VPS hosting
VPS-4
VPS-4 is the production tier — four vCPU, eight gigabytes of error-correcting memory, a hundred-and-twenty gigabytes of NVMe storage, six terabytes of monthly transfer, twenty-gigabit DDoS shield. It is the tier where the workload becomes 'production' in the operational sense: the database has indices that matter, the application has a search component, and downtime starts costing readership rather than just inconvenience.
$32 per month
- 4 vCPU (AMD EPYC)
- 8 GB DDR4 ECC
- 120 GB NVMe SSD
- 6 TB / month
Specification
- Processor
- 4 vCPU (AMD EPYC)
- Memory
- 8 GB DDR4 ECC
- Storage
- 120 GB NVMe SSD
- Bandwidth
- 6 TB / month
- IPv4 addresses
- 1
- IPv6
- yes
- Virtualization
- KVM
- Uplink
- 1 Gbps
- Uptime SLA
- 99.9%
- Operating systems
- Ubuntu, Debian, AlmaLinux, Rocky, Fedora, Whonix
Who this plan suits
A working investigative publication with daily output and a comment system, a leak archive ingesting submissions on a daily cadence, an NGO running Nextcloud plus Matrix plus a small CMS for a regional staff of fifteen-to-thirty, a Mastodon instance with an active local timeline, a federated PeerTube node hosting a documentary team's published material. The tier carries the working memory and storage to keep an indexed corpus searchable in seconds, not in tens of seconds.
It remains undersized for a multi-publication consortium, for a video-archive that streams several concurrent encodes, or for a newsroom with regional sub-properties consolidated on one machine. VPS-8 covers the heavy-traffic workload; DS Mid covers the case where shared hardware itself is part of the threat model. VPS-2 is the right answer for a publication whose CMS is real but whose comment-system and search index are still light.
Where this plan can be operated
VPS-4 deploys in Iceland or Switzerland. At the production tier, the legal-jurisdiction question stops being abstract: a working publication will, sooner or later, attract a removal request, and the question of which courts that request must traverse stops being theoretical. Iceland's IMMI framework and the Höfundalög produce a hosting jurisdiction in which a foreign press-suppression order has no domestic mirror to enforce against; Switzerland's revFADP and ProtonMail v UVEK A-550/2019 produce a courtroom posture that requires specific suspicion before disclosure.
The practical choice is between Iceland's operational distance (longer latency, longer mutual-legal-assistance pipelines, smaller bilateral surface with EU actors) and Switzerland's operational proximity (lower latency for central-European readers, but a shorter MLA pipeline to several EU prosecutors). For a publication whose threat model involves an EU prosecutor, Iceland is the more conservative answer; for one whose threat model is a US-style civil-procedure attack, both jurisdictions are roughly equivalent and latency dominates the choice.
What the operator sees, and what it does not
What we see is what we see on every VPS tier: billing metadata, the IP from which you administer the machine, hostname, hypervisor-level resource counters, aggregate traffic. What changes at VPS-4 is what you can do behind that boundary — there is room for a full-text index over a working corpus, for a backup process that runs without competing for memory with the live application, for a separate WireGuard endpoint serving an editorial team alongside the public-facing service.
We do not snapshot your VM disk for backup unless you ask us to as part of a paid add-on (and the snapshot is then yours, encrypted with a key we do not retain). We do not run a guest agent. We do not have a console that reads your application's runtime memory. The technical boundaries are documented in the operating principles; the threat-model framing for archives at this tier is in the journal article on threat-modelling activist archives. Payment in Monero, Lightning, on-chain Bitcoin, or cash.
Jurisdictions
The offering is available from the jurisdictions listed below. The choice between them is made at the order step; this section discloses what the choice is, so the reader knows before the form opens.
- Iceland Reykjavik
- Switzerland Zurich
Ordering this plan
The order step confirms the jurisdiction, the payment rail, and the contact detail before any service is provisioned. Questions about the plan or migration ahead of an order go through the contact form.