Docker
Verified“US-controlled, US-hosted developer infrastructure.”
- Status
- Private
- Valuation
- $2.1B
- Founded
- 2008 / 2010
- Hub hosting
- US only
13 = midpoint of Control 13 & Data 13
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 11 sourced facts across 7 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 86% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
15
Docker, Inc. is a US corporation headquartered in Palo Alto, California. Its Terms of Service are governed by California law with exclusive jurisdiction in Santa Clara County. EU law (GDPR) reaches it only via its EU affiliates, a DPA and Standard Contractual Clauses, not because the controlling entity sits in the EU. The exact US state of incorporation (likely Delaware, typical for VC-backed C-corps) is not confirmed by a primary registry document.
Why 15? 3 sourced facts · click to expand
Governing law and jurisdiction of Docker's terms
Docker Terms of Service (sec 20.7) · as of 2026-06-12
Legal entity and registered address
Docker Terms of Service / GLEIF LEI record · as of 2026-06-12
US incorporation history
Wikipedia: Docker, Inc. · as of 2026-06-12
Control & Ownership
10
Docker is privately held and controlled by US venture-capital firms. Its 2022 Series C ($105M) was led by Bain Capital Ventures, with US investors Benchmark, Insight Partners, Sequoia, Greylock and Tribe Capital, plus the CIA's strategic investor In-Q-Tel among earlier backers. Both voting control and economic majority are US-based; there is no EU shareholder of any consequence and no public listing.
Why 10? 3 sourced facts · click to expand
Latest funding round and valuation
Docker press release, Mar 31 2022 · as of 2022-03-31
Ownership status and lead investors
Docker Series C press release · as of 2022-03-31
Earlier strategic investor
Wikipedia: Docker, Inc. · as of 2026-06-12
Data →
Where your data lives and who can reach it
Data & Infrastructure
8
Docker's own privacy/trust page states all customer data is stored in the United States by default through its cloud hosting providers, and that Docker Hub hosting is only available within the US. Its sub-processor list names Amazon Web Services (North Virginia) and Google as cloud providers, plus Cloudflare (CDN), Snowflake and Salesforce, all US entities. This is full US hyperscaler dependence with CLOUD Act exposure and no EU data residency for the flagship registry.
Why 8? 3 sourced facts · click to expand
Customer data storage location
Docker Trust / Privacy page · as of 2026-06-12
Primary cloud infrastructure providers
Docker Sub-Processor List · as of 2026-06-12
AI feature sub-processors
Docker Sub-Processor List · as of 2026-06-12
Operations & People
20
Docker is run from Palo Alto, California. CEO Don Johnson (appointed Feb 2025) is a former Oracle Cloud Infrastructure founder and early AWS leader; leadership and reporting are US-centered, in USD. The company does operate genuine EU affiliates (Docker Netherlands B.V., Docker France SAS, Docker Germany GmbH) and a distributed remote workforce, which gives it some EU operational footprint, but the strategic and executive center of gravity is firmly American.
Why 20? 2 sourced facts · click to expand
Headquarters and CEO
Docker CEO press release · as of 2025-02-12
EU operating affiliates exist
Docker Sub-Processor List · as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
What is Docker, Inc.'s exact US state of incorporation?
Likely Delaware (standard for VC-backed C-corps), but not confirmed by a primary registry filing. Does not change the US-jurisdiction conclusion.
- ?
What share of workforce and revenue is EU-based?
Docker has real EU affiliates and a remote workforce; a larger EU footprint would modestly raise the operations score but not control or infrastructure.
- ?
Which non-Hub products can be deployed in EU data centers on request?
Docker hints some products allow non-US deployment upon request; confirmed EU regions for paid tiers could slightly lift the infra score, though still on US hyperscalers.
EU Cloud Sovereignty Framework lens
SEAL is designed for cloud service providers; this is an analogous sovereignty mapping for a developer-infrastructure vendor, not a certification.
Strategic
US-controlled, VC-backed; strategic decisions made in Palo Alto with no EU influence over direction.
Legal & jurisdictional
US entity governed by California law, Santa Clara jurisdiction; EU reach only via SCCs/DPA.
Data & AI
All customer data in the US; Docker Hub US-only; AI features routed to US providers (Anthropic, OpenAI).
Operational
US HQ and leadership, but genuine EU affiliates (NL, FR, DE) and distributed remote workforce.
Supply chain
Core infra and sub-processors (AWS, Google, Cloudflare, Snowflake, Salesforce, Auth0) are all US firms.
Technological
Container engine, CLI and image format are open-source (Apache 2.0) and not US-locked; the hosted registry/services are the dependency.
Security & compliance
Maintains DPA, SCCs, sub-processor transparency and vendor due diligence; SOC-style program implied but full CLOUD Act exposure remains.
Environmental sustainability
No primary disclosure reviewed on energy use or emissions for Docker's hosted services.
EU alternatives
CNCF-graduated open-source container registry; self-hostable on EU infrastructure for full residency, but not a managed EU SaaS by default.
Integrated OCI registry; can be self-managed on EU/sovereign infra. GitLab Inc. itself is a US company, so SaaS tiers carry US exposure.
Managed OCI container registry from a French cloud provider (Iliad group); EU-incorporated, EU-hosted, outside CLOUD Act reach.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology