GDPR-compliant cloud
A GDPR-compliant cloud is a cloud service that meets the requirements of the General Data Protection Regulation and processes personal data lawfully.
What is a GDPR-compliant cloud?
A GDPR-compliant cloud is a cloud service that complies with the General Data Protection Regulation (GDPR). Personal data is processed lawfully, transparently and traceably, and the provider supports companies in their obligations as controllers.
How do you recognise a GDPR-compliant cloud?
- Data processing agreement (DPA)
- Encryption in transit and at rest
- Granular access rights and audit log
- Server location in Germany or the EU
- Protection against third-country access
Is an EU server location enough for GDPR compliance?
An EU location is important but not sufficient on its own. If the provider belongs to a US group, the US CLOUD Act can apply. What also matters is which law the provider is subject to.
How SecureCloud supports GDPR compliance
SecureCloud is hosted in Germany and operated by a German company. The service is GDPR-compliant, ISO/IEC 27001-certified, listed in the Trusted Cloud directory, BSI C5-attested and CIS-compliant, and a DPA is part of the offering. More on GDPR-compliant cloud storage for business.
Frequently asked questions
Is a US cloud GDPR-compliant?
US cloud services can technically meet some requirements, but as US companies they remain subject to the US CLOUD Act. That conflicts with full GDPR compliance and data sovereignty.
Is SecureCloud a GDPR-compliant cloud?
Yes. SecureCloud is GDPR-compliant, operated in Germany and subject exclusively to German and European law.
What is the difference between a GDPR-compliant cloud and a sovereign cloud?
A GDPR-compliant cloud meets data-protection requirements. A sovereign cloud goes further and also ensures that the operator and applicable law lie entirely within your own jurisdiction.
Related pages
Secure cloud storage for businessesWant to know more?
Our experts are happy to answer your questions.
