← Back to Directory
Logo: UpCloud

UpCloud

Finnish IaaS from UpCloud Oy (Helsinki): MaxIOPS block storage, Cloud Servers, managed Kubernetes and databases across 15 global regions with customer-selected residency.

cloudiaasinfrastructurekubernetesgdprapifinlandmanaged-databases
Visit WebsiteAsk an EU migration specialistFeedback & corrections

UpCloud is a Finnish infrastructure-as-a-service platform operated by UpCloud Oy in Helsinki. Formed in 2011, it sells cloud-native compute, storage, networking, and managed services on hardware it operates inside colocated facilities worldwide.

It exists for teams that want a European IaaS operator with customer-selected residency across published global regions, rather than a US hyperscaler by default. The core product is Cloud Servers with root access, deployable from the control panel, API, CLI, or Terraform-style tools.

The concrete differentiator is MaxIOPS, UpCloud's in-house clustered all-flash block storage, with compute and storage backends separated so a host failure need not take attached disks with it. Commercial model is hourly pay-as-you-go, with outbound transfer marketed under a zero-cost egress policy subject to a Fair Transfer Policy.

Finnish-operated IaaSMaxIOPS block storageCNCF Managed KubernetesISO 27001 (claimed)Selectable EU regionsZero-cost egress policy

Shortlist UpCloud when you want Finnish-contracted IaaS with MaxIOPS storage, CNCF Managed Kubernetes, managed open-source databases, and customer-pinned EU regions—plus optional global PoPs. Skip when you need hyperscaler-only PaaS depth or the absolute lowest bare-metal VPS pricing; consider Hetzner, Scaleway, or AWS/Azure/GCP depending on that gap.

Key capabilities

In-house all-flash block tier rated up to ~100,000 read IOPS at 4K, separate from compute hosts, with Standard and Archive tiers for capacity. Attach up to 16 devices per server (up to 64 TB total); encryption at rest optional. Suits databases and I/O-heavy apps that outgrow commodity cloud disks.

Linux/Windows VMs with Starter, Premium, and Cloud Native plan families, hot resize options, firewall, utility and SDN private networking. Full lifecycle via control panel, REST API, CLI, Terraform/OpenTofu, Pulumi, and Crossplane—for teams automating fleets rather than clicking one-off VPS.

Managed control planes with CNCF-certified Kubernetes versions, autoscaler integration, CSI block volumes, load-balancer integration, and private-only clusters. Worker nodes use ordinary Cloud Server plans including Private Cloud hosts—good fit when you want K8s without running etcd yourself.

Turnkey databases with automated backups, multi-node HA options, private utility/SDN connectivity, and point-in-time recovery on relational plans. Reduces ops load for product teams that still want open engines rather than proprietary hyperscaler databases.

Fifteen data centers across twelve countries: dense Northern/Central Europe (Helsinki x2, Stockholm, Stavanger, Copenhagen, Amsterdam, Frankfurt, Madrid, Warsaw, London) plus US, Singapore, and Sydney. Customer Data stays in the chosen zone unless you request a move—use EU zones for residency programmes.

Public pricing emphasises no per-GB internet egress charges under a Fair Transfer Policy, plus Premium-class 99.999% SLA with service credits for unscheduled downtime. Simplifies bills for chatty APIs and multi-service architectures compared with classic egress meters—confirm fair-use limits for extreme transfer cases.

At a glance

HQ
Helsinki, Finland
Legal entity
UpCloud Oy (2431560-5)
Founded
2011
Regions
15 DCs / 12 countries (EU-heavy + US/APAC)
Open source
No (platform proprietary)
Self-hosted
No (public/private cloud IaaS)
Commercial model
Hourly pay-as-you-go; trial credits; zero-cost egress policy

Best fit when

  • EU product teams needing IaaS with Finnish legal entity and pin-to-zone residency
  • Workloads sensitive to block I/O that benefit from MaxIOPS-class SSDs
  • Cloud-native stacks on managed Kubernetes plus managed PostgreSQL/MySQL/Valkey
  • Multi-service apps where predictable outbound transfer packaging matters
  • Agencies and SaaS operators standardising on API/Terraform automation

Poor fit when

  • Organisations that require a full hyperscaler catalogue (proprietary AI/PaaS breadth)
  • Buyers optimising solely for the lowest-cost bare metal or unlimited-traffic VPS
  • Programmes that forbid any non-EU group support access to account metadata without extra controls
  • Teams that will deploy only to US regions yet still market the stack as EU-sovereign

Consider instead when

  • When: You need cheaper raw compute or dedicated servers more than managed K8s packaging

    Consider: Hetzner

    Often stronger on price for VPS/dedicated; compare managed service depth separately.

  • When: You want a broader French/EU public-cloud portfolio or different regional SKUs

    Consider: OVHcloud or Scaleway

    Different product breadth and commercial culture; still European-operated peers.

  • When: You need hyperscaler-managed platforms, global enterprise contracts, or deep marketplace ecosystems

    Consider: AWS, Google Cloud, or Microsoft Azure

    Trade European HQ simplicity for catalogue depth and global account teams.

  • When: You want a compact European cloud with Swiss roots and a tighter region set

    Consider: Exoscale

    Compare region map and managed feature parity to UpCloud’s 15-DC footprint.

Jurisdiction & ownership

Legal entity
UpCloud Oy (Business ID 2431560-5), Aleksanterinkatu 15 B, 00100 Helsinki
Governing law
Finland (Terms of Service; arbitration Helsinki)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Customer-selected regions across 15 DCs (EU majority: FI, SE, NO, DK, DE, NL, ES, PL, UK; plus US-CHI/NYC/SJO, SG, AU) in colocations (Equinix, Digital Realty, CoreSite, Telia, Verne, Green Mountain, etc.). Customer Data stays in chosen DC. Vendor: EU VMs have no customer-data subprocessors; group subsidiaries only otherwise. Account data in Finland with global support access (incl. US/SG). Payments/hCaptcha are separate third parties.

No known US parent. Optional US regions and non-EEA support access keep CLOUD Act exposure indicative medium even for a Finnish operator. Pin EU zones and review DPA Appendix 1 for procurement. Not legal advice.

  • Independent security audit (PiTuKri / ISMS)Vendor claimed
  • ISO 27001Vendor claimed
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +4

Considerations & known limitations

  • MediumOptional non-EU regions and support access

    US, Singapore, and Sydney zones are first-class options. Mis-pinned workloads or defaults can place Customer Data outside the EU. Account information is accessible to non-EEA support staff even when VMs stay in Europe.

  • LowNarrower catalogue than hyperscalers

    Strong IaaS and focused managed services; missing many proprietary AWS/Azure/GCP PaaS and AI products. Multi-cloud or dual-vendor designs may still be required.

  • MediumLimited public SOC 2 for UpCloud entity

    ISO 27001 and PiTuKri claims are published; a customer-facing SOC 2 Type II for UpCloud itself was not found. Enterprise questionnaires may need NDA artefacts or reliance on ISO plus facility reports.

  • LowColocation facility dependency

    Platform runs in third-party data centres. Facility certifications differ by site; treat them as complementary to UpCloud’s own ISMS, not a substitute for vendor due diligence.

  • LowFair Transfer Policy on zero egress

    Zero-cost egress is a commercial differentiator but is governed by a Fair Transfer Policy—extreme or abusive transfer patterns may fall outside the marketing promise. Validate for CDN-scale or bulk egress designs.

Open questions for due diligence

  • Obtain current ISO 27001 certificate scope/dates and any PiTuKri or other audit reports under NDA if required.
  • Confirm DPA Appendix 1 legal names and countries of all group-company subprocessors for your service mix.
  • Document which regions and backup/object-storage endpoints will be allow-listed for EU-only programmes.
  • Ask whether a SOC 2 or equivalent report for UpCloud Oy is available for enterprise review.
  • Validate Fair Transfer Policy thresholds for your expected egress profile.
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Visit WebsiteCompare similar toolsView alternativesFeedback & corrections

Frequently Asked Questions

Yes, by deploying only to EU/EEA (and, if acceptable, UK) zones such as Helsinki, Stockholm, Amsterdam, Frankfurt, Madrid, Warsaw, Copenhagen, or Stavanger. UpCloud states Customer Data remains in the selected data centre and is not moved without your request; for EU virtual servers it states no subprocessors are used for delivery. Account metadata still lives in Finland with global support access—separate from VM disks.

UpCloud Oy is a Finnish company with no known US parent, which is favourable on ownership. The platform still offers US regions and non-EEA support affiliates, so exposure is not automatically zero. Treat EU-only deployments as lower risk than US-region workloads; document region pins, DPA Appendix 1 group companies, and support access paths. This is indicative diligence, not legal advice.

MaxIOPS is UpCloud’s proprietary clustered SSD block storage, marketed at up to ~100k read / ~30k write IOPS at 4K regardless of volume size, versus Standard (~10k) and Archive (~600) tiers. Choose MaxIOPS for databases, queues, and latency-sensitive disks; use Standard/Archive for general or cold data. Not every plan includes MaxIOPS by default—Premium paths pair with it; Cloud Native lets you pick the tier.

UKS provides a managed control plane (HA production vs free single-node development options on the product page), CNCF conformance, automatic upgrades messaging, and CSI/LB integrations. You still size and pay for worker nodes and own application security. Prefer self-managed clusters only if you need exotic control-plane customisation UpCloud does not expose.

Yes. The Data Processing Agreement is incorporated into the Terms of Service and becomes binding when you accept those terms; UpCloud markets it as not requiring a separate signature for standard use. Review Appendix 1 subprocessors, audit rights, and international transfer clauses for your procurement process.

Hourly consumption with a monthly hour cap described on plan pages, prepaid credits and/or post-pay invoicing, and marketing of zero-cost egress under a Fair Transfer Policy. Free trials with promotional credits appear periodically. Do not treat homepage trial credit amounts as permanent list prices—verify current pricing and fair-use rules on upcloud.com before budgeting.