Signal
Verified“Gold-standard privacy, all-American sovereignty.”
- Structure
- US nonprofit
- FY2024 revenue
- ~$29.4M
- Founder loan
- ~$105M
- Hosting
- AWS / GCP / Azure
15 = midpoint of Control 14 & Data 16
Sovereignty Quadrant
Control β who owns & governs the company Β· Data β where your data lives. Every dot is a company β click to open it.
Every number below traces to 15 sourced facts across 8 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% β they lower confidence, never the score.
Control β
Who legally and economically controls the company
Legal & Jurisdiction
12
Incorporated in Delaware, operated from California, and contractually governed by California law with disputes in US federal/state courts β squarely US jurisdiction with no EU establishment.
Why 12? 4 sourced facts · click to expand
The operating entity is the Signal Technology Foundation, a US 501(c)(3) nonprofit (EIN 82-4506840) recognized tax-exempt in 2019.
ProPublica Nonprofit Explorer Β· as of 2024-12-31
The Signal Foundation is incorporated in the State of Delaware.
Wikipedia: Signal Foundation Β· as of 2026-06-12
Signal's Terms are governed by California law, with disputes resolved exclusively in the Northern District of California or San Mateo County courts.
Signal Terms of Service & Privacy Policy Β· as of 2026-06-12
EU law reaches Signal only as a service offered to EU users (GDPR extraterritorial scope), not via any EU-incorporated establishment.
Signal Support: Signal and the GDPR Β· as of 2026-06-12
Control & Ownership
15
A US nonprofit with no shareholders or investors; control rests entirely with a US-based board, and seed funding came from US founder Brian Acton β no EU voting or economic stake.
Why 15? 4 sourced facts · click to expand
Signal is a nonprofit with no advertisers or investors, controlled by its board rather than equity holders.
Signal Foundation (official) Β· as of 2026-06-12
The board is US-centered: Meredith Whittaker (President), Brian Acton (Chairman/CEO), Katherine Maher, Amba Kak, and Jay Sullivan.
Signal Foundation (official) Β· as of 2026-06-12
WhatsApp co-founder Brian Acton seeded the Foundation with a loan that grew to roughly $105M, structured as an unsecured zero-interest loan due 2068.
Wikipedia: Signal Foundation Β· as of 2026-06-12
Signal Messenger LLC, which builds the app and Signal Protocol, is a wholly controlled subsidiary of the US Foundation.
Wikipedia: Signal Foundation Β· as of 2026-06-12
Data β
Where your data lives and who can reach it
Data & Infrastructure
16
Traffic runs on US hyperscalers (AWS, GCP, Azure) under CLOUD Act reach, but aggressive end-to-end encryption and data minimization mean almost no user data actually sits there to seize.
Why 16? 4 sourced facts · click to expand
Signal rents server infrastructure from US hyperscalers including Amazon AWS, Google Compute Engine, and Microsoft Azure.
Signal Blog: Privacy is Priceless, but Signal is Expensive Β· as of 2023-11-01
Signal's president publicly stated there is effectively no realistic alternative to AWS and the other hyperscalers for a global real-time platform.
Computerworld: Signal: We have no choice but to use AWS Β· as of 2025-10-28
Everything is end-to-end encrypted and messages are dropped from the queue once delivered, so Signal and its cloud providers cannot read content.
Signal Blog: Privacy is Priceless, but Signal is Expensive Β· as of 2023-11-01
When subpoenaed, Signal could produce only account creation date and last-connection timestamp β no messages, contacts, or groups exist on its servers.
Signal Government Requests (Central District of California) Β· as of 2021-04-27
Operations & People
15
Headquartered and led from California with US-based leadership and USD reporting; engineering and culture are US-centered despite a global user base.
Why 15? 3 sourced facts · click to expand
Signal's operating headquarters is at 650 Castro Street, Mountain View, California.
Wikipedia: Signal Foundation Β· as of 2026-06-12
The Foundation reported FY2024 revenue of about $29.4M and expenses of about $38.0M, reported in US dollars.
ProPublica Nonprofit Explorer Β· as of 2024-12-31
Leadership is US-based: President Meredith Whittaker (since 2022) and Chairman/CEO Brian Acton.
Signal Foundation (official) Β· as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β
What we don’t know
3 open questions β they lower confidence, never the score
- ?
Does Signal store any EU user data in EU-region datacenters, or is all infrastructure US-region?
Even on a US hyperscaler, EU-region hosting would slightly reduce data-locality exposure; the published material does not specify regions.
- ?
Has Signal appointed an EU GDPR Article 27 representative or any EU establishment?
Determines how directly EU regulators can act against Signal versus relying purely on extraterritorial GDPR scope.
- ?
Current full-time headcount and its geographic distribution.
Last reliable public figure is ~36 staff (2020); a meaningful EU engineering presence would modestly lift the operations score.
EU Cloud Sovereignty Framework lens
The EU Cloud Sovereignty Framework (SEAL) certifies cloud service providers, not messaging nonprofits β this is an analogous sovereignty mapping for orientation, not a certification of Signal.
Strategic
Mission-driven US nonprofit independent of Big Tech, but strategically anchored in the US, not the EU.
Legal & jurisdictional
Delaware incorporation, California governing law, US courts; subject to CLOUD Act and US legal process.
Data & AI
Best-in-class: E2E encryption, sealed sender, near-zero metadata; subpoenas yield only two timestamps. No ad/AI profiling.
Operational
HQ, leadership and reporting currency are US; no known EU operating base.
Supply chain
Core compute supply chain is US hyperscalers (AWS/GCP/Azure); president says no realistic alternative exists.
Technological
Fully open-source clients and the Signal Protocol enable independent audit and EU self-hosting of derivatives, but the live service runs on US infra.
Security & compliance
Open, peer-reviewed cryptography; transparency reports; the Signal Protocol is the industry encryption standard.
Environmental sustainability
No published carbon or sustainability disclosures specific to Signal's infrastructure footprint were found.
EU alternatives
Swiss-incorporated, runs its own servers in Zurich-area datacenters, no phone number required. Strong privacy and EEA-adjacent, but Switzerland is non-EU (adequacy-recognized).
French SAS, the only messenger holding two ANSSI CSPN certifications and mandated for French government use; attachments routed through European Clever Cloud infrastructure since 2026.
Berlin-based with EU data hosting and open-source clients, but has had a US holding-company structure historically β verify current ownership before relying on it for sovereignty.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes β Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced β challenge it and we correct the record.
- 2026-06-12 β Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology