Does Contabo Work in China? ICP, Data Residency & an Offshore VPS
Contabo runs no region inside mainland China — its data centers sit in Germany, the UK, the US, Singapore, Tokyo, Sydney and India — so a China-facing site is served offshore with no ICP-filing path, and your users' data lands outside the mainland under PIPL. A compliance-first look at the two doors.
Does Contabo work in China?
Whether Contabo works for a mainland-China audience is a licensing and data-residency question before it is a price-or-speed one. Contabo is a German host where your own server and its data live, and China's law responds to where that is — not to how the box performs.
By Contabo's own locations page there is no region inside mainland China: its data centers span Germany, the United Kingdom, the United States, Singapore, Tokyo, Sydney and India, and the nearest to China — Singapore and Tokyo — are still offshore. So a public site you run on Contabo reaches mainland users from outside the country, with no ICP-filing path on Contabo itself; and any personal data you hold there for Chinese users is a cross-border transfer PIPL governs. The table below is Contabo's own footprint and the China rules it triggers — plus the compliant, ICP-filed in-country path.
This is a risk map, not a legal verdict — your duties turn on what you serve and the personal data you hold. Our China team can map the ICP and data-residency path with you →
Compliance snapshot
- ✕ No mainland-China region on Contabo — so a public site there has no ICP-filing path
- ! Your Contabo server and its data run offshore (Germany, UK, US, Singapore, Tokyo, Sydney, India)
- ! Chinese users' personal data on an offshore Contabo server is a cross-border transfer (PIPL)
- ! Reaching it from China is delivery, not compliance — it creates no ICP filing and no residency
- ✓ A compliant path exists: ICP-filed in-country delivery in front of your Contabo origin
What Contabo's own documentation says about China
| Fact | Primary source |
|---|---|
| On Contabo's own locations page, its footprint is summed up as "9 Regions, 11 Locations, Global Availability" — data centers in Germany (five of them), the United Kingdom, the United States (New York, Seattle and St. Louis), Singapore, Tokyo, Sydney and India. None is in mainland China; the nearest, Singapore and Tokyo, are still offshore. | Contabo — Data Center Locations, retrieved 2026-10-07 |
| Serving a public website to mainland-China visitors from inside the mainland requires an ICP filing (ICP 备案) under the State Council's Order No. 292 and MIIT's Order No. 33, and that filing must attach to a hosting resource physically located in the mainland. Because Contabo operates no mainland-China region, a Contabo-hosted site has no ICP-filing path on Contabo itself — it is reaching China from offshore. | PRC Regulations on Telecommunications (State Council Order No. 292); Administrative Measures for the Filing of Non-operational Internet Information Services (MIIT Order No. 33) |
| Because you run a Contabo server yourself, the handler of any personal data on it is you, its customer — not Contabo. Keep Chinese users' personal data on an offshore Contabo region and PIPL treats it as a cross-border transfer: you must give notice, obtain separate consent, and satisfy one transfer mechanism — a CAC security assessment, the CAC standard contract, or certification. | Personal Information Protection Law, Chapter III, Articles 38–43 |
| For a CIIO or large-volume handler, personal information collected in China must be stored inside mainland China (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)). Contabo publishes no mainland-China region, so none of its eleven locations can satisfy that residency duty — keeping the data on Chinese soil means running the storage on infrastructure inside the mainland, which is where an ICP filing re-enters the picture. | PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37) |
| The duty scales with volume and role, not with merely renting an offshore host: under the CAC's March 2024 Regulations on Promoting and Regulating Cross-border Data Flows, a non-CIIO that transfers fewer than 100,000 individuals' non-sensitive personal information in a calendar year is exempt from the security assessment, the standard contract and certification — a threshold worth checking before you assume a Contabo deployment is clear. | CAC — Regulations on Promoting and Regulating Cross-border Data Flows, March 2024 |
Sources verified by the 21YunBox compliance team on 2026-10-07.
For a mainland-China audience, the deciding question about Contabo is not how cheap or how fast its servers are — it is whether you are licensed to serve from them, and where your users’ data is allowed to live. Contabo is a German infrastructure provider: you rent a VPS, a dedicated server or a cloud instance and run it yourself, inside one of its data center regions. By Contabo’s own locations page, not one of those regions is in mainland China. A China-facing site on Contabo is therefore reached from offshore — which leaves it with no footing for the ICP filing a public mainland site requires, and turns any personal data you keep there for Chinese users into a cross-border transfer China’s law governs. Reaching China is the easy half; being cleared to operate there is the half Contabo’s geography cannot supply.
Contabo in China at a glance
| What decides it | For a China-facing Contabo site |
|---|---|
| Where it runs | Nine regions, eleven locations — Germany (five data centers), the United Kingdom, the United States (New York, Seattle, St. Louis), Singapore, Tokyo, Sydney and India. No region is inside mainland China; the nearest, Singapore and Tokyo, are still offshore. |
| Who runs the server | Contabo supplies the VPS, dedicated server or cloud instance; you install and administer it yourself — so for any personal data on it, the handler China's law looks to is you, its customer, not Contabo. |
| Serving the public | A site served to mainland visitors from inside China needs an ICP filing tied to a mainland hosting resource. With no mainland region, Contabo offers no ICP-filing path of its own. |
| Your data on Contabo | Personal data of Chinese users kept on an offshore Contabo server is a cross-border transfer PIPL governs, plus an in-country storage duty for CIIOs and large-volume handlers that offshore locations cannot meet. |
| Is it reachable? | Contabo is an ordinary offshore host, not a service China singles out to block — but a page that loads from offshore still carries no ICP filing and no in-country data residency. |
No mainland region, so no footing for an ICP filing
Contabo’s servers run in Germany, the United Kingdom, the United States, Singapore, Tokyo, Sydney and India — a footprint its own locations page sums up as “9 Regions, 11 Locations, Global Availability.” Not one of those regions sits in mainland China, and the two closest — Singapore and Tokyo — are still outside it.
That geography settles the licensing question before performance is ever on the table. A public-facing website delivered to mainland visitors from inside China turns on an ICP filing (ICP 备案) under State Council Order No. 292 and MIIT Order No. 33, and that filing has to attach to a hosting resource physically located in the mainland. Contabo has none, so there is nothing on Contabo to file against. That is where “we already run on Contabo” stops at the border: renting a box you administer yourself in Germany or Singapore reaches China, but it does not create the mainland hosting footing a filing needs.
Your China users’ data stays offshore
Because a Contabo server is yours to administer, the law treats you — Contabo’s customer — as the handler of whatever personal data lives on it. Serve China from an offshore Contabo region and that data sits in Germany, the UK, the US, Singapore, Tokyo, Sydney or India — outside the mainland. Under China’s Personal Information Protection Law that is a cross-border transfer, and the handler must give notice, obtain separate consent, and clear one transfer mechanism: a CAC security assessment, the CAC standard contract, or certification. If you are a critical information infrastructure operator or a large-volume handler, personal information collected in China has to be stored in the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty none of Contabo’s eleven locations can meet. How far this reaches scales with how many people’s data you move: the CAC’s March 2024 cross-border rules exempt a non-CIIO transferring fewer than 100,000 individuals’ non-sensitive personal information in a calendar year from the assessment, the standard contract and certification.
Reachable is not the same as licensed
Contabo is an ordinary offshore host, not a service China singles out to block, so the exposure here is not that visitors cannot load the site. It is that loading it from Germany, Singapore or Tokyo gives you neither an ICP filing nor in-country data residency. Those are compliance facts about where the server sits and where the data goes — not something network tuning can close, and not something a faster paint would fix.
This is a risk map, not a verdict: whether you need an ICP filing, in-country storage, or both depends on what you serve, how much personal data you hold, and who your users are — worth settling with counsel before you build.
Where 21YunBox fits — a compliant overlay, not a migration
You keep building on Contabo. We add the one piece a host with no mainland presence cannot: compliant, ICP-filed delivery from inside the mainland, set in front of your existing Contabo origin — no rebuild, no second codebase, and no move off Contabo. Our China team maps your ICP and data-residency obligations against your entity and your data volumes, then stands up the in-country delivery and storage a lawful China presence needs, while your server stays exactly where you already run it.
Related reading:
Frequently Asked Questions
Does Contabo have a data center in mainland China?
No. By Contabo's own locations page its data centers are in Germany, the United Kingdom, the United States (New York, Seattle and St. Louis), Singapore, Tokyo, Sydney and India — summed up as nine regions and eleven locations, none inside mainland China. The nearest, Singapore and Tokyo, are still offshore, so a site served to mainland visitors from Contabo is delivered from outside the country and has no ICP-filing path on Contabo itself.
Is it against the law to run a China-facing site on Contabo?
Not inherently. Two separate obligations create the exposure: serving a public site to mainland visitors from inside China requires an ICP filing, which attaches to mainland hosting Contabo does not offer; and holding Chinese users' personal data on an offshore server is a cross-border transfer PIPL governs, with an in-country storage duty for CIIOs and large-volume handlers. Treat it as a risk to assess with counsel for your data volumes and role, not a blanket prohibition.
Can 21YunBox help run a Contabo site in China?
Yes. Our China team can assess your ICP and data-residency exposure and provide the compliant, ICP-filed in-country delivery and storage an offshore VPS cannot — placed in front of the Contabo origin you already run, with no rebuild. Get in touch to work through your specific setup.
