Scaleway security and compliance
Every line below says what we found and when we looked. A missing certification means we did not find evidence of it - never that the vendor does not have it.
At a glance
Data processing agreement offered: Yes
Verified
www.scaleway.com · retrieved 2026-10-03
EU data residency stated: Yes
Verified
www.scaleway.com · retrieved 2026-09-02
GDPR compliance stated: Yes
Verified
www.online.net · retrieved 2026-09-02
ISO/IEC 27001: Yes
Verified
www.scaleway.com · retrieved 2026-10-03
Security and compliance
4 documented attributes| Security and compliance | Value | State and source |
|---|---|---|
| Data processing agreement offered | Yes | Verified85% confidenceEvidenceExcerpt ...d legal documents from the Scaleway Contracts page to view our General Terms of Services, Data Processing Agreement (DPA), service-specific conditions. Scaleway’s certifications, security policy and other... Excerpt kindrunning text Subject named in excerptyes Sourcehttps://www.scaleway.com/en/security-and-compliance/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Confidence85% - capped at the measured precision of this kind of excerpt (85%, prose), which is below the reader's own precision (97%) HistoryStatement history How it was read Read bytext pattern muster:\bdata processing (?:agreement|addendum)\bFirst observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision97% (measured by hand for this reader) Excerpt-kind precision85% (measured by hand over 417 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| EU data residency stated | Yes | Verified79% confidenceEvidenceExcerpt ...rvice Generative APIs - Serverless Consume AI models instantly via a simple API call. All hosted in Europe Generative APIs - Dedicated Deployment Deploy AI models in a dedicated inference infrastr... Excerpt kindrunning text Subject named in excerptno Sourcehttps://www.scaleway.com/en/security-and-compliance/ · Primary documentation · retrieved 2026-09-02 Confidence79% - the source confidence; no cap applies (below the measured precision) HistoryStatement history How it was read Read bytext pattern muster:(?<!your\s+(?:business|company)\s+is\s)\b(?:hosted|stored|located|processed)(?:,?\s+and\s+(?:maintained|processed|stored|managed))?\s+(?:(?:exclusively|entirely|only|solely)\s+)?in\s+(?:the\s+EU|Europe|the\s+European\s+Union|Germany|Frankfurt|Ireland|Dublin|the\s+Netherlands|Belgium|France|Paris|Amsterdam)\b(?![^.?!]{0,60}\?)First observed2026-09-02 Last checked2026-09-02 Later reads1 later read of its source (last on 2026-10-03) did not find this value. A read that finds nothing is not evidence of a change, so the statement stands. Human reviewnot documented Source confidence79% Reader precision87% (measured by hand for this reader) Excerpt-kind precision79% (measured by hand over 857 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| GDPR compliance stated | Yes | Verified71% confidenceEvidenceExcerpt ...& research institutions, and higher education establishments Healthcare and Life Sciences GDPR-compliant and HDS-certified AI-driven solutions to boost innovation in healthcare and life sciences... Excerpt kindrunning text Subject named in excerptno Sourcehttps://www.online.net/ · Primary documentation · retrieved 2026-09-02 Sourcehttps://www.scaleway.com/en/security-and-compliance/ · Primary documentation · retrieved 2 times from 2026-09-02 to 2026-10-03 · every date Confidence71% - capped at the average precision across all our readers (71%); this reader has no measurement of its own HistoryStatement history How it was read Read bytext pattern muster:(?<!become )\bGDPR[- ]compliant\bFirst observed2026-09-02 Last checked2026-10-03 Human reviewnot documented Source confidence90% Reader precision71% - no measurement for this reader; this is the average across all our readers, measured by hand Excerpt-kind precision79% (measured by hand over 857 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
| ISO/IEC 27001 | Yes | Verified79% confidenceEvidenceExcerpt ...based on a model of shared responsibility. By subscribing to certified services (such as ISO 27001 or HDS), you can rely on our certifications during your own audits, thereby meeting some... Excerpt kindrunning text Subject named in excerptno Sourcehttps://www.scaleway.com/en/security-and-compliance/ · Primary documentation · retrieved 2026-10-03 Confidence79% - the source confidence; no cap applies (below the measured precision) HistoryStatement history How it was read Read bytext pattern muster:(?<!(?:align|commit|working towards|pursu|accordance|based on|in line with|framework)[^.?!]{0,60})ISO[\s/]*(IEC[\s/]*)?27001(?![^.?!]{0,60}(?:in progress|underway|pursu|working towards|planned|road ?map|commitment|aligned|alignment|framework))First observed2026-10-03 Last checked2026-10-03 Human reviewnot documented Source confidence79% Reader precision87% (measured by hand for this reader) Excerpt-kind precision79% (measured by hand over 857 statements of this kind) Confidence interpretationA heuristic informed by source assessment and reader samples, not a calibrated probability that this individual claim is correct. |
Evidence
Every documented value links to the page we read it from, with the source tier and the day we retrieved it, in its row under Security and compliance. “Evidence” in that row opens the excerpt.
Not found yet (5)
These attributes are open in our research. We looked and found no reliable evidence; 24 addresses were checked and are listed below. That is a statement about our research and never about the product.
| Attribute | State | What we checked |
|---|---|---|
| Audit log | Not yet verified | Checked 4 addresses (9 reads), most recently on 2026-10-03: www.online.net, www.scaleway.com, www.scaleway.com/en/pricing, www.scaleway.com/en/security-and-compliance |
| FedRAMP authorisation | Not yet verified | Checked 3 addresses (4 reads), most recently on 2026-10-03: www.online.net, www.scaleway.com, www.scaleway.com/en/security-and-compliance |
| HIPAA compliance stated | Not yet verified | Checked 3 addresses (4 reads), most recently on 2026-10-03: www.online.net, www.scaleway.com, www.scaleway.com/en/security-and-compliance |
| PCI DSS stated | Not yet verified | Checked 2 addresses (3 reads), most recently on 2026-10-03: www.scaleway.com, www.scaleway.com/en/security-and-compliance |
| SOC 2 Type II | Not yet verified | Checked 3 addresses (4 reads), most recently on 2026-10-03: www.online.net, www.scaleway.com, www.scaleway.com/en/security-and-compliance |
An open attribute describes our research and never the product.
Before you decide
Is Scaleway suitable for your data?
The documented statements above do not settle suitability for your use. Match the evidence to your proposed plan, data and configuration, then resolve the requirements that remain open.
Check the scope
Does the source cover the exact service, region and plan you would buy? Review the document date and any exceptions.
Test your access
Try the roles, guest sharing and access removal your workflow needs. Record the result and the conditions of the test.
Own the follow-up
Give every unresolved question an owner. Request the relevant evidence before treating it as a passed or failed requirement.