> How Dorsa Cloud hosting handles personal data, why its location matters for international transfers, and how to stay GDPR compliant in the EU.
>
> Canonical: https://www.flowconsent.com/en/services/hosting/dorsa-cloud

Hosting

# Dorsa Cloud

Unclassified · [Official website](https://dorsa.cloud)

Dorsa Cloud is a cloud hosting and infrastructure provider used to run websites and applications. As infrastructure it acts as a processor and does not add marketing cookies to the sites it hosts. The most important compliance question is data location: because its servers are outside the European Economic Area, hosting European personal data with it raises international transfer issues that must be addressed before use.

[Block Dorsa Cloud until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=hosting) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Hosting](https://www.flowconsent.com/en/services/hosting)

- Consent

  Unclassified

- Prior consent

  Not required

- Documented cookies

  2

- Third-party domains

  1

- Servers

  Outside the European Economic Area, confirm the exact region with the provider

Overview

## What does Dorsa Cloud do?

## What Dorsa Cloud is

Dorsa Cloud is a cloud hosting and infrastructure provider that offers servers and platform services for running websites and applications. Like other hosts, it serves as the underlying infrastructure rather than a tracking technology, so its compliance profile is shaped by where data is stored and how the provider is contracted.

## What data it processes and what cookies it sets

As infrastructure, Dorsa Cloud processes the data your application passes through it, including visitor IP addresses in server logs and any personal data your application stores. It does not add analytics or marketing cookies to hosted sites. Any cookies a visitor sees come from the application, though a strictly necessary technical cookie may exist at the server level.

## GDPR role and the transfer question

Dorsa Cloud acts as a processor under Article 28 of the GDPR, but because its servers are outside the European Economic Area the bigger issue is Chapter 5 on international transfers. Storing European personal data on infrastructure in a third country without an adequacy decision requires appropriate safeguards and may expose the data to foreign access, which the controller must assess.

## Consent requirements

Hosting itself does not require visitor consent, because delivering the requested website and its strictly necessary cookies are exempt. The relevant safeguards here are contractual and organisational rather than a cookie banner, and consent obligations still apply to any analytics or marketing your application loads.

## Data location and transfers

Confirm exactly where Dorsa Cloud stores your data. If the country has an adequacy decision, transfers are straightforward. If it does not, you need Standard Contractual Clauses and a transfer impact assessment with supplementary measures such as encryption, and for sensitive data an EU based host is often the safer choice.

## Practical compliance steps

Establish the hosting location, sign a data processing agreement and Standard Contractual Clauses if needed, carry out a transfer impact assessment, and apply encryption in transit and at rest. Document the decision, minimise the personal data hosted there, and consider an EU provider where the transfer risk is high.

Compliance

## Dorsa Cloud and the GDPR

- Legal basis

  Contract and legitimate interest (processor, Art. 28 GDPR)

- Risk level

  medium

- Applicable regulations

  GDPR

### Impact assessment (DPIA)

The central concern is the transfer of personal data outside the EEA to a country that may lack an adequacy decision. Assess the exact location, whether Standard Contractual Clauses and supplementary measures are in place, the sensitivity of the data, and whether an EU host would be more appropriate.

### Sample text for your banner

> Our website is hosted on Dorsa Cloud infrastructure. Hosting uses only strictly necessary technologies to deliver the site and does not track you for marketing.

Cookies and trackers

## What Dorsa Cloud sets and contacts

- Tracking method

  Cloud hosting and server infrastructure, no client side tracking by default

- Server location

  Outside the European Economic Area, confirm the exact region with the provider

- Cookieless mode available

  Yes

- Data transferred outside the EU

  Dorsa Cloud operates infrastructure outside the European Economic Area. If the hosting country has no EU adequacy decision, transferring European personal data there requires Standard Contractual Clauses together with supplementary measures, and in some cases may be difficult to justify. Confirm the data location before hosting EU personal data.

### Cookies set (2)

| Name           | Type       | Duration | Purpose                                                                                         |
| -------------- | ---------- | -------- | ----------------------------------------------------------------------------------------------- |
| dorsa\_session | Functional | Session  | Strictly necessary session cookie used by the hosting and control panel to deliver the service. |
| csrftoken      | Functional | Session  | Strictly necessary security cookie that protects forms against cross site request forgery.      |

### Third-party domains contacted (1)

- `dorsacloud.com`

Questions

## Frequently asked questions about Dorsa Cloud

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Does Dorsa Cloud set cookies on my visitors?

Dorsa Cloud does not add marketing or analytics cookies to the sites it hosts. Visitor facing cookies come from your application, and the server may use a strictly necessary technical cookie that does not require consent.

### Do I need consent for Dorsa Cloud?

No, not for hosting. The relevant compliance work is contractual and about transfers, not a cookie banner. Consent still applies to any analytics or marketing tools your application loads.

### What is the legal basis for Dorsa Cloud?

As a processor under Article 28 of the GDPR, Dorsa Cloud acts on your instructions under a data processing agreement. For data leaving the EEA you also need a transfer mechanism under Chapter 5 of the GDPR.

### Does Dorsa Cloud transfer data outside the EU?

Yes, its infrastructure is outside the European Economic Area. If the country lacks an adequacy decision, you must put Standard Contractual Clauses and supplementary measures in place, and assess whether the transfer can be justified.

### Is a DPIA needed for Dorsa Cloud?

A transfer impact assessment is advisable whenever European personal data is hosted in a third country without adequacy. Cover the data sensitivity, the legal regime of the destination, and the safeguards in place.

### How do I use Dorsa Cloud compliantly?

Confirm the hosting location, sign a data processing agreement and Standard Contractual Clauses, run a transfer impact assessment, and encrypt data in transit and at rest. For sensitive or large scale data, consider an EU based host instead.

### Are there alternatives to Dorsa Cloud?

For EU hosting, alternatives include Hetzner, OVH, Scaleway, and IONOS, which keep data within the European Economic Area and remove the third country transfer question for most use cases.

### How do I reflect Dorsa Cloud in my privacy notice?

Name Dorsa Cloud as a hosting processor, state the country where data is stored, and describe the transfer safeguards you rely on. Because it sets no non essential cookies, it usually belongs in the privacy notice rather than the cookie banner.

Same category

## More services: Hosting

[See the whole category](https://www.flowconsent.com/en/services/hosting)

### [Rosti](https://www.flowconsent.com/en/services/hosting/rosti)

[Rosti is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Rosti offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Rosti empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/hosting/rosti)

[Hosting](https://www.flowconsent.com/en/services/hosting/rosti)

·

### [Lagoon](https://www.flowconsent.com/en/services/hosting/lagoon)

[Lagoon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Lagoon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Lagoon helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/hosting/lagoon)

[Hosting](https://www.flowconsent.com/en/services/hosting/lagoon)

·

### [Cherokee](https://www.flowconsent.com/en/services/hosting/cherokee)

[Cherokee is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Cherokee integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Cherokee helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/hosting/cherokee)

[Hosting](https://www.flowconsent.com/en/services/hosting/cherokee)

·

### [WP Engine](https://www.flowconsent.com/en/services/hosting/wp-engine)

[WP Engine is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. WP Engine supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, WP Engine remains a leading web development choice.](https://www.flowconsent.com/en/services/hosting/wp-engine)

[Hosting](https://www.flowconsent.com/en/services/hosting/wp-engine)

·

### [Envoy](https://www.flowconsent.com/en/services/hosting/envoy)

[Envoy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Envoy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Envoy helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/hosting/envoy)

[Hosting](https://www.flowconsent.com/en/services/hosting/envoy)

·

### [Aruba.it](https://www.flowconsent.com/en/services/hosting/aruba-it)

[Aruba.it is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Aruba.it supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Aruba.it enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/hosting/aruba-it)

[Hosting](https://www.flowconsent.com/en/services/hosting/aruba-it)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)