Zum Inhalt springen
EU VETTED

Exoscale

Cloud & Hosting · Schweiz
Gegründet 2011 · exoscale.com

Swiss public cloud (Akenes SA, A1 Digital member), 6 EU/CH zones, ISO 27001 + FINMA + TISAX, Swiss-data-residency guarantee.

Exoscale ist ein europäischer Dienst mit Hosting in der Schweiz und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act. Gelistet unter Cloud & Hosting.

Bewertungsnotizen

Lausanne-based Swiss public cloud (Akenes SA, member of Austrian Telekom A1 Group's A1 Digital), founded 2011, with ISO/IEC 27001:2022 + ISO 27017 + ISO 27018 + FINMA Circular 2018/3 + TISAX + DORA-ready, six EU/EEA + CH data-centre zones in Geneva, Zurich, Vienna ×2, Frankfurt, and Zagreb, and a Swiss-data-residency guarantee for workloads placed in Swiss zones; AWS appears as an archival sub-processor on the customer-data path, which is the sole reason a minor CLOUD Act flag applies. Compute, object storage and SKS workloads stay on the EU/CH stack with no US dependency.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
9 · 2 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nicht bewertet
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Ja
Springen zu

Über Exoscale

Exoscale is a Swiss public cloud operated by Akenes SA (Boulevard de Grancy 19A, 1006 Lausanne; CHE-423.524.322), founded in 2011 and a member of A1 Digital, the digital subsidiary of A1 Telekom Austria Group, the largest telecoms group in Central and Eastern Europe. The product covers compute, storage, AI/GPU instances, Kubernetes (SKS), DBaaS (PostgreSQL, MySQL, Redis, OpenSearch, Kafka, Valkey), and object storage across six European data-centre zones: Switzerland (Geneva CH-GVA-2 and Zurich CH-DK-2), Austria (Vienna AT-VIE-1 and AT-VIE-2), Germany (Frankfurt DE-FRA-1), and Croatia (Zagreb HR-ZAG-1). Pricing is billed by the second at a flat rate across all zones, with no upfront commitment.

Compliance is enterprise-grade and built specifically for regulated workloads. Exoscale carries ISO/IEC 27001:2022, ISO 27017, ISO 27018, BSI C5, SOC 2, HDS (French healthcare data hosting), the Swiss FINMA Circular 2018/3 outsourcing framework (essential for Swiss financial-services customers), TISAX (German automotive supply-chain security), DORA-readiness for EU financial-services operational resilience, and the full Cloud Security Alliance 100-control-point framework. Operating under Swiss law and the Swiss Federal Data Protection Act, the company explicitly guarantees that "data uploaded in one of our Swiss zones is stored in Switzerland only": no cross-border transfers. The Swiss zones are housed in Equinix-managed facilities with strict physical-access controls; decommissioned drives are destroyed or cryptographically locked. Switzerland's EU adequacy decision (Art. 45 GDPR) keeps transfers between CH and EU jurisdictions legally clean without SCCs.

Sub-processors are deliberately minimal: Aiven Oy (Helsinki, FI) handles DBaaS orchestration; Adyen (NL) and PayPal cover payments; Bexio (CH) accounting, Brevo (FR) newsletters, Formbricks (DE) surveys, A1 Digital International (AT) business intelligence and MoocIt (FR) online learning make up the rest of the published list; AWS appears solely as an archival sub-processor and is the only US-owned entry on the customer-data path, which is what holds the CLOUD Act flag at Gering. Compute, Storage, and SKS currently have no third-party processors listed. The EU GDPR representative is A1 Digital International GmbH (Lassallestrasse 9, Vienna, AT). Best fit: Swiss financial-services (FINMA-regulated), DACH automotive supply-chain (TISAX), regulated public-sector buyers, and EU companies that want Swiss data residency with EU/CH adequacy clarity.

Unterauftragsverarbeiter-Karte · 9

Quelle
  • Amazon Web Services, Inc. US
    Vereinigte Staaten

    Archival sub-processor; customer-data backups/archives at rest (US-owned); sole reason for the minor CLOUD Act flag, kept off the live customer workloads

  • PayPal US
    Vereinigte Staaten

    Payment processing; ancillary, off the customer-data path

  • A1 Digital International GmbH EU
    Österreich

    Business intelligence; parent-group entity, ancillary, off the customer-data path

  • Adyen N.V. EU
    Niederlande

    Payment processing; ancillary, off the customer-data path

  • Aiven Oy EU
    Finnland

    Orchestration of data infrastructure services instances (DBaaS) running on Exoscale Compute

  • Bexio AG EU
    Schweiz

    Accounting; ancillary, off the customer-data path

  • Brevo EU
    Frankreich

    Newsletters and marketing campaigns; ancillary, off the customer-data path (replaced Mailchimp)

  • Formbricks GmbH EU
    Deutschland

    Surveys; ancillary, off the customer-data path

  • MoocIt EU
    Frankreich

    Online learning platform; ancillary, off the customer-data path

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

2 von 9 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. Begrenztes CLOUD-Act-Risiko über diese ergänzenden Unterauftragsverarbeiter.

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
Aktiv
ISO/IEC 27017
Aktiv
ISO/IEC 27018
Aktiv
BSI C5
Aktiv
SOC 2
Aktiv
Hinweis · US-Rahmenwerk
HDS
Aktiv

Funktionsmatrix

Tabelle 2Funktionen von Exoscale

Dedicated / Bare-Metal Nein
Object Storage (S3) Ja
Managed Kubernetes Ja
Managed Datenbanken Ja
GPU-Instanzen Ja
Stundenabrechnung Ja
API / Terraform Ja
Länder 5 Länder

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Nein

Preise & Tarife

ab 9 €/Monat
Kostenpflichtig
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    www.exoscale.com/dpa…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    www.exoscale.com/privacy…
    Öffnen
  • Nutzungsbedingungen
    www.exoscale.com/terms…
    Öffnen

Alternativen in dieser Kategorie

  • Aiven
    Finnland · 5 $/Mt.
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Aruba Cloud
    Italien · 1.99 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
  • Cleura
    Schweden
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
Alle cloud & hosting-Alternativen ansehen

In diesen Übersichten gelistet