Exoscale vs Webswing

Compare Exoscale and Webswing on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Amazon Web Services (AWS), Microsoft Azure

Exoscale

Switzerland· Cloud Computing

Needs review

Shortlist Exoscale when you need multi-country European IaaS (CH/DE/AT/BG/HR zones), managed Kubernetes and open-source DBaaS under a Swiss operator in the A1 Telekom Austria group. Skip when you need hyperscaler global PaaS depth or bare-metal-first catalogs—consider OVHcloud or Scaleway instead, or AWS/Azure/GCP for worldwide regions.

EU/CH zones onlySwiss operator (Akenes SA)Managed Kubernetes (SKS)Managed DBaaSISO 27001/27017/27018 (claimed)Per-second pay-as-you-go

View listing Visit Website

Webswing

Ireland· Cloud Computing

Needs review

Shortlist when you must browser-enable an existing Java Swing/JavaFX/SWT/NetBeans or Oracle Forms estate without a rewrite and can run a self-hosted session tier. Skip when you are building a greenfield web UI only, or when the app depends on video, 3D acceleration, or ultra-low-latency graphics. Consider Citrix/VDI or a hyperscaler cloud desktop when you need generic desktop remoting beyond Java UI toolkits.

EU-operatedSelf-hostedISO 27001 (claimed)No-rewrite Java UIOracle Forms capable

View listing Visit Website

Highlighted rows differ between the two products.

Exoscale vs Webswing: Snapshot
Feature	Exoscale	Webswing
Country of origin	Switzerland	Ireland
Category	Cloud Computing	Cloud Computing
Open source	No	No
Self-hosted	No	Yes
Headquarters	Switzerland	Ireland
Legal entity	Akenes SA, Boulevard de Grancy 19A, 1006 Lausanne, Switzerland (CHE-423.524.322); member of A1 Digital International GmbH & Co KG / A1 Telekom Austria Group	WEBSWING LIMITED (Webswing Ltd.), 93 Upper George's Street, Dun Laoghaire, A96 V1K8 Dublin, Ireland
Governing law	Swiss law (DPA: canton of Vaud jurisdiction language)	Ireland
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Low
EU-hosted status	Not listed	Unknown
Hosting / residency	Customer compute/storage/SKS on Exoscale European zones (CH-GVA-2, CH-DK-2, DE-FRA-1, DE-MUC-1, AT-VIE-1/2, BG-SOF-1, HR-ZAG-1); DBaaS orchestrated by Aiven Oy (Finland) on Exoscale compute. Client ops third parties include AWS (US) data archival, Twilio (US) auth, PayPal (US) payments—privacy policy states customer-uploaded service data is not sent to those ops providers.	Product runtime is customer-operated (on-prem, customer cloud, Docker, or Kubernetes). Vendor Client Portal and marketing site use listed processors including Google Ireland, Meta Ireland, LinkedIn Ireland, and The Rocket Science Group LLC (US) for email marketing; those apply to vendor website/portal data, not to self-hosted application sessions.
Summary	European public cloud (IaaS) from Swiss operator Akenes SA (A1 Digital): multi-zone compute, managed Kubernetes (SKS), DBaaS, object and block storage, and GPUs across CH, DE, AT, BG, and HR.	Self-hosted platform that runs Java Swing, JavaFX, SWT, NetBeans, and Oracle Forms apps in the browser without rewriting them.
Tags	cloud iaas kubernetes dbaas gdpr switzerland european-cloud gpu	self-hosted java desktop-to-web oracle-forms application-modernization on-premise html5 ireland

At a glance: Exoscale vs Webswing
At a glance	Exoscale	Webswing
HQ	Lausanne, Switzerland	Dublin, Ireland
Legal entity	Akenes SA (CHE-423.524.322)	WEBSWING LIMITED (CRO 564226)
Group	A1 Digital / A1 Telekom Austria Group	Not listed
Hosting	European zones only (CH, DE, AT, BG, HR)	Not listed
Model	Public cloud IaaS + managed K8s/DBaaS	Not listed
Self-host	No (managed public cloud)	Not listed
Founded	Not listed	2015 (Dublin); product lineage from ~2012
License model	Not listed	Commercial + SLA (evaluation available); AGPL only ≤20.2
Deployment	Not listed	Self-hosted (ZIP, Docker, Kubernetes, cluster)
UI frameworks	Not listed	Swing, JavaFX, SWT, NetBeans, Applets, Oracle Forms

Key capabilities: Exoscale vs Webswing
Key capabilities	Exoscale	Webswing
EU/CH zones only	Yes	Not listed
Swiss operator (Akenes SA)	Yes	Not listed
Managed Kubernetes (SKS)	Yes	Not listed
Managed DBaaS	Yes	Not listed
ISO 27001/27017/27018 (claimed)	Yes	Not listed
Per-second pay-as-you-go	Yes	Not listed
EU-operated	Not listed	Yes
Self-hosted	Not listed	Yes
ISO 27001 (claimed)	Not listed	Yes
No-rewrite Java UI	Not listed	Yes
Oracle Forms capable	Not listed	Yes

Exoscale

Multi-zone European KVM compute
Launch KVM instances in published zones across Switzerland, Germany, Austria, Bulgaria, and Croatia. Families cover standard, CPU-, memory-, and storage-optimized profiles plus NVIDIA GPU shapes; anti-affinity groups, instance pools, snapshots, custom templates, security groups, and live migration support production patterns. Billed per second with powered-off storage semantics as documented.
SKS managed Kubernetes (CNCF certified)
Scalable Kubernetes Service deploys a managed control plane quickly (vendor claims under about a minute to two minutes). Starter is free without SLA; Pro adds HA control plane, etcd backups, and SLA language. Node pools use Exoscale instance types including GPUs; NLB, CSI storage, autoscaling/Karpenter (Pro), and vanilla CNCF-conformance positioning keep the stack portable.
Managed DBaaS on Exoscale compute (Aiven orchestration)
Managed PostgreSQL, MySQL, Kafka, OpenSearch, Valkey, Grafana, and related engines run as DBaaS with automated backups, plan scaling, and high-availability options. Orchestration subprocessor is Aiven Oy (Finland); database instances run on Exoscale infrastructure in the zone you choose—confirm geo-replication and plan limits in docs before multi-region designs.
S3-compatible object storage and block volumes
Simple Object Storage provides S3-compatible APIs for backups, media, and app assets integrated with Exoscale IAM and zones. Block storage attaches persistent NVMe-class volumes to instances and Kubernetes via CSI for stateful workloads without tying data solely to local disks.
IAM, private networks, and automation APIs
Fine-grained IAM on API keys, private networks, and network load balancers support multi-tier designs. Portal, CLI, API, and Terraform-friendly workflows match common European DevOps practice without requiring a proprietary control language.

Webswing

Browser delivery without rewriting Java UI
Runs Swing, JavaFX, SWT, NetBeans Platform, Applets, and Oracle Forms in HTML5 browsers over WebSockets with no required source changes. End users need a browser only, not a local JRE or plugin.
Customer-controlled self-hosted runtime
Install from a distribution ZIP or containers on your own servers, VMs, Docker, or Kubernetes. Standalone and Cluster Engine modes cover single-node pilots through multi-node scale-out with admin monitoring.
Incremental modernisation beside legacy screens
Modernisation Framework and JsLink let React, Angular, Vue, Vaadin, or APEX components coexist with Java UI so teams can rewrite modules over time instead of a big-bang cutover.
Enterprise auth and session operations
Pluggable security modules include SAML2, OpenID Connect, Keycloak, LDAP, and custom providers. Admin Console adds session mirror view, recording/playback, logs, and multi-tenant path isolation.
Built-in printing, files, and clipboard bridges
Browser-side printing with preview, isolated upload/download folders, and clipboard integration cover common desktop workflows that break in naive remote-app setups.

Assurance & compliance: Exoscale vs Webswing
Assurance & compliance	Exoscale	Webswing
Independent security / control audit	Partial Vendor states regular independent audits and publishes multi-framework certs via Compliance Center; not a VPN-style no-logs audit. Download current reports under account/NDA for verification.	On request / NDA Footer states regular security testing is available upon request; no public independent audit PDF found.
ISO 27001	Vendor claimed Vendor asserts ISO/IEC 27001:2022 ISMS certification since 2018; certificates via Compliance Center.	Vendor claimed Site footer: Webswing Limited maintains an ISO/IEC 27001-certified ISMS. Independent cert registry entry not verified in this pass.
ISO 27017 (cloud security)	Vendor claimed Listed on compliance site as certified cloud security controls.	Not listed
ISO 27018 (cloud PII)	Vendor claimed Listed on compliance site for personal data protection in public cloud.	Not listed
SOC 2 / SOC 3	Vendor claimed SOC 2 listed on compliance marketing; obtain report via Compliance Center / NDA.	Not found No SOC 2/3 claim found on public site pages reviewed.
BSI C5	Vendor claimed BSI C5 listed among national/international standards on compliance page.	Not listed
HDS (French health data hosting)	Vendor claimed HDS listed on compliance page; confirm scope and zones for health workloads.	Not listed
CSA STAR	Vendor claimed CSA STAR listed on compliance page.	Not listed
GDPR / EU data protection	Vendor claimed Swiss entity; GDPR + Swiss FADP claims; EU zones; public DPA. Not legal advice.	Vendor claimed Privacy policy names WEBSWING LIMITED as Irish controller under GDPR; FAQ states GDPR alignment for company contact data.
US CLOUD Act exposure (indicative)	Partial Swiss operator, no known US parent, European workload zones, and no third-party processor for compute/storage/SKS customer data. Medium residual path via US ops providers (AWS archival, Twilio auth, PayPal) listed for client data. DBaaS uses Aiven (Finland). Not legal advice.	Partial EU entity with no known US parent; self-hosted runtime keeps sessions on customer infra. Vendor website/portal lists US-group processor The Rocket Science Group LLC (email) plus Google/Meta/LinkedIn Ireland entities for analytics/ads. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Public DPA for Akenes SA as processor; Swiss law; Aiven listed for DBaaS.	Not found Privacy policy references Art. 28 DPAs with Webswing's own processors; no public customer-facing DPA download found. Request during procurement.
EU AI Act	Not applicable Primary product is IaaS/managed infrastructure; customer AI workloads remain customer-controlled. Concrete AI offerings may need separate review if used as an AI system.	Not applicable Core product is application delivery/runtime, not an AI system. Prague research affiliate explores AI; not the catalogued product.

Considerations & known limitations: Exoscale vs Webswing
Considerations & known limitations	Exoscale	Webswing
US third parties on client/ops path	Medium Privacy policy lists AWS (US) data archival, Twilio (US) authentication, and PayPal (US) among client operations providers. Vendor states customer-uploaded service data is not transferred to these providers, but account/ops data paths still matter for CLOUD Act and transfer diligence.	Not listed
DBaaS subprocessor (Aiven)	Low Managed databases depend on Aiven Oy (Finland) for orchestration while instances run on Exoscale. Confirm contractual chain, access model, and zone placement for sensitive data.	Not listed
Cert evidence mostly in customer portal / NDA	Low ISO/SOC/C5/HDS claims are strong marketing signals, but full certificates and SOC reports typically require Compliance Center access or NDA—not fully public PDFs for all frameworks.	Not listed
Narrower PaaS than hyperscalers	Medium Expect solid IaaS, SKS, DBaaS, storage, and GPU—not the global proprietary service catalog of AWS/Azure/GCP. Validate feature gaps early for serverless, global edge, and specialized managed services.	Not listed
Zone catalog evolves	Low Public materials discuss further European expansion (e.g. Spain via A1 Digital messaging). Treat the live datacenters page as source of truth for residency commitments.	Not listed
Higher per-session server resources	Not listed	Medium Docs state each browser session needs more server CPU/memory than a native web app. Capacity planning and Cluster Engine matter for large concurrent user counts.
Video, 3D, and low-latency limits	Not listed	Medium Official overview: video not supported, limited sound, no 3D hardware acceleration, poor fit for real-time action games due to rendering latency.
Proprietary licensing since 21.1	Not listed	Low Current releases require commercial license + SLA. AGPL/public source stopped after 20.2. Source access for licensed customers is via Client Portal rather than a public repo.
Vendor portal/marketing US-group processors	Not listed	Low Privacy policy lists The Rocket Science Group LLC and major ad/analytics vendors for website/portal data. Irrelevant to on-prem session pixels, but relevant if you put sensitive personal data only into vendor portals.
ISO 27001 not independently verified here	Not listed	Low Vendor claims ISO/IEC 27001-certified ISMS on the site footer. Ask for the current certificate and scope before treating it as verified.

Fit

Exoscale

Best fit when

Teams that must pin VMs, Kubernetes, and object storage to named European zones (including Swiss options)
SaaS and product orgs wanting SKS plus managed PostgreSQL/MySQL/Kafka/OpenSearch without running the control planes
Buyers who need a published DPA, zone list, and multi-framework compliance pack from a non-US legal entity
Workloads that fit IaaS plus managed open-source data services rather than proprietary global PaaS catalogs
Organizations evaluating A1 Digital / A1 Telekom Austria group cloud as a European alternative to AWS/Azure/GCP

Poor fit when

Products that depend on dozens of proprietary hyperscaler services or multi-continent active-active regions
Buyers who require zero US-group SaaS anywhere on the account path (privacy lists AWS archival, Twilio, PayPal for ops)
Teams seeking a fully self-hosted OpenStack/Kubernetes distribution rather than a managed public cloud
Bare-metal-heavy designs better served by large European bare-metal catalogs (e.g. OVHcloud)

Consider instead when

When: You need extensive bare-metal or a different pan-EU hosting footprint
Consider: OVHcloud
Often stronger metal catalog and broader hosting packaging; different sovereignty and product mix.
When: You want a developer-centric alternative with a different regional product mix
Consider: Scaleway
Common EU shortlist peer; compare zones, K8s, and storage packaging side by side.
When: You need global regions and deep proprietary PaaS/AI catalogs
Consider: Amazon Web Services, Microsoft Azure, or Google Cloud Platform
Trade European-operator simplicity for worldwide service breadth and US CLOUD Act parent risk.

Webswing

Best fit when

Enterprises and ISVs with production Swing, JavaFX, SWT, NetBeans, or Oracle Forms applications that must become browser-accessible without a rewrite
Teams that can operate a self-hosted Webswing tier (on-prem, VM, Docker, or Kubernetes) and size CPU/memory per concurrent session
Organisations planning incremental UI modernisation (React/Angular/Vue/APEX) while keeping proven Java screens online
Buyers who want Irish/EU contracting (WEBSWING LIMITED) and customer-controlled residency for application sessions
Public-sector or regulated estates retiring endpoint Java installs or reducing Citrix/VDI dependency for Forms/Swing only

Poor fit when

Greenfield products with no existing Java desktop or Forms UI to preserve
Multimedia, video, 3D-accelerated, or real-time action-game style interfaces (documented limitations)
Teams unwilling to run and scale a server-side session farm for interactive users
Buyers who require OSI-approved open source for the current release line (proprietary since 21.1)

Consider instead when

When: You need generic Windows/Linux desktop remoting rather than Java UI toolkit remoting
Consider: Citrix / enterprise VDI, or Microsoft Azure Virtual Desktop
Webswing FAQ positions itself as a narrower alternative to Citrix for Forms/Java estates.
When: You are rewriting the UI entirely and have no need to keep Swing/Forms screens running
Consider: Native web frameworks (React, Angular, Vue) or Oracle APEX without a Webswing bridge
Webswing's Modernisation Framework is for coexistence during migration, not a mandatory layer for new UIs.
When: You want a hyperscaler-managed browser app streaming control plane
Consider: AWS AppStream / WorkSpaces-class services or Azure cloud desktop offerings
Trade self-hosted EU software control for managed cloud operations.

Open questions for due diligence

Exoscale

Download current ISO/SOC/C5/HDS certificates from the Compliance Center and verify auditor, scope, and expiry for your zones.
Confirm whether your use case can accept AWS/Twilio/PayPal on the account/ops path even if workload data stays on European Exoscale zones.
For DBaaS, document Aiven access boundaries, encryption, backup locations, and multi-zone replication behavior in writing.
If Spanish or other new zones are required, get contractual residency language rather than relying on roadmap announcements.
Clarify support plan SLAs and enterprise contracting terms beyond self-serve pay-as-you-go.

Webswing

Will Webswing provide the current ISO 27001 certificate PDF and statement of applicability scope?
Is a customer DPA available for Client Portal / support data processing, and which subprocessors apply to licensed customers?
Where is portal.webswing.org physically hosted, and are any non-EU regions used for backups?
For your Forms/Swing edge cases (WebUtil, local devices, printers), which patterns are supported without code changes?