Law & jurisdiction

Can my VPS be seized?

Short answer

Physical seizure of hosting hardware is rare and requires a criminal warrant executed at the datacentre by local authorities. It is far more common for an authority to order the provider to image a specific instance. Full-disk encryption with a passphrase the provider never holds is the only meaningful protection against either.

Seizure of an entire rack affects every customer on it, which is why datacentres resist it and courts rarely order it. Targeted imaging of one instance is the realistic scenario, and it requires local judicial authorisation in every jurisdiction we operate in.

If this is in your threat model, three things follow: use the Bastion line with LUKS2, keep encrypted backups in a second jurisdiction, and rehearse the restore. An untested backup is not a backup.

See also: LUKS