Does Hetzner Work in China? ICP, Data Residency & an Offshore Host
Hetzner runs no region inside mainland China — its servers sit in Germany, Finland, the US and Singapore — so a China-facing site is served offshore with no ICP-filing path, and your users' data lands outside the mainland under PIPL. A compliance-first look at the two doors.
Does Hetzner work in China?
Whether Hetzner works for a mainland-China audience is first a licensing and data-residency question, not a speed one. Hetzner is reachable from inside China — it is where the servers sit, and what you store on them, that carries the legal risk.
Hetzner's own locations list has no mainland-China region: its servers run in Germany, Finland, the United States and Singapore, and the nearest to China — Singapore — is still outside the mainland. So a public site served to mainland visitors from Hetzner reaches them from offshore, with no ICP-filing path on Hetzner itself; and any personal data you store there for Chinese users is a cross-border transfer that PIPL governs. The table below is Hetzner's own locations and the China rules they trigger — plus the compliant, ICP-filed in-country path.
This is a risk map, not a legal verdict — your obligations turn on what you serve and what you store. Our China team can map the ICP and data-residency path with you →
Compliance snapshot
- ✕ No mainland-China region on Hetzner — so no ICP-filing path there
- ! Served from Germany, Finland, the US or Singapore — all offshore to China
- ✓ Reachable on every test attempt — slow, not blocked (measured inside China)
- ! Storing Chinese users' personal data there is a cross-border PI transfer (PIPL)
- ✓ A compliant path exists: ICP-filed in-country delivery and storage
What Hetzner's documentation says, and what we measured from inside China
| Fact | Primary source |
|---|---|
| In Hetzner's own documentation, its servers run in six locations across four network zones — Falkenstein and Nuremberg (Germany), Helsinki (Finland), Ashburn, VA and Hillsboro, OR (USA), and Singapore — and Hetzner "owns and operates three data center parks located in Nuremberg (Germany), Falkenstein (Germany) and Helsinki (Finland)," using colocation space elsewhere. None is in mainland China; the nearest, Singapore, is outside the mainland. Dedicated root servers are offered only in Germany and Finland. | Hetzner Docs — Cloud: Locations, retrieved 2026-10-07 |
| Serving a public website to mainland-China visitors from inside the mainland requires an ICP filing (ICP 备案) under the State Council's Order No. 292 and MIIT's Order No. 33, and the filing is tied to a mainland hosting resource. Because Hetzner operates no mainland-China region, a Hetzner-hosted site has no ICP-filing path on Hetzner itself — it is reaching China from offshore. | PRC Regulations on Telecommunications (State Council Order No. 292); Administrative Measures for the Filing of Non-operational Internet Information Services (MIIT Order No. 33) |
| If you store Chinese users' personal data on Hetzner, that data sits outside the mainland, so PIPL requires the handler to give notice, obtain separate consent, and meet a transfer mechanism (a CAC security assessment, the CAC standard contract, or certification). For a CIIO or large-volume handler, personal information collected in China must be stored in mainland China (PIPL Article 40; CSL Article 39 (formerly Article 37)) — which Hetzner's locations cannot satisfy. | PIPL Chapter III, Articles 38–43 and Article 40; Cybersecurity Law Article 39 (formerly Article 37) |
| Requested from a probe inside mainland China (Alibaba Cloud cn-zhangjiakou) on 2026-08-28, Hetzner's site finished loading on all 3 of 3 attempts — median time to first byte 814ms, but median largest-contentful-paint 6,168ms. All 87 requests resolved from Hetzner-owned hosts with none failing, so the slow paint is the offshore distance showing up in the assets, not a block. | 21YunBox — China delivery measurement, measured from inside mainland China |
| Measured again on 2026-08-30 from a residential broadband line in Beijing, Hetzner still completed 3 of 3 loads — median first byte 1,222ms — but median largest-contentful-paint rose to 9,540ms. It stays reachable even on a consumer connection because Hetzner is not blocked, only far; the cost is a paint that drifts past nine seconds. | 21YunBox — paired measurement from a mainland-China residential broadband line |
Sources verified by the 21YunBox compliance team on 2026-10-07.
For a mainland-China audience, the deciding question about Hetzner is not how fast it is — it is where your servers are allowed to sit and where your users’ data is allowed to live. Hetzner answers both in its own documentation: it runs no region inside mainland China. A China-facing site on Hetzner is therefore reachable but entirely offshore, which leaves it with no path to the ICP filing a public mainland site requires, and turns any personal data you store for Chinese users into a cross-border transfer China’s law governs. The reachability is real; the licensing and the data residency are the exposure.
Hetzner in China at a glance
| What decides it | In Hetzner's own terms |
|---|---|
| Where it runs | Six locations across four network zones — Falkenstein and Nuremberg (Germany), Helsinki (Finland), Ashburn, VA and Hillsboro, OR (USA), and Singapore. No region is inside mainland China; the nearest, Singapore, is still offshore. |
| Who owns the data centers | Hetzner “owns and operates three data center parks located in Nuremberg (Germany), Falkenstein (Germany) and Helsinki (Finland),” using colocation space elsewhere; dedicated root servers are offered only in Germany and Finland. |
| Serving the public | A site served to mainland visitors from inside China needs an ICP filing tied to a mainland hosting resource. With no mainland region, Hetzner offers no ICP-filing path of its own. |
| Your data on Hetzner | Personal data of Chinese users stored on Hetzner sits offshore — a cross-border transfer PIPL governs, plus a data-localization duty for CIIOs and large-volume handlers that offshore locations cannot meet. |
| Is it reachable? | Yes — it loaded on every attempt measured from inside mainland China. The distance shows up as a slow paint, not a block. |
No mainland region, so no footing for an ICP filing
Hetzner’s servers run in Germany, Finland, the United States and Singapore. In its own documentation Hetzner “owns and operates three data center parks located in Nuremberg (Germany), Falkenstein (Germany) and Helsinki (Finland),” and its Cloud locations add Ashburn and Hillsboro in the United States and a Singapore region, with colocation space used elsewhere. Not one of them is in mainland China, and the closest — Singapore — is still outside it.
That geography settles the licensing question before performance ever enters it. A public-facing website delivered to mainland visitors from inside China turns on an ICP filing (ICP 备案) under State Council Order No. 292 and MIIT Order No. 33, and that filing must attach to a hosting resource physically located in the mainland. Hetzner has none, so there is simply nothing on Hetzner to file against. That is where “we already run on Hetzner” runs out: reaching China is not the same as being cleared to operate there, and tuning the stack does not create the mainland footing a filing needs.
Your China users’ data stays offshore
Serve China from Hetzner and your users’ personal information lives in Germany, Finland, the US or Singapore — outside the mainland. Under China’s Personal Information Protection Law that is a cross-border transfer, and the handler — you, not Hetzner — has to give notice, obtain separate consent, and clear one transfer mechanism: a CAC security assessment, the CAC standard contract, or certification. If you are a critical information infrastructure operator or a large-volume handler, personal information collected in China must be stored in the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty none of Hetzner’s four countries can satisfy.
Reachable, not blocked — which is exactly the point
Hetzner is not blocked in China. In 21YunBox’s own measurements from inside the mainland — an Alibaba Cloud probe in Zhangjiakou on 2026-08-28 and a residential broadband line in Beijing on 2026-08-30 — Hetzner finished loading on every attempt, with each request resolving from Hetzner-owned hosts and none failing. The offshore distance showed up only as a slow paint: on the Beijing home line the largest-contentful-paint drifted past nine seconds. So the exposure on a China-facing Hetzner site is not that people cannot reach it — it is that reaching it gives you neither an ICP filing nor in-country data residency. Those gaps are compliance facts, and no amount of network tuning closes them.
This is a risk map, not a verdict: whether you need an ICP filing, in-country storage, or both depends on what you serve, how much personal data you hold, and who your users are — worth settling with counsel before you build.
Where 21YunBox fits — a compliant overlay, not a migration
You keep building on Hetzner. We add the one piece a host with no mainland presence cannot: compliant, ICP-filed delivery from inside the mainland, set in front of your existing Hetzner origin — no rebuild, no second codebase, and no move off Hetzner. Our China team maps your ICP and data-residency obligations against your entity and data volumes, then stands up the in-country delivery and storage a lawful China presence needs, while your application stays exactly where it already runs.
Related reading:
Frequently Asked Questions
Does Hetzner have a data center in mainland China?
No. By Hetzner's own documentation its servers are in Germany, Finland, the United States and Singapore; it owns data center parks only in Nuremberg, Falkenstein and Helsinki and uses colocation elsewhere. The nearest location to China is Singapore, which is outside the mainland — so a site served to mainland visitors from Hetzner is delivered from offshore and has no ICP-filing path on Hetzner itself.
Is it against the law to host a China-facing site on Hetzner?
Not inherently. Two separate obligations create the exposure: serving a public site to mainland visitors from inside China requires an ICP filing, which is tied to mainland hosting Hetzner does not offer; and storing Chinese users' personal data offshore is a cross-border transfer PIPL governs, with a data-localization duty for CIIOs and large-volume handlers. Treat this as a risk to assess with counsel for your data volumes and role, not a blanket prohibition.
Can 21YunBox help run a Hetzner site in China?
Yes. Our China team can assess your ICP and data-residency exposure and provide the compliant, ICP-filed in-country delivery and storage that a European or US host cannot. Get in touch to work through your specific setup.
