Cleura
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Swedish OpenStack public + compliant cloud (Cleura, ex-City Network, Iver-owned), ISO 27001 + ISO 9001 + ISO 14001, EU-only residency.
Cleura is an EU-owned service hosted in Sweden, with no identified CLOUD Act exposure. It is listed under Cloud & hosting.
Assessment notes
Swedish OpenStack-based cloud (Cleura AB, formerly City Network, now part of Iver, a Swedish IT-services group) operating multiple ISO 27001:2022-certified Tier-III EU data centres in Sweden and Germany, OpenInfra Foundation Gold member, and explicitly positioned as 'not subject to US extraterritorial surveillance laws' with EU-only data residency: EU-owned and EU-hosted with no CLOUD Act exposure.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 4 · 0 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Cleura
Cleura is a Swedish cloud-infrastructure provider operated by Cleura AB (formerly City Network), now part of Iver Sverige AB, the Swedish IT-services group that engages Iver as a sub-processor across all Cleura Public Cloud and Compliant Cloud regions (as confirmed in an April 2026 sub-processors update). With more than 20 years of operation, Cleura runs one of the largest OpenStack-based public cloud footprints in Europe and is an OpenInfra Foundation Gold Member; the company holds AAA credit rating and ships three deployment models: Public Cloud, Compliant Cloud (mission-critical workloads), and Private Cloud, all OpenStack-based with full API interoperability and an explicit anti-lock-in posture.
Compliance and sovereignty are the entire pitch. Cleura's Public Cloud is deployed in multiple ISO 27001-certified Tier-III data centres in Europe; the Compliant Cloud tier is positioned for regulated workloads and is named alongside Public Cloud in the scope of Cleura's own ISO/IEC 27001:2022 certificate. The company is ISO 9001 and 14001 certified at the management-system level, and emphatically markets itself as "not dependent on an unstable adequacy decision and not subject to US extraterritorial surveillance laws", a direct contrast positioning against AWS/Azure/GCP. Data residency is EU/EEA-only across regions in Sweden and Germany. As of the April 2026 update, all sub-processors are EU-based (Iver Sverige AB is the parent sub-processor reference).
Pricing is per-second monitored, hourly calculated, monthly billed, with per-vCore-hour configurations for Generic CPU and High-Intensity CPU instance classes; it is resource-based rather than plan-based, with Generic CPU listed at €0.0289 per vCore-hour, roughly €20.82 per vCore-month excluding VAT, so there is no single entry-tier price. Best fit: Swedish and Nordic enterprises, regulated industries (financial services, healthcare, public sector), OpenStack-fluent engineering teams that want anti-lock-in infrastructure, and EU buyers needing Compliant Cloud-grade isolation. Together with Hetzner, OVHcloud, Scaleway, IONOS, UpCloud, and STACKIT, Cleura completes the European hyperscaler-alternative shortlist for procurement-grade EU buyers.
Sub-processor map · 4
-
23 Technologies GmbH EUGermany
Container platform deployment (only with Cleura Container Orchestration Engine)
-
Interxion GmbH EUGermany
Remote hands (Public Cloud FRA1 datacenter; physical-only, no data access)
-
Interxion Sverige AB EUSweden
Remote hands (Public Cloud STO2 datacenter; physical-only, no data access)
-
Iver Sverige AB EUSweden
Infrastructure, managed services and support
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| 23 Technologies GmbH | Germany | Container platform deployment (only with Cleura Container Orchestration Engine) | EU |
| Interxion GmbH | Germany | Remote hands (Public Cloud FRA1 datacenter; physical-only, no data access) | EU |
| Interxion Sverige AB | Sweden | Remote hands (Public Cloud STO2 datacenter; physical-only, no data access) | EU |
| Iver Sverige AB | Sweden | Infrastructure, managed services and support | EU |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications
Capability matrix
Table 2Capabilities of Cleura
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Finland · $5/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Italy · €1.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: No Open source: No -
-
France · €4.80/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Aiven
Finland
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$5/mo |
Aruba Cloud
Italy
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: No
Open source: No
|
€1.99/mo |
Clever Cloud
France
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€4.80/mo |