Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Exoscale

VERIFIZIERT
Cloud & Hosting · Switzerland
Gegründet 2011 · exoscale.com ↗

Swiss public cloud (Akenes SA, A1 Digital member), 6 EU/CH zones, ISO 27001 + FINMA + TISAX, Swiss-data-residency guarantee.

Kurzfassung

Exoscale aus der Kategorie Cloud & Hosting ist ein europäischer Dienst mit Switzerland als Hosting-Standort und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act.

Bewertungsnotizen

Lausanne-based Swiss public cloud (Akenes SA, member of Austrian Telekom A1 Group's A1 Digital), founded 2011, with ISO/IEC 27001:2022 + ISO 27017 + ISO 27018 + FINMA Circular 2018/3 + TISAX + DORA-ready, six EU/EEA + CH data-centre zones in Geneva, Zurich, Vienna ×2, Frankfurt, and Zagreb, and a Swiss-data-residency guarantee for workloads placed in Swiss zones; AWS appears as an archival sub-processor on the customer-data path, which is the sole reason a minor CLOUD Act flag applies. Compute, object storage and SKS workloads stay on the EU/CH stack with no US dependency.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 3 US
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über Exoscale

Exoscale is a Swiss public cloud operated by Akenes SA (Boulevard de Grancy 19A, 1006 Lausanne; CHE-423.524.322), founded in 2011 and a member of A1 Digital, the digital subsidiary of A1 Telekom Austria Group, the largest telecoms group in Central and Eastern Europe. The product covers compute, storage, AI/GPU instances, Kubernetes (SKS), DBaaS (PostgreSQL, MySQL, Redis, OpenSearch, Kafka, Valkey), and object storage across six European data-centre zones: Switzerland (Geneva CH-GVA-2 and Zurich CH-DK-2), Austria (Vienna AT-VIE-1 and AT-VIE-2), Germany (Frankfurt DE-FRA-1), and Croatia (Zagreb HR-ZAG-1). Pricing is billed by the second at a flat rate across all zones, with no upfront commitment.

Compliance is enterprise-grade and built specifically for regulated workloads. Exoscale carries ISO/IEC 27001:2022, ISO 27017, ISO 27018, the Swiss FINMA Circular 2018/3 outsourcing framework (essential for Swiss financial-services customers), TISAX (German automotive supply-chain security), DORA-readiness for EU financial-services operational resilience, and the full Cloud Security Alliance 100-control-point framework. Operating under Swiss law and the Swiss Federal Data Protection Act, the company explicitly guarantees that "data uploaded in one of our Swiss zones is stored in Switzerland only": no cross-border transfers. The Swiss zones are housed in Equinix-managed facilities with strict physical-access controls; decommissioned drives are destroyed or cryptographically locked. Switzerland's EU adequacy decision (Art. 45 GDPR) keeps transfers between CH and EU jurisdictions legally clean without SCCs.

Sub-processors are deliberately minimal: Aiven Oy (Helsinki, FI) handles DBaaS orchestration; Adyen (NL) and PostFinance / PayPal cover payments; Matomo (NZ-incorporated, EU-self-hostable) handles portal analytics; Mailchimp is used for newsletters but no permanent email storage; AWS appears solely as an archival sub-processor, the only US-owned dependency, holding the CLOUD Act flag at minor rather than none. Compute, Storage, and SKS currently have no third-party processors listed. The EU GDPR representative is A1 Digital International GmbH (Lassallestrasse 9, Vienna, AT). Best fit: Swiss financial-services (FINMA-regulated), DACH automotive supply-chain (TISAX), regulated public-sector buyers, and EU companies that want Swiss data residency with EU/CH adequacy clarity.

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · 7

Quelle ↗
  • Amazon Web Services, Inc. US
    United States

    Archival sub-processor; customer-data backups/archives at rest (US-owned); sole reason for the minor CLOUD Act flag, kept off the live customer workloads

  • Mailchimp (Intuit Inc.) US
    United States

    Newsletter delivery with no permanent email storage; ancillary, off the customer-data path

  • PayPal US
    United States

    Payment processing; ancillary, off the customer-data path

  • Adyen N.V. EU
    Netherlands

    Payment processing; ancillary, off the customer-data path

  • Aiven Oy EU
    Finland

    Orchestration of data infrastructure services instances (DBaaS) running on Exoscale Compute

  • InnoCraft Ltd (Matomo) non-US
    New Zealand

    Portal/website analytics; ancillary, EU-self-hostable, off the customer-data path

  • PostFinance AG EU
    Switzerland

    Payment processing; ancillary, off the customer-data path

3 von 7 Unterauftragsverarbeitern sind in den USA registriert. Begrenztes CLOUD-Act-Risiko über diese ergänzenden Unterauftragsverarbeiter.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
AKTIV
ISO/IEC 27017
AKTIV
ISO/IEC 27018
AKTIV
FEATURES

Funktionsmatrix

Dedicated / Bare-Metal Nein
Object Storage (S3) Ja
Managed Kubernetes Ja
Managed Datenbanken Ja
GPU-Instanzen Ja
Stundenabrechnung Ja
API / Terraform Ja
Länder 5 Länder
INTEGRATION & ZUGRIFF
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Preise & Tarife

KOSTENPFLICHTIG
ab €9/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    www.exoscale.com/dpa…
    Öffnen ↗
  • Liste der Unterauftragsverarbeiter
    www.exoscale.com/privacy…
    Öffnen ↗
  • Nutzungsbedingungen
    www.exoscale.com/terms…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

Aruba Cloud
Italy · Gegründet 1994
EU-SOUVERäN

Italian sovereign cloud (Aruba S.p.A.), 4 Italian DCs (Arezzo/Bergamo/Rome), ACN-qualified up to AI3/QC3 for public administration.

Öffentl. AVV Subprozessoren Open Source
FROM
€1/Mt.
CLOUD ACT
NONE
Cleura
Sweden · Gegründet 2005
EU-SOUVERäN

Swedish OpenStack public + compliant cloud (Cleura, ex-City Network, Iver-owned), ISO 27001/27017/27018, EU-only residency.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
NONE
Clever Cloud
France · Gegründet 2010
EU-SOUVERäN

Französische souveräne PaaS/IaaS: Apps und Managed-Datenbanken auf EU-Infrastruktur, sekundengenau abgerechnet.

Öffentl. AVV Subprozessoren Open Source
FROM
€4.8/Mt.
CLOUD ACT
NONE