Clever Cloud
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
French sovereign PaaS/IaaS: deploy apps and managed databases on EU infrastructure, billed per second.
Clever Cloud is an EU-owned service hosted in France, with no identified CLOUD Act exposure. It is listed under Cloud & hosting.
Assessment notes
French-owned SAS running on EU infrastructure with ISO 27001:2022 and HDS certification, an EU-only sub-processor chain, a published DPA and selection in the EU's €180M sovereign-cloud tender: no CLOUD Act exposure for FR-hosted deployments.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 0 none disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Clever Cloud
Clever Cloud is a French Platform-as-a-Service and Infrastructure-as-a-Service provider founded in Nantes in 2010. It automates the deployment, scaling and operation of web applications across most major languages and frameworks, with managed databases (PostgreSQL, MySQL, MongoDB, Redis), the S3-compatible Cellar object storage, and per-second pay-as-you-go billing that starts at roughly €4.80/month for the smallest runtime. Provisioning works through the console, a CLI, the API and an official Terraform provider, and organisations get SSO and activity logging.
For sovereignty-conscious buyers, the decisive point is the operating model: Clever Cloud is a wholly French-owned, bootstrapped SAS, and its core regions run on European infrastructure: Paris, Roubaix and a dedicated Gravelines HDS region on OVHcloud, plus a London availability zone on IONOS. Keeping a deployment in the French regions means data and the sub-processor chain stay in the EU, with no CLOUD Act exposure. The platform holds ISO 27001:2022 and HDS (French health-data hosting) certification, publishes a DPA, and is pursuing SecNumCloud qualification on its own infrastructure.
In April 2026 the consortium of DEEP (POST Luxembourg), OVHcloud and Clever Cloud was selected by the European Commission under the €180M Cloud III sovereign-cloud framework, with Clever Cloud supplying the PaaS, container and managed-services orchestration layer. That makes it a credible European answer to Heroku, Vercel and the application layers of AWS and Google Cloud for teams that want EU residency without operational overhead.
Sub-processor map · none disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of Clever Cloud
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Finland · $5/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Italy · €1.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: No Open source: No -
-
SwedenEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Aiven
Finland
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$5/mo |
Aruba Cloud
Italy
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: No
Open source: No
|
€1.99/mo |
Cleura
Sweden
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |