Skip to main content
Signal logo

Signal

Verified

“Gold-standard privacy, all-American sovereignty.”

Operating HQ
πŸ‡ΊπŸ‡Έ Mountain View, California
where it's run
Legal domicile
πŸ‡ΊπŸ‡Έ Delaware, USA
where it's incorporated
Structure
US nonprofit
FY2024 revenue
~$29.4M
Founder loan
~$105M
Hosting
AWS / GCP / Azure
15/100
Sovereign: Not
Control ↑
14
Data β†’
16

15 = midpoint of Control 14 & Data 16

ConfidenceHigh (88%)

Sovereignty Quadrant

Control ↑ who owns & governs the company  Β·  Data β†’ where your data lives. Every dot is a company β€” click to open it.

Where your data lives β†’ Who controls the company β†’ 8 companies Β· fully non-EU (0/0) Google β€” Data 16, Control 14 TikTok β€” Data 32, Control 24 Youtube β€” Data 14, Control 16 Ionos β€” Data 90, Control 90 Disneyplus β€” Data 16, Control 12 Telegram β€” Data 34, Control 14 Carrefour β€” Data 100, Control 32 Corriere β€” Data 100, Control 100 Microsoft β€” Data 26, Control 14 X β€” Data 14, Control 16 Amazon β€” Data 14, Control 10 Amazon β€” Data 66, Control 0 Bild β€” Data 100, Control 100 Reddit β€” Data 14, Control 10 Netflix β€” Data 24, Control 20 LinkedIn β€” Data 14, Control 16 Reuters β€” Data 26, Control 0 Pinterest β€” Data 12, Control 12 Discord β€” Data 16, Control 20 AliExpress β€” Data 18, Control 12 Twitch β€” Data 18, Control 16 Samsung β€” Data 62, Control 4 Canva β€” Data 24, Control 20 Spotify β€” Data 30, Control 68 Apple β€” Data 16, Control 16 GitHub β€” Data 16, Control 10 Uber β€” Data 16, Control 16 Salesforce β€” Data 20, Control 14 Deepl β€” Data 70, Control 78 Airbnb β€” Data 18, Control 18 Notion β€” Data 22, Control 16 Shopify β€” Data 18, Control 18 Mastercard β€” Data 36, Control 16 Dropbox β€” Data 14, Control 10 HubSpot β€” Data 24, Control 10 Stripe β€” Data 30, Control 30 Zalando β€” Data 52, Control 88 Figma β€” Data 18, Control 10 SAP SE β€” Data 68, Control 78 Atlassian β€” Data 18, Control 18 Proton β€” Data 72, Control 54 Miro β€” Data 100, Control 44 Klarna β€” Data 44, Control 42 Ecosia β€” Data 60, Control 92 Zoom β€” Data 20, Control 14 Adyen β€” Data 84, Control 84 GitLab β€” Data 26, Control 14 Slack β€” Data 14, Control 20 Hetzner β€” Data 84, Control 96 Deezer β€” Data 62, Control 66 Typeform β€” Data 100, Control 52 OVHcloud β€” Data 82, Control 94 Tutanota β€” Data 100, Control 100 BlaBlaCar β€” Data 54, Control 76 Qwant β€” Data 56, Control 88 Bitwarden β€” Data 28, Control 20 Contentful β€” Data 34, Control 48 Personio β€” Data 34, Control 58 Ikea β€” Data 34, Control 100 Meta Platforms β€” Data 18, Control 10 Whatsapp β€” Data 14, Control 12 Instagram β€” Data 28, Control 22 Avast β€” Data 60, Control 0 Paypal β€” Data 24, Control 32 Olvid β€” Data 58, Control 88 Wire β€” Data 60, Control 76 16 14 Signal
Signal β€” verified peers β€” automated estimate (0–50 pillars, normalized)

Every number below traces to 15 sourced facts across 8 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% β€” they lower confidence, never the score.

Control ↑

Who legally and economically controls the company

14/100
8 facts Β· 5 sources Β· mixed confidence
Legal & Jurisdiction
12

Incorporated in Delaware, operated from California, and contractually governed by California law with disputes in US federal/state courts β€” squarely US jurisdiction with no EU establishment.

Why 12? 4 sourced facts · click to expand
US 501(c)(3), EIN 82-4506840

The operating entity is the Signal Technology Foundation, a US 501(c)(3) nonprofit (EIN 82-4506840) recognized tax-exempt in 2019.

ProPublica Nonprofit Explorer Β· as of 2024-12-31

Incorporated in Delaware

The Signal Foundation is incorporated in the State of Delaware.

Wikipedia: Signal Foundation Β· as of 2026-06-12

Governed by California law

Signal's Terms are governed by California law, with disputes resolved exclusively in the Northern District of California or San Mateo County courts.

Signal Terms of Service & Privacy Policy Β· as of 2026-06-12

No EU establishment

EU law reaches Signal only as a service offered to EU users (GDPR extraterritorial scope), not via any EU-incorporated establishment.

Signal Support: Signal and the GDPR Β· as of 2026-06-12

Control & Ownership
15

A US nonprofit with no shareholders or investors; control rests entirely with a US-based board, and seed funding came from US founder Brian Acton β€” no EU voting or economic stake.

Why 15? 4 sourced facts · click to expand
Nonprofit, no investors

Signal is a nonprofit with no advertisers or investors, controlled by its board rather than equity holders.

Signal Foundation (official) Β· as of 2026-06-12

US-based board of five

The board is US-centered: Meredith Whittaker (President), Brian Acton (Chairman/CEO), Katherine Maher, Amba Kak, and Jay Sullivan.

Signal Foundation (official) Β· as of 2026-06-12

~$105M Acton founder loan

WhatsApp co-founder Brian Acton seeded the Foundation with a loan that grew to roughly $105M, structured as an unsecured zero-interest loan due 2068.

Wikipedia: Signal Foundation Β· as of 2026-06-12

US subsidiary builds the app

Signal Messenger LLC, which builds the app and Signal Protocol, is a wholly controlled subsidiary of the US Foundation.

Wikipedia: Signal Foundation Β· as of 2026-06-12

Data β†’

Where your data lives and who can reach it

16/100
7 facts Β· 6 sources Β· high confidence
Data & Infrastructure
16

Traffic runs on US hyperscalers (AWS, GCP, Azure) under CLOUD Act reach, but aggressive end-to-end encryption and data minimization mean almost no user data actually sits there to seize.

Why 16? 4 sourced facts · click to expand
Hosted on AWS, GCP, Azure

Signal rents server infrastructure from US hyperscalers including Amazon AWS, Google Compute Engine, and Microsoft Azure.

Signal Blog: Privacy is Priceless, but Signal is Expensive Β· as of 2023-11-01

President: no real AWS alternative

Signal's president publicly stated there is effectively no realistic alternative to AWS and the other hyperscalers for a global real-time platform.

Computerworld: Signal: We have no choice but to use AWS Β· as of 2025-10-28

E2E encrypted, minimal at rest

Everything is end-to-end encrypted and messages are dropped from the queue once delivered, so Signal and its cloud providers cannot read content.

Signal Blog: Privacy is Priceless, but Signal is Expensive Β· as of 2023-11-01

Subpoenas yield 2 timestamps

When subpoenaed, Signal could produce only account creation date and last-connection timestamp β€” no messages, contacts, or groups exist on its servers.

Signal Government Requests (Central District of California) Β· as of 2021-04-27

Operations & People
15

Headquartered and led from California with US-based leadership and USD reporting; engineering and culture are US-centered despite a global user base.

Why 15? 3 sourced facts · click to expand
HQ Mountain View, California

Signal's operating headquarters is at 650 Castro Street, Mountain View, California.

Wikipedia: Signal Foundation Β· as of 2026-06-12

FY2024 revenue ~$29.4M (USD)

The Foundation reported FY2024 revenue of about $29.4M and expenses of about $38.0M, reported in US dollars.

ProPublica Nonprofit Explorer Β· as of 2024-12-31

US-based leadership

Leadership is US-based: President Meredith Whittaker (since 2022) and Chairman/CEO Brian Acton.

Signal Foundation (official) Β· as of 2026-06-12

Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β†’

What we don’t know 3 open questions β€” they lower confidence, never the score
  • ?

    Does Signal store any EU user data in EU-region datacenters, or is all infrastructure US-region?

    Even on a US hyperscaler, EU-region hosting would slightly reduce data-locality exposure; the published material does not specify regions.

  • ?

    Has Signal appointed an EU GDPR Article 27 representative or any EU establishment?

    Determines how directly EU regulators can act against Signal versus relying purely on extraterritorial GDPR scope.

  • ?

    Current full-time headcount and its geographic distribution.

    Last reliable public figure is ~36 staff (2020); a meaningful EU engineering presence would modestly lift the operations score.

EU Cloud Sovereignty Framework lens

The EU Cloud Sovereignty Framework (SEAL) certifies cloud service providers, not messaging nonprofits β€” this is an analogous sovereignty mapping for orientation, not a certification of Signal.

Strategic

Mission-driven US nonprofit independent of Big Tech, but strategically anchored in the US, not the EU.

weak

Legal & jurisdictional

Delaware incorporation, California governing law, US courts; subject to CLOUD Act and US legal process.

weak

Data & AI

Best-in-class: E2E encryption, sealed sender, near-zero metadata; subpoenas yield only two timestamps. No ad/AI profiling.

strong

Operational

HQ, leadership and reporting currency are US; no known EU operating base.

weak

Supply chain

Core compute supply chain is US hyperscalers (AWS/GCP/Azure); president says no realistic alternative exists.

weak

Technological

Fully open-source clients and the Signal Protocol enable independent audit and EU self-hosting of derivatives, but the live service runs on US infra.

moderate

Security & compliance

Open, peer-reviewed cryptography; transparency reports; the Signal Protocol is the industry encryption standard.

strong

Environmental sustainability

No published carbon or sustainability disclosures specific to Signal's infrastructure footprint were found.

not assessed
EU alternatives
πŸ‡¨πŸ‡­ Threema threema.com with caveats

Swiss-incorporated, runs its own servers in Zurich-area datacenters, no phone number required. Strong privacy and EEA-adjacent, but Switzerland is non-EU (adequacy-recognized).

πŸ‡«πŸ‡· Olvid olvid.io EU-controlled

French SAS, the only messenger holding two ANSSI CSPN certifications and mandated for French government use; attachments routed through European Clever Cloud infrastructure since 2026.

πŸ‡©πŸ‡ͺ Wire wire.com with caveats

Berlin-based with EU data hosting and open-source clients, but has had a US holding-company structure historically β€” verify current ownership before relying on it for sovereignty.

How the method works

Methodology v2 (provisional): the score is the midpoint of two axes β€” Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.

Spotted an error? Every claim is sourced β€” challenge it and we correct the record.
  • 2026-06-12 β€” Initial golden profile, authored from primary sources (human + AI review).

Report Incorrect Data

Found an error in this company's profile? Help us improve our data by submitting a correction.

Required so we can follow up if needed. We won't share your email.

Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology