Volt
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
London-based open-banking A2A real-time payments (Volt Technologies, 2019), FCA EMI, 2,500 banks across 31 territories; US-VC-led.
Volt offers EU hosting in the United Kingdom, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under Payments.
Assessment notes
Volt Technologies Holdings Limited (London, 42 Berners Street; founded 2019) is an open-banking real-time A2A payments specialist with an FCA EMI licence, 2,500 connected banks across 31 territories and 618M bank accounts reachable, but the cap table is led by IVP (Institutional Venture Partners, Menlo Park, US, Series B June 2023 $60M at $350M+ valuation) alongside EQT Ventures (SE), CommerzVentures (DE), Augmentum Fintech (UK), and Fuel Ventures (UK); UK post-Brexit jurisdiction + US-VC lead results in ownership_signal: eu_hq_us_funded, cloud_act_exposure: material; no public DPA, sub-processors list, or hosting provider disclosed at audit.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded This listing EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: No
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: No
Jump to
About Volt
Volt is a London-based open-banking real-time payments specialist operated by Volt Technologies Holdings Limited (42 Berners Street, London W1T 3ND) and founded in 2019. The product is built around Pay-by-Bank instant payments, payouts, refunds, and account verification, connecting 2,500+ banks across 31 territories on three continents and reaching 618M bank accounts. Volt holds a UK FCA Electronic Money Institution licence enabling standalone virtual-account products. Notable partnerships include Worldpay (global real-time-payments deal), Shopify (Volt was Shopify's first open-banking provider), Farfetch, Primer, Kinguin, Solidgate, and AsiaBill; target industries cover retail / e-commerce, travel, wealthtech, iGaming, and crypto.
For an EU-sovereignty audit Volt sits in the eu_hq_us_funded tier. The Series B in June 2023 raised US$60M at a US$350M+ valuation led by IVP (Institutional Venture Partners), a Menlo Park, California-headquartered Silicon Valley venture firm, alongside European participation from EQT Ventures (Sweden), CommerzVentures (Germany), Augmentum Fintech (UK), and Fuel Ventures (UK). The US-VC lead at Series B is the defining ownership-tier signal under our strict-ownership stance. The privacy policy names Volt Technologies Holdings Limited as data controller but does not publish a named sub-processors list, hosting provider, or explicit US-transfer mechanism on accessible public pages: gaps for procurement-grade buyers. UK post-Brexit jurisdiction with adequacy decision keeps EU-UK transfers legally clean.
Pricing is enterprise / volume-negotiated; no public per-transaction tier applies. Best fit: mid-market and enterprise retailers wanting a Pay-by-Bank rail as a Stripe / Plaid alternative, particularly for high-AOV industries (travel, iGaming, crypto). Procurement-grade EU-only buyers should prefer Trustly (SE, Swedish PI licence, though also material under strict stance) or look at open-banking-native alternatives from EU-controlled providers such as Tink (acquired by Visa, US, flagged) or build on top of Adyen / Worldline (Euronext-listed EU acquirers).
Sub-processor map · not disclosed
Frameworks & certifications · none listed
Capability matrix
Table 1Capabilities of Volt
Integration & access
Compliance & governance
Pricing & tiers
Public documents
-
missingData Processing Addendum (DPA)— missing
-
missingSub-processors list— missing
-
OpenTerms of Servicewww.volt.io/legal…
Alternatives in this category
-
NetherlandsEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
FranceEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: No -
-
NorwayEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Adyen
Netherlands
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |
Alma
France
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: No
|
— |
Dintero
Norway
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |