CDN

MizbanCloud

MizbanCloud is an Iranian cloud infrastructure and CDN provider offering hosting, DNS, object storage and video streaming, with all data residing on servers inside Iran.

Block MizbanCloud until consent Scan my site

Overview

What does MizbanCloud do?

What MizbanCloud is

MizbanCloud is an Iranian cloud infrastructure provider that delivers content delivery network services, cloud DNS, virtual servers, cloud object storage and video and live streaming. Its primary market is organisations operating inside Iran, including both private companies and public sector clients. When a website is served through MizbanCloud, page assets and traffic are routed through edge nodes and origin servers that the company operates within Iranian territory.

What data and cookies it processes

As a CDN and hosting layer, MizbanCloud necessarily processes connection metadata such as IP addresses, request headers, user agent strings and timestamps in order to route, cache and protect traffic. The hosted application and its control panel may set first party session cookies for authentication and load balancing. Edge logging retains access records that can identify individual visitors, which makes the underlying data personal data under the GDPR even where MizbanCloud frames it as purely technical.

GDPR and ePrivacy implications

Under the ePrivacy Directive, any non essential cookies set on the visitor device require prior consent, while strictly necessary session and security cookies can rely on an exemption. Under the GDPR the dominant issue is location: routing personal data to servers inside Iran is a transfer to a third country with no European Commission adequacy decision. Controllers must therefore identify an appropriate safeguard, and in practice the standard contractual clause route is very hard to operationalise with Iranian providers.

Consent and transfer requirements

Because adequacy and standard contractual clauses are not realistically available, a controller relying on MizbanCloud for EU facing services would likely have to fall back on the narrow derogations in Article 49, such as explicit informed consent for the specific transfer. That consent must be granular, freely given and clearly explain the risks of sending data to Iran. Organisations should also confirm that sanctions and export control rules do not prohibit the arrangement before processing begins.

Practical compliance steps

For EU and EEA audiences the safest path is usually to serve traffic through an adequacy covered or EU hosted CDN rather than through Iranian infrastructure. Where MizbanCloud is genuinely required, document a data protection impact assessment, map exactly which personal data leaves the EEA, minimise log retention, and present clear consent and notice to visitors. Maintain records of processing and review the arrangement regularly against changing sanctions and supervisory authority guidance.

Compliance

MizbanCloud and the GDPR

MizbanCloud is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis: Consent for any non essential cookies set through hosted sites; legitimate interest may cover strictly necessary operational and security logging at the infrastructure layer
Risk level: high
Applicable regulations: GDPR, ePrivacy Directive, GDPR Chapter V transfer rules, applicable EU and national sanctions screening obligations

Impact assessment (DPIA)

A DPIA is strongly recommended. Hosting and CDN delivery from servers inside Iran means EU personal data is transferred to a third country with no adequacy decision and no practical standard contractual clause route, creating significant transfer risk. Assess the categories of personal data routed through Iranian edge nodes, log retention, government access exposure, sanctions screening, and whether equivalent EU or adequacy covered providers can be used instead.

Sample text for your banner

This site is delivered through MizbanCloud, a content delivery and hosting provider with infrastructure located in Iran. By continuing you consent to your connection data and any non essential cookies being processed on servers outside the European Economic Area. You can withdraw consent at any time in our cookie settings.

Cookies and trackers

What MizbanCloud sets and contacts

Tracking method: CDN edge logging and infrastructure analytics; first party session cookies set by hosted sites and the MizbanCloud control panel
Server location: Iran (data centers located within Iranian territory)
Data transferred outside the EU: MizbanCloud operates infrastructure inside Iran, which is a third country with no EU adequacy decision. Routing EU personal data through Iranian servers and CDN edge nodes constitutes an international transfer requiring appropriate safeguards under Chapter V of the GDPR, which are difficult to satisfy given sanctions and the absence of standard contractual clause mechanisms with Iranian entities.

Cookies set (3)

Name	Type	Duration	Purpose
session	Necessary	Session	Maintains the authenticated session for the MizbanCloud control panel and hosted application.
csrftoken	Necessary	1 year	Protects control panel forms against cross site request forgery.
__cf_edge	Necessary	Session	Edge routing and load balancing token used to direct the request to the correct CDN node.

Third-party domains contacted (3)

mizbancloud.com
cdn.mizbancloud.com
panel.mizbancloud.com

Questions

Frequently asked questions about MizbanCloud

Can't find your question? Write to us, we answer fast.

Write to us

Which cookies does MizbanCloud set?

MizbanCloud itself, as a CDN and hosting layer, mainly relies on strictly necessary cookies such as a session cookie, a CSRF protection token and an edge routing token. The hosted website may add its own analytics or marketing cookies on top, which are the publisher's responsibility.

Is consent required?

Consent is not required for the strictly necessary session and security cookies that keep the service working. Consent is required for any non essential analytics or marketing cookies set by the hosted site, and a clear notice should also cover the transfer of connection data to Iran.

What is the legal basis for processing?

Strictly necessary operational and security logging can rely on legitimate interest, while any non essential tracking needs consent under the ePrivacy Directive. Because data is hosted in Iran, controllers also need a valid Article 49 transfer basis, typically explicit consent.

Does it transfer data to the US or third countries?

Yes. MizbanCloud operates its infrastructure inside Iran, which is a third country without an EU adequacy decision. Serving EU visitors through MizbanCloud sends their connection data to Iran and triggers Chapter V transfer obligations.

Do I need a DPIA?

A DPIA is strongly advised whenever you route EU personal data through Iranian infrastructure, because the transfer risk and potential government access are high. The assessment should document the data flows, safeguards and whether an EU based alternative is feasible.

How do I implement it compliantly?

Map exactly which personal data passes through MizbanCloud, minimise log retention, and provide a clear consent and notice explaining the Iran transfer. For EU audiences, strongly consider an adequacy covered or EU hosted CDN instead, and complete sanctions screening before use.

What are privacy friendly alternatives?

EU or EEA hosted CDNs and adequacy covered providers such as Cloudflare, Bunny, Fastly or a regional European CDN avoid the Iran transfer problem entirely. These offer standard contractual clauses and clearer data residency for European audiences.

How do I update my cookie policy?

List the strictly necessary MizbanCloud cookies with their purpose and duration, disclose that hosting and delivery occur on servers in Iran, and name the third country transfer. Keep the policy aligned with your consent banner and review it whenever the setup changes.

GotiPath

GotiPath is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. GotiPath integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, GotiPath helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

ImageEngine

ImageEngine is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ImageEngine integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ImageEngine helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

WPCacheOn

WPCacheOn is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. WPCacheOn integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, WPCacheOn helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

Superspeed

Superspeed is a web performance optimization platform that helps websites load faster and deliver better user experiences. It provides detailed performance metrics, Core Web Vitals monitoring, and actionable optimization recommendations. Superspeed analyzes page speed, resource loading, and rendering to identify bottlenecks impacting user experience and search rankings. With automated optimization and real-time monitoring, Superspeed helps businesses achieve faster load times and improved SEO.

Analytics

Amazon CloudFront

Amazon CloudFront is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Amazon CloudFront integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Amazon CloudFront helps organizations maintain robust websites that meet user expectations and.

CDN

JSPM

JSPM is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. JSPM integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, JSPM helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site