Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

Exoscale

VéRIFIé
Cloud & hébergement · Switzerland
Fondé en 2011 · exoscale.com ↗

Swiss public cloud (Akenes SA, A1 Digital member), 6 EU/CH zones, ISO 27001 + FINMA + TISAX, Swiss-data-residency guarantee.

En bref

Exoscale, dans la catégorie Cloud & hébergement, est un service européen avec Switzerland comme lieu d’hébergement et tout au plus une exposition américaine mineure et transitoire au titre du CLOUD Act.

Notes d’évaluation

Lausanne-based Swiss public cloud (Akenes SA, member of Austrian Telekom A1 Group's A1 Digital), founded 2011, with ISO/IEC 27001:2022 + ISO 27017 + ISO 27018 + FINMA Circular 2018/3 + TISAX + DORA-ready, six EU/EEA + CH data-centre zones in Geneva, Zurich, Vienna ×2, Frankfurt, and Zagreb, and a Swiss-data-residency guarantee for workloads placed in Swiss zones; AWS appears as an archival sub-processor on the customer-data path, which is the sole reason a minor CLOUD Act flag applies. Compute, object storage and SKS workloads stay on the EU/CH stack with no US dependency.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 3 US
Signaux vérifiés
Juridiction
  • Hébergement UE / adéquation
  • Opérateur UE / adéquation
  • Aucune exposition au CLOUD Act
Transparence
  • DPA public
  • Sous-traitants divulgués
  • Clients open source
  • Certification tierce
JUMP TO
OVERVIEW

À propos de Exoscale

Exoscale is a Swiss public cloud operated by Akenes SA (Boulevard de Grancy 19A, 1006 Lausanne; CHE-423.524.322), founded in 2011 and a member of A1 Digital, the digital subsidiary of A1 Telekom Austria Group, the largest telecoms group in Central and Eastern Europe. The product covers compute, storage, AI/GPU instances, Kubernetes (SKS), DBaaS (PostgreSQL, MySQL, Redis, OpenSearch, Kafka, Valkey), and object storage across six European data-centre zones: Switzerland (Geneva CH-GVA-2 and Zurich CH-DK-2), Austria (Vienna AT-VIE-1 and AT-VIE-2), Germany (Frankfurt DE-FRA-1), and Croatia (Zagreb HR-ZAG-1). Pricing is billed by the second at a flat rate across all zones, with no upfront commitment.

Compliance is enterprise-grade and built specifically for regulated workloads. Exoscale carries ISO/IEC 27001:2022, ISO 27017, ISO 27018, the Swiss FINMA Circular 2018/3 outsourcing framework (essential for Swiss financial-services customers), TISAX (German automotive supply-chain security), DORA-readiness for EU financial-services operational resilience, and the full Cloud Security Alliance 100-control-point framework. Operating under Swiss law and the Swiss Federal Data Protection Act, the company explicitly guarantees that "data uploaded in one of our Swiss zones is stored in Switzerland only": no cross-border transfers. The Swiss zones are housed in Equinix-managed facilities with strict physical-access controls; decommissioned drives are destroyed or cryptographically locked. Switzerland's EU adequacy decision (Art. 45 GDPR) keeps transfers between CH and EU jurisdictions legally clean without SCCs.

Sub-processors are deliberately minimal: Aiven Oy (Helsinki, FI) handles DBaaS orchestration; Adyen (NL) and PostFinance / PayPal cover payments; Matomo (NZ-incorporated, EU-self-hostable) handles portal analytics; Mailchimp is used for newsletters but no permanent email storage; AWS appears solely as an archival sub-processor, the only US-owned dependency, holding the CLOUD Act flag at minor rather than none. Compute, Storage, and SKS currently have no third-party processors listed. The EU GDPR representative is A1 Digital International GmbH (Lassallestrasse 9, Vienna, AT). Best fit: Swiss financial-services (FINMA-regulated), DACH automotive supply-chain (TISAX), regulated public-sector buyers, and EU companies that want Swiss data residency with EU/CH adequacy clarity.

SUB-PROCESSORS

Carte des sous-traitants · 7

Source ↗
  • Amazon Web Services, Inc. US
    United States

    Archival sub-processor; customer-data backups/archives at rest (US-owned); sole reason for the minor CLOUD Act flag, kept off the live customer workloads

  • Mailchimp (Intuit Inc.) US
    United States

    Newsletter delivery with no permanent email storage; ancillary, off the customer-data path

  • PayPal US
    United States

    Payment processing; ancillary, off the customer-data path

  • Adyen N.V. EU
    Netherlands

    Payment processing; ancillary, off the customer-data path

  • Aiven Oy EU
    Finland

    Orchestration of data infrastructure services instances (DBaaS) running on Exoscale Compute

  • InnoCraft Ltd (Matomo) non-US
    New Zealand

    Portal/website analytics; ancillary, EU-self-hostable, off the customer-data path

  • PostFinance AG EU
    Switzerland

    Payment processing; ancillary, off the customer-data path

3 sous-traitants sur 7 sont incorporés aux États-Unis. Exposition limitée au CLOUD Act via ces sous-traitants accessoires.
CERTIFICATIONS

Référentiels & certifications

ISO/IEC 27001
ACTIVE
ISO/IEC 27017
ACTIVE
ISO/IEC 27018
ACTIVE
FEATURES

Matrice de fonctionnalités

Dédié / bare-metal Non
Stockage objet (S3) Oui
Kubernetes managé Oui
Bases managées Oui
Instances GPU Oui
Facturation horaire Oui
API / Terraform Oui
Pays 5 pays
INTéGRATION & ACCèS
REST API Yes
SSO (SAML / OIDC) Yes
CONFORMITé & GOUVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Tarifs & paliers

PAYANT
à partir de €9/mois
Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

  • Contrat de sous-traitance (DPA)
    www.exoscale.com/dpa…
    Ouvrir ↗
  • Liste des sous-traitants
    www.exoscale.com/privacy…
    Ouvrir ↗
  • Conditions d'utilisation
    www.exoscale.com/terms…
    Ouvrir ↗
ALTERNATIVES

Alternatives dans cette catégorie

Aruba Cloud
Italy · Fondé en 1994
SOUVERAIN UE

Italian sovereign cloud (Aruba S.p.A.), 4 Italian DCs (Arezzo/Bergamo/Rome), ACN-qualified up to AI3/QC3 for public administration.

DPA public Sous-traitants Open source
FROM
€1/mois
CLOUD ACT
NONE
Cleura
Sweden · Fondé en 2005
SOUVERAIN UE

Swedish OpenStack public + compliant cloud (Cleura, ex-City Network, Iver-owned), ISO 27001/27017/27018, EU-only residency.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
NONE
Clever Cloud
France · Fondé en 2010
SOUVERAIN UE

PaaS/IaaS souverain français : applications et bases managées sur infrastructure européenne, facturées à la seconde.

DPA public Sous-traitants Open source
FROM
€4.8/mois
CLOUD ACT
NONE