Cyso Cloud is the OpenStack public cloud of Cyso B.V. (Wognumsebuurt 3, 1817 BH Alkmaar; KvK 37133395; VAT NL8185.13.974.B03), part of Cyso Group B.V. (KvK 33287475), a Dutch hosting company founded in 1997 by Paul Bankert, Sven Visser and Tjebbe de Winter, who still lead it. The cloud platform started separately in 2016 as Fuga Cloud and was folded back into Cyso on 1 January 2025 under the Cyso Cloud name. The service surface covers compute (s5 standard, c5 CPU-optimised and m5 memory-optimised flavours), S3-compatible object storage with versioning and lifecycle rules, Enterprise Managed Kubernetes with a 99.9% SLA, load balancers, anycast DNS, a transactional email service, plus IAM and cloud databases still in beta. It runs vanilla OpenStack with no proprietary abstraction layer, so the OpenStack API, CLI and the standard Terraform OpenStack provider work directly, and Cyso documents the Terraform path itself. Billing is hourly and invoiced monthly in EUR excluding VAT, from €17.5 per month for the smallest instance (2 vCPU, 8 GB RAM, 50 GB disk); object storage is 0.055 EUR per GB with egress charged at the same rate.
Ownership and certification hold up under independent checking. Cyso is founder-owned Dutch with no US parent and no US investor in the chain, and the two certificates were read straight from the published PDFs rather than trusted from a badge: ISO/IEC 27001:2022 (certificate 25.002, valid 21-02-2025 to 21-02-2028) and NEN 7510-1:2017+A1:2020 (certificate 25.080, valid 24-06-2025 to 20-02-2027), both issued by the RvA-accredited Dutch certifier CIIO B.V. to Cyso Group B.V., with Cyso B.V. and SQR B.V. named in the appendix, scoped to managed hosting, shared hosting and cloud services. NEN 7510 is the Dutch healthcare information-security standard and is the credential that genuinely differentiates this listing. The infrastructure claim checks out too: cyso.cloud resolves to 81.24.14.232 inside the RIPE block FUGA_FRA maintained by CYSO-MNT, so there is no US CDN in front and no hyperscaler underneath, and the platform runs from three data centres across Amsterdam and Frankfurt with the region selectable per object-storage bucket.
The paperwork is what holds this at 3/5. There is no publicly downloadable Data Processing Agreement: cyso.cloud/dpa and /privacy-policy return 404, the cloud Terms of Use link out to the group terms whose Article 2.11 sets processor duties only in general language, and the vendor confirms the full DPA is available on request. More significant is the sub-processor position. The only list Cyso publishes, and the document the vendor cited in its own listing request, names Microsoft Corporation, Amazon.com Inc. and Google LLC for the purpose 'Cloud Computing', with a reporting date of 14 August 2018 and no revision since; the group privacy policy behind it is version 1.0.1 of November 2018. Independently, the MX records for both cyso.cloud and cyso.com point to Google Workspace, so Google LLC processes inbound support and sales mail. Set against the trust-centre claim of 'no unauthorised transfers outside the EU', that is a live contradiction, and this directory records the exposure as Material rather than accept the self-attestation. Two practical notes: object storage is not encrypted at rest by default, with SSE-C or client-side encryption as the offered routes, and there are no GPU or bare-metal flavours. Buyers who need a self-servable DPA and a current sub-processor register should compare against Hetzner, OVHcloud, Scaleway and Cleura in this category.