Home βΊ Data protection βΊ CLOUD Act status
CLOUD Act status for 198 tools
| Tool | Origin | CLOUD Act status | EU data storage |
|---|---|---|---|
| EU-approved third country | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| EU/EEA | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Swedish | Outside reach | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU-approved third country | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| Swedish | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU-approved third country | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data: Enterprise only | |
| EU/EEA | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data: Enterprise only | |
| EU/EEA | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | Runs locally (not applicable) | π» Data stays with you | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | EU data: Enterprise only | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | Runs locally (not applicable) | π» Data stays with you | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | Runs locally (not applicable) | π» Data stays with you | |
| Outside EU | Runs locally (not applicable) | π» Data stays with you | |
| EU-approved third country | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| EU/EEA | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU-approved third country | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU-approved third country | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Outside EU | May be covered | EU data: Enterprise only | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | Runs locally (not applicable) | π» Data stays with you | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU-approved third country | Outside reach | No EU data storage | |
| EU-approved third country | Outside reach | No EU data storage | |
| EU-approved third country | Outside reach | No EU data storage | |
| EU-approved third country | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data: Enterprise only | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data: Enterprise only | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | No EU data storage | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU-approved third country | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | Runs locally (not applicable) | π» Data stays with you | |
| Swedish | Outside reach | No EU data storage | |
| Swedish | Outside reach | EU data storage β | |
| Swedish | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | No EU data storage | |
| EU/EEA | Outside reach | EU data storage β | |
| Outside EU | May be covered | EU data storage β |
Important nuance: "Outside the EU" does not automatically mean the USA. The column shows may be covered because most tools in the group are American, but Swiss, British and Chinese vendors are subject to other third-country laws. Check each tool page for details. This is an overview, not legal advice.
Common questions
Is ChatGPT covered by the CLOUD Act?
Yes. OpenAI is an American company and is therefore covered by the CLOUD Act regardless of where data is stored. EU data storage exists, but only for Enterprise/Edu customers.
Are Microsoft 365 and Copilot covered by the CLOUD Act?
Yes. Microsoft is American and is covered by the CLOUD Act even when data is stored within the EU Data Boundary.
Is Slack covered by the CLOUD Act?
Yes. Slack is owned by US Salesforce. EU data storage for messages also requires a Business+ plan or higher.
Is Zoom covered by the CLOUD Act?
Yes. Zoom Communications is American. Paying customers can choose EU storage for meeting content, but account data is handled in the US.
Is Canva covered by the CLOUD Act?
No, Canva is Australian, not American. But the company is outside the EU and data is stored outside the EU by default, so other third-country risks apply.
Is Proton covered by the CLOUD Act?
No. Proton is Swiss and under Swiss law. Switzerland is outside the EU but has the EU's approval for data protection (adequacy decision).
Is Mistral covered by the CLOUD Act?
No. Mistral AI is French and under EU law. That is one reason we highlight it as a European first choice for AI chat.
Is DeepSeek covered by the CLOUD Act?
No, but DeepSeek is Chinese and stores data in China, where the state has extensive legal access. It is not a safer choice, just a different jurisdiction.
Quarterly statistics: CLOUD Act index β Β· Read: CLOUD Act explained β Β· Swedish alternatives β Β· Filter the full catalogue β