Romania VPS & offshore servers. EU rules and a court record against data retention.
Servers in Bucharest, inside the EU: the DSA and GDPR apply, the Constitutional Court has struck down data retention twice, and GPU servers are offered.
Applies; ANCOM is the Digital Services Coordinator
Data protection
GDPR, with Law No. 190/2018
Traffic data retention
No blanket regime; narrower duties for telecom operators since 2015
Press freedom
49th of 180 (RSF, 2026)
Romania joined the EU in 2007, so EU law applies directly. The Digital Services Act has applied to all intermediaries, including hosting providers, since 17 February 2024. Law No. 50/2024, in force since March 2024, designated ANCOM as the national Digital Services Coordinator. It also lets "relevant authorities", meaning sector regulators and judicial authorities, issue orders to act against illegal content or to provide information about users. In 2024 ANCOM received four such removal orders and two information orders (ANCOM annual report).
Article 30 of the Constitution protects freedom of expression and prohibits censorship of any kind. RSF ranks Romania 49th in 2026, citing opaque media financing and political pressure. Romania has also been at the center of EU-level DSA enforcement: on 17 December 2024 the European Commission opened formal proceedings against TikTok over election risks linked to the Romanian presidential election of 24 November 2024 (European Commission).
Copyright complaints and notice-and-action
Under the DSA, a hosting provider must accept notices of illegal content (Article 16). A valid notice explains why the content is illegal, gives its exact location, identifies the sender and confirms good faith. It gives the host actual knowledge, which matters for the liability exemption in Article 6, but it is not an automatic removal order: the host must decide in a timely, diligent and objective way, and if it restricts content it must give the customer a statement of reasons (Article 17). The DSA imposes no general monitoring duty (Article 8).
Rights holders can also obtain court injunctions under Romanian copyright law, and the EU Terrorist Content Online Regulation lets competent authorities order the removal of terrorist content within one hour.
Data protection and retention
The GDPR applies directly, supplemented by Law No. 190/2018. The supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP). Personal data processed in Bucharest stays inside the EU.
Romania has a notable record against blanket data retention. The Constitutional Court struck down the law transposing the EU Data Retention Directive in October 2009 (Decision No. 1258/2009, legi-internet.ro) and its replacement, Law No. 82/2012, in July 2014 (Decision No. 440/2014, ApTI).
Law No. 235/2015 then re-introduced narrower retention duties for telecom operators through amendments to Law No. 506/2004. Rather than a blanket period for everyone's data, operators may keep traffic data they process for billing and service purposes for no more than three years, must disclose it within 48 hours of a court-authorized request, and must preserve it for up to five years once notified in an investigation. These duties are addressed to providers of public electronic communications networks and services; the DSA itself imposes no retention duty on hosts.
What we keep is set out in our privacy policy: your email address, your balance and payment records, your sign-in sessions (browser and country, never the IP address) and your service records. We do not log or inspect the traffic on your server.
Romania is not in the Five, Nine or 14 Eyes intelligence-sharing groups. Those groups share intercepted communications; data on a server in Bucharest is still obtained through Romanian and EU procedures, as our guide to what the 14 Eyes mean for hosting explains.
How we handle complaints here
Every complaint about a server in Bucharest is logged and checked against Romanian and EU law.
We do not act on a notice because it cites the US DMCA, which has no legal force in Romania. What matters is whether the notice meets the DSA's requirements and concerns content that is illegal under EU or Romanian law. A notice that does is assessed on those terms, whoever sends it.
A valid order of a Romanian court, an order from a competent authority under Law No. 50/2024 and Article 9 of the DSA, or a notice that meets Article 16 of the DSA can require action. You are informed first and can respond, unless a court forbids it, and the DSA requires us to give you a statement of reasons if we restrict content.
Requests and outcomes are published in our quarterly transparency report, without customer data.
Who it suits
EU-facing sites and applications that need personal data to stay inside the EU, under published procedures rather than informal pressure.
GPU compute inside the EU, depending on the model, plus six dedicated configurations including the 40 TB storage server and the EPYC 7402P.
Audiences in Romania, Moldova, Hungary and the Balkans. Bucharest is about 450 km from Istanbul and 640 km from Budapest in a straight line.
Budget Windows desktops, with the shared RDP seat at $4.09.
Bucharest is Romania's main interconnection point. InterLAN, owned by a non-profit association of Romanian internet providers, connects more than 180 networks and has points of presence in Bucharest, several other Romanian cities, Frankfurt and Sofia. In a straight line, Bucharest is about 450 km from Istanbul, 640 km from Budapest, 860 km from Vienna and 1,450 km from Frankfurt.
Routes to Western Europe are terrestrial. The only subsea system TeleGeography lists for Romania is KAFOS, a Black Sea cable in service since 1997 that links Mangalia with Varna in Bulgaria and with Istanbul. For audiences in Western Europe, Amsterdam is closer; for South-East Europe and the Black Sea region, Bucharest sits in the middle of the map. Our network page lists latency estimates and shows how to measure the real latency yourself.
03Latency
How far is Bucharest?
Estimated round-trip times from 20 major cities, based on distance and typical fiber routes. Real figures depend on your provider.
Do you act on DMCA notices for servers in Romania?
Not because they cite the DMCA, which has no legal force in Romania. What matters here is whether a notice meets the Digital Services Act and concerns content that is illegal under EU or Romanian law; a notice that does is assessed on those terms, whoever sends it.
Does the Digital Services Act apply to servers in Romania?
Yes. Romania is an EU member, the DSA has applied to all intermediaries since 17 February 2024, and ANCOM supervises it under Law No. 50/2024.
Which data-protection law applies in Romania?
The GDPR applies directly, supplemented by Law No. 190/2018 and supervised by ANSPDCP. Data processed in Bucharest stays inside the EU.
Is there mandatory data retention in Romania?
There is no blanket retention regime; the Constitutional Court struck down two attempts. Since Law No. 235/2015, telecom operators may keep traffic data they process for billing and service purposes for up to three years and must preserve it once notified in an investigation.
Is Romania part of the 14 Eyes?
No. Romania is in none of the Five, Nine or 14 Eyes groups. As an EU member it applies EU procedures such as the Digital Services Act, and data on a server in Bucharest is obtained through Romanian courts and competent authorities.
What can force a takedown in Romania?
A Romanian court order, an order from a competent Romanian authority under Law No. 50/2024 and Article 9 of the DSA, or a notice that meets Article 16 of the DSA. Terrorist content can also be ordered offline within one hour under EU law.
Which products are available in Romania?
All VPS plans, all Windows RDP plans including the shared seat, six dedicated servers from the Xeon E3-1230 v6 to the EPYC 7402P and the 40 TB storage server, and selected GPU servers.
Is Romania a good choice for GPU work inside the EU?
Yes, if you want EU data residency: GPU servers are offered in Bucharest, depending on the model. For the widest network reach inside the EU, compare Amsterdam.
Can I pay for a server in Romania with Bitcoin or Monero?
Yes. Every server in Romania is paid from your balance, which you top up in Bitcoin, Ethereum, Monero, USDT or Solana from any wallet. No identity checks: an email address and a password are all an account needs, and prices are the same as in our other six jurisdictions.