eucsoft

AWS European Sovereign Cloud

Cloud infrastructure · aws.eu · last read 2026-11-09

At a glance

Is AWS European Sovereign Cloud GDPR compliant?
No tool is GDPR compliant on its own: compliance depends on what you process with it and how. What follows is what AWS European Sovereign Cloud itself publishes, each answer linked to its source and the date we read it.
Does AWS European Sovereign Cloud have a SOC 2 report?
AWS European Sovereign Cloud states SOC 2 (no type given) on its own page, but does not say there how to get a report. We read this on 2026-11-09. Source and date
Is AWS European Sovereign Cloud ISO 27001 certified?
AWS European Sovereign Cloud states ISO/IEC 27001 on its own page, but does not say there how to get the certificate. We read this on 2026-11-09. Source and date
How does AWS European Sovereign Cloud transfer personal data out of the EU?
We found no entry for AWS European Sovereign Cloud on the official Data Privacy Framework List. Source and date
Does AWS European Sovereign Cloud offer EU data residency?
The vendor documents an EU region but states nothing about which plan reaches it or what it costs. Source and date

The same questions for any vendor, and the rule behind each: the vendor due diligence checklist.

Identity

Legal entityAmazon Web Services EMEA SARL
HQLU
Parent company—
Ultimate ownership—
EU contracting entityAmazon Web Services EMEA SARL
LEI—
US CLOUD Act reachNot determined from the sources read
Sourceaws.eu · 2026-11-09

The company that operates AWS European Sovereign Cloud, who owns it and which law its contract names, beside the other sovereign offerings: who operates each sovereign cloud, under which law.

AWS European Sovereign Cloud data residency

RegionEU data locationMinimum planSourceObserved
EUTerms not stated—aws.eu2026-11-09

EU: The document says the AWS European Sovereign Cloud is "open to all customers" and its infrastructure is "entirely located within the EU". It requires a separate new account, but names no plan and no price for it.

The same question for every vendor: where SaaS vendors store EU data.

What AWS European Sovereign Cloud says about its sovereign cloud, beside the other offerings: sovereign clouds.

Subprocessor chain

No subprocessor list transcribed. Either the vendor does not publish one where we could reach it, or it is gated — see the documents table below for which.

Processing terms

No data processing agreement read yet.

These terms side by side for every vendor: data processing agreements compared. What vendors give you for a transfer impact assessment: transfer impact assessments.

Assurance

Does AWS European Sovereign Cloud have a SOC 2 report?

AWS European Sovereign Cloud states SOC 2 (no type given) on its own page, but does not say there how to get a report. We read this on 2026-11-09.

Of the 114 vendors in this registry whose own pages mention SOC 2, 57 say the report is available on request, 1 links to the report itself, and 56 state it without saying how to get it. The type is the one the vendor names.

Is AWS European Sovereign Cloud ISO 27001 certified?

AWS European Sovereign Cloud states ISO/IEC 27001 on its own page, but does not say there how to get the certificate. We read this on 2026-11-09.

On the same list AWS European Sovereign Cloud also names ISO/IEC 27017, ISO/IEC 27018 and ISO/IEC 27701. Each standard's page says how it relates to ISO/IEC 27001.

Of the 122 vendors in this registry whose own pages state ISO/IEC 27001, 16 link to the certificate, 43 say it is available on request, and 63 state it without saying how to get it. A certificate names the certification body, the scope and the expiry date: those are the three things to check.

SchemeStatusScopeSourceObserved
C5ClaimedListed under certifications and attestations assessed by a third-party, independent auditor; the services-in-scope table marks each service for C5aws.eu2026-11-09
Digital Operational Resilience Act (DORA) · DORAClaimed—aws.eu2026-11-09
ISO 22301 · ISO22301Claimed—aws.eu2026-11-09
ISO 27001 · ISO27001Claimed—aws.eu2026-11-09
ISO 27017 · ISO27017Claimed—aws.eu2026-11-09
ISO 27018 · ISO27018Claimed—aws.eu2026-11-09
ISO 27701 · ISO27701Claimed—aws.eu2026-11-09
ISO 9001 · ISO9001Claimed—aws.eu2026-11-09
ISO 20000Claimed—aws.eu2026-11-09
SOC 2 · SOC2Claimed—aws.eu2026-11-09

Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.

SecNumCloud, C5, ENS and HDS for every vendor, with the pages for ISO standards, SOC 2 and TISAX: certifications compared.

Official registers

What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.

What an entry on the Data Privacy Framework List covers, and which vendors hold one: EU-US Data Privacy Framework.

Support window

Not yet collected. This row will say not declared only once we have read a lifecycle or security page and found no period stated — see support windows.

Documents

What we read, how it was disclosed, and when.
DocumentDisclosureTranscriptionHTTPObserved
certificationsPublicfull2002026-11-09
identityPublicfull2002026-11-09
residencyPublicfull2002026-11-09

History

Nothing has moved since we started watching this vendor on 2026-11-09. Changes appear here only after a human has reviewed them.

Every reviewed change across the registry, newest first: vendor changes.