Security and compliance are not optional – they are the foundation of our business. Scaleway combines security and compliance standards with the transparency of a sovereign provider to protect your most critical data.
Scaleway is committed to obtaining the most stringent certifications (ISO 27001, HDS, SecNumCloud – currently undergoing assessment) to enable you to deploy your solutions with complete peace of mind, particularly in regulated markets.
Operated 24/7 with native DDoS protection and rapid incident response by our dedicated CSIRT, our 100% European infrastructure ensures high availability and full GDPR compliance. Free from the US CLOUD Act, your data remains resilient, secure, and strictly under your control.
ISO/IEC 27001:2022
Compliance with the ISO/IEC 27001:2022 standard means that an organization or company has implemented a system to manage the risks associated with the security of data held or processed by the company, and that this system adheres to all best practices and principles established in this international standard.
HDS
Health data requires uncompromising security. Scaleway is HDS-certified for the hosting of health data, enabling e-health start-ups, hospitals and medical software developers to innovate whilst remaining fully compliant with the law.
SecNumCloud (on going)
This is the highest standard of trust for public administrations, Operators of Vital Importance and strategic organisations. Currently undergoing qualification, find out more about our position and the milestones already achieved by our teams.
Operational security and incident response
The CSIRT (Computer Security Incident Response Team) Scaleway is the operational team in charge of responding to computer security incidents and preventing cyber security risks. Its main role is to ensure effective, coordinated management of security incidents, minimizing the impact on the organization's systems, data and operations.
General Data Protection Regulation (GDPR)
Scaleway attaches great importance to protecting its customers’ data and respecting their privacy. As such, as a European cloud service provider, Scaleway is committed to complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and to protecting its customers’ data, in particular by implementing contractual, technical and organisational measures, in order to best meet their needs.
Unlike providers subject to foreign extraterritorial laws, Scaleway guarantees that your data and data processing remain entirely within European jurisdiction. This strict legal isolation protects your strategic assets from any interference, ensuring maximum and lasting confidentiality for your critical environments.
Built on leading open-source technologies such as Kubernetes, our platform guarantees you complete portability and freedom from vendor lock-in. You retain full control over your architecture, enabling you to implement multi-cloud strategies or migrate your workloads seamlessly and at no extra cost.
Digital transformation need not mean a complete break with the past. Our solutions are designed to ensure optimal interoperability and to integrate seamlessly with your existing infrastructure. You can upgrade your infrastructure at your own pace, using a hybrid approach, whilst making the most of your existing technological and human resources.
Understanding the trusted cloud standard
Find out why this certification has established itself as the gold standard for cloud security in Europe. This article analyses the key criteria of the framework and their role in protecting your sensitive environments.
The Strategic Challenges of The Qualification
Explore the economic and geopolitical factors driving organisations towards technological autonomy. Essential insights to guide the infrastructure decisions of decision-makers and CIOs.
Compliance is based on a model of shared responsibility. By subscribing to certified services (such as ISO 27001 or HDS), you can rely on our certifications during your own audits, thereby meeting some of the requirements for your certification applications.
Scaleway goes beyond ‘traditional’ compliance, focusing on the technical security of your data. Our guarantee of data sovereignty throughout the value chain protects you against non-European extraterritorial laws (such as the US CLOUD Act).
Obtaining the ANSSI’s SecNumCloud qualification is a strategic priority for Scaleway. Our teams are actively working towards achieving this qualification. You can follow the progress of our audits and our technical positioning directly on our page dedicated to SecNumCloud.
You can access and download all official contractual and legal documents from the Scaleway Contracts page to view our General Terms of Services, Data Processing Agreement (DPA), service-specific conditions. Scaleway’s certifications, security policy and other documentation relating to compliance and security are available on the Scaleway Trust Center.
Whether you need to sign specific contractual clauses or approve the architecture of your HDS infrastructure, our teams are on hand to support you in ensuring the security and compliance of your project.
