Aruba Cloud vs TransIP

Compare Aruba Cloud and TransIP on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Amazon Web Services (AWS), DigitalOcean, Microsoft Azure

Logo: Aruba Cloud

Aruba Cloud

Italy· Cloud Computing

Needs review

Shortlist Aruba Cloud when you need Italian-entity IaaS with OpenStack public cloud, VMware private cloud (Pinnacle Partner), bare metal/GPU, and ACN-oriented PA packaging on proprietary EU campuses. Skip when you need hyperscaler global breadth or a fully public subprocessor directory—consider OVHcloud or Scaleway instead for multi-country European IaaS with different tradeoffs.

EU-operated (IT)OpenStack public cloudVMware Pinnacle PartnerISO 27001 (claimed)ACN-qualified (claimed)Proprietary EU data centers
Logo: TransIP

TransIP

Netherlands· Cloud Computing

Needs review

Shortlist TransIP when you want a Dutch BV contract for domains plus NL-hosted VPS, managed Kubernetes, OpenStack, or S3/SWIFT object storage. Skip when you need hyperscaler global regions or first-party managed databases; consider Hetzner, OVHcloud, or Scaleway instead.

EU-operated (NL BV)Netherlands residency (claimed)KVM VPS + APIManaged KubernetesOpenStack public cloudISO 27001 (claimed)
Aruba Cloud vs TransIP: Snapshot
FeatureLogo: Aruba CloudAruba CloudLogo: TransIPTransIP
Country of originItalyNetherlands
CategoryCloud ComputingCloud Computing
Open sourceNoNo
Self-hostedNoNo
HeadquartersItalyNetherlands
Legal entityAruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy; VAT IT01573850516TransIP B.V., Vondellaan 47, 2332 AA Leiden (KvK 24345899, VAT NL812334966B01). ISO certificates published as team.blue NL B.V. Part of European team.blue group (Belgian group HQ).
Governing lawItalian law (Bergamo courts for non-consumers per T&Cs)Not listed
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)LowMedium
EU-hosted statusNot listedPartial
Hosting / residencyPrimary compute on Aruba-owned data centers in Italy (Arezzo IT1/IT2, Bergamo IT3, Rome IT4) and Czech Republic (Prague CZ1, Ktiš CZ2). Partner availability zones: Paris FR1, Frankfurt DE1, London UK1, Warsaw PL1. Customer chooses region. Full subprocessor list not public—available on request under processor terms. Optional multi-cloud interconnection to other public clouds for hybrid designs.Primary VPS/Kubernetes/object workloads marketed on TransIP-operated Netherlands infrastructure (AMS0/RTM0; object store 3x NL replication). OpenStack across multiple NL datacentres; KB also names Equinix AMS3 and EUNetworks as OpenStack facility providers. Ancillary: Google Analytics and reCAPTCHA (website, consent), PayPal/iDEAL/card payments. No AWS/GCP/Azure listed as primary IaaS fabric.
Summary

Italian sovereign cloud from Aruba S.p.A.: OpenStack public cloud, VMware private cloud, bare metal/GPU, Kubernetes, and storage on proprietary European data centers—strong fit for Italian PA and EU residency-minded IT.

Dutch domain registrar and cloud host: KVM VPS, managed Kubernetes, OpenStack public cloud, and S3/SWIFT object storage on Netherlands infrastructure.

Tags
At a glance: Aruba Cloud vs TransIP
At a glanceLogo: Aruba CloudAruba CloudLogo: TransIPTransIP
HQPonte San Pietro (BG), ItalyLeiden, Netherlands
Legal entityAruba S.p.A.TransIP B.V. (KvK 24345899); certs under team.blue NL B.V.
Founded1994 (group)Not listed
HostingProprietary IT + CZ DCs; partner FR/DE/UK/PLNot listed
Core stackOpenStack, VMware, bare metal, K8sNot listed
Commercial modelPrepaid credit / pay-as-you-go; no free tierVPS packages + add-ons; pay-as-you-go Kubernetes/OpenStack/object storage
Open source product?No (uses OSS components e.g. OpenStack)Not listed
Self-hosted?No (provider-managed cloud/DC)Not listed
GroupNot listedteam.blue (European hosting group, Belgian group HQ)
Primary regionsNot listedNetherlands (AMS0, RTM0; OpenStack multi-DC)
RegionsNot listedNetherlands: AMS0 (Amsterdam), RTM0 (Alblasserdam); OpenStack across multiple NL DCs (incl. Equinix AMS3 / EUNetworks named for some paths)
Compliance certs in regionNot listedISO 27001:2022, ISO 9001:2015, NEN 7510:2017 (vendor PDF certificates)
Key capabilities: Aruba Cloud vs TransIP
Key capabilitiesLogo: Aruba CloudAruba CloudLogo: TransIPTransIP
EU-operated (IT)YesYes
OpenStack public cloudYesYes
VMware Pinnacle PartnerYesNot listed
ISO 27001 (claimed)YesNot listed
ACN-qualified (claimed)YesNot listed
Proprietary EU data centersYesNot listed
Netherlands residency (claimed)Not listedYes
KVM VPS + APINot listedYes
Managed KubernetesNot listedYes
ISO 27001 (claimed)Not listedYes

Aruba Cloud

  • OpenStack public cloud + CMP

    Self-service Cloud Servers and Virtual Data Centers on OpenStack with AMD/NVMe-oriented SKUs, unlimited traffic on documented cloud-server lines, and management via the Aruba Cloud Management Platform, APIs, and prepaid credit wallet. Suits test/prod VMs and progressive scale-out inside Aruba's ecosystem—not a hyperscaler global catalog.

  • VMware private cloud (Pinnacle Partner)

    Hosted Private Cloud, Virtual Private Cloud via VMware Cloud Director, unified storage, and DRaaS-style options using enterprise stacks (vendor materials cite Zerto, Veeam, vSphere tooling). Built for teams standardizing on VMware who want European hosting without running their own gear.

  • Bare metal and GPU for private AI

    Dedicated servers in Italian Rating 4 data centers (Arezzo/Bergamo and others) with configurable networking (firewall/switch add-ons) and GPU SKUs aimed at private AI/ML. Full root control and isolation; buyer owns OS security and backups unless add-on protection is purchased.

  • Managed Kubernetes and cloud-native stack

    Managed Kubernetes, Application Platform (container/PaaS), container registry, agentless backup for K8s/VDC, plus ArubaKube R&D around open-source multi-cluster projects such as Liqo. Good for EU teams wanting managed containers without leaving Aruba's network.

  • Object/block storage and enterprise backup

    S3-compatible object storage, block volumes, smart storage, and backup packages (vendor stacks include Veeam and Commvault). Use for data protection and hybrid DR—not automatic full-workload backup unless you buy and configure those services.

  • European region choice with Italian ACN path

    Place workloads across proprietary Italian and Czech sites plus partner zones in France, Germany, the UK, and Poland. Italian ACN-qualified IaaS/PaaS/SaaS positioning targets public administration and regulated suppliers; confirm exact qualified SKUs and region pins in procurement.

TransIP

  • KVM VPS on AMS0/RTM0 with NVMe triple copies

    Root VPS on TransIP's KVM platform with package tiers, optional dedicated vCPU and IOPS add-ons, private networking, HA-IP, and load balancers. Storage is described as distributed NVMe with three copies; free in-zone backups every four hours, with optional weekly and offsite backups.

  • Managed Kubernetes with free control plane

    Control-panel Kubernetes where TransIP runs the control plane; customers add shared or dedicated worker node pools, attach NVMe or Big Storage volumes, and use HA-IP load balancing. Data is marketed as stored in the Netherlands with minute-based pay-as-you-go nodes.

  • OpenStack Public Cloud (API + Horizon)

    Programmable OpenStack with Octavia load balancing, Barbican secret management, Cinder volume backups, and Terraform-friendly automation. First project is offered with a free trial window; infrastructure is described as multi-datacentre with triple rack-level copies.

  • S3 and SWIFT Object Store in the Netherlands

    Object storage with S3 and OpenStack SWIFT APIs, Keystone/S3 token management, and triple replication across Dutch availability zones. Usable standalone or beside VPS/OpenStack; billed on used storage and egress rather than reserved blocks.

  • Domains, DNS, and REST API in one panel

    Domain registration and DNS alongside infrastructure, with a documented REST API (api.transip.nl) for domains, VPS, Kubernetes, and OpenStack projects. Fits teams that want registrar plus compute under one Dutch operator.

Assurance & compliance: Aruba Cloud vs TransIP
Assurance & complianceLogo: Aruba CloudAruba CloudLogo: TransIPTransIP
Independent security / no-logs audit
Not applicable

IaaS/PaaS provider—not a no-logs consumer VPN. Request customer audit rights / SOC reports under NDA if needed.

Not applicable

IaaS/hosting provider, not a no-logs VPN. Assurance is via ISMS certifications and responsible disclosure (Intigriti), not a public no-logs audit.

ISO 27001
Vendor claimed

Vendor publishes ISO 27001 certificate PDF and states ISO 27001 family as a security pillar; also claims 27017/27018/27035. Re-verify cert scope and validity dates in procurement.

Vendor claimed

Vendor publishes ISO 27001:2022 PDF (team-blue-nl-bv naming). Independent registry re-check not completed in this draft.

SOC 2 / SOC 3
Not found

Public SOC 2/3 report not found on product pages. Vendor publishes ISAE 3402 report PDF instead—request current assurance package.

Not found

No clear TransIP product-level SOC 2/3 claim found on primary legal/security pages reviewed.

ISAE 3402
Vendor claimed

Certificate/report PDF linked from data-protection resources page.

Not listed
GDPR / EU data protection
Vendor claimed

EU/Italian entity; services designed under GDPR; CISPE Code of Conduct claimed; processor terms in cloud T&Cs.

Vendor claimed

Dutch controller/processor entity; privacy policy and control-panel DPA. Residency depends on selected product/zone.

US CLOUD Act exposure (indicative)
Partial

Italian entity, no known US parent, primary hosting on Aruba-owned EU DCs—not on AWS/GCP/Azure by default. Residual uncertainty: subprocessor list only on request; partner DCs include UK; optional multi-cloud/hybrid to hyperscalers. Indicative only—not legal advice.

Partial

EuropeanStack assessment: Dutch entity / no known US parent / NL-first hosting, but privacy names Google Analytics, reCAPTCHA, and PayPal, and OpenStack KB names Equinix colo. Not a vendor safety claim. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Cloud/data-centre T&Cs Art. 21 appoint Aruba as processor/sub-processor for applicable services; subprocessors available on request with change notice. Confirm signed pack for your SKUs.

Vendor claimed

Processor agreement available to view/accept in the control panel per knowledge base.

CISPE Code of Conduct
Vendor claimed

Vendor states CISPE Code of Conduct compliance on product and sovereignty pages.

Not listed
ACN qualification (Italian PA)
Vendor claimed

Vendor claims infrastructure up to ACN AI3 and services up to QC3 for public administration. Confirm which products are in scope for your project.

Not listed
EU AI Act
Not applicable

Infrastructure provider; Framework AI tool exists as optional capability with customer-responsibility language—not an AI product evaluation.

Not applicable

Infrastructure hosting/registrar; not marketed as an AI system provider. Optional third-party AI assistant images on VPS are customer-chosen workloads.

NEN 7510 (Dutch healthcare information security)Not listed
Vendor claimed

Vendor publishes NEN 7510:2017 certificate PDF; accounts processing medical data can be marked for extra handling per cert page.

Considerations & known limitations: Aruba Cloud vs TransIP
Considerations & known limitationsLogo: Aruba CloudAruba CloudLogo: TransIPTransIP
Subprocessor list not fully public
Medium

T&Cs say the updated subprocessor list is available on request, not as a public transparency page. Procurement should obtain the current list, countries, and change process before go-live.

Not listed
Partner zones and multi-region choice
Low

European network includes partner sites and a UK zone. Residency and latency goals require explicit region selection—not assumptions from marketing 'sovereign cloud' language alone.

Not listed
Customer-owned backups and OS security
Medium

Default terms state Aruba does not back up customer data unless a backup service is purchased; customers administer OS, apps, and credentials under shared responsibility.

Not listed
Narrower managed PaaS than hyperscalers
Low

OpenStack + VMware + bare metal + K8s cover classic IaaS/private cloud well, but teams expecting AWS/Azure-class managed service density will hit catalog limits.

Not listed
Certificate scope must be verified
Low

ISO/ISAE/ACN claims are vendor-published; map each cert to exact products, locations, and expiry before relying on them in a risk register.

Not listed
team.blue group entity complexityNot listed
Low

Brand is TransIP B.V.; certificates use team.blue NL B.V. Procurement should map the exact contracting entity, DPA signatory, and cert scope to the services purchased.

US SaaS on website/payments pathNot listed
Medium

Privacy policy discloses Google Analytics, reCAPTCHA, and PayPal. These are not described as the VPS storage backend, but they affect overall vendor diligence and CLOUD Act style questionnaires.

Equinix-named OpenStack facilitiesNot listed
Low

OpenStack facility list includes Equinix AMS3 (US-parent colo operator). Workloads remain in Amsterdam physically; treat as partial EU-hosted diligence, not AWS-region hosting.

Narrower managed-platform depth than hyperscalersNot listed
Medium

No broad multi-continent region map or hyperscaler-class managed database suite on the pages reviewed. Teams needing those should plan self-managed stacks or another cloud.

