Scaleway
As of 2026-07-27, Scaleway holds a Saveran Sovereignty Score of 46/100 (Moderate).
Last assessed: 2026-07-27 · methodology ruleset 2026.06.3
Saveran Sovereignty Score
EU CSF alignment — indicative minimum
Insufficient evidence to estimate
Indicative alignment with the EU Cloud Sovereignty Framework (v1.2.1). Saveran is not a Commission assessment and SEAL levels shown are Saveran's evidence-based estimate.
EU CSF sovereignty objectives (indicative)
Saveran maps its evidence to the eight Sovereignty Objectives of the EU Cloud Sovereignty Framework and estimates an assurance level (SEAL) per objective. Weights follow the framework; the mapping is documented in the methodology.
SOV-1Strategic
15% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-2Legal & Jurisdictional
10% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-3Data & AI
10% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-4Operational
15% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-5Supply Chain
20% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-6Technology
15% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-7Security & Compliance
10% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
SOV-8Environmental
5% of framework weightNo evidence found for this objective yet — it is shown unscored rather than estimated.
Indicative alignment with the EU Cloud Sovereignty Framework (v1.2.1). Saveran is not a Commission assessment and SEAL levels shown are Saveran's evidence-based estimate.
At a glance
| Legal name | Scaleway |
|---|---|
| Headquarters | FR |
| Data locations | FR |
| EU-only storage | Committed |
| Transfer mechanisms | {"mechanisms":["sccs"]} |
| Hosting provider | Scaleway |
| Open source | Open source (AGPL-3.0) |
| Certifications | ISO/IEC 27001, HDS (France) |
| GDPR DPA | Available |
| Subprocessor list | Published |
Score breakdown
Why this score
- REG-07No public privacy/compliance documentation
Neither a public DPA nor any recognised certification could be verified.
- OWN-04Ultimate ownership unverified
Ultimate parent could not be established; foreign control cannot be ruled out.
- TECH-04Non-EU email provider
Corporate email runs on Google Workspace (US), outside EU control.
US CLOUD Act verdict
Scaleway's CLOUD Act exposure cannot be determined — ultimate ownership is unverified.
Certifications
- ISO/IEC 27001
- HDS (France)
Frequently asked questions
- What is Scaleway's digital sovereignty score?
- As of 2026-07-27, Scaleway holds a Saveran Sovereignty Score of 46/100 (Moderate).
- Is Scaleway exposed to the US CLOUD Act?
- Scaleway's CLOUD Act exposure cannot be determined — ultimate ownership is unverified.
- Where does Scaleway store customer data?
- Declared data locations: FR.