Jottacloud
Verified“Norwegian to the bedrock — EEA, not EU.”
- Customers
- 2M+ active
- Revenue
- ~NOK 200M (2025e)
- Ownership
- 50/50 JV
- Founded
- 2008, Norway
87 = midpoint of Control 87 & Data 87
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 14 sourced facts across 7 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 82% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
88
Incorporated and operated in Norway as Jotta AS; GDPR plus the Norwegian Personal Data Act apply directly. Slightly under a top EU-member score only because Norway is EEA, not EU.
Why 88? 3 sourced facts · click to expand
The operating legal entity is Jotta AS, registered in Oslo, Norway.
Jottacloud Data Processing Agreement · as of 2026-06-12
Jottacloud states it follows the GDPR and the Norwegian Personal Data Act for processing personal data.
GDPR at Jottacloud (Help Center) · as of 2026-06-12
Norway is part of the EEA but not an EU member state, so EU law applies via the EEA agreement rather than direct membership.
Jottacloud merger press release (Telenor Group) · as of 2025-03-19
Control & Ownership
85
Founded and historically Norwegian-owned (Hawk Infinity); a 2025 merger makes the cloud business a 50/50 JV with Telenor's Telenor Amp — Telenor being majority Norwegian-state-owned. Voting and economics are both Norwegian/EEA.
Why 85? 4 sourced facts · click to expand
Following the 2025 merger, the cloud-storage joint venture is owned 50/50 by Hawk Infinity and Telenor Amp.
Jottacloud–Telenor merger release (GlobeNewswire) · as of 2025-03-19
Hawk Infinity is a Norwegian investment company focused on software and technology firms.
Jottacloud–Telenor merger release (GlobeNewswire) · as of 2025-03-19
Telenor (parent of co-owner Telenor Amp) is majority owned by the Norwegian state and listed on the Oslo Stock Exchange.
Telenor (Wikipedia, citing state ownership) · as of 2025
The merged company is led by Roland Rabben, CEO and founder of Jotta.
Jottacloud blog: Jottacloud and Min Sky merge · as of 2025-03-19
Data →
Where your data lives and who can reach it
Data & Infrastructure
86
Core user files are stored in Norway on infrastructure Jottacloud owns and operates itself (in a Green Mountain facility), with no US hyperscaler in the storage path. Just shy of top because the physical colocation site is a third-party (Norwegian) datacenter operator.
Why 86? 4 sourced facts · click to expand
Jottacloud owns and operates 100% of its own server infrastructure rather than relying on third-party cloud providers.
Jottacloud Server Security page · as of 2026-06-12
All Jottacloud customer data is stored in Norway, at the Green Mountain SVG1 datacenter in Rennesøy.
GDPR at Jottacloud (Help Center) · as of 2026-06-12
Servers are in a hardened former NATO ammunition facility deep in the Norwegian mountains, running only on renewable energy.
Jottacloud Server Security page · as of 2026-06-12
Ancillary functions use US-based sub-processors (Stripe, Intercom, Microsoft, Google Firebase, Mailchimp) under EU SCCs (EU) 2021/914, though core file data stays in Norway.
GDPR at Jottacloud (Help Center) · as of 2026-06-12
Operations & People
88
Headquartered and run from Oslo, Norwegian founder-CEO, Norwegian datacenter operations, and revenue reported in Norwegian kroner. Firmly EEA-centered.
Why 88? 3 sourced facts · click to expand
Jotta AS is headquartered at Øvre Slottsgate 5, 0157 Oslo, Norway.
Jottacloud Data Processing Agreement · as of 2026-06-12
The combined company serves over 2 million active customers with expected 2025 revenue of about NOK 200 million.
Jottacloud–Telenor merger release (GlobeNewswire) · as of 2025-03-19
Jottacloud was founded in Norway in 2008 and operates as a Norwegian cloud-storage company.
Jottacloud blog: Jottacloud and Min Sky merge · as of 2025-03-19
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Did the Hawk Infinity / Telenor Amp merger formally close after Norwegian Competition Authority approval?
The 50/50 ownership and 2M+ customer figures assume completion; as of available sources the deal was announced with completion only expected in Q2 2025, not confirmed closed.
- ?
What is Jottacloud's standalone employee headcount and current revenue?
Operations scoring relies on merged-entity figures; a precise standalone workforce/revenue would sharpen the operations and scale picture.
- ?
Are file contents end-to-end encrypted such that Jottacloud (and Norwegian authorities) cannot access them?
Determines residual lawful-access exposure under Norwegian jurisdiction; sources confirm encryption and Norwegian storage but not zero-knowledge architecture.
EU Cloud Sovereignty Framework lens
The EU Cloud Sovereignty Framework targets cloud service providers for procurement; this is an analogous mapping for a consumer/SMB storage service, not a certification — and note Jottacloud is EEA (Norway), not EU.
Strategic
Norwegian-owned and Norwegian-run, explicitly positioned as a sovereign alternative to US hyperscalers; co-owner Telenor is majority Norwegian-state-owned.
Legal & jurisdictional
Jotta AS incorporated in Oslo; GDPR plus Norwegian Personal Data Act apply. Caveat: EEA, not EU member.
Data & AI
All core customer files stored in Norway on owned infrastructure; no US hyperscaler in the storage path.
Operational
HQ, leadership and datacenter operations all in Norway; revenue in NOK.
Supply chain
Owns core storage hardware, but ancillary services (Stripe, Intercom, Microsoft, Google, Mailchimp) are US sub-processors under SCCs.
Technological
Builds and runs its own Linux storage stack in a hardened Norwegian mountain facility; not dependent on foreign cloud platforms.
Security & compliance
Strong physical security and GDPR alignment stated; independent certifications (ISO 27001 etc.) and zero-knowledge encryption not confirmed in sources reviewed.
Environmental sustainability
Servers stated to run only on renewable energy; cool Norwegian climate aids efficiency.
EU alternatives
Itself a strong EEA-sovereign choice; the only caveat is that Norway is EEA, not an EU member state.
Privacy-focused, EU-data-region option, but Swiss-headquartered — outside the EU (adequacy country).
Independent, owns its own datacenters; strong sovereignty but Swiss, not EU. For an in-EU option consider Internxt (Spain) or Tresorit (Hungary/Switzerland).
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology