Infomaniak Public Cloud
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Swiss OpenStack public cloud + VPS + hosting (Infomaniak Group SA, Geneva, since 1994); own Swiss DCs, ISO 27001 + B Corp 2025, no CLOUD Act.
Infomaniak Public Cloud is an EU-owned service hosted in Switzerland, with no identified CLOUD Act exposure. It is listed under Cloud & hosting.
Assessment notes
Infomaniak Public Cloud is the IaaS layer of Infomaniak Group SA (Geneva, Switzerland; founded 1994 by Boris Siegenthaler and Fabian Lucchi; independent, privately held, founder-led with no VC/PE on record; full ownership cross-reference in the kdrive listing), a standards-based OpenStack public cloud (compute, block + object storage, managed Kubernetes, managed databases, GPU instances) plus VPS and web hosting, run entirely on Infomaniak's own Swiss data centres (Geneva) with ISO 27001 + ISO 9001 + ISO 14001 + ISO 50001 + B Corp 2025; Swiss-owned, own Swiss infrastructure, in-house software, public DPA, and Switzerland's EU adequacy decision keeping EU↔CH transfers SCC-free: no CLOUD Act exposure, making it a direct Swiss-sovereignty peer to Exoscale and the EU IaaS set (Hetzner / OVHcloud / Scaleway).
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- 1 · 1 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Infomaniak Public Cloud
Infomaniak Public Cloud is the infrastructure-as-a-service offering of Infomaniak Group SA, the independent Swiss technology company founded in Geneva in 1994 by Boris Siegenthaler and Fabian Lucchi, one of the longest-running independent European hosting companies, privately held and founder-led with no venture-capital or private-equity investors on the cap table (the kdrive listing documents the same vendor in full). The cloud product is a standards-based OpenStack public cloud: compute instances billed by the hour, block and object storage, managed Kubernetes, managed databases, and GPU instances for AI/ML workloads, accessible via the OpenStack API and Terraform. Alongside it Infomaniak sells VPS (from roughly €3/month), shared and managed web hosting, and managed cloud servers: a full ladder from a single small VPS up to OpenStack-orchestrated production estates.
For an EU-sovereignty audit this is among the most defensible Swiss IaaS listings in the directory. Infomaniak designs, builds, and fully operates its own Swiss data centres in Geneva: there is no hyperscaler underneath, the software stack is developed in-house, and all customer data stays on Swiss-located infrastructure under Infomaniak's direct control. The compliance footprint is broad: ISO/IEC 27001 (since June 2018), ISO 9001 (quality), ISO 14001 (environmental), ISO 50001 (energy), and B Corp certification (2025). Switzerland holds an EU adequacy decision under Art. 45 GDPR, so transfers EU↔CH are SCC-free, and the latest data centre recycles 100% of its consumed electricity as heat into a local district-heating network warming roughly 6,000 homes a year, among the most genuinely sustainable hosting operations in Europe.
Because OpenStack is an open standard, there is no proprietary lock-in at the orchestration layer: workloads are portable to any other OpenStack cloud (OVHcloud, Cleura, and others in this category). Pricing is transparent and usage-based: compute billed by the second/hour, object storage per GB, VPS on flat monthly tiers from ~€4. Best fit: Swiss and EU organisations that want a genuine Swiss-jurisdiction public cloud rather than a US hyperscaler's EU region; regulated and public-sector buyers needing data-residency and adequacy clarity; and teams that value an independent founder-led vendor running its own sustainable infrastructure. Together with Exoscale, Infomaniak completes the directory's Swiss-sovereignty IaaS shortlist.
Sub-processor map · 1
-
PayPal USUnited States
Payment processing; ancillary, off the customer-workload path
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| PayPal | United States | Payment processing; ancillary, off the customer-workload path | US |
Source: the vendor’s published sub-processor list, read 18 Jun 2026.
Frameworks & certifications
Capability matrix
Table 2Capabilities of Infomaniak Public Cloud
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Finland · $5/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Italy · €1.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: No Open source: No -
-
SwedenEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Aiven
Finland
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$5/mo |
Aruba Cloud
Italy
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: No
Open source: No
|
€1.99/mo |
Cleura
Sweden
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |