation
Your hardware, our racks, this same network
Public HTTPS
DDoS mitigated at the edge
Private Link
Direct peering
At European exchange points
Three ways to connect it
- Our router over the connectivity you already have
- Our fibre and our router, both
- Your own tunnel, over WireGuard, IPsec, or GRE inside IPsec
Public internet
Your end users reach your instances directly, with DDoS mitigation acting at the edge.
Private Link
Offices, branches and your own datacenter. Our router over your connectivity, our fibre and router, or your own tunnel.
Direct peering
AWS, Azure, GCP, Oracle and Cloudflare, at European exchange points.
Inside the network
VPS, VDS, MEM and MNG instances, managed services, Object Storage and colocation.
Technical specifications
Four instance types on KVM, and the rest of the platform around them.
Instances
VPS
Shared, unmanaged
VDS
Dedicated, unmanaged
MEM
Memory-optimised, dedicated
MNG
Dedicated, managed by us
On every instance
SSD or NVMe storage
1G to 10G uplink
Monthly bandwidth allowance or unlimited traffic
IPv4 and IPv6
Included in Cloud
Managed databases
- Instances with the engine already installed
- PostgreSQL
- MySQL
- Redis
- MongoDB
Snapshots and backups
- Instance snapshots
- Full backups
Object Storage
- Assets and archive
Managed identity
- IAM and SSO
- Active Directory
Private Link
- Our router over the connectivity you already have
- Our fibre and our router, both
- A tunnel over your own connection, with WireGuard, IPsec, or GRE inside IPsec
Direct peering
- AWS
- Azure
- GCP
- Oracle
- Cloudflare
Locations
- Madrid
- Amsterdam
- Munich
- Helsinki
Performance, measured
Two figures instead of adjectives: the one your own browser measures right now, and the one we commit to.
--ms
Your latency to our cloud
Measured between your browser and our servers as you read this, not taken from a brochure.
How we measure it (opens in a new tab)
99.9%
Availability, by contract
With automatic credits if we miss it.
Your traffic never crosses infrastructure outside the EU.
Your server runs in Madrid, Munich, Helsinki or Amsterdam. You choose. Your data does not leave the European Union. DIVERSITY is a European company with no US parent. No US company owns or controls us, so the CLOUD Act has no parent to reach your data through.
Data in Europe
Workloads and critical data on European infrastructure. No transit through foreign jurisdictions.
GDPR: data protection by design
Built for traceability, compliance, and control. Not a layer added afterward.
European datacenters
Madrid, Munich, Helsinki, Amsterdam. Operated by our own team.
No US parent
No exposure to extraterritorial reach like the CLOUD Act. Jurisdiction is the shield.
When to use Cloud
When you need real cloud performance, guaranteed EU data residency, and support from people who know your environment.
Web apps and SaaS that need GDPR compliance from the first commit
Regulated environments: banking, healthcare, public sector
Production that cannot share a host: dedicated CPU and RAM on VDS
Memory-bound workloads that price badly per GB elsewhere: MEM instances
Teams with no platform engineer, who want the instance managed: MNG
Hybrid estates that keep reaching AWS, Azure, GCP or Oracle over direct peering
Offices and branches that need a private path in, not a VPN concentrator
Latency-sensitive traffic served from Madrid, Amsterdam, Munich or Helsinki
Use cases by industry
Where this product earns its place. Sectors where it replaces something more expensive, more painful, or simply riskier.
Banking and finance
Production for financial applications with data residency in the EU, on an infrastructure provider that is itself subject to European law and not on the list of critical ICT providers European supervisors publish under DORA.
Healthcare and pharma
Clinical applications under EHDS. Health data stays in European datacenters, and there is no entity above us that a foreign order for medical records could be served on.
SaaS and startups
VPS for development and staging, VDS once a tenant cannot share a host. The same API, the same network, no migration between the two.
Public sector
Procurement that has to name a jurisdiction. A Spanish company, European capital, no US parent, and a site you choose at order time.
Media and streaming
Object Storage for the library, instances at the edge for delivery, and 1G to 10G uplinks with unlimited traffic, for work where bandwidth would otherwise drive the bill.
Industry and logistics
Plants and warehouses reaching the platform over Private Link, encrypted from the site to us, with the ERP on dedicated hardware next to the platform.
Want a quote built for your stack?
Tell us what you run today and what you want to move.
You get sizing, pricing and a migration plan, normally in under 24 hours.
Reply within 24 h
No commitment
An engineer on the call
Four datacenters. One standard.
Whichever site your workload runs in, the same controls apply. Independently audited and carrier-neutral, with our infrastructure in them managed by our own engineers.
Our datacenters are independently audited, not self-assessed. Across the estate that means ISO 27001 for information security, ISO 9001 for process, ISO 14001 for environmental management, and SOC 2 Type 2 where we publish it; our Amsterdam capacity additionally sits in a facility audited against the internet exchange's own colocation standard. Scope and audit dates differ by site and both come with the technical dossier, because a certificate without its scope statement is decoration.
Mitigation at the network edge, before traffic reaches your systems. It engages on its own and does not wait for you to open a ticket, which matters because the first ninety seconds are the ones that decide whether an attack is an incident or a graph. Per-customer thresholds are agreed when you sign up rather than discovered during the first event.
None of our datacenters is owned by a carrier, so you never buy transit from whoever owns the building, and are never tied to them. We sit directly on the major European internet exchanges, and we peer with AWS, Azure, GCP, Oracle and Cloudflare, so hybrid traffic takes a short, known path instead of whatever a transit provider chooses that day.
High-sensitivity smoke detection that samples the air continuously rather than waiting for a ceiling sensor to trip, and gaseous suppression that puts a fire out without soaking the racks around it. Rooms are compartmented so an incident stays in the room it started in, and the walls carry a rated fire resistance rather than an assurance.
If part of your infrastructure stays on your own hardware, it can live in the same building as your cloud, up to 20 kW per rack at sites that offer it. Same network, same operations team, no hop across the public internet between the two halves of your estate, and one contract rather than two vendors blaming each other.
Every rack takes independent no-break feeds, and where the facility provides it that is three separate paths rather than the usual two, each behind its own generator. UPS and generators are start-tested on a schedule, not assumed, because the failure mode everyone actually meets is a generator that had not been run since commissioning.
Redundant cooling per room, sized to hold temperature if a unit drops out, with temperature and humidity measured continuously rather than on walk-rounds. Our Amsterdam site runs at a PUE of 1.3 on entirely renewable electricity and pipes half its waste heat into neighbouring homes and university buildings instead of venting it.
The same standard at every site.
Pick a site for latency or for jurisdiction, not for what you get. Every item listed is the floor at all four. Where one facility does more than another, the difference is written into your technical dossier rather than averaged into a number.
Key data
The numbers that matter when uptime is the contract.
sustained peak across the European network
live, per datacenter, on our status page
European infrastructure since 2015
Madrid, Munich, Helsinki, Amsterdam
Things people ask before signing
Straight answers, no upsell.
Is European cloud more expensive or slower?
Not slower. Our datacenters in Madrid, Munich, Helsinki, and Amsterdam run the same hardware generations as the hyperscalers. Latency within Europe is lower when your users and your infrastructure are on the same continent, the one whose law you comply with. On price, the cost of a data breach, a regulatory fine, or a forced migration later tends to be higher than any difference today.
What is the difference between VPS and VDS?
On a VPS, CPU and RAM are virtualised and shared with other customers on the same physical host. A VDS runs on a separate cluster where the resources are yours alone, not shared. No noisy neighbours. For critical production we recommend VDS. Two more variants sit on that same footing: MEM, memory-optimised, and MNG, which we also manage for you.
Which hypervisor do you run, and can I bring my own image?
Everything runs on KVM. That means standard virtio drivers, no proprietary guest agent, and images that behave the same way they do anywhere else you have run KVM. If you are moving an existing disk in, talk to us before the cutover and we will size the target with you.
How many IP addresses do I get?
Every instance is dual stack, IPv4 and IPv6, from the moment it is created, and there is no separate order for it. IPv6 ships as a single /128, and a /56 is rentable if you need to subnet. Additional IPv4 is rentable the same way, in blocks from a /29 up to a /24.
Where are the servers physically?
In our own European datacenters in Madrid, Munich, Helsinki and Amsterdam, all four live. You pick the site when you order, and your data does not leave the European Union.
Can I keep using AWS or Azure alongside this?
Yes, and you do not have to reach them over the open internet. We peer directly with AWS, Azure, GCP, Oracle and Cloudflare at European exchange points, so hybrid traffic takes a short, known path instead of a transit provider's.
Who patches the operating system?
You do, on VPS, VDS and MEM. Those three are unmanaged: we run the platform and the network, you run everything from the OS upwards. MNG is the managed type, and there the patching, the monitoring and the backups are ours. MNG is also the substrate the managed products stand on, so managed databases and managed Active Directory run on it rather than beside it.
What happens when the hardware under my instance fails?
Usually you do not find out. An instance is not tied to one physical machine, so when a node fails the workload moves to another one. That is the difference between this and a dedicated server, where a failed component is a ticket and a repair window. It is also why the availability we commit to is a platform number rather than a per-machine one.
How is my data backed up?
With instance snapshots and full backups, both features of the platform itself. Object Storage is a separate product you may also want, for assets and archive, but it is not the backup answer: you should not have to buy a second product to get something the instance already does.
What support is included, and what is not?
Support is free on every product we sell, with a 4-hour target response time on support requests. The advanced plan is paid and buys shorter targets plus weekend and out-of-hours cover.
What does the 99.9% SLA actually cover?
99.9% product availability, by contract, with automatic credits if we miss it, and the same figure covers every product we tie to an SLA. On a virtualised platform that number means what you would want it to mean: because a failed node moves your workload rather than stopping it, what is being measured is the service rather than a particular machine.
How long does provisioning take?
Standard instances, whatever the type, are delivered the same working day. Custom configurations, with dedicated hardware or specific networking, are confirmed with a firm date in the quote.
What happens if I go over my traffic allowance?
Each instance is either on a monthly bandwidth allowance or on unlimited traffic, and you pick which when you order. If you take the allowance, traffic above it is billed per additional block, or blocked if you ask for that when you order. Either way it is in your contract, not a surprise line on an invoice.
We're already deep into AWS / Azure / GCP. Is migration realistic?
Yes, and we have done it many times. Our architecture team runs honest migration assessments: we tell you what is straightforward, what is complex, and what is probably not worth moving. We also peer directly with AWS, Azure, GCP, and Oracle at internet exchange points, so migration traffic takes a short, known path over direct peering rather than whatever a transit provider chooses. That makes transfers faster, more predictable, and cheaper than most customers expect.
What is the minimum term?
One month on the instance itself. A savings plan is a separate commitment and it behaves like one: take 12 or 36 months for the lower rate and you pay that plan out for its term, whether or not you keep the instance running. That is the trade, and it is yours to make. Without a plan, the minimum stays one month.
What happens to my data when I destroy an instance?
We delete the disk and zero the space before it goes to anyone else, and we do the same with your snapshots and backups. What we do not offer for cloud is the NIST SP 800-88 erasure we carry out for bare metal, and the reason is what that standard is written for: a named physical drive, sanitised while it is out of service. Bare metal gives us that moment, because the machine comes out of service when you leave. Cloud storage stays in service, so there is no drive to name. Where the large clouds cite the standard, they mean a drive at the end of its own working life, not the moment you press delete. If your compliance regime asks for that erasure, it needs bare metal.
How does this help with GDPR and EU compliance?
GDPR requires that personal data is processed under a legal framework that guarantees its protection. Storing data with a US-owned provider creates a structural tension: EU data protection law on one side, US extraterritorial reach on the other. Running on DIVERSITY removes that tension. Your data stays in EU datacenters, under EU jurisdiction, with no foreign parent company that could be compelled to act against your interests. For regulated industries, that is not a nice-to-have. It is the baseline.
What does 'sovereign cloud' actually mean?
It means the company running your infrastructure is incorporated, operated, and legally subject to European law. Not a subsidiary answering to a US parent. When a government or regulator issues a demand for your data, the answer is determined by EU law, not a foreign jurisdiction. That is not a feature we added. It is how we are built.
Why does it matter where my cloud provider is headquartered?
The US CLOUD Act lets American authorities compel any provider under US jurisdiction to hand over data in its possession, custody or control, wherever it is stored, without notifying you. If your provider is ultimately owned by a US company, the Act reaches your data through that parent. DIVERSITY has no US parent: no US company owns or controls us. There is no entity above us that can receive such an order.
We already use encryption. Aren't we covered?
Encryption protects data in transit and at rest from third parties. It does not protect against orders served on your cloud provider under their home jurisdiction's law. If the provider holds the keys, or is compelled to assist in accessing your data, encryption alone is not a legal shield. Jurisdiction is.
What they say about our work
“We asked for EU data residency and got something harder to find: an engineer who already knew our setup when we picked up the phone.”
Head of infrastructure
Payments platform, Spain
1 of 8
What else we operate
Bare Metal for a server with no hypervisor and no neighbours, Private Link for a private path in, Colocation when part of your estate stays on your own hardware. Same network, same operations team.
Shall we talk?
An AI deployment, critical infrastructure, or a quote.
Write or call and you'll get an engineer, not a ticket bot.


