OVHcloud: the sovereignty record for regulated teams weighing a move off AWS

OVHcloud is one of the few cloud providers whose shares trade on a public exchange, Euronext Paris. That is unusual in a market dominated by privately held giants, and it gives OVHcloud a paper trail most competitors don’t have: a listing, disclosure obligations, audited accounts. It also invites a shortcut, treating public and independently verified as the same thing. They aren’t, and the gap between them matters for anyone sizing up OVHcloud as a European alternative to AWS.

Start with what the record actually nails down. OVHcloud’s operating entity, OVH SAS, is registered in the Lille commercial register (RCS Lille 424 761 419), with OVH Groupe SA as the parent, and that entry, plus a Legal Entity Identifier, is checked against the register rather than quoted from a company page. French law and GDPR apply directly, also verified, along with France’s transposition of NIS-2 per OVHcloud’s own compliance page. On jurisdiction, the case is solid: a French company, subject to French and EU law, with the registry entries to prove it.

Ownership is where the listing helps less than it looks. OVHcloud’s compliance page states that the Klaba family controls the company through a concert party, with KKR and TowerBrook holding minority stakes. That lines up with what’s publicly known about the Euronext listing, but as sourced here it comes from OVHcloud’s own page rather than the exchange’s shareholder disclosures directly, so it stays logged as claimed. A stock listing does not upgrade every governance statement to verified on its own; someone still has to check it against the filing.

Certification is the strongest part of OVHcloud’s case, and the part with the most nuance. OVHcloud holds SecNumCloud 3.2 qualification from ANSSI, the French cybersecurity agency, for its Bare Metal and Private Cloud offerings, alongside ISO 27001, 27017, 27018 and 27701, BSI C5, SOC 1/2/3, HDS and PCI DSS Level 1. SecNumCloud is demanding to obtain, and among the providers reviewed here it is OVHcloud, not Scaleway, that has actually completed it rather than filed for it. Even so, FindInEurope logs the qualification as claimed rather than verified, for the same reason as the ownership structure: the source is OVHcloud’s own compliance page, not ANSSI’s public qualification register. Its data centre locations, France, Germany and Poland among them, and its claim to own its data centres and manufacture its own servers, follow the same rule. Self-declared until checked against an independent source.

For a team currently on AWS and weighing exposure under US law, OVHcloud’s combination of verified French incorporation and a real, government-audited qualification is more solid ground than most alternatives can show. It is not yet a fully independently confirmed one, and the honest answer is that some of it may never be, short of OVHcloud publishing primary filings itself. The dossier at /listings/ovhcloud/ tracks each source and confidence level as they get checked, alongside the score as it currently stands.