Web Hosting
Raidboxes
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Raidboxes GmbH · raidboxes.io
Compare with Kinsta → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Raidboxes at a glance
- Vendor
- Raidboxes GmbH
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Default not stated; pages mention Germany source, captured 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Starting price
- “statt 24,00 € 50% Rabatt 12,00 € pro Monat” (vendor’s words) source, captured 1 Nov 2026
- Panel verdict
- The AI panel rates Raidboxes 3/5, the mean of 6 judges. Raidboxes GmbH of Münster sells managed WordPress hosting whose strongest area is management and developer tools, where scores cluster at 7: one-click staging with deployment in either direction between dev, staging and live, cloning and templates, single sign-on into every WordPress backend, SSH with WP-CLI and Git, and box transfer to the client while the agency stays admin. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Raidboxes GmbH of Münster sells managed WordPress hosting whose strongest area is management and developer tools, where scores cluster at 7: one-click staging with deployment in either direction between dev, staging and live, cloning and templates, single sign-on into every WordPress backend, SSH with WP-CLI and Git, and box transfer to the client while the agency stays admin. Support and service tops out at 6 — live chat daily from 8 to 22 in German and English with a stated response under ten minutes, but we found no public information on a phone channel. Performance and reliability, security and backups, and scaling and portability range from 6 to 7: the higher scores credit published per-plan resources and a free demo migration (a copy within two business days, no payment data required), though we found no public information on an uptime service credit or point-in-time restore. The clearest split is on sovereignty and pricing transparency (both ranging 6 to 7): the lower scores turn on captured pages giving different figures for identically named plans and for where hosting runs.
Speaks for it
- One-click staging deploys in either direction between dev, staging and live.
- SSH with WP-CLI and Git, plus SFTP, phpMyAdmin and Adminer, is documented for direct access.
- A finished box can be transferred to the client while the agency stays admin, with bulk admin actions across boxes.
- A free demo migration builds a copy within two business days, with a 14-day trial and no payment data required.
- Daily automatic backups run on a dedicated, specially secured server with 7, 14 or 30 days retention depending on the plan.
Held against it
- The terms make the customer responsible for their own backup copies, with restores only back onto the booked storage and no claim to backup media.
- We found no public information on an uptime guarantee with a service credit behind the stated 99.99 % figure.
- We found no public information on point-in-time restore of single files or tables, or a second backup location.
- We found no public information on the minimum term, setup fees or restore costs.
- The captured pages give different figures for identically named plans and for where hosting runs — the security page names Equinix in Düsseldorf while the privacy policy lists Amazon Web Services EMEA in Luxembourg and DigitalOcean LLC in the USA as hosting subprocessors.
Best for
- You run an agency or freelance studio that builds WordPress sites and needs staging, cloning, templates, single sign-on and client handover in one dashboard.
- You want to move an existing WordPress site before paying — a copy on a temporary domain within two business days, 14 days to test, no payment data required.
- You need a host that publishes concrete per-plan limits (vCores, RAM, SSD, Varnish cache size) instead of 'unlimited'.
- You want a German contracting entity (Raidboxes GmbH, commercial register HRB 16184) with a published subprocessor list naming providers, locations and safeguards.
Avoid if
- You must be able to take backups away on media — the terms grant restoration only back onto the booked storage, with no claim to backup media.
- You need one consistent published price per plan for a multi-year cost computation — the captured pages give different figures for identically named plans.
- Your compliance review requires a single documented hosting location — the captured pages give different figures for where hosting runs.
- You need support outside the daily 8-to-22 live-chat window, such as overnight incident response.
The scores
| Criterion | Panel median |
|---|---|
| Performance, uptime & infrastructure | 3 of 5 |
| Control panel, WordPress & developer tooling | 3.5 of 5 |
| Security, backups & recovery | 3 of 5 |
| Scaling, migration & exit | 3 of 5 |
| Support, domains & email | 3 of 5 |
| European sovereignty | 3.5 of 5 |
| Pricing transparency | 3.5 of 5 |
Performance, uptime & infrastructure
Show reasoningHide reasoning
How this is scored
What runs the sites and how reliably: CPU, RAM and storage per tariff stated, SSD or NVMe storage, current PHP versions and how long old ones are kept, HTTP/2 or HTTP/3, server-side caching (OPcache, Redis, a page cache), a CDN, databases and their limits, resources that are guaranteed rather than shared without a stated limit, an uptime SLA with a service credit, a public status page with incident history, and redundancy of the platform. Where the data centre is located is scored under sovereignty.
0 — Not a hosting product; websites or web apps cannot be run on it.
3 — Storage and a number of sites per tariff are stated and the product is described as fast; resources, PHP versions, caching and uptime are basic or not described.
5 — Resources per tariff stated (CPU or a performance class, RAM, SSD or NVMe storage), several current PHP versions selectable, HTTP/2, server-side caching or a cache plugin documented, free SSL, a stated uptime target, and a public status page.
8 — Dedicated or guaranteed resources stated per tariff, HTTP/3 and a CDN included, Redis or an object cache, PHP versions kept current with an end-of-life policy published, an uptime SLA with a service credit, a status page with incident history, and a redundant platform (replicated storage, failover) described.
10 — Infrastructure documented to the level an operator could audit: hardware generations and storage architecture named, performance measured and published with method, an SLA with credits and exclusions at 99.95 % or above, every incident on the status page with a post-mortem, and scaling without downtime documented.
The Agency Lead
Per-tariff resources are published — vCores up to six with dedicated cores on the top plans, 2–12 GB RAM, SSD storage, even the Varnish cache size — plus a Redis object cache add-on, an integrated CDN with HTTP/2, free SSL, a 99.99 % uptime figure, a status page, and measured results published across 500+ demo migrations. I found no public information on an uptime SLA with service credits, status-page incident history, HTTP/3, or how long old PHP versions are kept, so for sixty client sites it sits a tier below auditable. 2 4 8 12 13 20
The Small-Business Owner
The tariffs spell out real numbers — vCores, RAM, SSD storage, a Varnish cache with its size, a 99.99 % uptime figure, HTTP/2, an integrated global CDN and a Redis add-on, and the demo-migration measurements with over 500 samples are the kind of evidence I can respect. But that uptime number is a claim, and I found no public information on an SLA with compensation, incident history on the status page, redundant storage, or how long old PHP versions stay available. 2 4 1 13 20
The Shop Operator
Resources per tariff are published down to vCores, RAM, SSD, PHP memory limit and even Varnish cache size, with dedicated cores on the two top plans — though the performance page promises exclusive resources while the pricing page lists shared cores on four plans, so the captured pages give different figures for the resource guarantee. There is a stated 99.99 % uptime figure, a status page, Redis as an add-on and an integrated CDN with HTTP/2, plus measured results from over 500 demo migrations. I found no public information on an uptime SLA with a service credit, HTTP/3, a PHP end-of-life policy or platform redundancy — the things I would want in writing before trusting a host with Black Friday. 1 2 4 12 13 20
The Freelance App Developer
The pricing page gives me real numbers to plan against — vCores with shared or dedicated type per plan, RAM, SSD, Varnish cache in MB and a PHP memory limit — plus HTTP/2, free SSL, a 99,99 % uptime figure and a public status page. The 99,99 % is a claim without a service credit, PHP versions appear only as switchable in a staging FAQ with no version list or end-of-life policy, and Redis and the CDN come as paid add-ons rather than included. 1 2 12 13 14 20
The Data Protection Officer
Resources per tariff are stated down to vCores with shared or dedicated CPU type, RAM, SSD storage and PHP memory limit, plus Varnish server cache per plan, a 99.99 % uptime figure, a public status page, and performance figures measured across more than 500 demo migrations. We found no public information on an uptime guarantee with a service credit, HTTP/3, platform redundancy or a PHP end-of-life policy, and the CDN and Redis object cache come as paid add-ons rather than included. 1 2 4 12 13 20
The Skeptic
The plans spell out vCores with shared or dedicated type, RAM, SSD storage and Varnish cache sizes, and a 99.99 % uptime figure is published with a public status page — but that uptime number carries no SLA credit, and we found no public information on HTTP/3, a PHP end-of-life policy, incident history on the status page, or platform redundancy. The speed claims (up to 8x faster) rest on the vendor's own measurements across 500-plus demo migrations, not an independent or published method. 2 1 4 13 20 8
Control panel, WordPress & developer tooling
Show reasoningHide reasoning
How this is scored
How sites are set up and run day to day: the control panel or console, one-click installers for named CMS and shop systems, managed WordPress features (automatic core and plugin updates, staging, cloning, a search-and-replace), SSH, SFTP, Git deployment, Composer, cron jobs, a PHP version and settings per site, databases and phpMyAdmin or an equivalent, log access, a public API and command-line tool, infrastructure-as-code support, team members and roles, and client or project management for agencies. On a cloud server: images, snapshots, firewalls, private networks and the API that manages them.
0 — No documented way to deploy or manage a website on the product.
3 — A control panel with FTP access and a one-click installer for WordPress; SSH, staging, Git, an API and roles are basic or not described.
5 — A control panel with installers for several named CMS, SSH and SFTP, cron jobs, PHP version per site, databases with a web admin, a staging copy or snapshots, team members with access rights, and log files available — or, for a cloud server, a console with images, snapshots, a firewall and a documented API.
8 — Managed WordPress or app tooling (automatic updates with rollback, one-click staging and push to live, cloning), Git deployment and Composer documented, a public REST API and CLI covering sites, databases, domains and backups, granular roles per project, and an agency view with client projects, transfer of ownership and white-label or reseller options.
10 — A platform that scales across an agency or a development team: everything in the panel available through a versioned API, CLI and an infrastructure-as-code provider, preview environments per branch, audit logs of every change, SSO for the team, and projects that can be handed to the client with billing transferred.
The Agency Lead
This is close to what my shop needs: one dashboard with single sign-on into every WordPress backend, one-click install, one-click staging with push to live, deployment in either direction between dev, staging and live with selective database or file transfer, cloning and templates, bulk updates across boxes, plus SFTP, SSH with WP-CLI and Git, phpMyAdmin and Adminer. The handover story fits agency work — the client becomes the hosting contract partner while I stay admin — but I found no public information on roles or restricted access for freelancers, a public API, or Composer, and automatic updates are documented without a rollback. 3 7 14 15 16
The Small-Business Owner
Everything my WordPress site needs day to day is documented: one-click installation, one-click staging with push to live, cloning and templates, automatic WordPress, plugin and theme updates I can configure, bulk actions over many sites, single sign-on, plus SFTP, SSH with WP-CLI and Git, phpMyAdmin and Adminer for whoever I hire. There is even an agency view where a finished box is handed over to my company while I stay admin. I found no public information on a public API, team roles or Composer. 15 14 7 3 2
The Shop Operator
The dashboard tooling is genuinely deep: one-click WordPress installation, configurable automatic updates, one-click staging with bidirectional deploys and selective database or file transfers, cloning with templates, and SSH with WP-CLI and Git plus SFTP, Adminer and phpMyAdmin. The agency side is real too — boxes can be transferred to the client while I stay admin, bulk actions run across boxes, and dev boxes are free for a period. I found no public information on a public API or command-line tool for the panel itself, per-project roles, or audit logs. 2 3 7 14 15
The Freelance App Developer
For my daily workflow they document SSH with WP-CLI and Git, SFTP, phpMyAdmin and Adminer, one-click staging with deployments in either direction between dev, staging and live, cloning with templates, bulk admin across boxes, per-plugin scoping of automatic updates, and single sign-on into every WordPress backend. The agency story is real too — box transfer to the client while staying admin, free dev boxes for 90 days, reseller discounts. We found no public information on a public API or CLI for scripting, Composer support, cron control or per-project roles, and rollback for automatic updates is not documented. 3 7 14 15 16
The Data Protection Officer
Managed WordPress tooling is well documented: one-click installation, automatic WordPress, plugin and theme updates, one-click staging with deployment in either direction between staging and live, cloning and templates, single sign-on into all WordPress backends, bulk actions across boxes, box transfer to the client while staying admin, and direct access via SFTP, phpMyAdmin, Adminer and SSH with WP-CLI and Git. We found no public information on a vendor REST API or command-line interface of its own, granular project roles, audit logs or Composer support. 3 7 14 15
The Skeptic
The day-to-day story is documented properly: one-click WordPress install, one-click staging with deploy to production, cloning and templates, automatic core, plugin and theme updates with configurable scope, SFTP, SSH with WP-CLI and Git, phpMyAdmin and Adminer, bulk actions across boxes, single sign-on, and an agency model where the client becomes the hosting contract party while you stay admin. What I could not find: a public platform API or CLI covering sites and backups, granular roles per project, audit logs, or Composer. 15 3 14 7
Security, backups & recovery
Show reasoningHide reasoning
How this is scored
How the sites are protected and how fast they come back: isolation between customers (containers, separate PHP processes, chroot), free SSL with automatic renewal, a web application firewall, malware scanning and cleanup, DDoS protection, two-factor login to the panel, brute-force protection, backup frequency and retention, off-site or geo-redundant backup copies, self-service restore of files and databases from a point in time, restore of single sites or tables, security updates handled by the vendor on managed tariffs, and security certifications (ISO 27001, BSI C5, SOC 2) with their scope.
0 — No backups and no security measures described, and the customer is told to secure the site entirely on their own.
3 — Free SSL and some backup exist; frequency, retention, restore and the security measures are basic or not described.
5 — Free SSL with automatic renewal, daily backups with a stated retention, restore by the customer in the panel, account isolation described, DDoS protection, two-factor login to the panel, and malware scanning or a firewall offered.
8 — Backups several times a day or on demand with retention of 14 days or more, stored in a second location, point-in-time restore of single files, databases or sites, a web application firewall and malware cleanup included, isolation per site stated, and an ISO 27001 or equivalent certification of the hosting operation published.
10 — Recovery that can be evidenced: backup and restore times stated and tested, immutable or off-provider backups, recovery objectives (RPO and RTO) published, a security incident process and disclosure policy, certifications with their scope and audit reports available, and penetration test results or a bug bounty programme.
The Agency Lead
Nightly automatic backups run on a dedicated, specially secured server with retention stated per tariff (7, 14 or 30 days) plus manual backups, and the stack is described in real terms: container isolation per project, DDoS protection, an exploit detector, one-click IP blocking, two-factor login and free SSL, with ISO 27001 among the listed certifications. I found no public information on point-in-time restore of single files or tables, malware scanning or cleanup, or a second backup location — and the terms put backup responsibility on the customer and exclude handing backups over as media. 1 2 3 5 11 15 16
The Small-Business Owner
Daily and manual backups with 7, 14 or 30 days retention depending on the plan, stored on a separate specially secured server, container isolation per site, free SSL, DDoS protection, an exploit detector, one-click IP blocking, two-factor login by app, email or text, and ISO 27001 stated — that covers most of my worries. What keeps me cautious: the terms put the duty of backing up my own data on me and grant restores only back onto their storage, not the backups themselves, and I found no public information on point-in-time restore of single files or databases, malware cleanup, or a second backup location. 2 16 15 11 5
The Shop Operator
Isolation per project, a security shield with DDoS protection and an exploit detector, two-factor login by app, email or SMS, nightly automatic backups with 7, 14 or 30 days of retention depending on plan, manual backups, and backups kept apart from the live website are all documented, and ISO 27001 with SOC 2 Type II is published for the data centre. For my database-back-within-the-hour requirement, nightly backups with a restore path are the floor, and the terms place responsibility for independent backup copies on me with no claim to backup media. I found no public information on point-in-time restore of single files or tables, backup storage in a second location, or malware cleanup. 2 5 11 15 16
The Freelance App Developer
Isolation runs per project in its own container, the Security Shield names DDoS protection and an exploit detector, IPs are blockable with one click, two-factor works via app, email or SMS, SSL is standard, and daily backups land on a dedicated, specially secured server with 7 to 30 days retention by plan, manual backups included, with ISO 27001 among the listed data-centre certifications. We found no public information on a second backup location, point-in-time restore of single files or tables, malware cleanup or a named web application firewall — and the terms put the customer in charge of their own backup copies, with no right to backup media, only restoration to the booked storage. 2 5 11 15 16
The Data Protection Officer
Container isolation of each project, DDoS protection, an exploit detector, IP blocking, protected WP-Config, two-factor login via app, email or SMS and a vulnerability disclosure programme are documented, free SSL is standard, and daily overnight backups carry a stated retention per plan (7, 14 or 30 days) alongside manual backups. We found no public information on backups in a second location, point-in-time restore of individual files or databases, or malware cleanup, and the terms place backup responsibility on the customer with no right to backups on media — a point buyers holding patient or client contact data should weigh. 1 2 5 10 11 16
The Skeptic
Nightly automatic backups with retention stated per plan (7, 14 or 30 days), manual backups on demand, container isolation per project, DDoS protection, an exploit detector, two-factor login and free SSL are documented, and ISO 27001 and SOC 2 certifications are published for the Düsseldorf data centre. But the terms put the backup burden back on the customer, who must keep independent copies and has no claim to backup media, and we found no public information on malware cleanup, point-in-time restore of single files or databases, or where the backup server sits. 2 3 16 11 5
Scaling, migration & exit
Show reasoningHide reasoning
How this is scored
What it takes to grow and what it takes to leave: tariff changes up and down without a migration, resource limits stated rather than "unlimited" with a fair-use clause, add-on resources, the path from shared hosting to a server or cluster within the same vendor, a free or paid migration service from another host, standard tooling that runs elsewhere (no proprietary stack lock-in), full export of files, databases and mailboxes, domain transfer out without a fee, cancellation periods and minimum terms, and the deletion of data after the contract ends.
0 — Data cannot be taken out and the contract cannot be cancelled on stated terms.
3 — A tariff upgrade exists and files can be downloaded by FTP; limits, migration in, export and exit terms are basic or not described.
5 — Tariff upgrades and downgrades in the panel, the main limits per tariff stated (storage, sites, databases, mailboxes, inodes or processes), a migration service or guide from another host, files and databases exportable with standard tools, domain transfer out documented, and the cancellation period stated.
8 — Resources scalable without moving the site, a documented path from hosting to a server or cluster at the same vendor, a free migration service with its scope stated, every limit including fair use published, monthly terms available, full export including mail, and deletion of data after termination with its deadline stated.
10 — Growth and exit with no friction: scaling on demand without downtime, everything built on open standard tooling with no proprietary lock-in, a complete export in a format another host imports, migration out supported, and cancellation, data return and deletion documented with deadlines.
The Agency Lead
Migration in is genuinely good for an agency: a free demo migration builds a copy within two business days with no downtime at the old host, the domain only moves when I decide, and there's a 14-day free trial without payment data. Scaling up is covered with real-time resource adjustment, a burst mode beyond the booked quota and stated per-tariff limits, but I found no public information on downgrades, domain transfer-out terms, full export including mail, or how data is deleted after the contract ends. 1 2 4 8 17
The Small-Business Owner
The free migration is genuinely spelled out — a copy of my site within two business days, no downtime, my current host stays live, fourteen days to test before I decide, and no payment data needed — and resources can be adjusted in real time with a burst mode and priced add-ons like SSD extensions. The main limits per tariff are published. But I found no public information on the cancellation period for the hosting itself, transferring a domain out, exporting my mailboxes, or when my data is deleted after the contract ends. 8 17 4 2 18 20
The Shop Operator
Scaling for one weekend without moving the shop is at least claimed: a burst mode grants resources beyond the booked quota during load spikes, resources can be adjusted in real time, SSD extensions are priced, and plan upgrades run through the dashboard or support. Migration in is free and well scoped — a copy within two business days, fourteen days to test with no payment data, no downtime, and the domain only moves on my decision — while export runs through standard tools like SFTP and phpMyAdmin. I found no public information on downgrade terms, fair-use or traffic limits, or what happens to my data after termination. 2 4 8 12 17 18
The Freelance App Developer
Getting in is excellent: a free demo migration puts a copy on a temporary domain within two business days while the live site stays untouched, no payment data required, with results published from 500+ migrations; limits are numeric everywhere instead of "unlimited", resources adjust in real time and a burst mode grants headroom beyond quota. Monthly billing and a 14-day withdrawal right with refunds within 14 days by the original payment method are stated. We found no public information on a path from the boxes to a server or cluster, on data deletion after termination, or on domain transfer out — mail runs through a bookable Mailbox.org add-on, and domain contracts are excluded from the withdrawal right. 2 4 8 10 17 18
The Data Protection Officer
Real-time resource adjustment with a burst mode beyond the booked quota, a free migration with its scope stated (a copy within two business days, live site untouched, 14-day trial deleted afterwards), export with standard tools, and self-service termination with a 14-day consumer withdrawal and refunds within 14 days are documented, with all plan limits published. We found no public information on tariff downgrades, domain transfer out, a full export including mail, or the deadline by which data is deleted after the contract ends — the last point matters for appointment and contact-form data. 4 8 11 17 18
The Skeptic
Migration in is genuinely free and well described — a copy within two business days, 14-day test with no payment data, no downtime, domain transferred only when you decide — and resources can be adjusted in real time with a burst mode beyond the booked quota. The exit side is thinner: domain contracts are excluded from the right of revocation, the customer has no claim to backup media, and we found no public information on domain transfer out, a path to a dedicated server or cluster, mail export, or a stated deadline for deleting data after termination. 8 17 4 18 11
Support, domains & email
Show reasoningHide reasoning
How this is scored
Who helps and what comes with the hosting: support channels (phone, chat, ticket, email), hours and languages, response times stated or guaranteed, technical depth (WordPress or server experts, help with a hacked site), a help centre and documentation, a premium or managed support option, an agency or partner programme, and the domains, SSL certificates and mailboxes included or bookable in the same account, with their DNS management and mail features (IMAP, webmail, spam filter, mailbox size).
0 — No support offered beyond a community forum and no domain or email service.
3 — Email or ticket support and a help centre; hours, language, response times and domain and mailbox features are basic or not described.
5 — Support by phone or chat and ticket in the customer's language with hours stated, a searchable help centre, domains and mailboxes bookable in the same account with DNS management, and webmail with a spam filter.
8 — Support around the clock by people with stated technical expertise, response times stated per channel, help with hacked or broken sites, a premium support or managed service tier, an agency or partner programme with its benefits stated, and mailboxes with stated size, aliases and server-side filtering.
10 — Support with guarantees: response times contractually bound in an SLA, a named contact or account manager for business customers, proactive incident notifications, support satisfaction or response figures published, and every included service (domains, DNS, mail, certificates) documented with its limits.
The Agency Lead
Live chat in German and English, every day from 8 to 22 including weekends and holidays, answered in under ten minutes by real WordPress and WooCommerce people with no ticket queue, and it's included in the hosting; there's a help centre, a status page, bookable domains and mailboxes, and a genuine agency programme with personal partner support. I found no public information on customer phone hours, mailbox sizes or DNS detail, and the captured pages give different figures for support availability (daily 8 to 22 versus "around the clock" on one add-on page). 2 6 7 10 13 19 20
The Small-Business Owner
Real WordPress experts, in German and English, in live chat every day from 8 to 22 including weekends and public holidays, answers in under ten minutes, and the support is included in the hosting — that part I genuinely like, plus a help centre, status page and an agency programme with personal partner support. Domains and mailboxes are bookable, the email running through Mailbox.org in Germany. But when my site shows a warning I want a phone call, and I found no public information on a support phone number, on mailbox size, webmail or spam filtering, and the chat is closed overnight. 6 19 20 2 10
The Shop Operator
Live chat staffed by WordPress and WooCommerce experts, daily from 8 to 22 including weekends and holidays, response under ten minutes, in German and English, included in the managed hosting — and one page in the performance add-on context says support around the clock, so the captured pages give different figures for support hours. The partner programme benefits are stated, and domains and mailboxes are bookable in the same account, with email provided through Mailbox.org in Germany. I found no public information on mail features such as mailbox size, aliases or spam filtering, and a premium support option is raised in the FAQ but its answer is not shown. 2 6 7 13 19 20
The Freelance App Developer
Live chat staffed by real WordPress and WooCommerce people, no bots and no tickets, German and English, daily from 8 to 22 including weekends and holidays, with a stated response under ten minutes, a help centre, a status page and a genuine partner programme with personal agency support. It is not around the clock on the main pages (a 24/7 mention appears only on the performance add-on page), and a premium support tier exists only as an unanswered FAQ question. Domains from 1,50 € and mailboxes from 3,00 € are bookable in the same account, but we found no public information on DNS management, webmail, spam filtering or mailbox sizes. 2 6 7 13 19 20
The Data Protection Officer
Live chat staffed by WordPress and WooCommerce experts is available daily from 8 a.m. to 10 p.m., 365 days a year, in German and English, with a stated response under 10 minutes, a help centre, a status page, and an agency programme with stated benefits. Domains ("ab 1,50 €"), mailboxes ("ab 3,00 €") and Microsoft 365 ("ab 4,67 €") are bookable in the same account, with mailboxes operated through Mailbox.org (Heinlein Hosting GmbH, Germany); we found no public information on mailbox sizes, aliases, spam filtering or DNS management details. 2 6 10 19 20
The Skeptic
Live chat every day from 8 to 22 including weekends and holidays, response in under ten minutes, real WordPress people in German and English with no ticket queue, a help centre, a status page, and an agency programme with stated benefits including personal partner support. Fourteen hours a day is not around the clock — the around-the-clock mention is tied to the performance add-on — the premium support question in the FAQ is raised without a captured answer, and we found no public information on a customer phone channel, DNS management, mailbox sizes or spam filtering. 6 19 13 20 7
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the servers, backups and support sit, and who the subprocessors are (data centre operator, CDN, DNS, mail filtering, support and payment tools). Independently sourced by the sovereignty pipeline; a host stores everything the customer's sites collect, so the whole chain counts, including where backups are kept and which non-EU group company can reach the data.
0 — Non-EU vendor and contracting entity, data centre location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the data centre location is unstated or non-EU and the subprocessors are not listed.
5 — EU data centres available and an EU contracting entity or EU representative, but parts of the chain (parent company, CDN, mail filtering, support, payment) run through non-EU providers without a stated safeguard.
8 — EU data centres named by location, EU contracting entity and parent, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated for the data centres.
10 — Sovereign end to end and evidenced: European ownership, entity, own data centres and every subprocessor, backups in the EU, no non-EU group access, data export and deletion documented, and certifications published with their scope rather than implied.
The Agency Lead
The chain is visible: Raidboxes GmbH in Münster with a commercial register number, websites hosted at Equinix in Düsseldorf, mailboxes from Mailbox.org in Germany, and a published subprocessor list naming every provider and country, with EU standard contractual clauses and Data Privacy Framework participation stated for the US ones. US companies do sit in the chain — DigitalOcean for hosting, plus Sentry, DocuSign, Calendly and Intercom — under those safeguards, and I found no public information on a published data processing agreement. 5 9 10 16
The Small-Business Owner
A German GmbH in Münster with a commercial register entry and German VAT ID, the server location stated as Equinix in Düsseldorf, and a privacy policy that actually names its subcontractors with their locations, including Mailbox.org in Germany for the mailboxes — that reads European to me. The captured pages give different figures for where hosting runs, because the privacy policy lists Amazon Web Services in Luxembourg and DigitalOcean in the USA as hosting providers while the security page names Equinix Düsseldorf, and I found no public information on a published data processing agreement, so I cannot go higher. 9 16 5 10 11
The Shop Operator
The contracting entity is a German GmbH with commercial register entry and VAT number in Münster, the marketing pages place the servers at Equinix in Düsseldorf, and the privacy policy lists the subprocessors with their locations and stated safeguards (EU standard contractual clauses, EU-US Data Privacy Framework) — though that same policy names AWS Luxembourg and DigitalOcean in the USA for hosting, so the captured pages give different figures for where the servers sit. US providers appear in parts of the chain such as error tracking, live chat and e-signature, each with a stated safeguard. I found no public information on a published data processing agreement or on a parent company. 5 9 10 16
The Freelance App Developer
A German GmbH in Münster with commercial register number and VAT ID contracts with you, the Equinix data centre in Düsseldorf is named, ISO 27001 and SOC 2 Type II appear among the data-centre certifications, and the privacy policy lists subprocessors with their locations and safeguards, including US providers such as DigitalOcean, Sentry, DocuSign, Calendly and Intercom under standard contractual clauses and the EU-US Data Privacy Framework. The captured pages give different pictures of the hosting chain — the security page names Equinix in Düsseldorf while the privacy policy lists DigitalOcean (USA) and AWS (Luxembourg) among hosting subprocessors — and we found no public information on a published data processing agreement, the parent company or where backups are kept. 5 9 10 16
The Data Protection Officer
The contracting entity is Raidboxes GmbH in Münster registered at the local court (HRB 16184), the data centre is named by location — Equinix in Düsseldorf — with ISO 27001, SOC 1 and SOC 2 Type II and PCI DSS published, and the privacy policy lists subprocessors with their countries and safeguards (EU standard contractual clauses, EU-US Data Privacy Framework). The chain nonetheless includes US providers (Calendly, Sentry, DocuSign, Intercom, Google reCAPTCHA, and DigitalOcean LLC listed for hosting), the captured pages give different pictures of the hosting chain — marketing pages name Equinix in Düsseldorf while the privacy policy lists Amazon Web Services EMEA in Luxembourg and DigitalOcean LLC in the USA as hosting subprocessors — and we found no public information on a published data processing agreement or on ownership beyond the GmbH itself. 5 9 10 11 16
The Skeptic
Raidboxes GmbH in Münster with a German commercial register entry and VAT ID, the Equinix data centre in Düsseldorf named by location, and a subprocessor list with locations and stated safeguards (EU standard contractual clauses, EU-US Data Privacy Framework) for the US providers among them. We found no public information on a published data processing agreement or a parent company, and the privacy policy lists DigitalOcean and Amazon Web Services as hosting subprocessors alongside the German data centre, so the captured pages give different pictures of where hosting runs. 9 5 10 16
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over the contract from public pages alone: the price per tariff for the first term and on renewal, minimum term and how the price depends on it, setup fees, what is included (domains, mailboxes, SSL, backups, restores, migration), what costs extra (additional PHP versions or extended support, more backups, a restore, premium support, staging, CDN), traffic or resource overage, VAT treatment, and the cancellation terms.
0 — No public prices at all; every customer is a sales call.
3 — A starting price is shown, but the renewal price, minimum term or what is included is unclear.
5 — Tariffs are public with their monthly price and main inclusions, the minimum term stated, but at least one commonly needed piece (the renewal price after an introductory offer, setup fee, restores, extra backups, extended PHP support) is unpriced or hard to find.
8 — Every tariff priced with the price for the first term and on renewal side by side, the minimum term and setup fee stated, add-ons priced, overage handling stated, and VAT treatment for business customers stated.
10 — Complete price computability: the cost over three years derivable for a given tariff and set of add-ons, with every setup, restore, support and migration fee and the cancellation and data-return terms published.
The Agency Lead
All six tariffs are published with the regular price shown beside the promo price — "statt 35,00 €" and "17,50 € pro Monat" — with the 50 % new-customer discount capped at twelve months, ten percent extra for annual payment, net prices plus 19 % VAT, and a long priced add-on list covering "Domain ab 1,50 €", mailboxes, Redis, SSD extensions and staging per plan. What stops me computing a three-year cost per client site: I found no public information on setup fees, the minimum term or notice period of the main contract, restore fees, or overage handling. 1 2 12 14 18
The Small-Business Owner
Six tariffs with monthly prices, several showing the regular price next to the discounted one, add-ons individually priced from domains at 1,50 € and mailboxes at 3,00 € to staging, Redis and performance extras, VAT treatment spelled out as net prices plus 19 % VAT for business customers, and the new-customer discount terms stated until 30.12.2026 for at most twelve months on top of a 10 % annual discount. As someone whose invoice has to match the website year after year, I mind that the captured pages give different figures for some plan prices, and I found no public information on the minimum term, setup fees or what a restore costs. 2 1 13 14 18
The Shop Operator
All six tariffs are published as monthly euro prices with the discounted first-term price and the regular price shown side by side, the new-customer discount has its terms, duration and expiry stated, add-ons from Redis to staging to SSD space are priced per plan, and VAT treatment is explicit (net prices, 19 % for business customers). Different captured pages give different figures for identically named plans, which I would clarify before signing. I found no public information on the minimum term, setup fees, restore fees or what a burst beyond quota costs, so I cannot compute the true cost over a contract from the public pages alone. 1 2 11 13 14
The Freelance App Developer
Discounted and regular prices sit side by side ("statt 18,00 €... 9,00 € pro Monat"), the 50 % new-customer discount states its duration (max 12 months) and validity date, add-ons are priced per plan from domains at 1,50 € to Redis at 3,00 € and 10,00 €, VAT is explicit at 19 % for business customers, and withdrawal refunds come within 14 days by the original payment method. Setup fees, traffic overage and restore costs are not priced on the captured pages, the minimum term appears only implicitly through monthly billing, and per-plan add-on prices on other pages reuse the same plan names, giving different figures across captured pages. 1 2 13 14 18
The Data Protection Officer
Plan prices show the introductory and regular price side by side (for example "statt 18,00 € 50% Rabatt 9,00 € pro Monat"), discount terms are stated precisely (50 % for at most 12 months on the first hosting contract, valid until 30.12.2026, plus 10 % for annual payment), add-ons are individually priced, cancellation with a 14-day withdrawal and refunds within 14 days is documented, and VAT treatment is stated as net prices excluding 19 % VAT for business customers. We found no public information on setup fees, restore fees or a stated minimum term, and the captured pages give different figures for the same plan names, which makes a multi-year cost computation harder. 1 2 11 13 14 18
The Skeptic
Monthly net prices for all six plans with the regular price printed next to the discounted one, the 50 % new-customer discount capped at twelve months and valid until 30.12.2026 on top of 10 % for annual payment, extensive add-on prices (staging, Redis, SSD extension, domains, mailboxes), and VAT treatment stated as net prices plus 19 % for business customers. What a buyer still cannot compute from the captured pages: minimum term, setup fee, restore and traffic-overage costs — we found no public information on those. 2 1 13 14
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Raidboxes
Is Raidboxes European?
Yes. whats-best.ai classifies Raidboxes as EU-Made.
Where does Raidboxes store data?
The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention Germany as hosting location, per the vendor’s page captured 1 Nov 2026.
Does Raidboxes have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Raidboxes?
As of 2 Nov 2026, the panel rates Kinsta (3.5/5), Infomaniak Web Hosting (3/5) and webgo Webhosting (3/5) highest among the other 14 Web Hosting products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Infomaniak Web Hosting (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Raidboxes alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Hosting location, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 7 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
Sources (20)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage raidboxes.io Checked 1 Nov 2026 Details →
- 2 Pricing page raidboxes.io Checked 1 Nov 2026 Details →
- 3 Features page (WordPress management) raidboxes.io Checked 1 Nov 2026 Details →
- 4 Features page (performance) raidboxes.io Checked 1 Nov 2026 Details →
- 5 Features page (security) raidboxes.io Checked 1 Nov 2026 Details →
- 6 Support page raidboxes.io Checked 1 Nov 2026 Details →
- 7 Features page (agencies) raidboxes.io Checked 1 Nov 2026 Details →
- 8 Features page (free migration) raidboxes.io Checked 1 Nov 2026 Details →
- 9 Legal notice raidboxes.io Checked 1 Nov 2026 Details →
- 10 Privacy policy raidboxes.io Checked 1 Nov 2026 Details →
- 11 Terms of service raidboxes.io Checked 1 Nov 2026 Details →
- 12 Performance, uptime & infrastructure — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 13 Performance, uptime & infrastructure — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 14 Control panel, WordPress & developer tooling — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 15 Control panel, WordPress & developer tooling — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 16 Security, backups & recovery — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 17 Scaling, migration & exit — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 18 Scaling, migration & exit — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 19 Support, domains & email — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →
- 20 Support, domains & email — found from sitemap raidboxes.io Checked 1 Nov 2026 Details →