Offshore VPS in Iceland (Reykjavik)

Iceland's appeal for offshore hosting rests on three concrete pillars, not vibes.

No mandatory data retention

Iceland has no blanket law compelling providers to retain customer connection and traffic metadata for a fixed period. This matters because retention mandates are how metadata ends up in a database waiting to be subpoenaed. We layer our own minimisation on top: we do no proactive content monitoring, and root passwords are stored AES-256 encrypted at rest under an operator-held key. Less data warehoused is less data that can ever be compelled.

IMMI and the free-expression tradition

The Icelandic Modern Media Initiative is a 2010 parliamentary resolution directing the government to assemble the strongest source-protection and free-press legal framework available — drawing on the best provisions from around the world. Iceland pairs that with a deep cultural commitment to free speech. The practical upshot: lawful-but-controversial publishing, journalism, and leak archives sit on firmer ground here than in jurisdictions where a single complaint triggers a takedown.

100% renewable power

Iceland's electricity is almost entirely geothermal and hydroelectric. Your REK server runs carbon-free, and the cool climate keeps datacenter cooling cheap and reliable — a structural cost advantage that helps keep the same EPYC hardware affordable. If you care about both privacy and a clean footprint, Iceland is the rare place that delivers both without a trade-off.

The REK region runs the exact NoKycVPS platform you get everywhere else — there is no "offshore tax" on the hardware.

• S1 — 2 vCPU / 4 GB DDR5 / 80 GB NVMe Gen5, from $5/mo. Plenty for a Tor relay, a small VPN exit, or a single-purpose node.
• S2 (Pro, most popular) — 4 vCPU / 16 GB / 320 GB, from $15/mo. The right size for a leak-archive mirror, a self-hosted app stack, or a busy onion service.
• S3 (Power) — 8 vCPU / 32 GB / 640 GB, from $30/mo. For heavier workloads, build boxes, or multi-service hosts.

Every plan ships AMD EPYC cores, a /64 IPv6 block, and network up to 10 Gbps unmetered. Need bare metal? The dedicated lineup (R1 Ryzen 9, R2/R3 EPYC) is available in REK too, with 10 Gbps unmetered and IPMI over a private VPN.

Latency expectations

Iceland sits mid-Atlantic, so plan accordingly. Reykjavik routes to both North America and mainland Europe over subsea cables — expect roughly 20–40 ms to the UK and Western Europe and roughly 40–70 ms to the US East Coast, depending on your path. For latency-critical EU traffic, our Paris or Zurich regions are closer; choose Iceland when the legal location is what you're optimising for. Compare all four regions on the best offshore VPS guide.

Pick REK when the jurisdiction itself is part of your threat model.

• Journalists and newsrooms — IMMI's source-protection orientation and the absence of retention mandates make Iceland a natural home for SecureDrop instances, story drafts, and contact databases.
• Leak archives and document mirrors — lawful publishing of public-interest material benefits from Iceland's free-expression tradition and the fact that we don't proactively police content.
• Free-speech and controversial-but-legal projects — forums, image boards, and platforms that get deplatformed elsewhere for hosting legal speech.
• Privacy infrastructure — Tor relays and exits, I2P routers, mixnet nodes, and VPN exits are explicitly allowed. So are crypto nodes and validators (BTC/XMR), RPC endpoints, and file hosting.

One hard line applies in every region, Iceland included: zero tolerance for CSAM. And our acceptable-use policy bars network abuse — outbound spam, mass scanning of third parties, and amplification attacks — because those threaten the network for everyone. Everything lawful-somewhere is welcome. See the full breakdown on the Tor relay and leak-archive use-case pages.

"Offshore" only means something if you understand the operator's commitments. Ours are specific and the same in every region:

• No proactive monitoring. We do not scan, inspect, or profile what you run.
• Encryption at rest. Root passwords are AES-256 encrypted under a key we hold, not stored in plaintext.
• One legal trigger. We act only on a binding judicial order from a court with jurisdiction over the operating entity — incorporated in Saint Kitts and Nevis — served through proper channels. Informal requests, foreign letters, and abuse-desk threats do not move us.
• Customer notice first. Where we are not legally gagged, we notify you before acting, so you have time to respond or migrate.
• Warrant canary. We publish a monthly canary at /canary; its absence is the signal.

Iceland's lack of a retention mandate complements this: the less metadata that exists, the less any order can reach. Read the full no-KYC model and our warrant-canary explainer for the mechanics.

Signup is email and password — nothing else. No ID upload, no phone, no email verification, no captcha. Top up your balance, select REK, and deploy.

# after deploy, log in and lock it down
ssh root@<your-rek-ipv6-or-ipv4>

# rotate the root key immediately
ssh-keygen -t ed25519 -C "nokycvps-rek"
ssh-copy-id -i ~/.ssh/id_ed25519.pub root@<server>

# disable password auth
sed -i 's/^#\?PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config
systemctl reload sshd

Median deploy time is ~47 seconds (Q1 2026), backed by a 99.97% uptime SLA. Pay in Monero (XMR) — credits your balance in about 30 seconds — or any of Bitcoin, Litecoin, Ethereum, USDT-TRC20, USDC, Solana, Tron, Dogecoin, or Bitcoin Cash. Top-up bonuses run +30% at $100 up to +70% at $1000, and longer billing cycles cut the price (25% at 3 months, 35% at 6, 50% at 12). OS images include Debian 12/13, Ubuntu 22.04/24.04, Rocky 9, Alma 9, Fedora 41, Alpine 3.19, Arch, and FreeBSD 14. Start on the VPS plans page or go straight to order a VPS.