# Scaleway

Scaleway declares [11 subprocessors](https://thirdpartyindex.com/vendors/scaleway#subprocessors) in [its subprocessor list](https://www.scaleway.com/en/subprocessorlist/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/2976)). They include [Digital Realty](https://thirdpartyindex.com/vendors/digital-realty), [Iron Mountain](https://thirdpartyindex.com/vendors/iron-mountain) and [Clever Cloud](https://thirdpartyindex.com/vendors/clever-cloud). No published changes since we first read it on 2026-09-22. [35 tracked vendors](https://thirdpartyindex.com/vendors/scaleway#used-by) name Scaleway as a subprocessor, including [Mailgun](https://thirdpartyindex.com/vendors/mailgun), [Mistral](https://thirdpartyindex.com/vendors/mistral) and [Sinch](https://thirdpartyindex.com/vendors/sinch).

Scaleway (scaleway.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/scaleway
- Documents last verified: 2026-11-11
- Transparency rating: 90/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 3 tracked vendors directly, 83 within two hops, 357 within three; 35 tracked vendors rely on it directly, 460 within two hops, 2383 within three
- Cite as: Scaleway, Third Party Index, https://thirdpartyindex.com/vendors/scaleway (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.scaleway.com/ | 2026-11-11 | 2026-11-09 |
| Subprocessor list | https://www.scaleway.com/en/subprocessorlist/ | 2026-11-11 | 2026-09-22 |
| Data processing addendum | https://www.scaleway.com/en/clusters-for-apache-sparktm/ | 2026-11-11 | 2026-10-08 |
| Privacy policy | https://www.scaleway.com/en/privacy-policy/ | 2026-11-11 | 2026-09-22 |
| Terms | https://www.scaleway.com/en/contracts/ | 2026-11-11 | 2026-10-01 |
| security.txt | https://www.scaleway.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 |
| Status page | https://status.scaleway.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (11)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| 3S Data Center S.A | Colocation services | Headquarters location: EU; Processing Location (Region): EU (Poland) | 2026-09-22 |
| Atempo | Data recording and archiving solutions for cold storage services | FR | 2026-09-22 |
| Atman sp. z.o.o | Colocation services | Headquarters location: EU; Processing Location (Region): EU (Poland) | 2026-09-22 |
| Atnorth | Colocation services | Headquarters location: EU; Processing Location (Region): EU (Sweden) | 2026-09-22 |
| BrainStorm Network Inc. | Service provider for VPS Dedibox | CAN | 2026-09-22 |
| [Clever Cloud](https://thirdpartyindex.com/vendors/clever-cloud.md) | Cloud provider for Web Platform | FR | 2026-09-22 |
| Confia | Recycling of WEEE (Waste Electrical and Electronic Equipment) | FR | 2026-09-22 |
| [Digital Realty](https://thirdpartyindex.com/vendors/digital-realty.md) | Colocation services | Headquarters location: US; Processing Location (Region): EU (Netherlands) | 2026-09-22 |
| Equinix EMEA | Colocation services | Headquarters location: US; Processing Location (Region): EU (Italy, Netherlands, Poland) | 2026-09-22 |
| [Iron Mountain](https://thirdpartyindex.com/vendors/iron-mountain.md) | Colocation services | Headquarters location: US; Processing Location (Region): EU (Netherlands) | 2026-09-22 |
| Op Core | Colocation services | Headquarters location: EU; Processing Location (Region): EU (France) | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/2976)). CSV: https://thirdpartyindex.com/vendors/scaleway/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: ISO/IEC 27001, CSA STAR, HDS (France) ([evidence](https://thirdpartyindex.com/evidence/2980))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/2980))

## Web Technologies

Scaleway's homepage made 84 requests to 1 domain. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Scaleway: 84 requests to scaleway.com; Bunny, Envoy, GrowthBook 1.8.0, HSTS, Next.js 16.4.5, Open Graph, PWA, React, Rudderstack, Sentry, Turbopack, Webpack, core-js 3.50.0

## Subprocessor of (35)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [84codes](https://thirdpartyindex.com/vendors/84codes.md): Data Center
- [AhaSend](https://thirdpartyindex.com/vendors/ahasend.md): Managed AI inference (large language model)
- [Alke Tech](https://thirdpartyindex.com/vendors/alke-tech.md)
- [Ansvar AI](https://thirdpartyindex.com/vendors/ansvar-ai.md)
- [BoondManager](https://thirdpartyindex.com/vendors/boondmanager.md): Off-site backups
- [Cobbai](https://thirdpartyindex.com/vendors/cobbai.md): Hosting
- [Crisp](https://thirdpartyindex.com/vendors/crisp.md): Hosting; Infrastructure hosting
- [Datadome](https://thirdpartyindex.com/vendors/datadome.md): Cloud provider; Processing, data pipelines and data streaming analytics
- [Digital Samba](https://thirdpartyindex.com/vendors/digital-samba.md): French hosting partner with data centres located in Europe.
- [EvaluAgent](https://thirdpartyindex.com/vendors/evaluagent.md): AI infrastructure, hosting and compute services.
- [Gradium](https://thirdpartyindex.com/vendors/gradium.md): Cloud Infrastructure; Cloud Service Provider
- [GreenPT](https://thirdpartyindex.com/vendors/greenpt.md)
- [Hyperping](https://thirdpartyindex.com/vendors/hyperping.md): EU-based monitoring probe servers
- [Icypeas](https://thirdpartyindex.com/vendors/icypeas.md): Hosting Provider
- [ImprovMX](https://thirdpartyindex.com/vendors/improvmx.md): We use Scaleway to host part of our email infrastructure in EU datacenters.
- [iSpring Solutions](https://thirdpartyindex.com/vendors/ispring-solutions.md): Reserve data center
- [KugelAudio](https://thirdpartyindex.com/vendors/kugelaudio.md): EU production hosting and object storage for voice references
- [LaGrowthMachine](https://thirdpartyindex.com/vendors/lagrowthmachine.md)
- [Leadoo](https://thirdpartyindex.com/vendors/leadoo.md): Backup server
- [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md): Hosting; and Infrastructure
- [Mailmeteor](https://thirdpartyindex.com/vendors/mailmeteor.md): Cloud computing
- [Melious](https://thirdpartyindex.com/vendors/melious.md): 8 Rue de la Ville l'Évêque, 75008 Paris, Frankreich
- [Meltwater](https://thirdpartyindex.com/vendors/meltwater.md): Cloud Storage
- [MentorcliQ](https://thirdpartyindex.com/vendors/mentorcliq.md): Cloud provider; Underlying EU data hosting provider for Neobrain
- [Mistral](https://thirdpartyindex.com/vendors/mistral.md): Cloud Infrastructure; Product: Vibe Code Web
- [Noota](https://thirdpartyindex.com/vendors/noota.md): Hébergement et inférence IA (modèles open-weight, Mistral)
- [Partium](https://thirdpartyindex.com/vendors/partium.md): Cloud provider
- [Phare](https://thirdpartyindex.com/vendors/phare.md)
- [Puzzel](https://thirdpartyindex.com/vendors/puzzel.md): All data is located in Paris, France.; Cloud provider
- [Sightengine](https://thirdpartyindex.com/vendors/sightengine.md)
- [Sinch](https://thirdpartyindex.com/vendors/sinch.md): Hosting; and Infrastructure
- [TensorX](https://thirdpartyindex.com/vendors/tensorx.md): Network security, cloud infrastructure
- [Tuist](https://thirdpartyindex.com/vendors/tuist.md): Build-result processing; Processing of Xcode build results (xcresult processors).
- [Unipile](https://thirdpartyindex.com/vendors/unipile.md): Cloud hosting and infrastructure
- [Vade](https://thirdpartyindex.com/vendors/vade.md): hosting

## Service status

Incidents it reported on its own status page.

- Last 90 days: 149 reported incidents (14 major or critical, 112 minor, 23 with no impact stated)
- Typical time to resolve: 4 h 23 min
- Status page last read: 2026-11-12
- Its status page says now: Partially Degraded Service (affected: Elements - Products: degraded performance, Dedibox - Products: under maintenance, Dedibox - Datacenters: under maintenance, Miscellaneous: degraded performance)
- Under way: \[ElasticMetal\] - \[world\] - The private\_network option is not working as expected in the Terraform provider. (minor), since 2026-11-10 16:55 UTC
- Under way: \[VPC\] - \[FR-PAR-1\] Metadata API through VPC is experiencing slow response time (major), since 2026-11-03 11:08 UTC
- Under way: \[Support\] Delays in ticket processing (minor), since 2026-10-26 08:45 UTC
- Under way: \[Support\] Call Handling Delays (minor), since 2026-10-26 08:44 UTC
- Under way: P3 - \[INSTANCES\] - it-mil-1 - Instance APIs down (minor), since 2026-10-21 16:31 UTC
- Under way: P2 - \[WEBHOSTING\] - PHP Emergency maintenance (critical), since 2026-10-21 14:38 UTC
- 2026-12-30: Dedibox - DC2 - Room 101 - Rack G36 - Block C - Server unreachable (major)
- 2026-12-10: Kapsule - No update on “k8s.fr-par.scw.cloud” DNS zone on FR-PAR (minor)
- 2026-11-27: \[WEBHOSTING\] New email security measures (no impact stated)
- 2026-11-24: \[WEBHOSTING\] SMTP/51.159.208.135 blacklisted on Microsoft/Outlook from classic webhosting service (major)
- 2026-11-10: \[ElasticMetal\] - \[world\] - The private\_network option is not working as expected in the Terraform provider. (minor)
- 2026-11-10: \[WEBHOSTING\] \[fr-par\] pf-1010.whm.fr-par.scw.cloud (no impact stated)
- 2026-11-10: \[DC3\] Interlink Router device at dc3 lost the connexion with the Interlink Route Reflector (no impact stated)
- 2026-11-09: \[DOMAIN - DNS\] - ns0.online.net and ns0.dom.scw.cloud down (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/scaleway

## Security contact

From its security.txt (https://www.scaleway.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/2982)):

- Contact: mailto:csirt@scaleway.com
- Disclosure policy: https://www.scaleway.com/en/privacy-policy/
- Encryption key: https://www-uploads.scaleway.com/CSIRT_Scaleway_public_key_2aa01086de.asc
- Acknowledgments: https://www.scaleway.com/en/csirt/
- Security jobs: https://www.scaleway.com/en/careers/
- Languages: en, fr
- Valid until 2028-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api