Web Hosting
DigitalOcean Droplets
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by DigitalOcean, LLC · www.digitalocean.com
Compare with Hetzner Cloud → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
DigitalOcean Droplets at a glance
- Vendor
- DigitalOcean, LLC
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 1 Nov 2026
- Panel verdict
- The AI panel rates DigitalOcean Droplets 2.5/5, the mean of 6 judges. DigitalOcean Droplets are cloud VMs with prices published to the last gigabyte: every plan from $4.00 a month to $2,096.00 carries hourly and monthly figures, backups cost 20% weekly or 30% daily of the Droplet cost, snapshots $0.06/GB per month, and per-second billing starts January 1, 2026. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
DigitalOcean Droplets are cloud VMs with prices published to the last gigabyte: every plan from $4.00 a month to $2,096.00 carries hourly and monthly figures, backups cost 20% weekly or 30% daily of the Droplet cost, snapshots $0.06/GB per month, and per-second billing starts January 1, 2026. Scores cluster highest on pricing transparency at 7-8 and on management and developer tools at 6-8, crediting four APIs, the doctl command line, Terraform and Git deployment with staging, production and preview environments. They sit lowest on support and service at 3-4 — beyond a Premium Support plan with response times under 2 hours, we found no public information on channels, hours or languages — and on sovereignty at 2-4. The judges split on sovereignty: Amsterdam data centres are named among the regions, but the contracting party is DigitalOcean, LLC under a New York parent, and we found no public information on the subprocessor chain or where backups sit. They also split on scaling and portability at 4-7, where resize and horizontal scaling meet an undocumented exit and the stated "We do not offer refunds."
Speaks for it
- Every plan carries hourly and monthly prices side by side, from $4.00 a month for 512 MiB to $2,096.00 for the largest storage plan
- Server sizes are published as exact vCPU, RAM, SSD and transfer figures, with 5th Gen AMD EPYC processors and NVMe storage named
- A 99.99% SLA is stated for every data centre, with product-level SLAs listed alongside
- Management runs through a console, the doctl command line, four APIs and a Terraform provider, plus Git deployment with staging, production and preview environments
- Backups are priced three ways — 20% weekly, 30% daily, or usage-based from $0.01/GiB per month — with on-demand snapshots kept indefinitely at $0.06/GB per month
Held against it
- We found no public information on support channels, hours or languages beyond a Premium Support plan with response times under 2 hours
- We found no public information on the subprocessor chain, where backups are stored, or a security certification such as ISO 27001
- We found no public information on migration in, domain transfer out, cancellation terms or data deletion after termination, and the terms state "We do not offer refunds."
- We found no public information on the rate for transfer beyond the included 500 GiB per month or on VAT treatment for business customers
- We found no public information on service credits behind the SLA or on a status page with incident history
Best for
- You build web apps or APIs and want to manage them through four APIs, the doctl command line, Terraform and Git deployment
- You need to compute the bill before committing, with hourly and monthly prices for every size and backups and snapshots priced openly
- You face traffic peaks and want resize, horizontal scaling behind managed load balancers and pay-as-you-go billing to absorb them and shrink afterwards
- You prefer concrete per-plan limits and named hardware to "unlimited" fair-use promises
Avoid if
- You must show an EU chain end to end — the contracting party is DigitalOcean, LLC under parent DigitalOcean Holdings, Inc. of New York, and we found no public information on subprocessors or where backups sit
- You want a managed website layer with updates and caching handled for you — Droplets are cloud VMs, and we found no public information on managed WordPress features or PHP versions
- You expect a refund if things go wrong — the terms state "We do not offer refunds."
- You need same-day phone or chat support in a chosen language — beyond a Premium Support plan and a resource library, we found no public information on channels, hours or languages
The scores
| Criterion | Panel median |
|---|---|
| Performance, uptime & infrastructure | 3.5 of 5 |
| Control panel, WordPress & developer tooling | 3.5 of 5 |
| Security, backups & recovery | 3 of 5 |
| Scaling, migration & exit | 3 of 5 |
| Support, domains & email | 2 of 5 |
| European sovereignty | 2 of 5 |
| Pricing transparency | 3.5 of 5 |
Performance, uptime & infrastructure
panel disagrees
Show reasoningHide reasoning
How this is scored
What runs the sites and how reliably: CPU, RAM and storage per tariff stated, SSD or NVMe storage, current PHP versions and how long old ones are kept, HTTP/2 or HTTP/3, server-side caching (OPcache, Redis, a page cache), a CDN, databases and their limits, resources that are guaranteed rather than shared without a stated limit, an uptime SLA with a service credit, a public status page with incident history, and redundancy of the platform. Where the data centre is located is scored under sovereignty.
0 — Not a hosting product; websites or web apps cannot be run on it.
3 — Storage and a number of sites per tariff are stated and the product is described as fast; resources, PHP versions, caching and uptime are basic or not described.
5 — Resources per tariff stated (CPU or a performance class, RAM, SSD or NVMe storage), several current PHP versions selectable, HTTP/2, server-side caching or a cache plugin documented, free SSL, a stated uptime target, and a public status page.
8 — Dedicated or guaranteed resources stated per tariff, HTTP/3 and a CDN included, Redis or an object cache, PHP versions kept current with an end-of-life policy published, an uptime SLA with a service credit, a status page with incident history, and a redundant platform (replicated storage, failover) described.
10 — Infrastructure documented to the level an operator could audit: hardware generations and storage architecture named, performance measured and published with method, an SLA with credits and exclusions at 99.95 % or above, every incident on the status page with a post-mortem, and scaling without downtime documented.
The Agency Lead
Every Droplet size is published with its vCPU, RAM, SSD or NVMe storage and monthly transfer allowance, right up to a 96 GiB RAM machine, with 5th Gen AMD EPYC processors named and a 99.99% uptime SLA on the product. What my WordPress clients would miss is the managed layer: we found no public information on PHP versions, caching or a CDN on the servers themselves, nor on a status page with incident history or credits behind the SLA. 1 3 7
The Small-Business Owner
Every server size is set out with its vCPU count, RAM, SSD storage and transfer allowance, the premium types are named as NVMe on 5th Gen AMD EPYC processors, and a 99.99% uptime SLA applies to the servers (99.95% for the separate app platform). For a plain shop site, though, we found no public information on PHP versions, caching, a CDN for the servers, or a public status page with incident history. 1 2 3
The Shop Operator
Every plan is specified to the last gigabyte — vCPUs, RAM, SSD storage and monthly transfer — with hardware actually named (NVMe on storage-optimized and premium tiers, 5th-Gen AMD EPYC on v5), a 99.99% uptime SLA per data centre, highly available managed load balancers and free monitoring with alerts. That tells me exactly what box my shop runs on. We found no public information in the captured pages on the service credit terms behind the SLA, a status page with incident history, or how the storage is replicated. 1 3 7
The Freelance App Developer
Every plan is published with exact numbers — 1 GiB RAM, 1 vCPU, 1,000 GiB transfer and 25 GiB SSD for $6.00 monthly — and the hardware is named: 5th Gen AMD EPYC on v5, NVMe on Storage-Optimized, up to 10Gbps on CPU-Optimized Premium. There is a 99.99% uptime SLA for Droplets with product-level SLAs listed alongside, plus free monitoring and highly available load balancers. I found no public information on a public status page with incident history, service credits, or any caching layer or CDN on the virtual-machine side. 1 3 7
The Data Protection Officer
Each plan's vCPUs, RAM, SSD or NVMe storage and transfer allowance are published, the hardware is named down to 5th Gen AMD EPYC and NVMe on the storage plans, and a 99.99% SLA is stated for every data centre with a 99.95% SLA for the app platform. We found no public information on a status page with incident history, on service credits behind the SLA, or on replicated storage and failover, so the reliability claim rests on the SLA figures alone. 1 2 3 7
The Skeptic
Every plan is published with exact vCPU, RAM, SSD and transfer figures and named hardware — 5th Gen AMD EPYC processors, NVMe SSDs on the optimized plans — plus a stated 99.99% SLA per data centre. What the pages never say is what that SLA pays when it is missed, and we found no public information on a public status page with incident history, HTTP/3, Redis or object caching, or failover of the platform itself. Numbers without a credit table is half an SLA, so six. 1 3 7
Control panel, WordPress & developer tooling
panel disagrees
Show reasoningHide reasoning
How this is scored
How sites are set up and run day to day: the control panel or console, one-click installers for named CMS and shop systems, managed WordPress features (automatic core and plugin updates, staging, cloning, a search-and-replace), SSH, SFTP, Git deployment, Composer, cron jobs, a PHP version and settings per site, databases and phpMyAdmin or an equivalent, log access, a public API and command-line tool, infrastructure-as-code support, team members and roles, and client or project management for agencies. On a cloud server: images, snapshots, firewalls, private networks and the API that manages them.
0 — No documented way to deploy or manage a website on the product.
3 — A control panel with FTP access and a one-click installer for WordPress; SSH, staging, Git, an API and roles are basic or not described.
5 — A control panel with installers for several named CMS, SSH and SFTP, cron jobs, PHP version per site, databases with a web admin, a staging copy or snapshots, team members with access rights, and log files available — or, for a cloud server, a console with images, snapshots, a firewall and a documented API.
8 — Managed WordPress or app tooling (automatic updates with rollback, one-click staging and push to live, cloning), Git deployment and Composer documented, a public REST API and CLI covering sites, databases, domains and backups, granular roles per project, and an agency view with client projects, transfer of ownership and white-label or reseller options.
10 — A platform that scales across an agency or a development team: everything in the panel available through a versioned API, CLI and an infrastructure-as-code provider, preview environments per branch, audit logs of every change, SSO for the team, and projects that can be handed to the client with billing transferred.
The Agency Lead
Management is infrastructure-first and genuinely strong: a UI, the doctl CLI, four documented APIs, a Terraform provider, on-demand snapshots I can keep indefinitely, free cloud firewalls and unlimited team members with two-factor. The agency layer is where it thins out — we found no public information on WordPress tooling, staging and push-to-live, per-project roles for freelancers, or handing a client their project, so my team would be assembling the stack ourselves on raw VMs. 1 4
The Small-Business Owner
The tooling is genuinely documented: an interface plus the doctl command line, a REST API and a Terraform provider manage the servers, with free cloud firewalls, snapshots kept indefinitely and a metadata service, and the separate app platform deploys from GitHub or GitLab with staging, preview environments and rollback. What we found no public information on is a one-click WordPress installer or managed WordPress updates, granular roles per project, or an agency client view. 1 2 4
The Shop Operator
Day-to-day operations are documented through a console, the doctl command line, four APIs and a Terraform provider with Ansible support, plus free snapshots, cloud firewalls, reserved IPs and team management with two-factor login — a real operations stack for running a shop. We found no public information on staging copies or cloning for the Droplets product itself, granular roles per project, or audit logs in the pages we read. 1 4
The Freelance App Developer
This is exactly how I want to work: a documented HTTP API for Droplets and other resources, the official doctl command-line tool, a Terraform provider, an OAuth API and even a metadata service, with on-demand snapshots and free cloud firewalls all scriptable. The App Platform adds Git deployment from GitHub, GitLab, Bitbucket and container registries with PHP, Laravel and Symfony named, staging, production and preview environments, rollback with up to 10 revisions, and separate worker components for queue jobs. I found no public information on DNS or domain management through the API, or per-project roles beyond unlimited users with two-factor login. 1 2 4
The Data Protection Officer
Day-to-day management runs through a console, the doctl command-line tool, four documented APIs and Terraform and Ansible support, which covers the infrastructure-as-code needs of our agencies. Deployments from GitHub, GitLab or Bitbucket with staging, production and preview environments, automatic OS patching and rollbacks of up to ten revisions are documented for the app platform. We found no public information on granular roles per project or on transferring a project to a client. 1 2 4
The Skeptic
The tooling is deep and documented: four APIs, the doctl command-line client at v1.164.0, a Terraform provider, Ansible, and Git deployment from GitHub, GitLab, Bitbucket or container registries with staging, production and preview environments, up to 10 rollback revisions and automatic OS patching. We found no public information on managed WordPress features, granular per-project roles, audit logs or single sign-on, which is what separates a strong platform from a complete one. Eight. 1 2 4
Security, backups & recovery
panel disagrees
Show reasoningHide reasoning
How this is scored
How the sites are protected and how fast they come back: isolation between customers (containers, separate PHP processes, chroot), free SSL with automatic renewal, a web application firewall, malware scanning and cleanup, DDoS protection, two-factor login to the panel, brute-force protection, backup frequency and retention, off-site or geo-redundant backup copies, self-service restore of files and databases from a point in time, restore of single sites or tables, security updates handled by the vendor on managed tariffs, and security certifications (ISO 27001, BSI C5, SOC 2) with their scope.
0 — No backups and no security measures described, and the customer is told to secure the site entirely on their own.
3 — Free SSL and some backup exist; frequency, retention, restore and the security measures are basic or not described.
5 — Free SSL with automatic renewal, daily backups with a stated retention, restore by the customer in the panel, account isolation described, DDoS protection, two-factor login to the panel, and malware scanning or a firewall offered.
8 — Backups several times a day or on demand with retention of 14 days or more, stored in a second location, point-in-time restore of single files, databases or sites, a web application firewall and malware cleanup included, isolation per site stated, and an ISO 27001 or equivalent certification of the hosting operation published.
10 — Recovery that can be evidenced: backup and restore times stated and tested, immutable or off-provider backups, recovery objectives (RPO and RTO) published, a security incident process and disclosure policy, certifications with their scope and audit reports available, and penetration test results or a bug bounty programme.
The Agency Lead
Backups are concrete and priced — weekly at 20% or daily at 30% of the Droplet cost, or usage-based with frequency up to every 4 hours — and free cloud firewalls, DDoS protection and two-factor on the team account are documented. But recovery is what an agency lives on, and we found no public information on self-service restore of files or databases, malware cleanup, isolation between customers or security certifications. 1 2 3
The Small-Business Owner
Backups are described and priced openly: weekly at 20% of the server cost, daily at 30%, or usage-based with backups up to every four hours and retention from three days to six months, plus snapshots at $0.06/GB per month kept indefinitely. Two-factor login, free cloud firewalls, DDoS protection and managed SSL certificates are all stated, but restores are only described as whole-server images, and we found no public information on malware scanning or cleanup, per-customer isolation or security certifications. 1 2 3
The Shop Operator
Backups are flexible and priced three ways — weekly at 20% of the Droplet cost, daily at 30%, or usage-based from $0.01/GiB per month with frequency up to every 4 hours and retention from 3 days to 6 months, plus on-demand snapshots kept indefinitely — which on paper covers my 'yesterday's database back' need, and cloud firewalls, two-factor login and free monitoring come included. We found no public information in the captured facts on off-site backup copies, point-in-time restore of single files or databases, malware scanning or certifications; note the automatic SSL, DDoS protection and OS patching statements are made for the App Platform product, not the Droplets themselves. 1 2 3
The Freelance App Developer
Free cloud firewalls, two-factor login and free monitoring come with every Droplet, and managed SSL with renewal, DDoS protection and automatic OS patching are documented on the App Platform side. Backups are priced at 20% (Weekly) or 30% (Daily) of Droplet cost, or usage-based at $0.01/GiB per month with frequencies up to every 4 hours and retention from 3 days to 6 months, and on-demand snapshots can be kept indefinitely at $0.06/GB per month. I found no public information on malware scanning or cleanup, a web application firewall, isolation between customers, certifications, or a second backup location. 1 2 3
The Data Protection Officer
Free cloud firewalls, DDoS protection, two-factor login and SSL certificates that are created and renewed for you are documented, and the backup options are flexible: weekly at 20% or daily at 30% of the Droplet cost, usage-based plans up to every four hours with retention from three days to six months, and on-demand snapshots kept indefinitely. What I check first before signing for practices and law firms — self-service restore of single files, where the backup copies are physically kept, and a certification such as ISO 27001 — we found no public information on, though pages on restoring individual files and on trust and security were among those captured. 1 2 3 8 13
The Skeptic
Backups are priced and scheduled in the open — 20% (Weekly) or 30% (Daily) of Droplet cost, usage-based plans at $0.01/GiB per month with frequencies up to every 4 hours and retention from 3 days to 6 months, plus on-demand snapshots kept indefinitely — and free cloud firewalls, DDoS mitigation, automatic SSL renewal, automatic OS patching and two-factor login are all stated. But we found no public information on a second backup location, customer self-service restore scope, malware scanning or cleanup, a web application firewall, or any security certification. Six: the schedule is honest, the recovery story is not told. 1 2 3
Scaling, migration & exit
panel disagrees
Show reasoningHide reasoning
How this is scored
What it takes to grow and what it takes to leave: tariff changes up and down without a migration, resource limits stated rather than "unlimited" with a fair-use clause, add-on resources, the path from shared hosting to a server or cluster within the same vendor, a free or paid migration service from another host, standard tooling that runs elsewhere (no proprietary stack lock-in), full export of files, databases and mailboxes, domain transfer out without a fee, cancellation periods and minimum terms, and the deletion of data after the contract ends.
0 — Data cannot be taken out and the contract cannot be cancelled on stated terms.
3 — A tariff upgrade exists and files can be downloaded by FTP; limits, migration in, export and exit terms are basic or not described.
5 — Tariff upgrades and downgrades in the panel, the main limits per tariff stated (storage, sites, databases, mailboxes, inodes or processes), a migration service or guide from another host, files and databases exportable with standard tools, domain transfer out documented, and the cancellation period stated.
8 — Resources scalable without moving the site, a documented path from hosting to a server or cluster at the same vendor, a free migration service with its scope stated, every limit including fair use published, monthly terms available, full export including mail, and deletion of data after termination with its deadline stated.
10 — Growth and exit with no friction: scaling on demand without downtime, everything built on open standard tooling with no proprietary lock-in, a complete export in a format another host imports, migration out supported, and cancellation, data return and deletion documented with deadlines.
The Agency Lead
Limits are honest numbers on every plan with no unlimited promises, a Droplet can be resized or scaled horizontally, block storage attaches on demand, and billing is monthly or per-second pay-as-you-go, so there is no long term to escape. The exit side is thin: we found no public information on a migration service in, export of domains and mail, or the deadline for deleting data after cancellation. 1 3
The Small-Business Owner
Getting bigger looks simple: a server can be resized or scaled horizontally, the v5 line lets you pick vCPU, memory and storage independently, and pay-as-you-go or monthly billing means there is effectively no minimum term. The exit side is thin — the vendor states "We do not offer refunds" — and we found no public information on a migration service from another host, domain transfer out, cancellation periods or deletion of data after termination. 1 3
The Shop Operator
Resizing a Droplet or scaling horizontally behind managed load balancers, with every limit stated as a concrete number instead of 'unlimited', and hourly plus monthly billing with per-second granularity — that is exactly the pattern to absorb a Black Friday weekend and shrink afterwards without moving the shop. Snapshots kept indefinitely and usable to create new Droplets, plus S3-compatible object storage, give a standard-tooling exit path. We found no public information on a migration service in, domain transfer out, or deletion of data after termination. 1 3 5
The Freelance App Developer
Limits are stated in real numbers on every plan — vCPU, RAM, SSD and transfer — rather than 'unlimited', you can resize a Droplet or scale horizontally, attach block storage, and on v5 pick vCPU, memory and storage independently and pay for what you use. Snapshots kept indefinitely can create new Droplets, and pay-as-you-go per-second billing with a 60-second minimum means no term lock-in. I found no public information on a migration service in, exporting data out of the platform, domain transfer, or cancellation and data-deletion terms. 1 3
The Data Protection Officer
Growing is well documented: Droplets can be resized or scaled horizontally behind a managed load balancer, autoscaling is available, vCPU, memory and storage are chosen independently on v5 plans, and every transfer and storage limit is stated in plain figures. The exit side is thin: we found no public information on a migration service from another host, export in standard formats, domain transfer out, cancellation periods, or deletion of data after the contract ends — and the published policy is "We do not offer refunds." 1 2 3 10 15
The Skeptic
Limits are numbers rather than fair-use prose — RAM, vCPU, SSD and transfer per plan — with resize and horizontal scaling, autoscaling, and snapshots reusable to create new Droplets, on standard Linux managed through Terraform and Ansible with an S3-compatible storage API, so taking everything and leaving is technically ordinary. What is missing is the commercial exit: we found no public information on a migration service in, domain transfer out, cancellation terms, or deletion of data after termination, and the terms state "We do not offer refunds." Six. 1 3 4
Support, domains & email
panel disagrees
Show reasoningHide reasoning
How this is scored
Who helps and what comes with the hosting: support channels (phone, chat, ticket, email), hours and languages, response times stated or guaranteed, technical depth (WordPress or server experts, help with a hacked site), a help centre and documentation, a premium or managed support option, an agency or partner programme, and the domains, SSL certificates and mailboxes included or bookable in the same account, with their DNS management and mail features (IMAP, webmail, spam filter, mailbox size).
0 — No support offered beyond a community forum and no domain or email service.
3 — Email or ticket support and a help centre; hours, language, response times and domain and mailbox features are basic or not described.
5 — Support by phone or chat and ticket in the customer's language with hours stated, a searchable help centre, domains and mailboxes bookable in the same account with DNS management, and webmail with a spam filter.
8 — Support around the clock by people with stated technical expertise, response times stated per channel, help with hacked or broken sites, a premium support or managed service tier, an agency or partner programme with its benefits stated, and mailboxes with stated size, aliases and server-side filtering.
10 — Support with guarantees: response times contractually bound in an SLA, a named contact or account manager for business customers, proactive incident notifications, support satisfaction or response figures published, and every included service (domains, DNS, mail, certificates) documented with its limits.
The Agency Lead
A Premium Support plan with response times under 2 hours and a library of guides, tutorials and videos is more than a forum, but we found no public information on the everyday support channels, hours or languages behind it. For my sixty clients there is also nothing on domains or mailboxes in the same account, so mail would live with a second vendor. 2
The Small-Business Owner
There is a rich library of how-to guides, tutorials and videos, and a Premium Support plan is offered with response times under 2 hours, though we found no public information on its price. We found no public information on phone or chat support, support hours or languages, and no public information on domains, mailboxes, webmail or DNS in the same account — for a firm that needs someone on the phone in German the same day, that is the gap. 2
The Shop Operator
There is a rich library of how-to guides, tutorials and videos, and a Premium Support plan promising response times under 2 hours, which is what I would want during a sales weekend. Beyond that we found no public information on support channels, hours or languages in the captured facts, and no domains or mailboxes offered in the same account. 2 6
The Freelance App Developer
What is documented is a resource library of how-to guides, tutorials and videos, thorough API reference documentation, and a Premium Support plan with response times under 2 hours for businesses needing hands-on help. I found no public information on phone, chat or ticket channels, support hours or languages, or on any domain registration, DNS management or mailbox offering in the same account. 2 4
The Data Protection Officer
A premium support plan with response times under two hours and a resource library of how-to guides, tutorials and videos are documented. Beyond that we found no public information on support channels, hours or languages despite the captured support page, and no public information on domains or mailboxes bookable in the same account — for practices that need appointment-confirmation mail, that gap matters. 2 6
The Skeptic
A documentation library with how-to guides, tutorials and videos is published, and a Premium Support plan promises response times under 2 hours. We found no public information on ordinary support channels, hours or languages, and none on domain registration, DNS management or mailboxes in the same account. Three: a paid tier with a response figure is not support for everyone, and the domain-and-email half of this question goes unanswered on these pages. 2 6
European sovereignty
panel opinion
panel disagrees
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the servers, backups and support sit, and who the subprocessors are (data centre operator, CDN, DNS, mail filtering, support and payment tools). Independently sourced by the sovereignty pipeline; a host stores everything the customer's sites collect, so the whole chain counts, including where backups are kept and which non-EU group company can reach the data.
0 — Non-EU vendor and contracting entity, data centre location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the data centre location is unstated or non-EU and the subprocessors are not listed.
5 — EU data centres available and an EU contracting entity or EU representative, but parts of the chain (parent company, CDN, mail filtering, support, payment) run through non-EU providers without a stated safeguard.
8 — EU data centres named by location, EU contracting entity and parent, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated for the data centres.
10 — Sovereign end to end and evidenced: European ownership, entity, own data centres and every subprocessor, backups in the EU, no non-EU group access, data export and deletion documented, and certifications published with their scope rather than implied.
The Agency Lead
The contracting entity is DigitalOcean, LLC, an American company, and Amsterdam appears among the data centre regions, but the pages prove little beyond that: we found no public information on where a given customer's data and backups sit, which subprocessors are involved, or what the data processing agreement covers. When a client asks me where their data actually lives, I could not answer from this. 3 5 7
The Small-Business Owner
Amsterdam data centres are documented among the regions, and the vendor describes data centres in Frankfurt and Amsterdam among others, but the contracting party named on its own pages is DigitalOcean, LLC, with a US parent. We found no public information on where backups and support sit, on the subprocessor chain, or on EU safeguards for the data. 3 5 7
The Shop Operator
I can place my shop in Amsterdam — three Amsterdam regions are documented alongside US locations — but the party to the terms is the US-based DigitalOcean, LLC under DigitalOcean Holdings, Inc. of New York, so the contracting chain is American. Privacy policy, data processing agreement and subprocessor pages were captured, yet their contents are not evidenced here, so where backups sit and which non-EU group companies can reach my data remain unknown to me. 3 5 7 11 12
The Freelance App Developer
The contracting entity is DigitalOcean, LLC under parent DigitalOcean Holdings, Inc. of New York, so ownership and the contract sit outside the EU, while Amsterdam data centres (AMS1 through AMS4, with AMS3 recommended) make an EU deployment possible. I found no public information on the subprocessor chain, where backups are kept, or the terms of a data processing agreement, so the end-to-end chain cannot be judged European. 3 5 7
The Data Protection Officer
The contracting party is DigitalOcean, LLC — notices to Broomfield, Colorado — under parent DigitalOcean Holdings, Inc. of New York, so the head of the chain sits outside the EU; Amsterdam regions are named alongside San Francisco ones, so EU hosting is available, though nothing pins customer data to it. For the rest of the chain I could verify nothing: we found no public information on the subprocessors and their locations, on safeguards against access by the US parent, or on data-centre certifications, even though pages for a data processing agreement, a privacy policy and a subprocessor list were among those captured. 5 7 9 11 12
The Skeptic
The contracting entity is DigitalOcean, LLC with parent DigitalOcean Holdings, Inc. in New York — a US group — while Droplets run in Amsterdam data centres among other regions, so EU siting exists under non-EU ownership. We found no public information on where backups are stored, the subprocessor chain, safeguards against group access to the data, or the terms of a data processing agreement. Who can reach the data is precisely the question these pages leave open; four. 3 5 7
Pricing transparency
panel disagrees
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over the contract from public pages alone: the price per tariff for the first term and on renewal, minimum term and how the price depends on it, setup fees, what is included (domains, mailboxes, SSL, backups, restores, migration), what costs extra (additional PHP versions or extended support, more backups, a restore, premium support, staging, CDN), traffic or resource overage, VAT treatment, and the cancellation terms.
0 — No public prices at all; every customer is a sales call.
3 — A starting price is shown, but the renewal price, minimum term or what is included is unclear.
5 — Tariffs are public with their monthly price and main inclusions, the minimum term stated, but at least one commonly needed piece (the renewal price after an introductory offer, setup fee, restores, extra backups, extended PHP support) is unpriced or hard to find.
8 — Every tariff priced with the price for the first term and on renewal side by side, the minimum term and setup fee stated, add-ons priced, overage handling stated, and VAT treatment for business customers stated.
10 — Complete price computability: the cost over three years derivable for a given tariff and set of add-ons, with every setup, restore, support and migration fee and the cancellation and data-return terms published.
The Agency Lead
Every Droplet size carries its hourly and monthly price side by side — 4 GiB RAM, 2 vCPU, 80 GiB SSD at $24.00 — with backups at 20% or 30% of the Droplet cost, snapshots at $0.06/GB per month, and monthly or per-second pay-as-you-go billing, so there is no first-year price that doubles later. Two gaps keep it from full clarity: we found no public information on bandwidth overage rates beyond the included transfer or on VAT treatment, and the refund line reads "We do not offer refunds." 1 3
The Small-Business Owner
The price list is unusually open: every server size carries both an hourly and a monthly figure, from $4.00 a month for the smallest to $2,096.00 for the largest storage machine, backups cost 20% or 30% of the server or $0.01/GiB per month, snapshots are $0.06/GB per month, and billing is pay-as-you-go or monthly with per-second metering from January 2026. For a business buyer it is not fully computable: we found no public information on VAT treatment, on the price of transfer beyond the included allowance, or on restore fees, and the refund policy reads "We do not offer refunds." 1 2 3
The Shop Operator
The pricing page lets me compute the bill: every size from 512 MiB/1 vCPU at $4.00 a month up to 96 GiB/48 vCPUs at $1,008.00 carries vCPUs, RAM, SSD and transfer with hourly and monthly figures side by side, backups cost 20% or 30% of the Droplet or $0.01/GiB usage-based, snapshots are $0.06/GB per month, and per-second billing with its minimum charge is spelled out — my three-year compute cost is derivable. Still open for a shop on a budget: the transfer overage rate, the price of Premium Support and VAT treatment are not stated in the captured facts, and the refund policy reads "We do not offer refunds." 1 3
The Freelance App Developer
The most computable pricing I have reviewed: every size carries hourly and monthly prices side by side from $0.00595/$4.00 for 512 MiB up to $1.50000/$1,008.00 for 96 GiB, backups at 20% (Weekly) or 30% (Daily) of Droplet cost or $0.01/GiB per month, snapshots at $0.06/GB per month, and per-second billing from January 1, 2026 with a 60-second minimum, under monthly caps or usage-based billing and a plainly stated "We do not offer refunds." I found no public information on VAT treatment for business customers or the per-GiB price of transfer beyond each plan's included allowance. 1 2 3
The Data Protection Officer
Every plan is priced hourly and monthly side by side, from $4.00 a month for 512 MiB to $2,096.00 for the largest storage plan, with backups at 20% weekly or 30% daily of the Droplet cost, usage-based backups at $0.01/GiB per month, snapshots at $0.06/GB per month and per-second billing with a 60-second minimum. Two items a practice needs before signing we could not find: the rate for bandwidth beyond the included 500 GiB per month, and the VAT treatment for business customers. 1 3
The Skeptic
Every plan is priced to the hour and the month with exact resources, and add-ons carry real numbers — backups at 20% (Weekly) or 30% (Daily) of Droplet cost or $0.01/GiB per month, snapshots at $0.06/GB per month — with per-second billing and a minimum charge of 60 seconds or $0.01, whichever is higher, stated alongside pay-as-you-go and monthly caps. We found no public information on overage pricing beyond the included transfer or on VAT treatment for business customers, and the terms state "We do not offer refunds." Seven: nearly computable, not fully. 1 2 3
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about DigitalOcean Droplets
Is DigitalOcean Droplets European?
No. whats-best.ai classifies DigitalOcean Droplets as Rest of world.
Where does DigitalOcean Droplets store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does DigitalOcean Droplets have a free plan?
Yes. DigitalOcean Droplets has a free plan, per the vendor’s page captured 1 Nov 2026.
What are the best alternatives to DigitalOcean Droplets?
As of 2 Nov 2026, the panel rates Kinsta (3.5/5), Raidboxes (3/5) and Infomaniak Web Hosting (3/5) highest among the other 14 Web Hosting products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Raidboxes (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: DigitalOcean Droplets alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- We found no public information on compliance on the pages we read (digitalocean.com/products/droplets, digitalocean.com/products/app-platform, digitalocean.com/pricing/droplets, docs.digitalocean.com/reference/api, docs.digitalocean.com/platform/regional-availability, docs.digitalocean.com/support and 9 more). If the vendor publishes it somewhere else, send us the page. Know more? Tell us
- 34 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 9 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (15)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (cloud servers) www.digitalocean.com Checked 1 Nov 2026 Details →
- 2 Features page (app platform) www.digitalocean.com Checked 1 Nov 2026 Details →
- 3 Pricing page www.digitalocean.com Checked 1 Nov 2026 Details →
- 4 API documentation docs.digitalocean.com Checked 1 Nov 2026 Details →
- 5 Documentation (regions) docs.digitalocean.com Checked 1 Nov 2026 Details →
- 6 Support page docs.digitalocean.com Checked 1 Nov 2026 Details →
- 7 Service level agreement www.digitalocean.com Checked 1 Nov 2026 Details →
- 8 Security / trust page www.digitalocean.com Checked 1 Nov 2026 Details →
- 9 Privacy policy www.digitalocean.com Checked 1 Nov 2026 Details →
- 10 Terms of service www.digitalocean.com Checked 1 Nov 2026 Details →
- 11 Data processing agreement (dpa) www.digitalocean.com Checked 1 Nov 2026 Details →
- 12 Subprocessor list www.digitalocean.com Checked 1 Nov 2026 Details →
- 13 Security, backups & recovery — found from sitemap docs.digitalocean.com Checked 1 Nov 2026 Details →
- 14 Security, backups & recovery — found from sitemap docs.digitalocean.com Checked 1 Nov 2026 Details →
- 15 Scaling, migration & exit — found from sitemap docs.digitalocean.com Checked 1 Nov 2026 Details →