X
Verified“American to the core, with a Dublin mailbox the EU actually uses.”
- Ownership
- Private
- EU users
- ~102M
- DSA status
- VLOP
- EU controller
- Dublin
14 = midpoint of Control 15 & Data 13
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 14 sourced facts across 10 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 82% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
22
Incorporated in Nevada and operated from Texas; the operating company is US-domiciled. EU law does reach X meaningfully through X Internet Unlimited Company (Dublin), its EU/EEA data controller and DSA establishment under Ireland's Digital Services Coordinator — which is why the EU could fine it. But the controlling legal entity is American, so EU enforceability exists only via a subsidiary, not the parent.
Why 22? 4 sourced facts · click to expand
EU/EEA data controller & DSA establishment
Irish Data Protection Commission · as of 2025-04-11
Designated Very Large Online Platform under the DSA
European Commission DSA VLOP list · as of 2026-06-12
US data controller for non-EU users
X Privacy Policy · as of 2026-01-15
Control & Ownership
8
Privately held and majority-controlled by Elon Musk. X Corp is a wholly owned subsidiary of xAI (since 28 Mar 2025), which became a subsidiary of SpaceX (2 Feb 2026). All entities are US, with Musk the majority shareholder of the holding structure. No EU voting or economic stake of any significance; not listed in the EU. This is concentrated US private control.
Why 8? 4 sourced facts · click to expand
Immediate parent
Wikipedia: X Corp. · as of 2026-06-12
Listing venue
The D&O Diary · as of 2026-03-21
Data →
Where your data lives and who can reach it
Data & Infrastructure
12
User data is authorized for storage in the United States, Ireland and other countries where X operates — per its own privacy policy — so data physically lives partly in the US under full CLOUD Act / US-law exposure. X runs self-managed US data centers (Atlanta QTS facility, Portland/Hillsboro Digital Realty leases) plus cloud. There is some Ireland storage, but no EU-owned infrastructure and no genuine EU data-residency guarantee; the controlling infrastructure is American.
Why 12? 3 sourced facts · click to expand
Authorized data storage locations
X Privacy Policy · as of 2026-01-15
Self-managed US data centers
Data Center Dynamics · as of 2025-01-24
Foreign-law government-access exposure
X Privacy Policy · as of 2026-01-15
Operations & People
15
HQ in Bastrop, Texas; controlling leadership is Elon Musk (chairman/CTO) and the workforce, engineering and decision-making are US-centered. No traditional CEO since Linda Yaccarino resigned in July 2025. There is an Irish operating subsidiary handling EU compliance, but overall operations, leadership, and reporting are American (USD).
Why 15? 3 sourced facts · click to expand
Operating headquarters
Wikipedia: X Corp. · as of 2026-06-12
Top leadership
CNBC · as of 2025-07-09
EU user base (DSA-relevant)
Social Media Today · as of 2025-08-01
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Exact share of EU user data physically stored in Ireland vs the US
X's privacy policy lists US, Ireland and 'other countries' but gives no residency split; infra score could move modestly if a verified EU-residency commitment existed.
- ?
Post-SpaceX-merger governance and any minority investors in the holding structure
Musk is majority shareholder, but the precise cap table of the SpaceX/xAI holding entities is private; doesn't change the US-control conclusion.
- ?
Whether the legal entity named in the €120M DSA fine is X Corp, XIUC, or both
EC press release did not render; corroborated by multiple legal/news sources but the precise respondent entity is not independently confirmed here.
EU Cloud Sovereignty Framework lens
SEAL targets cloud service providers; applied here as an analogous sovereignty mapping for a social platform, not a certification.
Strategic
US-controlled, Musk-owned via SpaceX/xAI; strategic direction set entirely outside the EU.
Legal & jurisdictional
Nevada-incorporated, Texas-run. EU reach exists only through the Irish subsidiary (XIUC).
Data & AI
Data stored in US/Ireland under US-law exposure; EU posts used for Grok AI training, prompting an Irish DPC inquiry.
Operational
HQ Bastrop TX; leadership and workforce US-centered; no traditional CEO since Jul 2025.
Supply chain
Compute/GPU supply tied to xAI/SpaceX and US hyperscalers; not independently mapped here.
Technological
Core platform, Grok models and self-managed data centers are US-based; no EU technological autonomy.
Security & compliance
Subject to EU DSA and GDPR enforcement (€120M DSA fine, DPC Grok inquiry) — compliance is externally imposed, not voluntary.
Environmental sustainability
No verified EU-specific sustainability disclosures reviewed.
EU alternatives
Non-profit gGmbH based in Germany; open-source, federated microblogging with EU-hosted instances available.
US public-benefit corporation; open AT Protocol but US-controlled and US-hosted — not an EU-sovereignty answer.
Open-source federated alternatives can be self-hosted in the EU, but governance/funding vary by instance and operator.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology