Cloudways
Cloudways is a managed cloud hosting platform that deploys and operates applications on underlying providers such as DigitalOcean, AWS, and Google Cloud. As hosting infrastructure it acts as a processor for the websites it runs and does not add marketing cookies or tracking to those sites by default. The main compliance considerations are the data processing agreement, the choice of server region, and any strictly necessary cookies used for load balancing or security.
What does Cloudways do?
What Cloudways is
Cloudways is a managed cloud hosting platform. Rather than running its own data centres, it provisions and manages servers on underlying providers such as DigitalOcean, AWS, Google Cloud, Vultr, and Linode, and adds a management layer for deployment, scaling, backups, and security. It is popular for hosting WordPress, WooCommerce, and other applications.
What data it processes and what cookies it sets
As infrastructure, Cloudways processes whatever data your hosted application sends through it, including visitor IP addresses in server logs and any personal data the application stores. It does not inject marketing cookies or analytics into the sites it hosts. Any cookies a visitor sees come from the application itself, although load balancing or security layers may use a strictly necessary cookie.
GDPR role and implications
For the website owner, Cloudways acts as a processor under Article 28 of the GDPR, and the underlying cloud provider is a sub processor. This means you need a data processing agreement, you remain the controller for visitor data, and you should ensure appropriate security and a clear chain of responsibility down to the infrastructure provider.
Consent requirements
Hosting itself does not normally require consent, because serving the website the visitor requested and the strictly necessary cookies that support it are exempt under the ePrivacy Directive. Consent obligations arise from the analytics and marketing tools your application adds, not from Cloudways as the host.
Data location and transfers
Because Cloudways sits on top of global providers, the data location depends on the region you select when you create a server. Choosing an EU region keeps hosting within the European Economic Area, while a non EU region means transfers that must rely on Standard Contractual Clauses or the EU US Data Privacy Framework.
Practical compliance steps
Sign the Cloudways data processing agreement, select an EU region if your users are European, and record the underlying provider as a sub processor. Configure backups and security, set log retention, and focus your consent efforts on the analytics and marketing tools running inside your application rather than on the hosting layer.
Cloudways and the GDPR
- Legal basis
- Contract and legitimate interest (processor, Art. 28 GDPR)
- Risk level
- low
- Applicable regulations
- GDPR
Impact assessment (DPIA)
As a hosting processor, the key questions are the server region, the data processing agreement and sub processors, the security measures, and any transfers outside the EEA when a non EU region is chosen. A DPIA is rarely needed for hosting alone unless the hosted application is high risk.
Sample text for your banner
Our website is hosted on Cloudways. Hosting uses only strictly necessary technologies to deliver the site securely and does not track you for marketing.
What Cloudways sets and contacts
- Tracking method
- Managed cloud hosting infrastructure, no client side tracking by default
- Server location
- Customer selected cloud region, EU regions available
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Cloudways runs on underlying providers such as DigitalOcean, AWS, Google Cloud, Vultr, and Linode. Whether data leaves the EEA depends on the region you choose. Selecting an EU region keeps hosting in the EU, while non EU regions rely on Standard Contractual Clauses or the EU US Data Privacy Framework.
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| cw_lb | Functional | Session | Strictly necessary load balancing cookie that keeps a visitor on a consistent server during the visit. |
| cloudways_session | Functional | Session | Strictly necessary session cookie used by the hosting layer to deliver the site reliably. |
Third-party domains contacted (2)
cloudways.comcloudwaysapps.com
Frequently asked questions about Cloudways
Can't find your question? Write to us, we answer fast.
Does Cloudways set cookies on my visitors?
Cloudways does not add marketing or analytics cookies to the sites it hosts. Any cookies a visitor sees come from your application, although a load balancing or security layer may use a strictly necessary cookie that does not require consent.
Do I need consent for Cloudways?
No, not for hosting itself. Serving the requested website and its strictly necessary cookies are exempt from consent. Consent is needed only for the analytics and marketing tools your application loads.
What is the legal basis for Cloudways?
Cloudways is a processor under Article 28 of the GDPR, acting on your instructions, and the underlying cloud provider is a sub processor. The relationship is governed by a data processing agreement rather than visitor consent.
Does Cloudways transfer data outside the EU?
It depends on the region you choose. Selecting an EU region keeps hosting in the European Economic Area. A non EU region means transfers that must rely on Standard Contractual Clauses or the EU US Data Privacy Framework.
Is a DPIA needed for Cloudways?
A DPIA is rarely required for hosting alone. It may be relevant if the application you host carries out high risk processing, in which case the assessment covers the application rather than the hosting layer.
How do I use Cloudways compliantly?
Sign the data processing agreement, select an EU region where appropriate, record the underlying provider as a sub processor, and set log retention and security controls. Manage consent at the application level for any analytics or marketing.
Are there alternatives to Cloudways?
Alternatives include managed hosts such as Kinsta and SiteGround, or going directly to a provider like Hetzner, OVH, or Scaleway for EU only hosting. EU based providers can simplify the transfer analysis.
How do I reflect Cloudways in my cookie policy?
You generally list Cloudways as a hosting processor in your privacy notice rather than in the cookie banner, because it does not set non essential cookies. Document the region and sub processor, and list your application cookies separately.
REG.RU
REG.RU is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. REG.RU supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, REG.RU enables informed decisions that improve experience and drive results.
Raspbian
Raspbian is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Raspbian integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Raspbian helps organizations maintain robust websites that meet user expectations and technical requirements.
F5 BigIP
F5 BigIP is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. F5 BigIP supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, F5 BigIP ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Zend
Zend is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Zend integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Zend helps organizations maintain robust websites that meet user expectations and technical requirements.
Platform.sh
Platform.sh is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Platform.sh integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Platform.sh helps organizations maintain robust websites that meet user expectations and technical requirements.
Aruba.it
Aruba.it is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Aruba.it supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Aruba.it enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.