No standalone public subprocessor register foundNot listed
Medium

Diligence relies on privacy policy, product pages, and DPA rather than a dedicated exhaustive subprocessor HTML table. Request an up-to-date schedule under NDA if required.

Fit

Aruba Cloud

Best fit when

  • Italian or EU orgs that want compute under Aruba S.p.A. with primary hosting on Aruba-owned Italian/Czech data centers
  • Public administration and regulated suppliers needing ACN-qualified cloud SKUs (confirm product scope)
  • VMware shops seeking Hosted Private Cloud / VPC / DRaaS without US hyperscaler tenancy
  • Teams mixing OpenStack VMs, Managed Kubernetes, object storage, and bare metal/GPU for private AI
  • Buyers who value Italian-language 24/7 support, CMP self-service, and prepaid credit cost control

Poor fit when

  • Workloads that need a hyperscaler-wide global region map and deep managed PaaS catalogs (AWS/Azure-class)
  • Teams that require a fully public, always-updated subprocessor page without a customer request
  • Buyers who only want lowest-cost bare metal/VPS and do not need VMware, ACN, or enterprise packaging (Hetzner-class shortlists)
  • Strict Italy-only residency without validating region selection (partner zones include FR/DE/UK/PL)

Consider instead when

  • When: You need larger multi-country European scale or a broader global PoP footprint than Aruba's network

    Consider: OVHcloud

    French-scale European IaaS; different PA quals and product tree.

  • When: You prioritize developer-centric instance catalogs and simpler Paris/Amsterdam-style public cloud

    Consider: Scaleway

    Stronger developer UX; less Italian ACN/VMware private-cloud depth.

  • When: You need US hyperscaler ecosystem density, global managed services, and marketplace breadth

    Consider: Amazon Web Services (AWS) or Microsoft Azure

    US-parent platforms with different jurisdictional posture.

  • When: You mainly want cost-oriented German bare metal/VPS with less enterprise packaging

    Consider: Hetzner

    Different country anchor and compliance story; compare catalogs carefully.

TransIP

Best fit when

  • Teams that need domains, DNS, and root VPS under one Dutch operator
  • Workloads that must stay in the Netherlands with AMS0/RTM0 style zone choice
  • Builders who want managed Kubernetes without running their own control plane
  • OpenStack users who want Horizon/API automation and EU-stored projects
  • Backup/media pipelines that need S3 or SWIFT endpoints with Dutch triple replication

Poor fit when

  • Architectures that require many non-EU regions as first-class products
  • Buyers who need a broad first-party managed database catalogue
  • Procurement that requires a published exhaustive customer-workload subprocessor register before scoring
  • Teams seeking a fully open-source TransIP control plane (the company operates OpenStack/K8s but is not an OSS vendor)

Consider instead when

  • When: You need large bare-metal choice and owned DE/FI parks with optional extra-EU cloud

    Consider: Hetzner

    Deeper server auction and multi-park footprint; different registrar story.

  • When: You need multi-country EU cloud plus SecNumCloud-style private cloud paths

    Consider: OVHcloud

    Broader region map and product depth; French group contracting.

  • When: You want more EU region pins or managed data services with selectable residency

    Consider: Scaleway or UpCloud

    Compare region lists and managed DB/Kubernetes packaging directly.

  • When: You specifically want another Dutch IaaS peer for side-by-side diligence

    Consider: Leaseweb or Cyso Cloud

    Similar NL diligence questions; different panel and product mix.

Open questions for due diligence

Aruba Cloud

  • What is the current named subprocessor list (group companies and third parties) for the exact SKUs we will buy?
  • Which products and sites are in scope for the latest ISO 27001 / 27017 / 27018 certificates and ACN AI3/QC3 qualifications?
  • Can we pin workloads exclusively to Italian proprietary DCs (IT1–IT4) with contractual residency language?
  • What customer audit rights, ISAE/SOC report access, and DPA signature process apply to our legal entity?
  • For hybrid designs, which interconnect options touch US-group clouds, and can those be excluded?

TransIP

  • Which legal entity signs the order form and DPA for your SKU mix (TransIP B.V. vs team.blue NL B.V.)?
  • Can TransIP provide a current customer-workload subprocessor list covering backups, support tooling, and OpenStack facility operators?
  • What is the exact ISO/NEN certificate scope relative to VPS vs Kubernetes vs OpenStack vs Object Store?
  • Are offsite VPS backups always confined to Dutch availability zones under contract, including disaster scenarios?