Skip to content
Independently verified · Quarterly re-audit
EU VETTED

UpCloud

VERIFIED
Cloud & hosting · Finland
Founded 2011 · upcloud.com ↗

Finnish performance-focused cloud (Helsinki, 2011), 14+ DCs worldwide including 9 EU regions; ISO 27001; trusted by Plausible.

In short

UpCloud, in the Cloud & hosting category, is an EU-owned service with Finland as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Helsinki-headquartered Finnish cloud provider (founded 2011, European-owned with no public US-PE chain on record), ISO 27001 certified, with two flagship data centres in Helsinki (FI-HEL1, FI-HEL2) plus EU regions in Frankfurt, Amsterdam, Copenhagen, Stavanger, Warsaw, Madrid, Stockholm, and London. A customer-elected region keeps customer workloads under EU jurisdiction; EU-owned and EU-hosted with no CLOUD Act exposure when EU DCs are selected.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About UpCloud

UpCloud is a Helsinki-headquartered Finnish cloud infrastructure provider founded in 2011 and positioned for high-performance compute workloads. The company runs two flagship data centres in Helsinki (FI-HEL1 and FI-HEL2) plus additional EU regions in Frankfurt, Amsterdam, Copenhagen, Stavanger (Norway), Warsaw, Madrid, Stockholm, and London, plus global regions in Chicago, New York, San Jose, Singapore, and Sydney. The customer base spans developer-focused workloads, SaaS, hosting resellers, and notable EU SaaS. UpCloud is one of the named sub-processors used by Plausible Analytics, for example.

For procurement-grade EU buyers UpCloud's compliance posture is strong: EU-owned, EU-hosted, with no CLOUD Act exposure when EU regions are selected. The company is ISO/IEC 27001 certified, GDPR-aligned, European-owned with no published US-PE control chain, and explicitly positions itself for "European data sovereignty" with customer-elected region pinning. Finland is an EU member with full GDPR alignment, so transfers between Finnish UpCloud workloads and other EU jurisdictions need no SCCs; the Stavanger region (Norway) is EEA and similarly adequacy-clean. UpCloud's automated infrastructure stack uses MaxIOPS storage (its proprietary distributed block storage) and a 100% uptime SLA, strong reliability differentiators for SMB and mid-market customers without enterprise hyperscaler complexity.

Pricing starts at roughly €5/month for the smallest virtual instance (1 vCPU, 1 GB RAM, 25 GB MaxIOPS, 1 TB transfer) on hourly or monthly billing in EUR. Best fit: developers, SaaS builders, and EU SMBs who want a Helsinki-rooted alternative to DigitalOcean or Linode with strong ISO 27001 certification and clean EU jurisdiction. The public pages returned 403 to WebFetch at audit (anti-bot fronting on upcloud.com), so the DPA and sub-processors annex URLs were not directly captured. Vendor outreach recommended before publishing the canonical URLs.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

Dedicated / bare-metal No
Object storage (S3) Yes
Managed Kubernetes Yes
Managed databases Yes
GPU instances Yes
Hourly billing Yes
API / Terraform Yes
Countries 12 countries
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €5/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    upcloud.com/global…
    Open ↗
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    upcloud.com/terms-and-conditions…
    Open ↗
ALTERNATIVES

Alternatives in this category

Aruba Cloud
Italy · Founded 1994
EU-SOVEREIGN

Italian sovereign cloud (Aruba S.p.A.), 4 Italian DCs (Arezzo/Bergamo/Rome), ACN-qualified up to AI3/QC3 for public administration.

Public DPA Sub-processors Open source
FROM
€1/mo
CLOUD ACT
NONE
Cleura
Sweden · Founded 2005
EU-SOVEREIGN

Swedish OpenStack public + compliant cloud (Cleura, ex-City Network, Iver-owned), ISO 27001/27017/27018, EU-only residency.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Clever Cloud
France · Founded 2010
EU-SOVEREIGN

French sovereign PaaS/IaaS: deploy apps and managed databases on EU infrastructure, billed per second.

Public DPA Sub-processors Open source
FROM
€4.8/mo
CLOUD ACT
NONE