Skip to content
vBoxxCloud
All features

Your data 
in the EU

Stored in data centres in The Netherlands and Germany, operated by European providers.

Data centre locations
Amsterdam (AMS-1)
Data centre: maincubes AMS01
Latitude: 52.36°N
Power: 100% renewable
How it works

How sovereignty is guaranteed

1. EU ownership

vBoxx B.V. is a 100% privately held Dutch company, independent since 2012, with no foreign shareholders, no US parent and no investment from non-EU funds.

2. EU infrastructure

Servers run in Tier 3 data centres operated by maincubes (Amsterdam, Frankfurt) and Greenhouse Datacentres (Naaldwijk). No AWS, Azure or Google Cloud anywhere in the stack.

More about data privacy

3. EU operations

Support, engineering and operations staff are based in the Netherlands. No US-controlled subprocessors handle your data; see the full list in our Trust Centre.

Use cases

Where sovereignty is non-negotiable

Public sector

Dutch municipalities and German state agencies use vBoxxCloud for citizen data that cannot be exposed to non-EU jurisdictions.

Healthcare

vBoxxCloud can support NEN 7510 requirements for hospitals and clinics, with EU-only processing for patient records.

Legal and corporate

Law firms and M&A teams keep privileged material outside the reach of foreign data-access laws.

Comparison

True sovereignty vs 'EU region' marketing

vBoxxCloud
  • Outside the scope of US CLOUD Act and FISA 702
  • GDPR Schrems II-compliant by default, no SCCs required
  • Built to help meet the BIO and can support NEN 7510 requirements
Microsoft EU Data Boundary
  • Operated by US-headquartered Microsoft Corp.
  • Subject to CLOUD Act regardless of data location
Google Sovereign Cloud
  • Partnership with EU partners but governed by US law
  • Subprocessor list includes US entities

More sovereignty features

Data privacy

Keep your files in fixed data centre locations in The Netherlands.

FAQ

Frequently asked questions

What exactly is the US CLOUD Act risk?
The CLOUD Act allows US authorities to compel any US-based company to disclose customer data, including data stored on EU servers. Because vBoxxCloud has no US presence and no US subprocessors, it falls outside this jurisdiction.
Is vBoxxCloud Schrems II-compliant?
Yes. Because no personal data is transferred outside the EU, no Standard Contractual Clauses or Transfer Impact Assessments are required. We provide a ready-made GDPR Article 28 DPA on request.
Can I see the list of subprocessors?
Yes. The full subprocessor list is published in our Trust Centre and updated 30 days before any change. All subprocessors are EU-based.
Do you support the Dutch BIO and German BSI C5 frameworks?
vBoxxCloud is built to help Dutch government organisations meet the BIO. Our ISO 27001 certification covers many of the same controls. We do not currently hold a BSI C5 attestation. German public-sector customers can request our ISO 27001 certificate and security documentation.
Can you sign a DPA with our standard clauses?
We provide a GDPR Article 28 DPA covering EU-only processing. We can also review reasonable customer-supplied addenda as part of the contracting process.
What happens to my data if I leave?
You can export all data at any time. After contract termination we delete data within 30 days and provide a written deletion confirmation on request.

Still have a question? Get in touch

Related features

Security & compliance
Cloud storage

Try vBoxxCloud free during the beta

EU-hosted. No credit card. Cancel anytime.