Aller au contenu
EU VETTED

Exoscale

Cloud & hébergement · Suisse
Fondé en 2011 · exoscale.com

Swiss public cloud (Akenes SA, A1 Digital member), 6 EU/CH zones, ISO 27001 + FINMA + TISAX, Swiss-data-residency guarantee.

Exoscale est un service européen hébergé en Suisse, avec tout au plus une exposition américaine mineure et transitoire au titre du CLOUD Act. Référencé dans la catégorie Cloud & hébergement.

Notes d’évaluation

Lausanne-based Swiss public cloud (Akenes SA, member of Austrian Telekom A1 Group's A1 Digital), founded 2011, with ISO/IEC 27001:2022 + ISO 27017 + ISO 27018 + FINMA Circular 2018/3 + TISAX + DORA-ready, six EU/EEA + CH data-centre zones in Geneva, Zurich, Vienna ×2, Frankfurt, and Zagreb, and a Swiss-data-residency guarantee for workloads placed in Swiss zones; AWS appears as an archival sub-processor on the customer-data path, which is the sole reason a minor CLOUD Act flag applies. Compute, object storage and SKS workloads stay on the EU/CH stack with no US dependency.

Constats

CLOUD Act
Actionnariat
Sous-traitants
9 · 2 US

Signaux vérifiés

Juridiction
  • Hébergement UE / adéquation: Oui
  • Opérateur UE / adéquation: Oui
  • Aucune exposition au CLOUD Act: Non évalué
Transparence
  • DPA public: Oui
  • Sous-traitants divulgués: Oui
  • Clients open source: Non
  • Certification tierce: Oui
Aller à

À propos de Exoscale

Exoscale is a Swiss public cloud operated by Akenes SA (Boulevard de Grancy 19A, 1006 Lausanne; CHE-423.524.322), founded in 2011 and a member of A1 Digital, the digital subsidiary of A1 Telekom Austria Group, the largest telecoms group in Central and Eastern Europe. The product covers compute, storage, AI/GPU instances, Kubernetes (SKS), DBaaS (PostgreSQL, MySQL, Redis, OpenSearch, Kafka, Valkey), and object storage across six European data-centre zones: Switzerland (Geneva CH-GVA-2 and Zurich CH-DK-2), Austria (Vienna AT-VIE-1 and AT-VIE-2), Germany (Frankfurt DE-FRA-1), and Croatia (Zagreb HR-ZAG-1). Pricing is billed by the second at a flat rate across all zones, with no upfront commitment.

Compliance is enterprise-grade and built specifically for regulated workloads. Exoscale carries ISO/IEC 27001:2022, ISO 27017, ISO 27018, BSI C5, SOC 2, HDS (French healthcare data hosting), the Swiss FINMA Circular 2018/3 outsourcing framework (essential for Swiss financial-services customers), TISAX (German automotive supply-chain security), DORA-readiness for EU financial-services operational resilience, and the full Cloud Security Alliance 100-control-point framework. Operating under Swiss law and the Swiss Federal Data Protection Act, the company explicitly guarantees that "data uploaded in one of our Swiss zones is stored in Switzerland only": no cross-border transfers. The Swiss zones are housed in Equinix-managed facilities with strict physical-access controls; decommissioned drives are destroyed or cryptographically locked. Switzerland's EU adequacy decision (Art. 45 GDPR) keeps transfers between CH and EU jurisdictions legally clean without SCCs.

Sub-processors are deliberately minimal: Aiven Oy (Helsinki, FI) handles DBaaS orchestration; Adyen (NL) and PayPal cover payments; Bexio (CH) accounting, Brevo (FR) newsletters, Formbricks (DE) surveys, A1 Digital International (AT) business intelligence and MoocIt (FR) online learning make up the rest of the published list; AWS appears solely as an archival sub-processor and is the only US-owned entry on the customer-data path, which is what holds the CLOUD Act flag at Mineure. Compute, Storage, and SKS currently have no third-party processors listed. The EU GDPR representative is A1 Digital International GmbH (Lassallestrasse 9, Vienna, AT). Best fit: Swiss financial-services (FINMA-regulated), DACH automotive supply-chain (TISAX), regulated public-sector buyers, and EU companies that want Swiss data residency with EU/CH adequacy clarity.

Carte des sous-traitants · 9

Source
  • Amazon Web Services, Inc. US
    États-Unis

    Archival sub-processor; customer-data backups/archives at rest (US-owned); sole reason for the minor CLOUD Act flag, kept off the live customer workloads

  • PayPal US
    États-Unis

    Payment processing; ancillary, off the customer-data path

  • A1 Digital International GmbH EU
    Autriche

    Business intelligence; parent-group entity, ancillary, off the customer-data path

  • Adyen N.V. EU
    Pays-Bas

    Payment processing; ancillary, off the customer-data path

  • Aiven Oy EU
    Finlande

    Orchestration of data infrastructure services instances (DBaaS) running on Exoscale Compute

  • Bexio AG EU
    Suisse

    Accounting; ancillary, off the customer-data path

  • Brevo EU
    France

    Newsletters and marketing campaigns; ancillary, off the customer-data path (replaced Mailchimp)

  • Formbricks GmbH EU
    Allemagne

    Surveys; ancillary, off the customer-data path

  • MoocIt EU
    France

    Online learning platform; ancillary, off the customer-data path

Source : liste publiée des sous-traitants de l’éditeur, lue le 26 août 2026.

2 sous-traitants sur 9 sont détenus par des capitaux américains ou établis aux États-Unis. Exposition limitée au CLOUD Act via ces sous-traitants accessoires.

Référentiels & certifications

ISO/IEC 27001
Active
ISO/IEC 27017
Active
ISO/IEC 27018
Active
BSI C5
Active
SOC 2
Active
Information · cadre US
HDS
Active

Matrice de fonctionnalités

Tableau 2Fonctionnalités de Exoscale

Dédié / bare-metal Non
Stockage objet (S3) Oui
Kubernetes managé Oui
Bases managées Oui
Instances GPU Oui
Facturation horaire Oui
API / Terraform Oui
Pays 5 pays

Intégration & accès

REST API Oui
SSO (SAML / OIDC) Oui

Conformité & gouvernance

Audit log Oui
Self-host / on-prem option Non

Tarifs & paliers

à partir de 9 €/mois
Payant
Voir la page tarifs

Documents publics

  • Contrat de sous-traitance (DPA)
    www.exoscale.com/dpa…
    Ouvrir
  • Liste des sous-traitants
    www.exoscale.com/privacy…
    Ouvrir
  • Conditions d'utilisation
    www.exoscale.com/terms…
    Ouvrir

Alternatives dans cette catégorie

  • Aiven
    Finlande · 5 $/mois
    Hébergé UE
    DPA public: Oui Sous-traitants: Oui Open source: Non
  • Aruba Cloud
    Italie · 1.99 €/mois
    Souverain UE
    DPA public: Oui Sous-traitants: Non Open source: Non
  • Cleura
    Suède
    Souverain UE
    DPA public: Oui Sous-traitants: Oui Open source: Non
Voir toutes les alternatives cloud & hébergement

Présent dans ces guides