Hero image for the mobile version of UpCloud's website
Hero image for UpCloud's website

EU Data Act

Last updated: 11 August 2025

Introduction

This page contains information that UpCloud Oy is required to disclose as a data processing service provider in accordance with regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonized rules on fair access to and use of data (Data Act).

Jurisdiction

The location of the data center determines which country’s jurisdiction the infrastructure in each data center is subject to. The locations (city and country) of UpCloud data centers are listed at: https://upcloud.com/global/data-centers/ In addition to the physical location of the infrastructure, the domicile of the UpCloud entity operating the data center affects the jurisdictional question.

  • Our data centers in the EU are operated by UpCloud Oy, the parent company of UpCloud group registered in Finland. All UpCloud customers are contracted by the Finnish entity, UpCloud Oy, regardless of the location of the customer or which data center the customer selects for their resources.
  • Our data center in the United Kingdom is operated by UpCloud UK Ltd, a fully-owned subsidiary of UpCloud Oy.
  • Our data centers in the United States are operated by UpCloud USA Inc, a fully-owned subsidiary of UpCloud Oy registered in Delaware.
  • Our data center in Singapore is operated by UpCloud Asia Pte Ltd, a fully-owned subsidiary of UpCloud Oy.
  • Our data center in Australia is operated by UpCloud Asia Pacific Pty Ltd, a fully-owned subsidiary of UpCloud Oy.

Please note that this information is provided only for the purposes of Article 28 of Data Act and does not affect the interpretation or the terms concerning governing law and competent court in our Terms of Service

Technical, organizational and contractual measures to prevent international governmental access or access conflicting with Union law or national law of member states

UpCloud’s data centers in the EU are operated by UpCloud Oy, the parent company of UpCloud group registered in Finland. The data held in the data centers is subject to the jurisdiction of the EU Member State in which the data center is located and thus governmental access to the data center facilities is determined by the laws of the relevant EU Member State.

UpCloud’s platform is operated and managed from Finland and all customer account information (name, contact details, payment information, IP addresses, resources deployed, etc.) is held by UpCloud Oy in Finland. Thus such data is protected by the laws of Finland and the EU. UpCloud Oy does not disclose any data to any governmental authorities unless required by laws of Finland. UpCloud rejects any information requests received from foreign governmental authorities and directs the requester to contact relevant Finnish authorities for mutual legal assistance, in accordance with the Finnish law.

UpCloud has implemented comprehensive technical and organizational measures to protect the data it holds. UpCloud’s information security management system is certified to comply with ISO 27001 standard. The measures adopted by UpCloud include access management and control, regular security audits and bug bounty program, continuous monitoring, incident response protocols, employee training programs, and strict data protection policies to ensure the highest standards of information security and privacy. When using external service providers, UpCloud selects only reliable and reputable vendors, and all vendors undergo security, privacy and compliance review. 

Questions or Concerns?

If you have any questions about the EU Data Act and how UpCloud complies with it, please contact our support team at [email protected].

Back to top