Exoscale – Swiss-based cloud provider, GDPR-native, honest in data sovereignty.

Exoscale is a European cloud infrastructure company headquartered in Switzerland (“Suiza”), offering a suite of cloud services designed to meet strict privacy, compliance and data-sovereignty demands. With data centres deployed across the European Economic Area (EEE), and an explicit commitment to GDPR compliance and user privacy, Exoscale presents itself as a viable alternative to major U.S. cloud platforms such as Amazon Web Services (AWS) or Google Cloud.

What Exoscale Offers

• Compute & Virtual Machines: Standard, CPU-optimized, memory-optimized and GPU instances are available across multiple zones in Germany, Switzerland, Austria and Bulgaria.
• Object and Block Storage: S3-compatible object storage, high-performance block storage for demanding workloads.
• Managed Databases (DBaaS): Support for MySQL, PostgreSQL and other engines, with clear plans for hobbyist, startup, business and premium use cases.
• Kubernetes (SKS): Fully-managed Kubernetes clusters with two plan tiers—Starter (for experimentation) and Pro (with SLA, HA control plane, backups).
• Networking, CDN, DNS, GPU Servers: Standard services expected from a public cloud provider.

Pricing and Free Plan?

Exoscale uses a transparent pay-as-you-go billing model. Instances are billed by the second, with no long-term commitments or upfront fees. Some free allowances exist: the SKS Starter Cluster is free (ideal for test, dev environments). However, Exoscale does not offer a broadly available “free-plan” across all services—users pay for compute, storage, bandwidth, etc., beyond test-scale usage.

GDPR and Data Sovereignty

One of Exoscale’s strongest selling points is its solid legal and practical alignment with GDPR:

• Exoscale treats itself as a data processor under GDPR, with customers as controllers. Full documentation, privacy-friendly terms, and mechanisms for data subject rights are in place.
• All data and workloads are hosted exclusively in Europe—within the EEA and Switzerland. For example, data centres in Germany (Frankfurt, Munich), Austria (Vienna), Bulgaria (Sofia) and Switzerland.
• Germany zones (such as Frankfurt, Munich) offer “100% Renewable Energy certificate from Hydro,” indicating the power used is matched via renewable sources. So while Exoscale does not yet claim that all locations run on renewables, at least certain data zones do.

Open Source & Transparency

Exoscale is a mixed-model with respect to open source. Many of its components are built using open source technologies (standard Kubernetes, open APIs, CLI, Terraform integrations), but not everything it offers is open source. Thus “open source: mixto” is accurate: part of the stack is open and vendor-neutral, part is proprietary.

Why Some Companies Choose Exoscale Over AWS / Google Cloud

1. Legal Jurisdiction and Surveillance Risk: U.S. cloud providers remain subject to U.S. laws like the CLOUD Act, FISA, ECPA, etc., which can compel data disclosure—even when data is stored in Europe. Companies operating in regulated sectors (healthcare, finance, government) often see this as a compliance risk. Exoscale avoids these due to Swiss/EU legal jurisdiction.
2. True Data Sovereignty: Exoscale allows customers to choose the country of their data and ensures it stays within those boundaries. This makes risk assessments, data protection impact assessments (DPIAs) and certifications easier, especially in EU member states.
3. Transparent Pricing: Unlike some hyperscale providers where hidden egress, licensing or networking fees can surprise you, Exoscale generally bills predictably. Pay-as-you-go, usage-based pricing, and clearly described add-ons.
4. Environmental Considerations: While not every Exoscale region is powered entirely by renewables, certain zones (like those in Germany) have renewable energy certifications. Also, collaborative efforts (e.g. liquid cooling) show intent to improve efficiency.
5. Compliance Certifications & Security Standards: Zones such as FRA-1 in Germany are certified with standards like ISO 27001, ISO 22301, PCI DSS, SOC 1 & 2 etc. These reassure enterprises about auditability and security hygiene.

What Exoscale Isn’t (Yet) or Trade-Offs

• No universally free plan for production/databases/compute—most services incur cost. Free tiers are limited (e.g. SKS Starter).
• Geographical footprint is smaller than AWS, GCP or Azure. Services may have less global reach (e.g. no South America, Asia, Africa zones). That may affect latency or regulatory compliance in those regions.
• Some services or features may be less mature, or with fewer community tools, compared to what hyperscalers offer in their vast ecosystems. Custom or very large scale workloads may find trade-offs in functionality or support.

Comparing GDPR Alternatives: AWS & Google Cloud vs Exoscale

AWS and Google Cloud do offer European data centre regions (e.g. AWS EU-Central, Google Cloud Europe-West). However, several concerns often persist:

• Even with EU region storage, U.S. law enforcement may assert access rights over companies headquartered outside U.S. jurisdiction. Exoscale’s Swiss base adds neutral jurisdiction buffer.
• Pricing with hyperscalers often involves many hidden costs—data egress fees, networking, licensing etc.—which can be unpredictable and high. Exoscale emphasizes free internal traffic and generous free tiers, making costs more predictable.
• Support for open APIs, standard technologies, and minimal vendor lock-in are stronger in many European sovereign providers. Exoscale’s open parts of stack help here. In contrast, AWS/GCP sometimes require migration to proprietary services to get full functionality.

Conclusion

For businesses, public institutions or developers operating in Europe, especially those bound by GDPR or requiring strict data sovereignty, Exoscale is a highly credible choice. It offers many of the cloud capabilities you expect—compute, Kubernetes, storage, managed databases—while making sure your legal jurisdiction, data residency and privacy obligations are respected. While it doesn’t match the global scale or every feature‐rich service of major U.S. hyperscalers, its transparency, compliance, and European roots make it a strong option where privacy and sovereignty matter.

Official website: Exoscale