AWS

🇺🇸HQ: United StatesControl: United StatesCloud service

Global cloud infrastructure provider with EU regions but US legal control.

High Risk

EU First Verdict

Legal Jurisdiction30/100 (40% weight)

Infrastructure & Hosting40/100 (25% weight)

Where Data is Stored45/100 (20% weight)

Who Owns the Company30/100 (15% weight)

Red Flags

!US headquarters subject to CLOUD Act exposure
!Non-EU ownership and control may compel extra-territorial access requests
!EU data residency does not remove US legal exposure

Why this score?

AWS operates primarily outside EU jurisdiction. Your data may be accessible under US laws such as the CLOUD Act, FISA 702, and EO 12333. Consider EU-based alternatives.

What would raise the score?

• Establish EU-based legal entity as primary processor
• Replace non-EU subprocessors with EU alternatives
• Ensure all data storage and processing in EU/EEA
• Transfer ownership control to EU jurisdiction

Subprocessors

Name	Country	Data Touch Level	Evidence
Cloudflare	🇺🇸United States	telemetry	-

Recent Changes

No changes recorded yet.

Deployment Options

These options describe where the software can run, not who has legal control over your data.

EU Hosting Status

EU Hosting Available

Available Options

EU cloud

Jurisdiction notice: Both HQ and ownership control are outside EU/EEA. While EU deployment is available, the vendor remains subject to non-EU legal jurisdiction.

Hyperscaler dependency: This product uses a non-EU hyperscaler (AWS, GCP, Azure) for EU-hosted deployment. While data remains in EU, legal exposure may exist.