FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Hosting

Dorsa Cloud

UnclassifiedOfficial website

Dorsa Cloud is a cloud hosting and infrastructure provider used to run websites and applications. As infrastructure it acts as a processor and does not add marketing cookies to the sites it hosts. The most important compliance question is data location: because its servers are outside the European Economic Area, hosting European personal data with it raises international transfer issues that must be addressed before use.

Block Dorsa Cloud until consentScan my site
Overview

What does Dorsa Cloud do?

What Dorsa Cloud is

Dorsa Cloud is a cloud hosting and infrastructure provider that offers servers and platform services for running websites and applications. Like other hosts, it serves as the underlying infrastructure rather than a tracking technology, so its compliance profile is shaped by where data is stored and how the provider is contracted.

What data it processes and what cookies it sets

As infrastructure, Dorsa Cloud processes the data your application passes through it, including visitor IP addresses in server logs and any personal data your application stores. It does not add analytics or marketing cookies to hosted sites. Any cookies a visitor sees come from the application, though a strictly necessary technical cookie may exist at the server level.

GDPR role and the transfer question

Dorsa Cloud acts as a processor under Article 28 of the GDPR, but because its servers are outside the European Economic Area the bigger issue is Chapter 5 on international transfers. Storing European personal data on infrastructure in a third country without an adequacy decision requires appropriate safeguards and may expose the data to foreign access, which the controller must assess.

Consent requirements

Hosting itself does not require visitor consent, because delivering the requested website and its strictly necessary cookies are exempt. The relevant safeguards here are contractual and organisational rather than a cookie banner, and consent obligations still apply to any analytics or marketing your application loads.

Data location and transfers

Confirm exactly where Dorsa Cloud stores your data. If the country has an adequacy decision, transfers are straightforward. If it does not, you need Standard Contractual Clauses and a transfer impact assessment with supplementary measures such as encryption, and for sensitive data an EU based host is often the safer choice.

Practical compliance steps

Establish the hosting location, sign a data processing agreement and Standard Contractual Clauses if needed, carry out a transfer impact assessment, and apply encryption in transit and at rest. Document the decision, minimise the personal data hosted there, and consider an EU provider where the transfer risk is high.

Compliance

Dorsa Cloud and the GDPR

Legal basis
Contract and legitimate interest (processor, Art. 28 GDPR)
Risk level
medium
Applicable regulations
GDPR

Impact assessment (DPIA)

The central concern is the transfer of personal data outside the EEA to a country that may lack an adequacy decision. Assess the exact location, whether Standard Contractual Clauses and supplementary measures are in place, the sensitivity of the data, and whether an EU host would be more appropriate.

Sample text for your banner

Our website is hosted on Dorsa Cloud infrastructure. Hosting uses only strictly necessary technologies to deliver the site and does not track you for marketing.
Cookies and trackers

What Dorsa Cloud sets and contacts

Tracking method
Cloud hosting and server infrastructure, no client side tracking by default
Server location
Outside the European Economic Area, confirm the exact region with the provider
Cookieless mode available
Yes
Data transferred outside the EU
Dorsa Cloud operates infrastructure outside the European Economic Area. If the hosting country has no EU adequacy decision, transferring European personal data there requires Standard Contractual Clauses together with supplementary measures, and in some cases may be difficult to justify. Confirm the data location before hosting EU personal data.

Cookies set (2)

NameTypeDurationPurpose
dorsa_sessionFunctionalSessionStrictly necessary session cookie used by the hosting and control panel to deliver the service.
csrftokenFunctionalSessionStrictly necessary security cookie that protects forms against cross site request forgery.

Third-party domains contacted (1)

  • dorsacloud.com
Questions

Frequently asked questions about Dorsa Cloud

Can't find your question? Write to us, we answer fast.

Does Dorsa Cloud set cookies on my visitors?

Dorsa Cloud does not add marketing or analytics cookies to the sites it hosts. Visitor facing cookies come from your application, and the server may use a strictly necessary technical cookie that does not require consent.

Do I need consent for Dorsa Cloud?

No, not for hosting. The relevant compliance work is contractual and about transfers, not a cookie banner. Consent still applies to any analytics or marketing tools your application loads.

What is the legal basis for Dorsa Cloud?

As a processor under Article 28 of the GDPR, Dorsa Cloud acts on your instructions under a data processing agreement. For data leaving the EEA you also need a transfer mechanism under Chapter 5 of the GDPR.

Does Dorsa Cloud transfer data outside the EU?

Yes, its infrastructure is outside the European Economic Area. If the country lacks an adequacy decision, you must put Standard Contractual Clauses and supplementary measures in place, and assess whether the transfer can be justified.

Is a DPIA needed for Dorsa Cloud?

A transfer impact assessment is advisable whenever European personal data is hosted in a third country without adequacy. Cover the data sensitivity, the legal regime of the destination, and the safeguards in place.

How do I use Dorsa Cloud compliantly?

Confirm the hosting location, sign a data processing agreement and Standard Contractual Clauses, run a transfer impact assessment, and encrypt data in transit and at rest. For sensitive or large scale data, consider an EU based host instead.

Are there alternatives to Dorsa Cloud?

For EU hosting, alternatives include Hetzner, OVH, Scaleway, and IONOS, which keep data within the European Economic Area and remove the third country transfer question for most use cases.

How do I reflect Dorsa Cloud in my privacy notice?

Name Dorsa Cloud as a hosting processor, state the country where data is stored, and describe the transfer safeguards you rely on. Because it sets no non essential cookies, it usually belongs in the privacy notice rather than the cookie banner.

Same category

More services: Hosting

See the whole category

Rosti

Rosti is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Rosti offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Rosti empowers organizations to optimize strategy and maximize return on investment.

Hosting

Lagoon

Lagoon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Lagoon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Lagoon helps organizations maintain robust websites that meet user expectations and technical requirements.

Hosting

Cherokee

Cherokee is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Cherokee integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Cherokee helps organizations maintain robust websites that meet user expectations and technical requirements.

Hosting

WP Engine

WP Engine is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. WP Engine supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, WP Engine remains a leading web development choice.

Hosting

Envoy

Envoy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Envoy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Envoy helps organizations maintain robust websites that meet user expectations and technical requirements.

Hosting

Aruba.it

Aruba.it is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Aruba.it supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Aruba.it enables informed decisions that improve experience and drive results.

Hosting

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site