Bahnhof Cloud Review 2026: Swedish VPS and Cloud Hosting From a Nuclear Bunker

Most hosting providers describe their data centres in terms of uptime guarantees and cooling systems. Bahnhof describes one of theirs as being built to withstand a hydrogen bomb.

That’s not marketing copy. Pionen is a former Cold War civil defence bunker carved 30 metres into the granite bedrock beneath Stockholm. Bahnhof converted it into a data centre in 2008. It has a 40cm steel blast door, three physical perimeter layers, gas fire suppression, biometric access, and triple-redundant connection cables. WikiLeaks hosted its servers there. It is one of the most secure data centre facilities in the world.

Pionen is the hook, but it’s not the whole story. Bahnhof has been defending user privacy in Swedish courts since before most hosting providers existed. The cloud platform that runs on this infrastructure is serious, technical, and not for beginners. This review covers who it’s for, what it costs, and where it genuinely stands apart.

About Bahnhof

Bahnhof was founded in 1994 in Uppsala, making it one of Sweden’s oldest internet service providers. It’s now Nasdaq-listed (Bahnhof AB), with 400,000+ customers across its ISP and cloud operations and revenue of 1.95 billion SEK in 2024. Headquarters: Sveavägen 41, Stockholm.

The cloud arm operates under bahnhof.cloud and covers VPS, Virtual Private Cloud, VMware, S3 object storage, GPU computing, Kubernetes, colocation, and enterprise custom platforms. There is no shared hosting. No cPanel. No one-click WordPress installer. Bahnhof Cloud is infrastructure for developers, businesses, and organisations that know what they want and need to run it in Sweden.

The company holds ISO 27001 certification and two independent Swedish certifications: “Based in Sweden” from basedinsweden.se, which verifies that operations run under Swedish law and jurisdiction; and Triple Green certification, which verifies 100% renewable energy use. These are third-party audited credentials, not self-reported claims.

The privacy track record is the part that sets Bahnhof apart from every other provider in this review pool. Before the EU Court of Justice struck down Sweden’s data retention directive, Bahnhof refused to comply with it. That refusal was a matter of legal record, not a brand positioning exercise. The company’s willingness to absorb legal and regulatory pressure to protect customer data is documented over three decades.

The Pionen Data Centre

Pionen deserves its own section because nothing else in European hosting comes close to it.

The facility sits beneath Vita Berg Park in Stockholm’s Södermalm district, inside a civil defence shelter built in 1943. The original structure was designed to protect Swedish government operations from wartime attack. Bahnhof acquired it and completed renovations between 2007 and 2008, officially opening the data centre on September 11, 2008.

The physical specifications: 11,950 sq ft of total space, 500 sq m of hosting area, 0.8 MW of power capacity, Maybach MTU diesel backup generators with 24-hour-plus fuel reserves, Baltimore Aircoil fans, and direct connection to Swedish emergency services. The blast door is 40cm solid steel. The structure is rated to withstand a hydrogen bomb detonation. Triple-redundant fibre connections run through the bedrock. Biometric access controls, gas-based fire suppression, and 24/7 surveillance cover the interior. A permanent team of 15 senior technical engineers operates the facility.

WikiLeaks hosted its servers at Pionen during its most publicly scrutinised period. The choice was deliberate: Swedish jurisdiction, maximum physical security, and a host with a documented history of resisting government demands.

Pionen operates primarily as a colocation facility. When you run a workload on Bahnhof Cloud, you’re running it in the same infrastructure network as Pionen. Your specific server may sit at one of Bahnhof’s other six Swedish hosting facilities, but the network, the philosophy, and the legal jurisdiction are the same across all of them.

Data Centres and Infrastructure

Bahnhof owns and operates seven Swedish data centre facilities, all connected through its own Nordic fibre network:

• Pionen (Stockholm, Södermalm): the nuclear bunker facility described above
• Thule (Stockholm)
• Sparven (Malmö)
• S:t Erik (Stockholm)
• Gullan (Kista, Stockholm)
• Lajka (Kista, Stockholm)
• Sala (Uppsala)

A Gothenburg facility called Bahnhof Bunker is under development: a large underground rock-cavern facility intended for resilient and critical IT infrastructure.

Every facility operates on the same baseline: dual cooling systems, backup generators with 24-hour-plus capacity, own sub-station power, biometric access, gas fire suppression, and three physical perimeter layers. All data centres are owned by Bahnhof, not leased from third-party operators. The Nordic fibre network connecting them gives direct routes to cloud providers without transit through third-party networks.

All data stays in Sweden. No exceptions. All operations run under Swedish law.

VPS Hosting

The VPS range is the entry point for most readers and the most practical product for smaller workloads including WordPress, e-commerce, and business applications.

Four tiers, all priced in SEK excluding VAT. No binding period:

Small at 109 SEK/mo is one of the cheapest entry points for Swedish VPS backed by this infrastructure quality. Large at 850 SEK/mo covers most business workloads comfortably. The Custom tier scales up to 24 vCPU and 128GB RAM for enterprise applications.

These are self-managed VPS plans. Bahnhof manages the physical infrastructure. You manage the server, the operating system, the stack, and the software. Linux only. If you need Bahnhof to manage the server environment for you, the VPC or enterprise products are the more appropriate path.

For direct comparison: HostUp’s VPS XS offers 2 vCPU and 4GB RAM for €3.90/mo on its own Swedish hardware. Bahnhof’s Small plan offers 1 vCPU and 1GB RAM for approximately €9.50. HostUp wins on raw specs-per-euro. Bahnhof wins on infrastructure provenance and legal sovereignty story. Different audiences.

Virtual Private Cloud (VPC)

VPC starts from 165 SEK/month and functions as a virtual data centre. You configure CPU, memory, and storage to match your requirements rather than choosing from a fixed tier. Bahnhof positions VPC as the step up from VPS for workloads involving databases with multiple web applications, multi-tenant environments, or anything that needs more flexible resource allocation than a fixed server provides.

The underlying infrastructure is OpenStack. Bahnhof publishes a useful comparison of OpenStack and VMware on their blog at bahnhof.cloud for organisations deciding between the two approaches.

Additional Products

The full product range extends well beyond VPS and VPC:

VMware: Enterprise virtualisation running on Bahnhof’s own Swedish data centre infrastructure. For organisations already standardised on VMware that want to move workloads to Swedish soil without changing their management tooling.

S3 Object Storage: Cloud-based object storage in Swedish data centres. Compatible with the S3 API standard, which means existing S3-compatible tools and workflows work without modification.

Accelerated Computing: GPU instances for AI inference, machine learning, and compute-intensive workloads. Pricing on request.

Kubernetes: Container orchestration infrastructure on Bahnhof’s Swedish platform.

VDI (Virtual Desktop Infrastructure): Hosted desktop environments running in Swedish facilities. Relevant for organisations with Swedish data residency requirements on desktop computing.

Blackbox: Secure, air-gapped infrastructure for classified or extremely sensitive workloads. Not publicly documented in detail by design.

Colocation: Rack space in Bahnhof’s owned facilities. You bring your hardware. Bahnhof provides the power, cooling, network, and security, including the option to colocate in Pionen itself.

Custom Platform: Fully bespoke enterprise cloud architecture. Contact sales.

Privacy and Swedish Data Sovereignty

This is where Bahnhof genuinely separates from every other provider reviewed on TSH, including providers with European data centres and GDPR compliance statements.

Three specific facts worth understanding:

The CLOUD Act: US law allows US law enforcement to compel any US-incorporated company to produce data stored anywhere in the world, including servers physically located in Europe. AWS, Microsoft Azure, and Google Cloud are all US-incorporated. A Swedish server running on Google Cloud is not protected from US government compelled disclosure by its physical location. Bahnhof is Swedish-incorporated with no US parent company. US courts have no jurisdiction over it. Bahnhof publishes its own analysis of this at bahnhof.cloud/en/cloud-act/.

The legal track record: When Sweden implemented EU data retention directives requiring ISPs to log customer data, Bahnhof refused to comply. They absorbed the legal pressure and held their position until the EU Court of Justice struck the directive down in 2014. This is not a privacy policy. It’s a 10-year legal fight that the company won. WikiLeaks hosting at Pionen during its most exposed period was a continuation of the same position.

“Based in Sweden” certification: An independent certification from basedinsweden.se specifically verifying that Bahnhof’s operations are conducted under Swedish law and Swedish jurisdiction. Not a geographic claim: a legal sovereignty claim. Third-party audited annually.

For any organisation that cannot allow US government access to its infrastructure, cannot transfer personal data outside the EU/EEA, handles regulated Swedish data, or has specific sovereignty requirements, Bahnhof is the most substantive option in the Swedish market.

Green Credentials

Bahnhof holds Triple Green certification for 100% renewable energy across its operations. Triple Green is an independent certification specifically for Swedish companies committing to environmental sustainability. It covers energy sourcing, not just offsets.

Bahnhof was not listed in the Green Web Foundation’s verified provider directory at the time this review was written. The GWF database is the most widely referenced independent green hosting verification, and not appearing in it means the Triple Green claim hasn’t been cross-verified by that specific body. You can check current GWF status with the Green Hosting lookup tool.

The absence from GWF doesn’t contradict the Triple Green certification: they’re separate programmes with separate verification processes. For a Swedish audience, Triple Green is likely the more familiar credential. For an international audience comparing green claims, GWF verification is the more widely cited standard.

Support

Phone: 010-510 00 20. Email: [email protected]. Contact form response promised within one hour. Swedish-language primary, English available. Support hours aren’t explicitly stated as 24/7: business hours is the safer assumption for non-emergency queries.

One honest limitation on the review data: Bahnhof’s Trustpilot presence is under bahnhof.se (the ISP), not bahnhof.cloud. The ISP profile has 7,000+ reviews reflecting broadband customers, including some recent complaints about support during address transfers. These reviews are not directly representative of the cloud hosting experience. No dedicated cloud-specific review volume exists to draw conclusions from independently.

PrivacyTools.io, a respected resource for privacy-conscious users, recommends Bahnhof Cloud. That’s a meaningful signal for the audience most likely to be evaluating Bahnhof in the first place.

No money-back guarantee is documented on the bahnhof.cloud site. Monthly billing with no binding period means you can cancel after any month, but a formal refund policy wasn’t confirmed at the time of writing. Verify before committing to a larger deployment.

Who Should Use Bahnhof Cloud?

The clearest fit is a Swedish or Nordic business that needs data to stay in Sweden, under Swedish law, operated by a Swedish company, with no US parent company exposure. That requirement rules out AWS, Google Cloud, and Azure regardless of where their servers physically sit. It rules out most international cloud providers. It leaves a small group of genuinely Swedish-operated options, and Bahnhof is the one with the deepest infrastructure roots, the longest privacy track record, and the most distinctive data centre estate.

Developers who want Swedish VPS without managed services will find the pricing competitive for the infrastructure quality. The Large plan at 850 SEK covers most business workloads. The Custom tier handles enterprise scale.

Organisations with specific compliance requirements around Swedish data sovereignty, EU data residency, CLOUD Act exposure, or regulated data types will find Bahnhof’s legal credentials more substantive than any other reviewed provider in this geography.

The product is not right for anyone who wants shared hosting, cPanel, managed WordPress, or a one-click setup experience. It’s also not competitive on raw specs-per-euro against international VPS providers like Hetzner or HostUp for workloads where Swedish sovereignty isn’t the priority. Internetport covers the Swedish infrastructure story with a broader product range including dedicated servers and colocation for readers who need more than VPS.

Common Questions About Bahnhof Cloud

Does Bahnhof Cloud offer shared hosting? No. Bahnhof Cloud’s product range covers VPS, Virtual Private Cloud, VMware, S3 object storage, GPU computing, Kubernetes, VDI, colocation, and custom enterprise platforms. There is no shared hosting, no cPanel, and no managed WordPress. If you need those products, other Swedish providers are better suited.

Where are Bahnhof’s data centres located? Seven owned Swedish facilities: Pionen, Thule, and S:t Erik in Stockholm; Gullan and Lajka in Kista; Sparven in Malmö; and Sala in Uppsala. A Gothenburg facility is under development. All data stays in Sweden.

Is Bahnhof Cloud good for WordPress? For a self-managed WordPress installation on a VPS, yes. The Large plan (4 vCPU, 8GB RAM, 100GB SSD, 850 SEK/mo) is well-suited to WordPress and WooCommerce. There are no managed WordPress features: you install, configure, update, and maintain WordPress yourself.

What makes Bahnhof different from AWS or Google Cloud in Sweden? AWS, Google Cloud, and Azure are US-incorporated companies. US law enforcement can compel them to produce data under the CLOUD Act regardless of where the data is physically stored. Bahnhof is Swedish-incorporated with no US parent. Swedish courts govern it. This is a legal distinction that geographic server location doesn’t resolve.

Does Bahnhof Cloud use renewable energy? Yes. Bahnhof holds Triple Green certification for 100% renewable energy. This is independently certified, not self-reported. Bahnhof was not listed in the Green Web Foundation’s database at the time of this review.

Final Verdict

Bahnhof Cloud is a narrow product for a specific audience, and it’s honest about that. No shared hosting. No cPanel. No managed anything. What it offers instead is Swedish-owned infrastructure with a 30-year documented commitment to user privacy, seven owned data centres including a nuclear bunker, ISO 27001 certification, independent Swedish sovereignty verification, and 100% renewable energy.

For Swedish and Nordic organisations with data sovereignty requirements, for developers who want VPS in Swedish-owned infrastructure, and for anyone whose legal or compliance posture rules out US-incorporated cloud providers, Bahnhof is the most substantive option in the Swedish market.

For everyone else, the product range is too narrow and the pricing too high relative to specs. That’s not a criticism. It’s Bahnhof doing exactly what it’s designed to do.