Mastercard
Verified“US payments network, EU-localizing edges.”
- Net revenue (FY2025)
- $32.8B
- Listing
- NYSE: MA
- Workforce
- ~70% intl
- EU data centers
- 12+ & growing
26 = midpoint of Control 15 & Data 36
Sovereignty Quadrant
Control β who owns & governs the company Β· Data β where your data lives. Every dot is a company β click to open it.
Every number below traces to 12 sourced facts across 6 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% β they lower confidence, never the score.
Control β
Who legally and economically controls the company
Legal & Jurisdiction
18
Incorporated in Delaware and headquartered in Purchase, New York. The parent entity and group are squarely under US jurisdiction; the EU-facing entity (Mastercard Europe SA, Belgium) is a subsidiary, not the controlling entity, so EU law reaches operations but not ultimate control.
Why 18? 3 sourced facts · click to expand
Principal executive offices
Mastercard FY2025 Form 10-K (SEC) Β· as of 2026-02-11
European operating entity exists in EU
Belgian KBO / Companyweb (BE0448038446) Β· as of 2026-06-12
Control & Ownership
12
NYSE-listed under ticker MA. Voting power sits with Class A shares (one vote each); Class B shares are non-voting. The largest holders are US institutional managers (Vanguard, BlackRock, State Street). Both voting control and the economic majority are US-based.
Why 12? 3 sourced facts · click to expand
Class B common stock is non-voting
Mastercard FY2025 Form 10-K (SEC) Β· as of 2026-02-11
Largest shareholders are US asset managers
Fintel institutional ownership (MA) Β· as of 2026-06-12
Data β
Where your data lives and who can reach it
Data & Infrastructure
38
Mastercard operates a dozen-plus data centers in Europe (mix of owned sites and colocation) and is investing ~β¬250m in three new French data centers explicitly to localize payment infrastructure under EU data-sovereignty pressure, with a commitment to authorize more European payments locally from H2 2026. This is materially better than EU-region-on-a-US-hyperscaler, but the network is still US-controlled and the parent is reachable under US law (incl. potential CLOUD Act exposure), so it is not EU-sovereign infrastructure.
Why 38? 3 sourced facts · click to expand
European data center footprint
DatacenterDynamics Β· as of 2025-10-23
New France data center investment for EU localization
DatacenterDynamics Β· as of 2025-10-23
Commitment to local European authorization
Mastercard Europe newsroom (Perspectives 2026) Β· as of 2026-01-01
Operations & People
32
Headquartered and led from the US with USD reporting, but the workforce is heavily international (roughly 70% employed outside the US) and Mastercard Europe SA in Waterloo is a genuine regional decision center with global and European executives and ~2,000+ FTEs. Mixed, but the strategic and financial center of gravity is US.
Why 32? 3 sourced facts · click to expand
Workforce geography
Mastercard FY2025 10-K (human capital) Β· as of 2026-02-11
European HQ staffing and function
AmCham Belgium / Companyweb Β· as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β
What we don’t know
3 open questions β they lower confidence, never the score
- ?
Exact split of Mastercard's European data centers between owned facilities and third-party colocation, and whether any rely on US hyperscalers.
Could move the infra score up or down; pure colo on EU operators is more sovereign than capacity on US cloud.
- ?
Where European cardholder transaction data is actually stored and processed today, and how much will be authorized in-region once the H2 2026 localization goes live.
Central to data-residency and CLOUD Act exposure; current state may be more US-dependent than the 2026 commitment implies.
- ?
Precise total employee headcount and the EU-specific share as of the latest filing.
Refines the operations score; figures cited are approximate and partly third-party.
EU Cloud Sovereignty Framework lens
SEAL was designed to assess cloud service providers; applying it to a global card network is an analogous mapping for comparability, not a certification.
Strategic
US-headquartered, US-controlled global network; EU is a region, not the strategic center despite localization moves.
Legal & jurisdictional
Delaware parent under US law; EU subsidiary (Mastercard Europe SA) is reachable by EU regulators but not the controlling entity.
Data & AI
Real and expanding EU data-center footprint and in-region processing commitment, but network ultimately US-controlled with potential US-law reach.
Operational
Genuine European HQ in Waterloo with executive functions and ~70% international workforce, but USD reporting and US top leadership.
Supply chain
Vendor and hardware supply chain for EU infrastructure not verified from primary sources.
Technological
Core switching/clearing technology and IP owned and governed by the US parent.
Security & compliance
European Cyber Resilience Centre in Belgium; operates under EU regulatory oversight (e.g., as a payment scheme), but governance sits with US parent.
Environmental sustainability
EU-specific data-center energy/sustainability commitments not verified here.
EU alternatives
Bank-backed EU wallet and account-to-account scheme built explicitly as a European alternative to the US card networks.
Belgian domestic payment scheme; strong national reach but limited cross-border EU coverage and partly co-badged with international networks.
French domestic card network governed by French banks; sovereign within France but typically co-badged with Visa/Mastercard for international use.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes β Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced β challenge it and we correct the record.
- 2026-06-12 β Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology