Is Delos Cloud GDPR compliant?

No tool is GDPR compliant on its own: compliance depends on what you process with it and how. What follows is what Delos Cloud itself publishes, each answer linked to its source and the date we read it.

How does Delos Cloud transfer personal data out of the EU?

We found no entry for Delos Cloud on the official Data Privacy Framework List.

Does Delos Cloud offer EU data residency?

The EU is the default region for this vendor.

Delos Cloud

Cloud infrastructure · deloscloud.de · last read 2026-11-09

At a glance

Is Delos Cloud GDPR compliant?: No tool is GDPR compliant on its own: compliance depends on what you process with it and how. What follows is what Delos Cloud itself publishes, each answer linked to its source and the date we read it.
Is Delos Cloud ISO 27001 certified?: Delos Cloud states ISO/IEC 27001 on its own page, but does not say there how to get the certificate. In Delos Cloud's words (in German): “Zudem wurde das Informationssicherheits-Managementsystem (ISMS) sowie der Betrieb der Delos Cloud Direct Connection nach ISO/IEC 27001 zertifiziert.” We read this on 2026-11-09. Source and date
How does Delos Cloud transfer personal data out of the EU?: We found no entry for Delos Cloud on the official Data Privacy Framework List. Source and date
Does Delos Cloud offer EU data residency?: The EU is the default region for this vendor. Source and date

The same questions for any vendor, and the rule behind each: the vendor due diligence checklist.

Identity

Legal entity	Delos Cloud GmbH
HQ	DE
Parent company	SAP SE
Ultimate ownership	—
EU contracting entity	Delos Cloud GmbH
LEI	—
US CLOUD Act reach	Not determined from the sources read
Source	deloscloud.de · 2026-11-09

The company that operates Delos Cloud, who owns it and which law its contract names, beside the other sovereign offerings: who operates each sovereign cloud, under which law.

Delos Cloud data residency

Region	EU data location	Minimum plan	Source	Observed
EU	EU by default	—	deloscloud.de	2026-11-09

EU: The document states that all customer data stays on German soil as part of the platform's data sovereignty. It names no plan, option or extra cost for this.

The same question for every vendor: where SaaS vendors store EU data.

What Delos Cloud says about its sovereign cloud, beside the other offerings: sovereign clouds.

Subprocessor chain

No subprocessor list transcribed. Either the vendor does not publish one where we could reach it, or it is gated — see the documents table below for which.

Processing terms

No data processing agreement read yet.

These terms side by side for every vendor: data processing agreements compared. What vendors give you for a transfer impact assessment: transfer impact assessments.

Assurance

Is Delos Cloud ISO 27001 certified?

Delos Cloud states ISO/IEC 27001 on its own page, but does not say there how to get the certificate. We read this on 2026-11-09.

Claimed “Zudem wurde das Informationssicherheits-Managementsystem (ISMS) sowie der Betrieb der Delos Cloud Direct Connection nach ISO/IEC 27001 zertifiziert.” (in German)

Source: deloscloud.de, 2026-11-09

Of the 122 vendors in this registry whose own pages state ISO/IEC 27001, 16 link to the certificate, 43 say it is available on request, and 63 state it without saying how to get it. A certificate names the certification body, the scope and the expiry date: those are the three things to check.

Scheme	Status	Scope	Source	Observed
ISO/IEC 27001 · ISO27001	Claimed	das Informationssicherheits-Managementsystem (ISMS) sowie der Betrieb der Delos Cloud Direct Connection	deloscloud.de	2026-11-09

Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.

SecNumCloud, C5, ENS and HDS for every vendor, with the pages for ISO standards, SOC 2 and TISAX: certifications compared.

Official registers

ACN qualified cloud (Italy): checked 2026-11-09, no entry under Delos Cloud
DORA critical ICT third-party providers (ESAs): checked 2026-11-09, no entry under Delos Cloud
Data Privacy Framework List (US): checked 2026-11-09, no entry under Delos Cloud
ENS certificates of conformity (CCN, Spain): checked 2026-11-09, no entry under Delos Cloud
EU Cloud Code of Conduct (GDPR Art. 40): checked 2026-11-09, no entry under Delos Cloud
FedRAMP Marketplace (US): checked 2026-11-09, no entry under Delos Cloud
SecNumCloud qualified services (ANSSI, France): checked 2026-11-09, no entry under Delos Cloud

What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.

What an entry on the Data Privacy Framework List covers, and which vendors hold one: EU-US Data Privacy Framework.

Support window

Not yet collected. This row will say not declared only once we have read a lifecycle or security page and found no period stated — see support windows.

Documents

What we read, how it was disclosed, and when.
Document	Disclosure	Transcription	HTTP	Observed
certifications	Public	full	200	2026-11-09
identity	Public	full	200	2026-11-09
residency	Public	full	200	2026-11-09

History

Nothing has moved since we started watching this vendor on 2026-11-09. Changes appear here only after a human has reviewed them.

Every reviewed change across the registry, newest first: vendor changes.