Skip to main content
Apple logo

Apple

Verified

“US-incorporated, US-controlled, US-data machine β€” EU only reaches it via fines.”

Operating HQ
πŸ‡ΊπŸ‡Έ Cupertino, California
where it's run
Legal domicile
πŸ‡ΊπŸ‡Έ California, USA
where it's incorporated
Listing
NASDAQ: AAPL
Revenue (FY2024)
$391.0B
Employees
~164,000
EU enforcement
€2.3B+ fined
16/100
Sovereign: Not
Control ↑
15
Data β†’
16

16 = midpoint of Control 15 & Data 16

ConfidenceHigh (88%)

Sovereignty Quadrant

Control ↑ who owns & governs the company  Β·  Data β†’ where your data lives. Every dot is a company β€” click to open it.

Where your data lives β†’ Who controls the company β†’ 8 companies Β· fully non-EU (0/0) Google β€” Data 16, Control 14 TikTok β€” Data 32, Control 24 Youtube β€” Data 14, Control 16 Ionos β€” Data 90, Control 90 Disneyplus β€” Data 16, Control 12 Telegram β€” Data 34, Control 14 Carrefour β€” Data 100, Control 32 Corriere β€” Data 100, Control 100 Microsoft β€” Data 26, Control 14 X β€” Data 14, Control 16 Amazon β€” Data 14, Control 10 Amazon β€” Data 66, Control 0 Bild β€” Data 100, Control 100 Reddit β€” Data 14, Control 10 Netflix β€” Data 24, Control 20 LinkedIn β€” Data 14, Control 16 Reuters β€” Data 26, Control 0 Pinterest β€” Data 12, Control 12 Discord β€” Data 16, Control 20 AliExpress β€” Data 18, Control 12 Twitch β€” Data 18, Control 16 Samsung β€” Data 62, Control 4 Canva β€” Data 24, Control 20 Spotify β€” Data 30, Control 68 GitHub β€” Data 16, Control 10 Uber β€” Data 16, Control 16 Salesforce β€” Data 20, Control 14 Deepl β€” Data 70, Control 78 Airbnb β€” Data 18, Control 18 Notion β€” Data 22, Control 16 Shopify β€” Data 18, Control 18 Mastercard β€” Data 36, Control 16 Dropbox β€” Data 14, Control 10 HubSpot β€” Data 24, Control 10 Stripe β€” Data 30, Control 30 Zalando β€” Data 52, Control 88 Figma β€” Data 18, Control 10 SAP SE β€” Data 68, Control 78 Atlassian β€” Data 18, Control 18 Proton β€” Data 72, Control 54 Miro β€” Data 100, Control 44 Klarna β€” Data 44, Control 42 Ecosia β€” Data 60, Control 92 Zoom β€” Data 20, Control 14 Adyen β€” Data 84, Control 84 GitLab β€” Data 26, Control 14 Slack β€” Data 14, Control 20 Hetzner β€” Data 84, Control 96 Deezer β€” Data 62, Control 66 Typeform β€” Data 100, Control 52 OVHcloud β€” Data 82, Control 94 Tutanota β€” Data 100, Control 100 BlaBlaCar β€” Data 54, Control 76 Qwant β€” Data 56, Control 88 Bitwarden β€” Data 28, Control 20 Contentful β€” Data 34, Control 48 Personio β€” Data 34, Control 58 Ikea β€” Data 34, Control 100 Meta Platforms β€” Data 18, Control 10 Whatsapp β€” Data 14, Control 12 Instagram β€” Data 28, Control 22 Avast β€” Data 60, Control 0 Paypal β€” Data 24, Control 32 Kaspersky β€” Data 56, Control 0 Nextcloud β€” Data 88, Control 94 16 15 Apple
Apple β€” verified peers β€” automated estimate (0–50 pillars, normalized)

Every number below traces to 14 sourced facts across 9 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% β€” they lower confidence, never the score.

