Offshore dedicated servers. Single tenant, no identity.

A VPS, however well-run, shares a hypervisor: the host can in principle pause a guest, snapshot its RAM and read its disk. A dedicated server removes that layer. You are the only tenant, there is no provider agent inside your OS, and once IPMI credentials are handed over the machine is operationally dark to us — we see a powered port and a billing line, not your processes.

That makes encryption mean something. Full-disk encryption on rented bare metal protects against the realistic threats — drive swaps, decommissioning, datacenter-side copying — because no hypervisor exists to lift keys out of memory. Drives are wiped before handover, the array is yours to rebuild, and what we know about the workload is what you choose to tell support. Physical access by a determined state actor remains possible anywhere on earth; that residual risk is exactly what jurisdiction selection is for.

Every chassis ships with IPMI / KVM-over-IP on a private management network, reachable only with your credentials. Mount an ISO, watch POST, reinstall from scratch, fix a broken bootloader — none of it requires a support ticket or a human at our end, which is precisely the point on a privacy box.

It also enables the setup we would actually recommend: boot your own installer over virtual media and run a full-disk-encrypted install, unlocked remotely at boot via dropbear-initramfs over SSH. We hand over a machine; you turn it into a sealed one. The maintained OS images — Debian, Ubuntu, AlmaLinux, Rocky, FreeBSD, Windows Server — are there for convenience, not obligation.