Blog · Article

Why we built an EU-sovereign WordPress host

Most WordPress sites sold as “EU hosting” actually run on clouds owned by US companies. That means the data can fall under US law, whatever city the server sits in. We built Celestio to close that gap: WordPress on infrastructure we own ourselves in Sweden, with customer data processed inside the EU and no US cloud anywhere in the hosting path.

The gap we wanted to close

Moving the server to Frankfurt or Stockholm solves part of the problem, but not all of it. If the company that owns and runs the infrastructure answers to US law, the data can be compelled under the US CLOUD Act even when it physically sits in Europe. After the Schrems II ruling, saying “the server is in the EU” is no longer enough. The real question is who can lawfully be ordered to hand the data over, not just where it happens to rest.

That distinction is why the same site can have a comforting answer and an uncomfortable answer at once. A host can honestly say the data never leaves the EU while the parent company answers to a legal system on another continent. Both statements can be true. Only one of them is about sovereignty. For a Swedish business with clients in healthcare, finance, law or the public sector, that difference is often the one that decides things.

None of this makes a US-owned service illegal to use. What changed is the burden of proof. You are now expected to know where your data lives, which company controls it, and what legal basis covers any transfer outside the EU. “We never really thought about it” is no longer a comfortable place to stand. That shift, more than any single event, is what convinced us the market needed a WordPress host built the other way around, sovereign by construction rather than by press release.

Why we built Celestio

We built Celestio to make the simple answer true. Your WordPress site runs on infrastructure we own and operate in Falkenberg, Sweden, on renewable-powered GleSYS hardware. Customer data is processed inside the EU, and there is no US cloud in the hosting path. We do not sell sovereignty as an add-on you can switch on. It is the starting point for the whole platform, and it is why we own the metal instead of renting capacity from someone else.

We are also honest about the edges. Like every company we use a small number of tools to run the business, and our Data Processing Agreement lists them plainly rather than pretending they do not exist. The point of sovereignty is not marketing purity. It is a clear, defensible answer to where your data lives and who can reach it.

Who we built it for

We built Celestio for Swedish businesses and the agencies that serve them. That is a deliberately narrow focus. A law firm, a clinic, a public body or a shop does not want a lecture on data transfers, it wants a host that has already made the safe choice on its behalf. Agencies feel the question twice over, because it flows down from their clients to them. When a client asks where the data is and who can reach it, an agency needs an answer it can stand behind, not a shrug and a link to a US provider’s compliance page. Giving both a clear, honest answer is the reason the platform exists.

The principles we build on

Celestio is built on a few principles that guide every decision we make, from how we buy hardware to how we answer in support.

  • Own the metal. We do not rent capacity from someone else’s cloud, we own and run the hardware ourselves. It is the only way to know exactly where the data lives and who can reach it.
  • Host one thing well. We run WordPress, nothing else. The whole platform is built around that, not around a general cloud product that WordPress happens to fit inside.
  • Answer in minutes. Support is engineers who know the server, not a ticket queue that moves you along. When something is urgent, you should get a real answer quickly.
  • Waste nothing. Clean operations, renewable energy and the right amount of resources. We build to last over time, not to impress with numbers.

What we promise is simple: a fixed point in the cloud. A place where you know where the data lives, who operates it, and who answers when you get in touch.

What it means for you

In practice it means you can move here without doing the work yourself. We migrate the site for you, engineer to engineer, and keep it patched, backed up and updated afterwards. Migration is where most of that promise is kept or lost, so we move the whole site, files and database together, test a verified copy, and switch only once it behaves exactly like the original. You get a host that can answer where the data is processed and who ultimately controls it, in a single email. Read more about how we think about sovereignty and how the platform is built.

If you run an agency, you can give your clients an answer they can trust about where their data ends up, without guessing. If you are coming from an international host, you can compare the setup on our page about the Kinsta and WP Engine alternative. Wherever you start, the starting point is the same: Swedish infrastructure, data inside the EU, and people who know your site.