Control ↑

Who legally and economically controls the company

15/100
7 facts Β· 4 sources Β· mixed confidence
Legal & Jurisdiction
22

Incorporated in California and run from Cupertino; the EU operating/contracting entity (Apple Distribution International, Cork) is a wholly-owned subsidiary of a US parent. EU law reaches it via fines but control is fully foreign.

Why 22? 4 sourced facts · click to expand
California incorporated

Apple Inc. is incorporated in California with principal executive offices at One Apple Park Way, Cupertino.

Apple Inc. FY2024 Form 10-K (cover) Β· as of 2024-09-28

EU entity: Cork, Ireland

Apple Distribution International Ltd (Hollyhill, Cork, Ireland) is the EU operating entity, with Ireland's Data Protection Commission as lead GDPR supervisory authority.

Irish Data Protection Commission decision Β· as of 2024-03

€1.8B EU fine (2024)

The European Commission fined Apple €1.8 billion under competition law (anti-steering, music streaming) in March 2024, demonstrating EU enforceability.

European Commission / digital-strategy.ec.europa.eu Β· as of 2024-03-04

€500M DMA fine (2025)

Apple was designated a DMA gatekeeper and fined €500 million for breaching its anti-steering obligation in April 2025.

European Commission / digital-strategy.ec.europa.eu Β· as of 2025-04

Control & Ownership
8

NASDAQ-listed under AAPL; ~15.1B shares held overwhelmingly by US institutional investors (Vanguard, BlackRock, State Street). No EU voting or economic majority of any kind.

Why 8? 3 sourced facts · click to expand
NASDAQ: AAPL, ~15.1B shares

Apple common stock trades on the Nasdaq Stock Market under the symbol AAPL; ~15.12 billion shares were outstanding as of October 18, 2024.

Apple Inc. FY2024 Form 10-K (cover) Β· as of 2024-10-18

US funds hold voting control

The largest holders are US asset managers: Vanguard (~8.9%), BlackRock (~7.7%) and State Street, with institutions owning roughly 60%+ of shares.

FOREX.com β€” Apple's Largest Shareholders Β· as of 2024

No EU controlling owner

Insiders (incl. Tim Cook) collectively hold roughly 2% of shares; no EU-domiciled controlling or anchor shareholder exists.

FOREX.com β€” Apple's Largest Shareholders Β· as of 2024

Data β†’

Where your data lives and who can reach it

16/100
7 facts Β· 6 sources Β· mixed confidence
Data & Infrastructure
12

iCloud data sits in Apple's own data centers plus US-jurisdiction third-party clouds, all under a US parent and thus exposed to the CLOUD Act. No EU-sovereign infrastructure; default encryption leaves Apple holding keys.

Why 12? 4 sourced facts · click to expand
Apple + third-party clouds

Apple states iCloud data may be stored in Apple and third-party data centers; encryption keys are held in Apple data centers and accessed only by Apple software.

Apple Support β€” iCloud data security overview Β· as of 2024

Historically AWS S3 + Google Cloud

Apple's own iOS Security Guide previously disclosed iCloud file content is stored on third-party clouds including Amazon S3 and Google Cloud, with Apple holding the keys.

Macworld β€” Where Apple stores your iCloud data Β· as of 2018-01

CLOUD Act exposure

As a US-based provider Apple is subject to the US CLOUD Act, which can compel data regardless of where it is physically stored, including EU regions.

Wire β€” What the CLOUD Act Means for EU Data Sovereignty Β· as of 2024

E2EE optional, not default

Advanced Data Protection adds end-to-end encryption for most iCloud categories but is opt-in (off by default) and excludes Mail, Contacts and Calendar.

Apple Support β€” Advanced Data Protection for iCloud Β· as of 2024

Operations & People
22

HQ, executive team and reporting currency (USD) are US-centered; ~164,000 employees globally with a large EU retail/Ireland presence, but leadership and governance sit in Cupertino.

Why 22? 3 sourced facts · click to expand
~164,000 employees

Apple had approximately 164,000 full-time equivalent employees worldwide as of September 28, 2024.

Apple Inc. FY2024 Form 10-K (Human Capital) Β· as of 2024-09-28

$391B revenue, USD

Apple reported total net sales of $391.0 billion for fiscal 2024 ($294.9B products, $96.2B services), reported in US dollars.

Apple Inc. FY2024 Q4 Form 8-K Β· as of 2024-09-28

Global sales, US-run

Apple states a majority of net sales come from outside the US and a majority of supplier facilities are located outside the US, yet HQ and leadership remain in Cupertino.

Apple Inc. FY2024 Form 10-K (Risk Factors) Β· as of 2024-09-28

Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β†’

What we don’t know 3 open questions β€” they lower confidence, never the score
  • ?

    Exactly which third-party cloud providers and physical regions host EU users' iCloud data today (Apple no longer names AWS/Google Cloud publicly).

    Limits precision on where EU data physically resides and under whose jurisdiction; infra score reflects the structural US-parent exposure regardless.

  • ?

    What share of EU users actually enable Advanced Data Protection (default is off).

    Determines how much real-world iCloud data is beyond Apple's (and a CLOUD Act request's) reach versus Apple-key-held.

  • ?

    Precise EU-resident headcount and the legal structure of Apple's Irish/EU subsidiaries' data-controller relationships.

    Would refine operations and legal scores but does not change US ultimate control.

EU Cloud Sovereignty Framework lens

The EU Cloud Sovereignty Framework formally targets cloud service providers, not device makers; the rows below are an analogous sovereignty mapping for Apple's iCloud/device stack, not a certification or an official SEAL assessment.

Strategic

US-headquartered, US-controlled global vendor; EU is a market and regulatory jurisdiction, not a locus of strategic control.

weak

Legal & jurisdictional

California-incorporated under a US parent; EU reaches it via fines (DMA, state aid) but cannot claim jurisdictional ownership of the entity.

weak

Data & AI

iCloud governed by a US provider subject to the CLOUD Act; strong on-device privacy and optional E2EE, but default keys held by Apple and no EU-sovereign data plane.

weak

Operational

Leadership, decision-making and USD reporting are US-centered despite a large EU retail and Irish operational footprint.

weak

Supply chain

Apple's own 10-K notes a majority of supplier facilities are outside the US, concentrated in Asia; minimal EU manufacturing.

weak

Technological

Vertically integrated proprietary stack (silicon, OS, services) designed and owned in the US; no EU technological autonomy or open substitutability.

weak

Security & compliance

Strong security engineering, GDPR compliance via the Irish entity and DPC oversight, transparency reporting β€” but compliance under foreign control.

moderate

Environmental sustainability

Public carbon-neutral and recycled-materials commitments and renewable-energy data centers, though claims are self-reported.

moderate
EU alternatives
πŸ‡³πŸ‡± Fairphone fairphone.com with caveats

EU-incorporated, repairable, long-support smartphone maker β€” a genuine EU device alternative, but tiny scale and runs Android (Google) or /e/OS rather than a fully EU stack.

πŸ‡«πŸ‡· Murena (/e/OS) murena.com with caveats

French de-Googled OS plus Murena cloud β€” an EU-controlled iCloud/iOS-services alternative, but small and built atop AOSP/third-party hosting.

πŸ‡©πŸ‡ͺ Nextcloud nextcloud.com EU-controlled

German, open-source, self-hostable file sync/collaboration β€” a strong EU-sovereign alternative to iCloud storage when self-hosted or run on EU providers.

How the method works

Methodology v2 (provisional): the score is the midpoint of two axes β€” Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.

Spotted an error? Every claim is sourced β€” challenge it and we correct the record.
  • 2026-06-12 β€” Initial golden profile, authored from primary sources (human + AI review).

Report Incorrect Data

Found an error in this company's profile? Help us improve our data by submitting a correction.

Required so we can follow up if needed. We won't share your email.

Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology