What "legit" can mean for a course owner
For someone selling courses or memberships, a hosting company is legitimate in a practical sense if it is a real, long-running business, publishes the terms you are agreeing to, keeps backups you can restore, and lets you leave with your data and a refund inside a stated window. This guide sticks to facts SiteGround and reputable press have published. It does not summarize customer reviews or speculate about anything that is not documented.
Everything below was checked on SiteGround's own pages on 30 October 2026. Company claims such as customer counts and awards are SiteGround's self-description, not independently audited figures.
Company facts SiteGround publishes
SiteGround's company page says it began in 2004 when a couple of IT graduates set out to build the hosting service they wanted, and that it has remained privately owned since 2004. It names no outside investors. The same page describes it as a group of companies registered in the USA, the UK, Spain, Cyprus and Bulgaria, and lists 500+ experts and 3M+ domains hosted.
The platform runs on Google Cloud infrastructure, according to both the company page and the data center page, which calls Google Cloud Platform its data center partner. The company page cites 11 data centers in 8 countries across 4 continents and 170 CDN points. The data center page header mentions 17 cities while the body says 11 data centers, so treat the exact count as a marketing figure and pick your location from the list offered at signup.
| Fact | What SiteGround states | Source page |
|---|---|---|
| Founded | 2004 | Company page |
| Ownership | Privately owned since 2004; no investors named | Company page |
| Registered entities | Group of companies in USA, UK, Spain, Cyprus, Bulgaria | Company page |
| Infrastructure | Google Cloud premium infrastructure | Company and data center pages |
| Data centers | 11 in 8 countries, 4 continents (header also says 17 cities) | Company and data center pages |
| Privacy compliance | States it is GDPR-compliant | Data center page FAQ |
| ISO 27001 / SOC 2 | Not listed on either page when checked | Company and data center pages |
Published security measures and what they do not cover
SiteGround's knowledge base article on site protection (updated 29 September 2025) lists a custom nginx security module that scans incoming requests, IDS/IPS systems that block malicious bots, virtual patches delivered as web application firewall rules, Apache running in a chrooted environment with suExec, ongoing monitoring of popular applications for vulnerabilities, and auto-updates for WordPress core and plugins. It also says staff access to user data is limited and logged.
The same article says these measures are not always enough and points to a paid Expert Care review for WordPress security analysis. It does not mention a third-party certification or audit. If your employer, a corporate training client or a university buyer asks for ISO 27001 or a SOC 2 report, request the current certificate from SiteGround sales in writing before you sign; we could not find one on the public pages we checked.
Backups and refunds: the policies that protect your data and money
SiteGround's backup article (updated 13 May 2026) says it creates automatic daily backups for all sites and keeps up to 30 daily copies on shared plans and up to 7 on cloud plans. Backups are stored on servers separate from the hosting server, usually in a different geographic location. GrowBig and GoGeek include 5 free on-demand backups; StartUp has none without the paid Premium Backup add-on. Deleting a site removes access to its backups unless you downloaded a copy.
The refund policy (updated 7 October 2026) gives a full refund within 30 days of activation for shared hosting and 14 days for cloud hosting. Domain fees, paid support and third-party services are not refundable.
Documented incidents from reputable press
The best-documented incident is from November 2021. Search Engine Journal reported on 15 November 2021 that for about four days starting 8 November, Google could not properly crawl sites hosted by SiteGround. SiteGround attributed it to a networking problem specific to Amazon's Global Accelerator and Google's crawler subnet, said on 12 November that it had deployed a fix that bypasses the problem, and explained the cause publicly on 15 November.
The practical lesson for a course business is not that one host is unsafe; every provider can have outages. It is that you should keep your own off-host backups, know how to repoint DNS, and watch Google Search Console after any incident at your host.
Checklist before you pay
- Read the renewal price, not just the first-term price: StartUp, GrowBig and GoGeek renewed at $17.99, $29.99 and $44.99 a month on 30 October 2026.
- Put the 30-day (shared) or 14-day (cloud) refund deadline in your calendar on the day you activate.
- Confirm whether a free promotional domain would be charged if you cancel; domain fees are not refundable.
- Choose a plan with on-demand backups (GrowBig or above) if you will update LMS or payment plugins yourself.
- Download a full backup to your own storage after setup; SiteGround backups disappear if the site is deleted.
- If a client or employer needs a security certification, ask SiteGround for the current certificate before signing.
- Pick the data center closest to most students from the list shown at signup.
Questions before you decide
Is SiteGround a real, established company?
SiteGround says it was founded in 2004, has stayed privately owned since then, and operates as a group of companies registered in the USA, UK, Spain, Cyprus and Bulgaria.
Does SiteGround have ISO 27001 certification?
Neither its company page nor its data center page listed ISO 27001 or SOC 2 when checked on 30 October 2026. Ask SiteGround for a current certificate if you need one.
How many backups does SiteGround keep?
Its backup article says up to 30 daily copies on shared plans and up to 7 on cloud plans, stored on separate servers. Deleting a site removes access to its backups.
Has SiteGround had a major outage?
Search Engine Journal documented a roughly four-day problem in November 2021 when Google could not properly crawl SiteGround-hosted sites; SiteGround attributed it to an Amazon Global Accelerator routing issue and deployed a fix.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- SiteGround company page Accessed 30 Oct 2026
- SiteGround data center locations Accessed 30 Oct 2026
- SiteGround KB: How does SiteGround protect my website? Accessed 30 Oct 2026
- SiteGround KB: How to use the Backup service in Site Tools Accessed 30 Oct 2026
- SiteGround KB: Refund policy Accessed 30 Oct 2026
- SiteGround WordPress hosting plans and prices Accessed 30 Oct 2026
- Search Engine Journal: SiteGround hosting outage is over (Nov 15, 2021) Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.