Uber
Verified“A US company that happens to run in Europe.”
- Listing
- NYSE: UBER
- FY2024 revenue
- $43.9B
- Employees
- ~31,100
- EU entity
- Uber B.V.
16 = midpoint of Control 15 & Data 16
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 12 sourced facts across 8 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
18
Incorporated in Delaware and run from San Francisco. EU law clearly reaches Uber via GDPR and its Amsterdam operating subsidiary Uber B.V. (the EEA data controller), but the controlling legal entity is a US corporation; EU enforceability bites the subsidiary, not the parent's domicile.
Why 18? 3 sourced facts · click to expand
State of incorporation
Uber FY2024 Form 10-K (SEC) · as of 2024-12-31
Principal executive offices
Uber FY2024 Form 10-K (SEC) · as of 2024-12-31
EU operating entity / EEA data controller
EDPB / Dutch DPA decision · as of 2024-07-22
Control & Ownership
12
Listed on the NYSE; ~84% of stock is held by institutions, with the largest holders all US asset managers (Vanguard, BlackRock, State Street, Capital Research, Morgan Stanley). Both voting and economic majorities sit in the US. No meaningful EU control.
Why 12? 3 sourced facts · click to expand
Institutional ownership share
WallStreetZen / Yahoo Finance ownership data · as of 2025-12-31
Largest shareholders (all US)
Yahoo Finance / Motley Fool ownership data · as of 2025-12-31
Data →
Where your data lives and who can reach it
Data & Infrastructure
12
Uber's platform runs on US hyperscalers (Oracle Cloud Infrastructure and Google Cloud), not EU-owned infrastructure. A Dutch DPA decision established that European driver data was actually transferred to the US, exposing it to US law (post-Privacy Shield, no adequate transfer tools for the period). EU data residency is not the operating model.
Why 12? 3 sourced facts · click to expand
Primary cloud provider
Oracle press release (Oracle CloudWorld 2024) · as of 2024-09-11
EEA driver data transferred to US without safeguards
EDPB / Dutch DPA (AP) · as of 2024-07-22
GDPR transfer articles breached
CNIL statement on Uber fine · as of 2024-07-22
Operations & People
22
Headquartered in San Francisco with a US CEO (Dara Khosrowshahi) and USD reporting. That said, operations are genuinely global, with a large European workforce, an Amsterdam-based EU subsidiary and substantial international business — which lifts this above the legal/ownership/infra axes, but leadership and the corporate center remain US.
Why 22? 3 sourced facts · click to expand
Headquarters and CEO
Uber leadership page · as of 2026-06-12
FY2024 revenue (reported in USD)
Uber Q4 & FY2024 results (SEC EX-99.1) · as of 2024-12-31
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Where exactly is EU rider/eater (consumer) data stored today, and has Uber moved to EU-region cloud since the 2024 fine?
Could modestly raise the infra score if verified EU residency now exists; the fine covered driver data through Nov 2023.
- ?
Current precise breakdown of European vs US revenue and EMEA headcount.
Would refine the operations score; Uber does not cleanly split EU-only figures in its 10-K.
- ?
Status of any appeal of the €290M Dutch DPA fine and any new SCCs/transfer safeguards adopted.
Affects the legal/infra risk picture but not the underlying US-control verdict.
EU Cloud Sovereignty Framework lens
SEAL was designed to assess cloud providers; this is an analogous sovereignty mapping for a platform company, not a formal SEAL certification.
Strategic
US-incorporated, US-listed, US-controlled; strategy set from San Francisco. No EU strategic autonomy.
Legal & jurisdictional
Delaware parent; EU reach only via Uber B.V. subsidiary and GDPR, which the parent's domicile escapes.
Data & AI
Runs on US clouds (OCI, Google Cloud); EEA driver data transferred to US without safeguards (proven by €290M fine).
Operational
Genuinely global ops with a large European workforce and Amsterdam subsidiary, but the corporate center and leadership are US.
Supply chain
Core infrastructure suppliers (Oracle, Google) are US hyperscalers; no EU-sovereign stack.
Technological
Platform, ML models and big-data stack built and operated on US technology providers.
Security & compliance
Repeat GDPR enforcement from the Dutch DPA, culminating in a record €290M data-transfer fine in 2024.
Environmental sustainability
Out of scope for this sovereignty profile; not evaluated against SEAL environmental criteria.
EU alternatives
Estonian-founded and EU-headquartered ride-hailing and delivery platform operating across Europe and Africa; the leading EU-controlled Uber peer.
Hamburg-based EU mobility app, but ownership shifted: Lyft (US) agreed to acquire FREE NOW in 2025, which would move control to the US.
Madrid-headquartered EU ride-hailing platform; strong European identity but smaller footprint and has taken non-EU growth capital.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology