Visa
Verified“American payments rail with a European subsidiary bolted on.”
- Net revenue (FY2024)
- $35.9B
- Employees
- ~31,600
- Listing
- NYSE: V
- EU data centers
- 0
15 = midpoint of Control 14 & Data 16
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 13 sourced facts across 8 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
18
Incorporated in Delaware and headquartered in San Francisco; a US SEC registrant. EU law (GDPR, EU antitrust, the proposed payments rules) reaches Visa's European operations because it processes EU transactions, but the parent entity and ultimate legal control sit in the US, outside EU jurisdiction. Its European arm is a UK company (London), which is no longer in the EU.
Why 18? 4 sourced facts · click to expand
State of incorporation
Wikipedia: Visa Inc. (citing incorporation) · as of 2026-06
Principal executive offices / HQ
CoStar / Visa HQ address · as of 2024-06
European arm is a UK (non-EU) entity
NorthData / Companies House · as of 2026-06
EU oversight exists over EU operations
Visa Investor Relations · as of 2016-06
Control & Ownership
10
Listed on the NYSE under ticker V (Class A). Class A is the publicly traded, voting class, dominated by US institutional holders (BlackRock, Vanguard). Class B/C shares are restricted, held by former member financial institutions. Voting control, economic majority and the listing venue are all US — no meaningful EU control.
Why 10? 3 sourced facts · click to expand
Largest holders are US asset managers
Fintel institutional ownership · as of 2026-06
Class A carries the public vote; B/C restricted
Visa Class B/C Stockholder FAQ · as of 2026-06
Data →
Where your data lives and who can reach it
Data & Infrastructure
12
VisaNet, the global processing network, runs from four data centers: Ashburn (Virginia, US), Highlands Ranch (Colorado, US), London (UK — not the EU) and Singapore. There is no data center inside the EU. Because the operator is a US-incorporated company, all data — including EU transaction data — is reachable via the US CLOUD Act regardless of physical location. This is US/non-EU infrastructure with no EU data sovereignty.
Why 12? 3 sourced facts · click to expand
VisaNet data center locations
Wikipedia: Visa Inc. (VisaNet) · as of 2026-06
European processing sits in London (UK), not the EU
DataCenterMap: Visa London · as of 2026-06
US parent => CLOUD Act exposure on data worldwide
Kiteworks: CLOUD Act vs EU data · as of 2026-06
Operations & People
22
Headquartered and run from San Francisco; CEO Ryan McInerney and chairman John Lundgren are US-based; reporting currency is the US dollar (SEC filer). Visa employs ~31,600 people globally with a substantial European presence (London-based Visa Europe), but leadership, control and reporting are US-centered.
Why 22? 3 sourced facts · click to expand
CEO and chairman
Wikipedia: Visa Inc. · as of 2026-06
Scale / reporting currency
Wikipedia: Visa Inc. (FY2024) · as of 2024-09
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Where exactly is EU cardholder transaction data processed and stored day-to-day?
Visa lists London/Singapore/US data centers but does not publicly detail EU-resident processing or whether any EEA transactions are localized inside the EU.
- ?
What share of revenue and employees is EU-based versus global?
Visa reports global figures; an EU-specific operations footprint would refine the operations score but does not change US control.
- ?
Does any contractual or technical measure shield EU data from US CLOUD Act access?
Determines whether physical UK/Singapore residency offers any real sovereignty protection for European data.
EU Cloud Sovereignty Framework lens
The SEAL framework targets cloud providers; this is an analogous sovereignty mapping for a payments network, not a certification.
Strategic
US-headquartered, US-listed, US-controlled critical payments rail; no EU strategic autonomy.
Legal & jurisdictional
Delaware incorporation, US parent; EU law reaches operations but ultimate control sits outside the EU. UK (not EU) European arm.
Data & AI
No EU data center; VisaNet runs from US/UK/Singapore. US CLOUD Act exposure on data worldwide.
Operational
Large, real European operating presence (London-based Visa Europe, EU clients), but leadership and reporting are US-centered.
Supply chain
Vendor and processing supply chain not verified from primary sources in this pass.
Technological
Core processing technology (VisaNet) is US-owned and US/UK-operated; Europe rides on a US-controlled platform.
Security & compliance
Visa Europe is a Bank of England designated payment system and subject to EU oversight; strong compliance posture but under non-EU ultimate control.
Environmental sustainability
ESG/sustainability disclosures not verified against primary sources in this pass.
EU alternatives
EU bank-backed wallet/payment scheme built to reduce dependence on Visa/Mastercard; still scaling, limited to account-to-account and select markets.
French domestic card scheme, EU-governed; in practice many cards are co-badged with Visa/Mastercard, so independence is partial.
The other global network is also US-incorporated and NYSE-listed — same sovereignty profile, not an EU alternative.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology