EU-hosted Git with no US entity in the chain
"EU region" on a US cloud changes the datacenter, not the entity that controls your data. The CLOUD Act follows the company, not the server. Codebahn is a Swedish company on EU infrastructure with every sub-processor EU-incorporated.
Why EU hosting matters
The CLOUD Act gives US authorities the power to compel US companies to produce data stored anywhere. Picking "EU region" in a dropdown changes where the bytes sit. It does not change who can be compelled to hand them over, or under whose law.
The EU-US Data Privacy Framework replaced Privacy Shield after Schrems II struck it down. It could meet the same fate. Every adequacy decision is one court challenge from reversal.
NIS2 and DORA are raising the bar for supply chain sovereignty. "Our vendor is US-incorporated but has an EU subsidiary" is getting harder to defend in procurement.
What EU-hosted means for Codebahn
All code, builds, and metadata are processed and stored exclusively on infrastructure owned and operated by EU companies.
- Company: Hackerman AB, incorporated in Sweden.
- Compute and storage: Scaleway, Paris (France).
- Encrypted backups: Hetzner, Falkenstein (Germany). Different region than primary.
- Payments: Mollie, Amsterdam (Netherlands).
- Contracts: governed by Swedish and EU law.
Every sub-processor is EU-incorporated. We publish the full list. When someone asks "where's my code?", the answer is a data center you can visit, not a region you can configure.
For procurement and legal
Your security questionnaires about CLOUD Act exposure get a clean, one-line answer.
We do not have SOC 2 yet. If your procurement requires signed compliance reports today,GitLab Dedicated has those. We will get there; we are not there now.
How this compares
- GitHub: US entity (Microsoft). EU data residency only on Enterprise tier (ghe.com). US jurisdiction on every plan.
- GitLab: US entity. Dedicated tier for EU data residency at custom pricing. US jurisdiction by default.
- Codebahn: EU entity. EU hosting on every plan. EU jurisdiction. No enterprise gate.