OVHcloud vs Webswing

Compare OVHcloud and Webswing on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Amazon Web Services (AWS), Microsoft Azure

OVHcloud

France· Cloud Computing

Needs review

Shortlist OVHcloud when you need a European-owned IaaS/bare-metal stack with SecNumCloud/HDS options and multi-continent regions you control per project. Skip when you need hyperscaler platform depth, or when even optional US subsidiaries/regions are a procurement red line—consider Scaleway for leaner French cloud or Hetzner for simpler dedicated/VPS estates.

EU-operated (global regions)Bare Metal + Public CloudOpenStack Public CloudSecNumCloud Private CloudAnti-DDoS includedEU / US / CA / APAC

View listing Visit Website

Webswing

Ireland· Cloud Computing

Needs review

Shortlist when you must browser-enable an existing Java Swing/JavaFX/SWT/NetBeans or Oracle Forms estate without a rewrite and can run a self-hosted session tier. Skip when you are building a greenfield web UI only, or when the app depends on video, 3D acceleration, or ultra-low-latency graphics. Consider Citrix/VDI or a hyperscaler cloud desktop when you need generic desktop remoting beyond Java UI toolkits.

EU-operatedSelf-hostedISO 27001 (claimed)No-rewrite Java UIOracle Forms capable

View listing Visit Website

Highlighted rows differ between the two products.

OVHcloud vs Webswing: Snapshot
Feature	OVHcloud	Webswing
Country of origin	France	Ireland
Category	Cloud Computing	Cloud Computing
Open source	No	No
Self-hosted	No	Yes
Headquarters	France	Ireland
Legal entity	OVH SAS / OVH Groupe (Roubaix); regional entities include OVH US LLC for US services	WEBSWING LIMITED (Webswing Ltd.), 93 Upper George's Street, Dun Laoghaire, A96 V1K8 Dublin, Ireland
Governing law	French/EU law for EU contracts; US terms apply for OVH US LLC-contracted services	Ireland
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Low
EU-hosted status	Not listed	Unknown
Hosting / residency	Own global infrastructure: EU regions (FR including Paris 3-AZ, DE Limburg, PL Warsaw, UK Erith, IT Milan 3-AZ, many Local Zones); US (Vint Hill VA, Hillsboro OR); Canada (Beauharnois, Toronto); APAC (Singapore, Sydney, Mumbai). Primary hosting is OVH-operated, not AWS/GCP resale. Optional non-EU regions are first-class products.	Product runtime is customer-operated (on-prem, customer cloud, Docker, or Kubernetes). Vendor Client Portal and marketing site use listed processors including Google Ireland, Meta Ireland, LinkedIn Ireland, and The Rocket Science Group LLC (US) for email marketing; those apply to vendor website/portal data, not to self-hosted application sessions.
Summary	French cloud and infrastructure group (Roubaix): Bare Metal dedicated servers, OpenStack Public Cloud, Hosted Private Cloud (incl. SecNumCloud), and Web Cloud on OVH-operated datacentres across Europe, North America, and Asia-Pacific.	Self-hosted platform that runs Java Swing, JavaFX, SWT, NetBeans, and Oracle Forms apps in the browser without rewriting them.
Tags	cloud infrastructure bare-metal openstack gdpr secnumcloud european-cloud api	self-hosted java desktop-to-web oracle-forms application-modernization on-premise html5 ireland

At a glance: OVHcloud vs Webswing
At a glance	OVHcloud	Webswing
HQ	Roubaix, France (OVH SAS / OVH Groupe)	Dublin, Ireland
Founded	1999 (Octave Klaba)	2015 (Dublin); product lineage from ~2012
Hosting model	Own datacentres and network; multi-region IaaS/bare metal	Not listed
Open source product?	No (OpenStack-based public cloud uses open APIs)	Not listed
Commercial model	Hourly/monthly public cloud; dedicated server subscriptions; free public cloud trial credits (vendor)	Not listed
Notable certs (claimed)	ISO 27001 family, SOC 1/2/3, HDS, SecNumCloud (Private Cloud), PCI DSS	Not listed
Legal entity	Not listed	WEBSWING LIMITED (CRO 564226)
License model	Not listed	Commercial + SLA (evaluation available); AGPL only ≤20.2
Deployment	Not listed	Self-hosted (ZIP, Docker, Kubernetes, cluster)
UI frameworks	Not listed	Swing, JavaFX, SWT, NetBeans, Applets, Oracle Forms

Key capabilities: OVHcloud vs Webswing
Key capabilities	OVHcloud	Webswing
EU-operated (global regions)	Yes	Yes
Bare Metal + Public Cloud	Yes	Not listed
OpenStack Public Cloud	Yes	Not listed
SecNumCloud Private Cloud	Yes	Not listed
Anti-DDoS included	Yes	Not listed
EU / US / CA / APAC	Yes	Not listed
Self-hosted	Not listed	Yes
ISO 27001 (claimed)	Not listed	Yes
No-rewrite Java UI	Not listed	Yes
Oracle Forms capable	Not listed	Yes

OVHcloud

Bare Metal dedicated servers (in-house hardware)
Physical servers assembled and operated by OVHcloud across ranges such as Advance, Scale, High Grade, and Game—full CPU/RAM/storage without a hypervisor layer. Water cooling and hardware lifecycle are part of the industrial model. Best for performance-sensitive, virtualisation, gaming, or large single-tenant workloads where you administer the OS.
OpenStack Public Cloud and managed PaaS
On-demand compute, multi-class object storage (S3-compatible API), block/file storage, managed databases, Kubernetes/container services, networking, and data/AI platforms. Deploy via Control Panel or OpenStack APIs with 1-AZ or 3-AZ region options (for example Paris and Milan). Suited to cloud-native and hybrid automation without US hyperscaler lock-in.
Hosted Private Cloud with SecNumCloud path
VMware-based Hosted Private Cloud (and related stacks) for dedicated virtualisation estates. Selected Private Cloud offerings hold French ANSSI SecNumCloud qualification, with customer data under European regulation and hosting in French sites (Roubaix, Gravelines, Strasbourg)—relevant for French public sector and sensitive workloads under Cloud at the Center doctrine.
Global multi-region footprint (EU, US, CA, APAC)
Own datacentres and regions spanning Europe (France, Germany, Poland, UK, Italy, many Local Zones), North America (Vint Hill VA, Hillsboro OR, Beauharnois and Toronto in Canada), and Asia-Pacific (Singapore, Sydney, Mumbai and related offerings). Choose residency for latency and law; do not assume EU-only by default.
Anti-DDoS and vRack private networking included
Network-integrated anti-DDoS mitigation is standard across services. vRack provides private L2 networking across eligible OVHcloud locations so bare metal, public, and private cloud can interconnect without public exposure. Public bandwidth is typically unmetered in Europe and North America with fair-use rules; Asia-Pacific often uses lower default bandwidth and monthly traffic caps—verify per SKU.

Webswing

Browser delivery without rewriting Java UI
Runs Swing, JavaFX, SWT, NetBeans Platform, Applets, and Oracle Forms in HTML5 browsers over WebSockets with no required source changes. End users need a browser only, not a local JRE or plugin.
Customer-controlled self-hosted runtime
Install from a distribution ZIP or containers on your own servers, VMs, Docker, or Kubernetes. Standalone and Cluster Engine modes cover single-node pilots through multi-node scale-out with admin monitoring.
Incremental modernisation beside legacy screens
Modernisation Framework and JsLink let React, Angular, Vue, Vaadin, or APEX components coexist with Java UI so teams can rewrite modules over time instead of a big-bang cutover.
Enterprise auth and session operations
Pluggable security modules include SAML2, OpenID Connect, Keycloak, LDAP, and custom providers. Admin Console adds session mirror view, recording/playback, logs, and multi-tenant path isolation.
Built-in printing, files, and clipboard bridges
Browser-side printing with preview, isolated upload/download folders, and clipboard integration cover common desktop workflows that break in naive remote-app setups.

Assurance & compliance: OVHcloud vs Webswing
Assurance & compliance	OVHcloud	Webswing
Independent security / no-logs audit	Not applicable IaaS/hosting provider, not a no-logs VPN product. Security is covered via ISO/SOC programme rather than a public no-logs audit.	On request / NDA Footer states regular security testing is available upon request; no public independent audit PDF found.
ISO 27001	Vendor claimed Vendor compliance pages assert ISO/IEC 27001 (with 27017/27018) for cloud services and datacentres; US pages reference Schellman certificate directory. Confirm current scope per product and region.	Vendor claimed Site footer: Webswing Limited maintains an ISO/IEC 27001-certified ISMS. Independent cert registry entry not verified in this pass.
SOC 2 / SOC 3	Vendor claimed Vendor asserts SSAE 18 Type 2 SOC 1, SOC 2 (+NIST), and SOC 3 attestations; reports available to prospective customers under vendor process.	Not found No SOC 2/3 claim found on public site pages reviewed.
GDPR / EU data protection	Vendor claimed EU headquartered; GDPR compliance asserted; DPA documents published for relevant subsidiaries. Residency depends on chosen region.	Vendor claimed Privacy policy names WEBSWING LIMITED as Irish controller under GDPR; FAQ states GDPR alignment for company contact data.
US CLOUD Act exposure (indicative)	Partial French group with no known US parent, but operates US datacentres (Vint Hill, Hillsboro) and OVH US LLC. Medium indicative exposure: EU-region workloads on EU contracts differ from US-region workloads. Not legal advice.	Partial EU entity with no known US parent; self-hosted runtime keeps sessions on customer infra. Vendor website/portal lists US-group processor The Rocket Science Group LLC (email) plus Google/Meta/LinkedIn Ireland entities for analytics/ads. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Published DPAs form part of terms (e.g. OVH SAS Europe paths; separate US DPA for OVH US LLC). Obtain the DPA matching your contracting entity.	Not found Privacy policy references Art. 28 DPAs with Webswing's own processors; no public customer-facing DPA download found. Request during procurement.
EU AI Act	Not applicable Core product is IaaS/bare metal/hosting; AI/ML platforms are optional infrastructure offerings, not a single AI system product under typical procurement framing.	Not applicable Core product is application delivery/runtime, not an AI system. Prague research affiliate explores AI; not the catalogued product.
ANSSI SecNumCloud	Vendor claimed Hosted Private Cloud (VMware on OVHcloud and related) holds SecNumCloud qualification; hosted in French sites (Roubaix, Gravelines, Strasbourg). Not all products are SecNumCloud-qualified.	Not listed
HDS (French health data hosting)	Vendor claimed Vendor lists HDS certification for healthcare data hosting options; confirm which products and locations are in scope.	Not listed
PCI DSS	Vendor claimed Vendor asserts PCI DSS Level 1 certification for payment data hosting—confirm applicability to your architecture.	Not listed

Considerations & known limitations: OVHcloud vs Webswing
Considerations & known limitations	OVHcloud	Webswing
US regions and US subsidiary	Medium US East/West datacentres and OVH US LLC mean CLOUD Act and US process risk apply to US-placed data and some contracts. EU-only deployment reduces this but buyers must enforce region and contracting path.	Not listed
2021 Strasbourg datacentre fire (resilience history)	Medium A major fire at SBG caused widespread customer outages. Treat multi-AZ/multi-region backup design as mandatory for critical data; do not rely on single-site assumptions.	Not listed
Certification scope is product- and region-specific	Medium ISO, SOC, HDS, SecNumCloud, and PCI claims do not automatically cover every SKU and location. Procurement should request the exact report for the services ordered.	Not listed
APAC bandwidth and traffic rules differ	Low Vendor documents unmetered traffic exceptions for Asia-Pacific (lower default bandwidth and monthly volume caps vs Europe/North America). Model egress and bandwidth options for APAC workloads.	Not listed
Broad catalogue complexity	Low Bare Metal, Public Cloud, Private Cloud, and Web Cloud under one brand can confuse account structure, IAM, and billing. Define landing-zone standards early.	Not listed
Higher per-session server resources	Not listed	Medium Docs state each browser session needs more server CPU/memory than a native web app. Capacity planning and Cluster Engine matter for large concurrent user counts.
Video, 3D, and low-latency limits	Not listed	Medium Official overview: video not supported, limited sound, no 3D hardware acceleration, poor fit for real-time action games due to rendering latency.
Proprietary licensing since 21.1	Not listed	Low Current releases require commercial license + SLA. AGPL/public source stopped after 20.2. Source access for licensed customers is via Client Portal rather than a public repo.
Vendor portal/marketing US-group processors	Not listed	Low Privacy policy lists The Rocket Science Group LLC and major ad/analytics vendors for website/portal data. Irrelevant to on-prem session pixels, but relevant if you put sensitive personal data only into vendor portals.
ISO 27001 not independently verified here	Not listed	Low Vendor claims ISO/IEC 27001-certified ISMS on the site footer. Ask for the current certificate and scope before treating it as verified.

Fit

OVHcloud

Best fit when

Teams wanting European ownership with optional global regions (EU, US, Canada, APAC) under one operator
Workloads that need exclusive Bare Metal performance or hybrid bare metal + OpenStack/vRack designs
French public sector or sensitive estates needing ANSSI SecNumCloud-qualified Hosted Private Cloud paths
Organisations standardising on OpenStack APIs and S3-compatible object storage for reversibility
Sites that benefit from network-integrated anti-DDoS and private multi-site networking as defaults

Poor fit when

Buyers who require the deepest managed AI/marketplace/IAM ecosystems of AWS, Azure, or GCP
Policies that forbid any provider with US legal entities or US datacentre options regardless of region selection
Teams seeking the simplest low-SKU VPS experience—Hetzner or similar may fit better
Anyone assuming EU-only residency without selecting and enforcing EU regions in architecture

Consider instead when

When: You want a leaner French public cloud with a strong developer product surface and less enterprise sovereign packaging
Consider: Scaleway
Often simpler for cloud-native teams; confirm region and compliance fit.
When: You primarily need price-performance VPS or dedicated servers with a smaller catalogue
Consider: Hetzner
Strong for lean estates; different sovereign/cert posture and global region set.
When: You need maximum managed-service breadth, global account tooling, and partner marketplace density
Consider: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform
Hyperscalers win platform depth; accept US ownership and CLOUD Act parent exposure.
When: You want German SMB hosting plus cloud IaaS with EU and some non-EU options
Consider: IONOS
Different product mix and compliance packaging than OVHcloud's bare-metal industrial model.

Webswing

Best fit when

Enterprises and ISVs with production Swing, JavaFX, SWT, NetBeans, or Oracle Forms applications that must become browser-accessible without a rewrite
Teams that can operate a self-hosted Webswing tier (on-prem, VM, Docker, or Kubernetes) and size CPU/memory per concurrent session
Organisations planning incremental UI modernisation (React/Angular/Vue/APEX) while keeping proven Java screens online
Buyers who want Irish/EU contracting (WEBSWING LIMITED) and customer-controlled residency for application sessions
Public-sector or regulated estates retiring endpoint Java installs or reducing Citrix/VDI dependency for Forms/Swing only

Poor fit when

Greenfield products with no existing Java desktop or Forms UI to preserve
Multimedia, video, 3D-accelerated, or real-time action-game style interfaces (documented limitations)
Teams unwilling to run and scale a server-side session farm for interactive users
Buyers who require OSI-approved open source for the current release line (proprietary since 21.1)

Consider instead when

When: You need generic Windows/Linux desktop remoting rather than Java UI toolkit remoting
Consider: Citrix / enterprise VDI, or Microsoft Azure Virtual Desktop
Webswing FAQ positions itself as a narrower alternative to Citrix for Forms/Java estates.
When: You are rewriting the UI entirely and have no need to keep Swing/Forms screens running
Consider: Native web frameworks (React, Angular, Vue) or Oracle APEX without a Webswing bridge
Webswing's Modernisation Framework is for coexistence during migration, not a mandatory layer for new UIs.
When: You want a hyperscaler-managed browser app streaming control plane
Consider: AWS AppStream / WorkSpaces-class services or Azure cloud desktop offerings
Trade self-hosted EU software control for managed cloud operations.

Open questions for due diligence

OVHcloud

Which contracting entity and DPA (EU OVH SAS path vs OVH US LLC) will apply to our account?
Which exact products/regions are in scope for the ISO/SOC/HDS/SecNumCloud certificates we need?
What is our multi-region DR design given historical single-site fire risk?
Are any non-OVH subprocessors used for our specific managed services (support, monitoring, payments) beyond OVH-operated infrastructure?
Do APAC or Local Zone bandwidth/SLA terms meet our traffic profile?

Webswing

Will Webswing provide the current ISO 27001 certificate PDF and statement of applicability scope?
Is a customer DPA available for Client Portal / support data processing, and which subprocessors apply to licensed customers?
Where is portal.webswing.org physically hosted, and are any non-EU regions used for backups?
For your Forms/Swing edge cases (WebUtil, local devices, printers), which patterns are supported without code changes?