A single roll-up of ownership and CLOUD Act exposure.
Dutch Kubernetes-native sovereign cloud (Thalassa Cloud Services B.V., Arnhem, 2024); 100% EU-owned, NL-hosted, API-first with an official Terraform provider — early-stage, no published certifications yet.
Thalassa Cloud, in the Cloud & hosting category, is an EU-owned service with Netherlands as its hosting location and no identified CLOUD Act exposure.
Thalassa Cloud Services B.V. (Arnhem, Netherlands; KvK 99309769, founded ~2024) is a bootstrapped, 100% EU-owned Kubernetes-native sovereign cloud — virtual machines, managed Kubernetes, managed PostgreSQL, S3-compatible object storage and VPC networking driven by an API-first control plane with an official Terraform/OpenTofu provider. Jurisdiction is clean: Dutch B.V., no US parent, no external/US VC, NL-hosted, and the vendor states no non-EU dependencies, so CLOUD Act exposure is low on its face. The score is held down by the assurance gap, not the sovereignty story: no published third-party certifications (no ISO 27001 / BSI C5 / SecNumCloud / SOC 2 — only 'via partners'), the DPA is request-only (no public URL), there is no public sub-processors list, and the platform is early-stage — a single region (Arnhem, nl-ams-1), a very small founder-led team, and several services still 'Coming Soon'. Listed for sovereignty coverage as a credible EU-owned NL option, with the early-stage and transparency caveats noted.
How exposed customer data is to US authorities under the CLOUD Act.
Where ultimate control over the operating company sits.
Thalassa Cloud (operated by Thalassa Cloud Services B.V., Meander 251, Arnhem, Netherlands — KvK 99309769) is a bootstrapped, founder-led EU-sovereign public cloud built Kubernetes-native and API-first, positioned as a Dutch alternative to the hyperscalers for DevOps teams. The platform covers virtual machines, managed Kubernetes (with integrated IAM/RBAC and VPC), managed PostgreSQL, S3-compatible object storage, block and file storage, container registry, managed Prometheus and a cost explorer — all provisionable through a REST API, CLI, and official Terraform / OpenTofu / Pulumi providers. Billing is usage-based (per-minute, EUR ex-VAT): the cheapest VM is roughly €5/month, a managed Kubernetes control plane around €19.50/month, with free VPC / subnets / security-groups and free bandwidth. A "Dedicated Private Cloud" option is offered for organisations wanting isolated capacity. The sovereignty positioning is strong and clean on paper — 100% EU-owned, NL-hosted, no non-EU dependencies, GDPR-first design, NIS2 support, and Dutch Cloud Community membership — with named public-sector customers including Provincie Noord-Holland and Dienst Justitiële Inrichtingen (DJI). The caveats are maturity and assurance: founded around 2024 as a bootstrapped startup with a very small team; a single region (Arnhem, nl-ams-1) with the data-centre operator undisclosed; no published certifications (ISO 27001 / BSI C5 / SecNumCloud / SOC 2 are described as available "via partners", i.e. not currently held); a Data Processing Agreement that is referenced in the terms but available only on request; and no public sub-processors list. No GPU instances or bare-metal. Best fit: Dutch / EU teams that want a genuinely EU-owned, Kubernetes-native sovereign cloud and can accept an early-stage provider without formal certifications — not yet a fit for procurement that mandates ISO 27001 / C5 or a publicly signable DPA.
Italian sovereign cloud (Aruba S.p.A.), 4 Italian DCs (Arezzo/Bergamo/Rome), ACN-qualified up to AI3/QC3 for public administration.
Swedish OpenStack public + compliant cloud (Cleura, ex-City Network, Iver-owned), ISO 27001/27017/27018, EU-only residency.
Munich-based budget VPS / dedicated hosting (Contabo GmbH); KKR + Oakley-owned since 2022; 11 global DCs; VPS from <€5/month.