EU First Verdict
Legal Jurisdiction30/100 (40% weight)
Infrastructure & Hosting80/100 (25% weight)
Where Data is Stored90/100 (20% weight)
Who Owns the Company60/100 (15% weight)
Red Flags
- !US upstream stewardship remains in scope even when self-hosted
- !Self-hosting materially improves data-location control for EU buyers
Why this score?
Jitsi has a mix of EU and non-EU dependencies, with legal exposure to US jurisdiction such as the CLOUD Act, FISA 702, and EO 12333. If your organization requires strict EU sovereignty, review the specific risks carefully.
What would raise the score?
- β’ Establish EU-based legal entity as primary processor
- β’ Replace non-EU subprocessors with EU alternatives
- β’ Transfer ownership control to EU jurisdiction
Deployment Options
These options describe where the software can run, not who has legal control over your data.
EU Hosting Status
EU Hosting Available
Available Options
Self-hostedOn your servers
Jurisdiction notice: Both HQ and ownership control are outside EU/EEA. While EU deployment is available, the vendor remains subject to non-EU legal jurisdiction.
Evidence
HQ Country
United States
Source: Automated extraction β no specific URL
Control Country
United States
Source: Automated extraction β no specific URL
Legal Entity Country
United States
Source: Automated extraction β no specific URL
DPA URL
https://jitsi.org/dpa
Source: Automated extraction β no specific URL
Privacy Policy
https://jitsi.org/privacy
Source: Automated extraction β no specific URL
Subprocessor List
https://jitsi.org/subprocessors
Source: Automated extraction β no specific URL
Transfer Mechanisms
SCC
Source: Automated extraction β no specific URL
Source documents
How sure are we?
HQ Country
via automated extraction
Unverified
Control Country
via automated extraction
Unverified
Legal Entity Country
via automated extraction
Unverified
DPA URL
via automated extraction
Unverified
Subprocessor List
via automated extraction
Unverified
Privacy Policy
via automated extraction
Unverified
Transfer Mechanisms
via automated extraction
Unverified
Where we looked
Privacy & Data Protection
About & Company
Last updated: 2024-02-04