Here
Verified“EU-owned map, US-hosted engine.”
- Founded
- 1985 / 2015
- Control
- DE automakers
- Core cloud
- AWS (US)
- CEO
- M. Nefkens
57 = midpoint of Control 73 & Data 41
Sovereignty Quadrant
Control β who owns & governs the company Β· Data β where your data lives. Every dot is a company β click to open it.
Every number below traces to 13 sourced facts across 9 independent sources, last verified 2026-06-12. 4 open questions hold confidence at 78% β they lower confidence, never the score.
Control β
Who legally and economically controls the company
Legal & Jurisdiction
85
Incorporated and operationally run in the Netherlands. HERE Global B.V. (Eindhoven) is the named GDPR data controller, so EU law plainly reaches the operating entity. No foreign parent sits above it; the company itself is the top operating vehicle. This is close to a textbook EU legal footprint.
Why 85? 3 sourced facts · click to expand
Legal entity and incorporation
HERE GDPR statement / Dun & Bradstreet Β· as of 2026-06-12
Named GDPR data controller
HERE privacy supplement Β· as of 2026-06-12
Dutch trade-register registration
Dun & Bradstreet company profile Β· as of 2026-06-12
Control & Ownership
60
Voting control is European: the German automaker consortium (Audi, BMW, Mercedes-Benz) holds the majority, reinforced by Bosch and Continental (each ~5%, German). But economics are heavily mixed: Intel ~15% (US) and Mitsubishi + NTT 30% via COCO Tech Holding B.V. plus Pioneer (Japan) together put ~45%+ of the cap table outside the EU. EU voting majority, materially non-EU economics, and privately held (no EU listing venue).
Why 60? 4 sourced facts · click to expand
Majority voting control
Wikipedia (Here Technologies) Β· as of 2026-06-12
Japanese stake
HERE press release Β· as of 2020-02-06
US stake
Continental press release / Wikipedia Β· as of 2026-06-12
Data β
Where your data lives and who can reach it
Data & Infrastructure
25
This is the weak spot. HERE's core cloud infrastructure, data platform, analytics and AI/ML deployment have run on AWS for ~a decade, formalized in a 10-year, $1bn agreement announced Jan 2025. AWS is a US hyperscaler subject to the CLOUD Act, regardless of which region the data sits in. EU data-controller status, ISO 27001 and GDPR safeguards help on paper, but the actual production stack is US-owned cloud, not EU-sovereign infrastructure.
Why 25? 3 sourced facts · click to expand
Security/compliance posture
HERE GDPR statement Β· as of 2026-06-12
Operations & People
65
Operationally EU-leaning but not EU-pure. HQ is Eindhoven (NL) with major engineering in Berlin and a long-standing large site in Chicago (the Navteq legacy). CEO Mike Nefkens is American (ex-HP, ex-Resideo). Leadership and workforce are spread across the EU, US and Asia. Center of gravity is European, but the top of the house and a chunk of operations are not.
Why 65? 3 sourced facts · click to expand
CEO
HERE press release / leadership page Β· as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β
What we don’t know
4 open questions β they lower confidence, never the score
- ?
Exact, current per-shareholder voting and economic percentages (Audi/BMW/Mercedes split; whether the German consortium still holds a clean >50% voting majority after the 2019 Mitsubishi/NTT round)
Directly affects the ownership score; the EU voting-majority claim rests on press reporting, not a published 2025/26 cap table
- ?
Whether HERE's EU customer/user data is contractually pinned to AWS EU regions (eu-central, eu-west) or can transit US regions
Determines real-world data-residency exposure under the CLOUD Act; only general SCC/transfer language is published
- ?
Whether HERE operates any of its own EU data centers alongside AWS, or is fully AWS-hosted
Could modestly raise the infra score if material sovereign-controlled compute exists
- ?
Current total headcount and EU-vs-non-EU workforce split (public figures range ~3,700 to ~9,000)
Affects operations score precision and the EU center-of-gravity claim
EU Cloud Sovereignty Framework lens
SEAL here is an analogous mapping, not a certification: the framework targets cloud providers, and HERE is a cloud customer, so the rows below are an interpretive read of its sovereignty posture, not an audited result.
Strategic
EU automaker-controlled location platform; strategically a European mapping asset positioned against Google/TomTom
Legal & jurisdictional
Dutch-incorporated HERE Global B.V. is the operating entity and GDPR data controller; EU law reaches it directly
Data & AI
Core data platform and AI/ML run on AWS (US hyperscaler); CLOUD Act exposure despite EU controller status
Operational
HQ Eindhoven and large Berlin engineering, but American CEO and significant Chicago/US + Asia footprint
Supply chain
Critical dependency on a single US cloud vendor (AWS) under a 10-year, $1bn lock-in
Technological
Owns proprietary map data and AI mapmaking IP (EU-developed), but the compute substrate is US-owned
Security & compliance
ISO 27001 certified, GDPR controller in NL, SCCs for transfers; data-residency specifics not publicly pinned
Environmental sustainability
No HERE-specific sovereignty-relevant sustainability data verified in this pass
EU alternatives
Dutch-listed (Amsterdam), founder-influenced EU mapping peer; cleaner EU ownership/listing than HERE, but also leans on hyperscaler cloud and partners with Microsoft/Google for some services
State-owned EU geospatial data (and peers like Germany's BKG); fully sovereign but not a drop-in commercial automotive/location-API replacement
The dominant alternative but US-owned and US-hosted; listed only for context, not as a sovereignty upgrade
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes β Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced β challenge it and we correct the record.
- 2026-06-12 β Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology