# Object-storage provider due diligence — 2026-08-10

Status vocabulary: `yes`, `no`, `unknown`, or `test`. `Test` means documentation
is promising but the live CNPG/Barman preflight remains mandatory.

| Requirement | Host Europe Cloud Storage | Scaleway Standard Multi-AZ | Hetzner Object Storage |
| --- | --- | --- | --- |
| Currently orderable for account | unknown — written confirmation required | yes | yes |
| S3-compatible HTTPS / SigV4 | unknown | yes / test | yes / test |
| EU region considered | unknown | Amsterdam `nl-ams` | Nuremberg `nbg1` |
| Different provider from reef-railiance | no | yes | yes |
| Multi-AZ / availability | unknown | yes; 99.9% service availability | unknown; docs describe Ceph and infrastructure redundancy, not a quantified service SLA |
| Published durability | unknown | 99.999999999% | unknown |
| Scoped access key | unknown | yes; bucket policy test required | yes; key defaults to all project buckets, bucket policy required |
| Private bucket | unknown | yes | yes |
| Multipart/list/get/put/delete | unknown | yes / test | yes / test |
| Versioning | unknown | yes | yes |
| Lifecycle expiration | unknown | yes | yes |
| Object lock | unknown | yes; cannot later disable | yes; enable at bucket creation |
| TLS encryption | unknown | yes; enforceable by bucket policy | yes / test |
| Encryption at rest | unknown | yes: SSE-ONE, SSE-C, or SSE-KMS | **no default**; SSE-C is documented |
| Initial 100 GiB without long commitment | unknown | yes, usage-based | yes, hourly base billing |
| Operations pricing | unknown | no separate request charge found; confirm invoice model | PUT/GET/DELETE free |
| Storage / egress pricing | unknown | €0.01606/GB-month; 75 GB egress free, then €0.01/GB | €6.49 minimum includes 1 TB storage and 1 TB egress; excess prices still to capture |
| Cancellation / support terms | unknown | contract review required | contract review required |
| Provider status visibility | unknown | yes | yes |
| CNPG 1.25/Barman compatibility | unknown | test | test |

## Evidence

- Host Europe Backup Storage supports FTP, SCP, SFTP, and rsync, so it is a
  secondary logical-copy candidate, not the primary Barman object store:
  https://www.hosteurope.de/faq/server/virtual-server/backup-storage/
- Host Europe's S3 claim is currently only backed by an older specification:
  https://www.hosteurope.de/download/PVL/Preis_und_Leistungsverzeichnis_CloudStorage_1-0-1.pdf
- Scaleway pricing: https://www.scaleway.com/en/pricing/storage/
- Scaleway capabilities and durability:
  https://www.scaleway.com/en/object-storage/
- Scaleway regions/lifecycle/multipart:
  https://www.scaleway.com/en/docs/object-storage/concepts/
- Scaleway object lock:
  https://www.scaleway.com/en/docs/object-storage/how-to/use-object-lock/
- Hetzner overview, endpoints, quotas, operations, and limits:
  https://docs.hetzner.com/storage/object-storage/overview/
- Hetzner supported S3 actions and encryption limitation:
  https://docs.hetzner.com/storage/object-storage/supported-actions/
- Hetzner encryption FAQ:
  https://docs.hetzner.com/storage/object-storage/faq/general/
- CNPG 1.25 S3-compatible endpoint and lifecycle guidance:
  https://cloudnative-pg.io/docs/1.25/appendixes/object_stores/

## Blocking evidence requests

1. Host Europe: ask account support to confirm current orderability, endpoint,
   region, SigV4, supported API, versioning/lifecycle, encryption, durability,
   availability, price, support, and cancellation terms in writing.
2. Scaleway and Hetzner: obtain account-visible contractual/support terms and
   confirm tax treatment. Capture Hetzner excess prices.
3. Run a disposable live preflight for each finalist: private bucket, scoped
   positive and negative credentials, multipart CRUD, versioning/lifecycle,
   Barman empty-WAL-archive check, and deletion/exit behavior.

## Provisional conclusion

Host Europe is not selectable as primary while current S3 orderability is
unknown. Hetzner fails the current acceptance requirement for provider-managed
encryption at rest unless client-side/SSE-C custody is explicitly accepted.
Scaleway Standard Multi-AZ is therefore the provisional primary, subject to a
live Barman preflight, contract review, and human purchase approval. Hetzner
remains a price comparator; Host Europe Backup Storage or the governed
Nextcloud lane remains the independent logical-copy candidate.