Stackscale
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Spanish private cloud + bare metal (Stackscale, Grupo Aire), Madrid + Amsterdam DCs, ISO 27001/27017/27018 + ENS High.
Stackscale is an EU-owned service hosted in Spain, with no identified CLOUD Act exposure. It is listed under Cloud & hosting.
Assessment notes
Madrid-based Spanish private-cloud and bare-metal provider (Stackscale, part of Grupo Aire since 2022) running customer workloads exclusively across EU data centres in Madrid (×3), Amsterdam (×2), plus Alicante, Valencia and Portugal, with ISO/IEC 27001 + 27017 + 27018 and the Spanish government's ENS (Esquema Nacional de Seguridad) certification at the High level (the most stringent ENS tier): EU-owned and EU-hosted with no CLOUD Act exposure.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 0 none disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Stackscale
Stackscale is a Madrid-based Spanish private-cloud and dedicated-infrastructure provider founded in 2013 and part of Grupo Aire since 2022, the Spanish connectivity, VoIP, mobile-enabler, UCaaS, and cloud group also known as Aire Networks. Headquartered at Pl. Pablo Ruiz Picasso 1 in Madrid with offices in Amsterdam (Therese Schwartzestraat 69), Stackscale operates three data centres in Madrid, two in Amsterdam, plus additional facilities in Alicante, Valencia, and Portugal. The product targets IT integrators, IaaS / PaaS / SaaS providers, and medium-to-large enterprises with custom private-cloud builds, dedicated servers, and a multi-100G core network with 4+ Tbps of aggregated capacity.
Compliance posture is one of the strongest in the Iberian / Benelux cloud market. Stackscale holds ISO/IEC 27001 plus ISO 27017 and ISO 27018 specifically scoped to cloud security and personal data protection, and is certified under the Spanish government's ENS (Esquema Nacional de Seguridad) at the High level, the most stringent ENS tier, required for processing sensitive public-sector and regulated data. The parent group Aire Networks additionally carries ISO 9001 (quality management), ISO 14001 (environmental management), ISO 22301 (business continuity), and the same ISO 27017 / 27018 / ENS High certifications. All infrastructure is located within the European Union (Spain, Netherlands, Portugal), which is particularly attractive for organisations that care about GDPR, data residency, and European regulatory compliance.
Pricing is published as a list and oriented to private-cloud nodes rather than self-serve VPS instances: the entry NODE 128 M is €395 per month excluding VAT plus a one-off setup fee, with the next node tier at €545 per month; larger builds are still sized and negotiated with sales. 99.99% SLA availability is advertised. Best fit: Spanish and broader Iberian SMBs and mid-market, Dutch and Benelux customers needing Amsterdam-region capacity, Spanish public-sector procurement requiring ENS High, and IT integrators or hosting resellers building infrastructure on top of a Spanish-owned EU-only stack. Together with Hetzner, OVHcloud, Scaleway, IONOS, UpCloud, STACKIT, Cleura, Exoscale, and Open Telekom Cloud / T Cloud Public, Stackscale rounds out the procurement-grade EU hyperscaler-alternative shortlist.
Sub-processor map · none disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of Stackscale
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Finland · $5/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Italy · €1.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: No Open source: No -
-
SwedenEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Aiven
Finland
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$5/mo |
Aruba Cloud
Italy
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: No
Open source: No
|
€1.99/mo |
Cleura
Sweden
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |