Cloud & hosting Dossier

OVHcloud

European cloud provider headquartered in Roubaix, France; SecNumCloud qualified and publicly listed.

Alternative to: aws , digitalocean

Headquarters
OVH Groupe SA, Roubaix, France (operating entity OVH SAS, RCS Lille 424 761 419)
Jurisdiction
French law; subject to GDPR; regulated under French NIS-2 transposition
Ownership
Publicly listed (Euronext Paris, OVH); Klaba family controls via concert party; KKR and TowerBrook are minority investors
Data location
EU data centres in France (Roubaix, Gravelines, Strasbourg), Germany (Frankfurt), Poland (Warsaw) and others (self-declared)
Category
vps
Country
FR

The evidence

Dimension Finding Region Confidence Source
Jurisdiction
Governing law French law; subject to GDPR; regulated under French NIS-2 transposition EU / EEA Verified 2026-06-17 ↗
Legal HQ OVH Groupe SA, Roubaix, France (operating entity OVH SAS, RCS Lille 424 761 419) EU / EEA Verified 2026-06-17 ↗
Independence · Control
Ownership Publicly listed (Euronext Paris, OVH); Klaba family controls via concert party; KKR and TowerBrook are minority investors EU / EEA Claimed 2026-06-17 ↗
Independence · Operational
Data location EU data centres in France (Roubaix, Gravelines, Strasbourg), Germany (Frankfurt), Poland (Warsaw) and others (self-declared) EU / EEA Claimed 2026-06-17 ↗
Operations SecNumCloud 3.2 (ANSSI) qualified for Bare Metal and Private Cloud; ISO 27001/27017/27018/27701; BSI C5; SOC 1/2/3; HDS; PCI DSS Level 1 EU / EEA Claimed 2026-06-17 ↗
Suppliers Owns and operates its own data centres and manufactures its own servers EU / EEA Claimed 2026-06-17 ↗
Independence · Openness
Tech & portability Not established Unknown no source
Trust (informational)
Sustainability ISO 14001 and ISO 50001 certified; water-cooling approach; own server manufacturing; specific renewable percentage not verified here EU / EEA Claimed 2026-06-17 ↗

Coverage 91% · 2 of 7 dimensions verified · How is this scored?

Cite: FindInEurope, "OVHcloud" company dossier, Sovereignty Score 88, Partial, SEAL-1, model v2.1.0, verified 2026-06-17.

The full picture

What is OVHcloud, in practice

OVHcloud is a French cloud and hosting company that rents out virtual servers, dedicated (bare metal) machines, public and private cloud infrastructure, and web hosting and email, mostly to developers, agencies, and IT departments who want to run their own workloads rather than buy a finished software product. As of its March 2025 corporate figures, the company says it operates roughly 450,000 servers across 43 data centres on four continents, serving about 1.6 million customers in more than 140 countries (OVHcloud press release). It calls itself Europe’s leading cloud provider, and on scale that is a fair claim.

It shows up on a European-alternatives list for the paperwork behind it, not its size: a French parent company, disclosure obligations that come with a stock listing, and a security qualification most competitors haven’t bothered to pursue. AWS is bigger; that was never the point. What follows is what each of those actually proves, and where it stops.

From a family loan to Euronext Paris

Octave Klaba founded OVH in November 1999, with help from his brothers Henryk and Miroslaw and their sister Haline, out of Roubaix in northern France (Wikipedia; OVHcloud careers site). The company stayed privately held and family-run for most of its life. That changed twice.

In October 2016, private equity firms KKR and TowerBrook Capital Partners put €250 million into the business for a roughly 20 percent stake, money OVH used to fund international expansion beyond France (Wikipedia; Dgtl Infra). Then in October 2021, OVHcloud listed on Euronext Paris under the ticker OVH, and joined the SBF 120 index two months later (Wikipedia). The IPO didn’t hand control to outside investors. Per the company’s own compliance page, the Klaba family still controls OVHcloud through a concert party, with KKR and TowerBrook holding minority stakes (OVHcloud legal information). That’s a claim from the vendor’s own disclosure page, not a filing pulled directly from the exchange, so it sits in the FindInEurope dossier as self-declared rather than independently confirmed, even though it lines up with what’s publicly known about the listing.

The operating entity is OVH SAS, registered in the Lille commercial register under RCS Lille 424 761 419, with OVH Groupe SA as the parent and public company. Both the registry number and the Legal Entity Identifier attached to it (9695001J8OSOVX4TP939) check out against the register rather than resting on a company statement, which is why that part of the dossier reads as verified.

Which law it actually answers to

OVHcloud is French, incorporated and headquartered in France, and directly subject to French law, GDPR, and France’s transposition of the NIS-2 cybersecurity directive. That much is on the imprint page and holds up against the registry entries, so it’s logged as verified rather than claimed.

Whether that jurisdiction has actually been tested is a separate question, and there’s a real precedent. In December 2010, OVH became WikiLeaks’ hosting provider after Amazon dropped it. France’s industry minister at the time, Eric Besson, tried to find a legal route to force OVH to stop, and a French judge declined to order it, ruling the matter needed a full adversarial hearing first (Wikipedia). It’s a fifteen-year-old episode, and it shouldn’t be read as a blanket guarantee about how any future dispute would go. But it’s a rare case where a European host’s independence from political pressure was actually tested in a French court, rather than just asserted in marketing copy.

OVHcloud also markets its EU-based services as protected from “extraterritorial laws such as the CLOUD Act,” the US statute that lets American authorities compel US-headquartered companies to hand over data regardless of where it’s stored (OVHcloud VPS page). That’s a fair pitch for a genuinely French company with no US parent, and it’s the same structural argument that applies to any cloud provider outside American corporate control. It’s still a vendor’s framing of its own position, not a court ruling, so treat it as the company’s read of its own exposure rather than a settled fact.

Where the servers actually sit, and what happened when one burned down

Per OVHcloud’s own disclosures, its data centres sit in France (Roubaix, Gravelines, Strasbourg), Germany (Frankfurt), Poland (Warsaw), and other locations it doesn’t fully enumerate on the page FindInEurope cites (OVHcloud legal information). The company also says it owns and operates its own data centres and manufactures its own servers in-house, using standard components in a design it controls end to end, plus a proprietary fibre network with more than 20 terabits per second of capacity (Wikipedia). All of that is self-declared. None of it is independently audited in the source FindInEurope has on file, which is why the dossier logs it as claimed.

Here’s why that distinction isn’t academic. On the night of March 9 to 10, 2021, a fire broke out at OVH’s Strasbourg campus. The SBG2 building was destroyed outright, and the neighbouring SBG1 was damaged; two other Strasbourg buildings, SBG3 and SBG4, survived but went offline while the site was assessed (Reuters via Wikipedia). Every customer whose data lived only in SBG2, without a backup elsewhere, lost it. OVHcloud later filed an estimate with France’s financial markets regulator putting the damage at around €105 million (Data Center Dynamics). In March 2023, a French court ordered OVHcloud to pay €250,000 to two customers whose data was lost in the fire, and more than 130 other customers were pursuing a class action at the time of that ruling (Data Center Dynamics via Wikipedia).

None of this makes OVHcloud unusually unsafe. Data centres from every provider burn down occasionally, and OVHcloud’s own hardware and buildings, being self-built, mean a fire in one of its facilities is genuinely its own liability, not a shared-responsibility grey zone with a landlord. But it’s the clearest evidence available that OVHcloud’s infrastructure claims deserve the “claimed” label rather than “verified”: the company that says it owns and controls its own data centres also had one burn down badly enough to end up in court over the backups it didn’t have.

SecNumCloud and the rest of the certification stack

The strongest part of OVHcloud’s case is a French government security qualification called SecNumCloud, issued by ANSSI, the national cybersecurity agency. It’s built on more than 360 requirements spanning technical, organisational, and legal controls, and it’s specifically designed for hosting sensitive data (state information, patents, data used to train AI models) with protection against legal exposure from non-European jurisdictions (OVHcloud press release, March 2025). Getting it qualified is slow and expensive, which is exactly why few providers bother.

Per its compliance page, OVHcloud holds SecNumCloud 3.2 qualification for its Bare Metal and Private Cloud offerings, on top of ISO 27001, 27017, 27018 and 27701, Germany’s BSI C5, SOC 1/2/3, France’s HDS healthcare-data standard, and PCI DSS Level 1 (OVHcloud legal information). Among the providers FindInEurope tracks as AWS alternatives, OVHcloud is one of the few that has actually completed SecNumCloud rather than announced an intent to pursue it. Same caveat as everywhere else in this profile: the source is the vendor’s own compliance page, not ANSSI’s public qualification register, so it’s logged as claimed rather than verified. The gap between “we hold this qualification” and “an independent registry confirms it” is small in practice, since ANSSI qualifications are genuinely hard to fake, but FindInEurope doesn’t upgrade a claim’s confidence just because it’s plausible.

On environmental claims, OVHcloud holds ISO 14001 and ISO 50001 certification and describes a water-cooling approach tied to its in-house server design, though it doesn’t publish a specific renewable-energy percentage on the page cited here (OVHcloud compliance page).

What it costs and what you get

OVHcloud’s pricing runs across four product lines, and the shape matters more than any specific number, which will be out of date within a year of this being written. VPS plans start cheap, in the range of a few euros a month for a small instance, and scale up with more vCores, RAM, and NVMe storage; the current range includes daily automatic backup and anti-DDoS protection at no extra charge, with a 99.9 percent uptime SLA (OVHcloud VPS page). Bare metal (dedicated) servers sit above that, priced by hardware spec on monthly contracts. Public Cloud is usage-based and OpenStack-flavoured, billed by the hour with free starter credit for new accounts. Private Cloud, VMware-based, is aimed at enterprises that want dedicated, non-shared infrastructure and is priced accordingly, higher and more bespoke than the self-service tiers.

The live FindInEurope dossier for OVHcloud shows exactly which of these claims carry independent confirmation and which rest on the vendor’s word, and that picture updates as sources get rechecked.

OVHcloud vs AWS

For a team moving off AWS specifically for jurisdiction reasons, the contrast is straightforward. AWS is a US company, subject to US law including the CLOUD Act, regardless of where its European regions physically sit. OVHcloud is French, and its legal exposure runs through French and EU law instead. That’s the whole pitch, and it’s a real structural difference, not marketing.

Everywhere else, the comparison favours AWS on breadth. AWS’s catalogue of managed services, from serverless functions to machine learning platforms to enterprise support tiers, is enormous, and OVHcloud doesn’t try to match it feature for feature. What OVHcloud offers instead is more control over less: bare metal you can configure however you like, price plans that don’t require a spreadsheet to forecast, and infrastructure the company says it owns outright rather than leasing capacity across shared hyperscale regions. Teams that need AWS’s specific managed services, or its global footprint outside Europe, won’t find a like-for-like replacement here. Teams whose workloads are mostly compute, storage, and networking, and whose main reason for moving is jurisdiction rather than feature parity, are OVHcloud’s actual target market.

OVHcloud vs DigitalOcean

DigitalOcean is the closer comparison on product shape: both companies target developers and small-to-mid businesses with straightforward VPS and cloud compute pricing, rather than AWS’s enterprise sprawl. The difference is jurisdiction and depth. DigitalOcean is incorporated in the United States and carries the same CLOUD Act exposure as AWS, whatever region its servers sit in. OVHcloud also runs a noticeably larger European data centre footprint and, unlike DigitalOcean, holds a completed SecNumCloud qualification, which matters if a public-sector or regulated client ever asks for it. DigitalOcean’s usual advantage is a smoother onboarding experience for developers who’ve never touched a Linux box before; OVHcloud assumes more comfort with server administration in exchange for bare metal options DigitalOcean doesn’t offer at all.

Who it fits, and who it doesn’t

OVHcloud fits teams that already have, or are willing to build, the in-house skill to run their own servers, and for whom French or EU jurisdiction is a real requirement rather than a preference, think public-sector bodies, healthcare providers, or any organisation answering to a regulator that asks where the data physically sits and under whose law. It also fits anyone who wants price predictability over a sprawling menu of managed services.

It fits less well for teams that want AWS’s breadth of managed tooling, or a support experience closer to a premium SaaS vendor than to a hosting company. Community forums such as Reddit’s r/OVHcloud and long-running threads on LowEndTalk carry the familiar complaints of budget infrastructure providers: inconsistent support response times and the occasional network issue, more often flagged at the cheaper VPS and dedicated tiers than in the enterprise Private Cloud line. And the 2021 Strasbourg fire is a genuine data point for anyone evaluating disaster-recovery risk. Read it as a reason to keep your own backups rather than assume the provider’s redundancy claims will hold in every scenario; it is not a reason to rule OVHcloud out.

Sources

Profile updated 5 July 2026