Most guides to WordPress hosting in Europe are lists of brands, and most of those lists earn a commission when you buy, so they end at “pick a host with servers in the EU”.
We are a WordPress host in the EU ourselves, so treat this as a host’s view. There are no affiliate links here, and the questions below work for any provider you are looking at, including us.
Server location is the easy part. The bigger differences are who owns the company and what you pay after the first year and on your busiest day, and then how the host handles a hacked site, a restore and the updates for WordPress and PHP.
Where your data lives and who can be made to hand it over
Under GDPR your host is a data processor, so it has to sign a data processing agreement (DPA) with you and tell you which other companies, called subprocessors, also touch your data. Read that list before you buy, because it often includes a US email service or a US backup store.
Ownership matters as much as the data center. A host owned by a US company can be served US legal demands for data it controls, even when the servers sit in Frankfurt. Its transfers to the US rely on the EU-US Data Privacy Framework, which is under appeal at the EU’s top court.
Nothing has been struck down, but if your clients ask where their data goes and who can see it, a host that is owned and operated inside the EU is the simpler answer.
The price in year three and on your busiest day
Shared hosting is usually sold with a first-year price that jumps on renewal. SiteGround’s StartUp plan, for example, is €2.99 a month for the first 12 months, prepaid, and renews at €15.99, so compare the price you will pay in year two and three, not the one on the banner.
Managed WordPress hosts tend to show one price, but many of them count visits and bill the extra when you go over. These are the published rates for the entry plans as of October 2026, in US dollars:
| Host | Entry plan | Price | Visits a month | Each extra 1,000 visits |
|---|---|---|---|---|
| Kinsta | Single 35k | $35 a month | 35,000 | $0.50 |
| Pressable | Signature 1 | $250 a year | 30,000 | $1.20 |
| WP Engine | Essential | from $28 a month, billed yearly | 25,000 | $2 |
A sale or a mention on TV that brings 100,000 extra visits in a month adds $50, $120 or $200 to the bill. Kinsta also says it may ask for immediate payment or restrict a site during an extreme overage.
Each host counts a visit differently. WP Engine, for example, has excluded suspected bots since September 2025, which is worth knowing because bot traffic like the carts our bot block stopped can push a plan over its limit on its own.
Ask any host what happens in the month you go over, and whether it is a bill, a slower site or a suspended one.
When a site is hacked or broken
On cheap shared hosting, many sites in one account run as the same system user, so when one of them is hacked the attacker can read the files and database passwords of the others.
Ask whether each site runs as its own user or in its own container, because some hosts use the word “isolated” for nothing more than a limit on CPU and memory. This matters most for agencies with many client sites in one account, and it is why every site on our agency hosting runs in its own isolated environment.
A backup helps only if you can restore it. Ask where the copies are stored and whether that is outside the server your site runs on, and how many days back you can go. Also ask whether you can download them, whether a hacked site can delete them and what happens to them if your account is closed.
Then try a restore on a staging copy before you need one, because a large site can take far longer to restore than to back up.
What should an agency check when it hosts client sites in Europe?
An agency that hosts sites for clients is usually a data processor for each client, and the host is its subprocessor. Check that you can pass the host’s subprocessor list on to your clients, because a client’s own data processing agreement may ask for it.
Work out the cost per client site, not per account. On plans with one visit limit for the whole account, a sale on one client’s site uses up the visits of all the others.
Check that you can give a client access to their own site without access to the rest of the account. Also check that you can move one site out cleanly when a client leaves.
Who keeps WordPress and PHP up to date
Updates are the last thing to compare, and our own data shows that they vary a lot between hosts. We counted 470,097 WordPress sites in Germany for our report WordPress in Germany: hosts, versions and plugins, and the share running a WordPress version older than 6.9 ranged from 3.6% at one host to 31.6% at another.
That gap is partly about who the customers are, but on most shared plans the site owner has to start updates. Of the sites that show their PHP version, 17.5% still run PHP 7, which has had no security fixes since November 2022.
Ask a host who updates WordPress, plugins and PHP, whether updates are tested on a copy first, and what happens when one breaks the site.
Before you sign up anywhere, send these questions to the host’s sales or support team by email and keep the answers, so you can point to them later if the service does not match.