Bol
Verified“EU-owned, EU-run — but its engine runs on Google's cloud.”
- Net consumer sales (2024)
- EUR 5.9bn
- Active customers
- ~14M
- Owner
- Ahold Delhaize
- Founded
- 1999
69 = midpoint of Control 82 & Data 55
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 13 sourced facts across 13 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 82% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
92
Operating entity bol.com B.V. is incorporated in the Netherlands (KvK 32147382, statutory seat Utrecht) and its parent Koninklijke Ahold Delhaize N.V. is a Dutch-incorporated public company with statutory seat in Zaandam. Both the operating company and the ultimate parent sit inside the EU, so EU law (GDPR, DSA, consumer law) reaches the company directly and is enforceable against an EU-domiciled entity. No non-EU parent sits above the chain. Near top of the rubric band.
Why 92? 3 sourced facts · click to expand
Operating entity registered with Dutch Chamber of Commerce
Company.info / KvK profile · as of 2026-06-12
Statutory seat and HQ address
LEI / OpenDataLEI record · as of 2026-06-12
Ultimate parent is Dutch-incorporated public company
Wikipedia: Ahold Delhaize · as of 2026-06-12
Control & Ownership
72
bol is 100% owned by Koninklijke Ahold Delhaize N.V., which is listed on Euronext Amsterdam and Brussels (EU venues, ticker AD), reports in euros, and is not controlled by any foreign parent — so voting control and listing are clearly EU. The drag: the parent's economic center of gravity is the US (60%+ of group net sales, ~EUR 54.2bn of EUR 89.4bn in 2024), and its largest institutional shareholders are US asset managers (BlackRock, Vanguard, State Street). EU voting and EU listing, but the parent's economic majority leans US — high band with a caveat.
Why 72? 4 sourced facts · click to expand
bol acquired and wholly owned by Ahold (now Ahold Delhaize) since 2012
Crunchbase acquisition profile · as of 2026-06-12
Parent listed on EU venues, not the NYSE
Euronext company information · as of 2026-06-12
Parent group's revenue is majority US
Statista / Ahold Delhaize FY2024 · as of 2024-12-31
Largest institutional holders are US asset managers
Yahoo Finance / Simply Wall St ownership · as of 2026-06-12
Data →
Where your data lives and who can reach it
Data & Infrastructure
32
bol's own engineering blog states Google Cloud Platform is its primary cloud ('on cloud nine ever since we spun up our first application in Google's cloud'), using Cloud Spanner, BigQuery, Cloud SQL and Datastore, having retired on-prem Oracle and Hadoop. A vendor case study confirms a hybrid model: GCP plus a retained own data center. GCP is a US-owned hyperscaler, so user data sits under CLOUD Act / foreign-law reach even if stored in EU regions. The retained own data center lifts it slightly above the pure 'EU regions on US hyperscaler' floor, but the production core is US-provider-dependent.
Why 32? 3 sourced facts · click to expand
Google Cloud is bol's primary cloud (own tech blog)
bol Techlab engineering blog · as of 2026-06-12
Hybrid setup: GCP plus own data center
Aqua Security bol.com case study · as of 2026-06-12
Personalization data shared with media partners for ads
bol privacy/cookie info (via search) · as of 2026-06-12
Operations & People
90
bol is operationally Dutch: HQ in Utrecht, CEO Maite Zubiaurre (appointed 2025), roughly 1,000-3,000 staff concentrated in the Netherlands, a market that is the Netherlands (73% of revenue) plus Belgium, and euro reporting. Leadership, workforce and customers are EU-centered. Top of the rubric band.
Why 90? 3 sourced facts · click to expand
HQ in Utrecht, Dutch-led C-suite
About bol (over.bol.com) · as of 2026-03-31
Market is NL + BE, NL-dominant
ecommerceDB / over.bol.com · as of 2024-12-31
Scale of EU operation
WORLDEF News / over.bol.com · as of 2024-12-31
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Are bol's Google Cloud workloads pinned to EU regions (e.g. europe-west4 Netherlands), or do some run in US regions?
Determines whether data physically rests in the EU; even EU regions remain under US CLOUD Act reach, but US-region storage would lower the infra score further.
- ?
Which jurisdictions are the five media partners that receive bol customer interest profiles?
Cross-border transfer of profiling data to non-EU adtech partners would add foreign-law data exposure.
- ?
Does bol's retained 'own data center' still host production user data, or only legacy/edge workloads?
If primary customer data lives in bol's own EU facility, the infra score should rise; if it is GCP-only, it stays low.
EU Cloud Sovereignty Framework lens
SEAL was designed to assess cloud service providers; for a retailer like bol this is an analogous sovereignty mapping, not a certification.
Strategic
EU-owned and EU-run, but strategically tethered to a parent whose growth engine and majority revenue are in the US.
Legal & jurisdictional
Both operating entity and ultimate parent are Dutch-incorporated; EU law applies and is enforceable directly.
Data & AI
Core platform runs on Google Cloud (US hyperscaler); profiling data shared with media partners. CLOUD Act exposure regardless of region.
Operational
HQ Utrecht, Dutch leadership, NL/BE market, euro reporting, workforce concentrated in the Netherlands.
Supply chain
Marketplace with ~43,000 sellers across NL/BE; logistics include EU acquisitions (Cycloon), but goods sourcing is global.
Technological
Primary cloud, big-data and database stack (Spanner, BigQuery, Cloud SQL) are US-vendor managed services; deep dependency on a single US provider.
Security & compliance
GDPR-bound under the Dutch DPA; uses cloud-native security (Aqua) but compliance posture inherits US-provider risk.
Environmental sustainability
B Corp listing exists but current certification status and emissions data were not verified in this pass.
EU alternatives
Itself a strong EU-controlled option; the open question is its Google Cloud dependency rather than ownership.
Privately held Dutch e-commerce retailer operating in NL/BE/DE; EU-owned and EU-run peer.
Large German marketplace owned by privately held Otto Group; EU-controlled, but verify its own cloud/data residency.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology