BlaBlaCar
Verified“French-controlled company, US-cloud-dependent machine.”
- Members
- 100M+
- Revenue
- €253M
- Largest shareholder
- VNV Global ~13.9%
- Founded
- 2006
65 = midpoint of Control 76 & Data 53
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 13 sourced facts across 6 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 72% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
90
Incorporated in France as Comuto SA (2006), registered and headquartered in Paris, with the French parent named as the data controller. The main operating entity sits in the EU and EU law (GDPR, consumer/platform law) directly reaches it. As close to a pure EU legal posture as exists for a venture-backed unicorn.
Why 90? 3 sourced facts · click to expand
Legal entity and incorporation country
Wikipedia (BlaBlaCar) / company registry · as of 2026-06-12
Registered office / data controller address
BlaBlaCar Privacy & Data Protection Policy · as of 2026-06-12
Primary data controller is the French parent
BlaBlaCar Privacy & Data Protection Policy · as of 2026-06-12
Control & Ownership
62
EU-anchored but genuinely mixed. French founders and French state rail SNCF (minority, since 2018) sit in the cap table, and the single largest disclosed shareholder is EU-listed VNV Global (Stockholm, ~13.9%). But a deep bench of non-EU VCs (US Insight Venture Partners, Lead Edge; historic Accel/Index) holds substantial economics, and BlaBlaCar is private with no EU listing. Voting control reads European; economic majority is plausibly European but not cleanly verifiable.
Why 62? 4 sourced facts · click to expand
Largest single disclosed shareholder
VNV Global Annual Report 2024 · as of 2024-09-30
French state rail holds a minority stake
Railway Gazette / Private Equity Wire · as of 2018-11-13
Total raised and last round; private, not listed
TechCrunch · as of 2024-04-02
Non-EU venture investors in cap table
Wikipedia (BlaBlaCar) funding history · as of 2026-06-12
Data →
Where your data lives and who can reach it
Data & Infrastructure
30
BlaBlaCar's platform runs on Google Cloud Platform, a US-owned hyperscaler. The privacy policy states personal data is stored 'as a general rule' within the EU, which likely means EU GCP regions plus standard contractual clauses for third-country transfers. That is EU data residency on US-controlled infrastructure: it carries CLOUD Act / foreign-law exposure regardless of physical region. Classic EU-region-on-US-cloud posture.
Why 30? 3 sourced facts · click to expand
Platform infrastructure provider
DataDome / Security Boulevard case study · as of 2025-04-01
Stated data storage location
BlaBlaCar Privacy & Data Protection Policy · as of 2026-06-12
Third-country transfers via SCCs
BlaBlaCar Privacy & Data Protection Policy · as of 2026-06-12
Operations & People
88
Operationally European to the core: Paris HQ, French co-founder Nicolas Brusson as CEO, French co-founder Frederic Mazzella as President, euro-denominated reporting (€253M revenue 2023), profitable since April 2022, and ~600+ staff centered in France/Europe even with global markets. Leadership and reporting currency are EU.
Why 88? 3 sourced facts · click to expand
Revenue (euro reporting) and profitability
TechCrunch · as of 2024-04-02
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Exact full cap table and whether the economic majority is held by EU vs non-US/non-EU investors.
Ownership score could move +/-10; VNV (EU) is the largest single holder but US VCs (Insight, Lead Edge) plus founders/SNCF leave the EU-majority claim unverified for a private company.
- ?
Which GCP regions host production data, and whether any user data lives in non-EU regions.
If data is pinned to EU GCP regions it slightly improves residency, but CLOUD Act exposure on a US provider keeps infra capped regardless.
- ?
Current voting structure / board control (founder super-voting rights, SNCF board seat).
Determines whether voting control is unambiguously European even if economics are diffuse.
EU Cloud Sovereignty Framework lens
SEAL was designed to rate cloud providers; applied here as an analogous sovereignty mapping for a French carpooling marketplace, not a certification.
Strategic
French-founded, French-led, EU-headquartered mobility champion; strategy and roadmap set from Paris.
Legal & jurisdictional
Incorporated as Comuto SA in France; French entity is the data controller; squarely within EU law.
Data & AI
Data stored 'as a general rule' in the EU but runs on Google Cloud (US); CLOUD Act exposure, SCCs for transfers.
Operational
Paris HQ, EU-centered leadership and workforce, euro reporting, profitable.
Supply chain
Key vendors are US-controlled (Google Cloud, Google Maps, Meta Ireland, PayPal/Adyen, DataDome).
Technological
Core platform hosted on a US hyperscaler (GCP); no EU-sovereign cloud independence.
Security & compliance
GDPR-aligned policy, named DPO, SCCs, active bot/account-takeover defense; no public independent sovereignty cert found.
Environmental sustainability
Mission is emissions reduction via shared mobility; no verified sovereign data on infra energy/footprint reviewed here.
EU alternatives
Itself a strong EU-controlled option; main caveat is its US-hosted (Google Cloud) infrastructure rather than an EU-sovereign cloud.
French short-distance / commuter carpooling app; EU-incorporated and EU-operated peer.
French home-work carpooling service; acquired by BlaBlaCar in 2023, so no longer an independent alternative.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology