SysEleven OpenStack Cloud

Provider-specific sources from the current dataset. Use the Compass for scoring, weighting, and A/B comparison.

Compare in the Compass

Provider Snapshot

Criterion	Score
Customer content in the EU	5.0
Customer-created metadata in the EU	4.0
Physically & logically separated	3.0
EU-based operations & support	5.0
No critical non-EU dependencies	4.0
Ownership / ultimate parent (EU-owned?)	5.0
Controlling interest & FISA 702 risk (jurisdiction ≠ residency)	5.0
Local contracting entity & EU governance (operational model)	5.0
Independent advisory board	0.0
EU root CA / trust services	1.0
BSI C5	5.0
ISO 27001 / ISMS	4.0
IT-Grundschutz (BSI)	5.0
SecNumCloud (ANSSI)	0.0
Open standards / API portability	5.0
Service portfolio depth	2.5
Geographic footprint & redundancy (regions/AZ/DCs in EU/DE)	3.0
Audit reports / evidence pack	4.0
Policy enforcement (guardrails)	2.0
Default deny / secure by default	3.0
Independent verification (continuous)	4.0
Blackbox exposure (ops/control plane)	4.0
Operator access exclusion (workload scope)	1.0
IaC & automation (Terraform/OpenTofu, SDKs, APIs)	5.0
Everyday SDLC/DevOps (CI/CD, registry, secrets, K8s)	3.0
Observability (logs/metrics/traces, alerting)	3.0
Limits/quotas (transparency & increase)	4.0
Reference architectures / landing zones	2.0
Unified security stack	2.3
Energieeffizienz / PUE & Zielwerte	3.0
CO₂-/Wasser-Reporting + erneuerbare Energiequellen	3.0

Scope: IaaS+ (OpenStack-basiert)

Customer content in the EU: 5.0; Customer-created metadata in the EU: 4.0; Physically & logically separated: 3.0; EU-based operations & support: 5.0; No critical non-EU dependencies: 4.0; Ownership / ultimate parent (EU-owned?): 5.0; Controlling interest & FISA 702 risk (jurisdiction ≠ residency): 5.0; Local contracting entity & EU governance (operational model): 5.0; Independent advisory board: 0.0; EU root CA / trust services: 1.0; BSI C5: 5.0; ISO 27001 / ISMS: 4.0; IT-Grundschutz (BSI): 5.0; SecNumCloud (ANSSI): 0.0; Open standards / API portability: 5.0; Service portfolio depth: 2.5; Geographic footprint & redundancy (regions/AZ/DCs in EU/DE): 3.0; Audit reports / evidence pack: 4.0; Policy enforcement (guardrails): 2.0; Default deny / secure by default: 3.0; Independent verification (continuous): 4.0; Blackbox exposure (ops/control plane): 4.0; Operator access exclusion (workload scope): 1.0; IaC & automation (Terraform/OpenTofu, SDKs, APIs): 5.0; Everyday SDLC/DevOps (CI/CD, registry, secrets, K8s): 3.0; Observability (logs/metrics/traces, alerting): 3.0; Limits/quotas (transparency & increase): 4.0; Reference architectures / landing zones: 2.0; Unified security stack: 2.3; Energieeffizienz / PUE & Zielwerte: 3.0; CO₂-/Wasser-Reporting + erneuerbare Energiequellen: 3.0

Sources / Evidence

Customer content in the EU

Betrieb in Deutschland; Regionen HAM1 (Hamburg) & DUS2 (Düsseldorf). (stated)

Customer-created metadata in the EU

Metadaten i.d.R. in DE (Regions-Konzept), aber nicht explizit belegt. (claim/unclear)

Physically & logically separated

Shared OpenStack Public Cloud (SCS); Isolation via OpenStack/RBAC, keine dedizierte Physik beschrieben. (claim/unclear)

EU-based operations & support

DE-Betrieb; Teil der secunet-Gruppe; Compliance-Fokus. (stated)

No critical non-EU dependencies

Open Source/OpenStack, SCS-zertifiziert; „Daten portierbar – ohne Vendor Lock‑in“. (stated)

Ownership / ultimate parent (EU-owned?)

SysEleven ist Tochter von secunet Security Networks AG (DE). (stated)

Controlling interest & FISA 702 risk (jurisdiction ≠ residency)

Deutsche/EU-Jurisdiktion (secunet-Gruppe, DE). (low risk)

Local contracting entity & EU governance (operational model)

Vertrag/Governance über SysEleven (DE), ultimate parent secunet (DE). (stated)

Independent advisory board

Nicht als Advisory Board/Trustee beworben. (N/A)

EU root CA / trust services

EU-Root-CA/Trust-Service nicht beschrieben. (unknown)

BSI C5

Triad aus IT‑Grundschutz, C5‑Testierung, ISO 27001 wird publiziert. (stated)

ISO 27001 / ISMS

ISO 27001 (auf Basis IT‑Baseline Protection) laut SysEleven/BSI-Kommunikation. (stated)

IT-Grundschutz (BSI)

ISO 27001 auf Basis IT‑Baseline Protection (BSI) explizit genannt. (stated)

SecNumCloud (ANSSI)

Nicht bekannt/keine SecNumCloud-Aussage. (N/A)

Open standards / API portability

SCS-zertifiziert; OpenStack APIs; Daten portierbar, kein Vendor Lock‑in. (stated)

Service portfolio depth

OpenStack + IAM + Network-Services + Managed K8s + DBaaS (breiter als reines IaaS). (stated)

Geographic footprint & redundancy (regions/AZ/DCs in EU/DE)

Zertifizierungsnachweise (IT‑Grundschutz/ISO/C5) + umfangreiche Doku. (stated)

Audit reports / evidence pack

RBAC/IAM vorhanden; weitergehende Guardrails nicht als Standardprodukt beschrieben. (partial)

Policy enforcement (guardrails)

IAM (RBAC) + Security Groups; Defaults/Hardening je Projekt, nicht als „secure-by-default“ beschrieben. (partial)

Default deny / secure by default

Mehrfach-zertifiziert (IT‑Grundschutz/ISO/C5) – unabhängige Audits. (stated)

Independent verification (continuous)

OpenStack/Open Source + umfangreiche Docs; geringere Blackbox. (stated)

Blackbox exposure (ops/control plane)

Operator Access Exclusion nicht explizit; Fokus auf IAM/RBAC. (unknown)

Operator access exclusion (workload scope)

Doku: Terraform-Beispiele + API Access; IaC explizit unterstützt. (stated)

IaC & automation (Terraform/OpenTofu, SDKs, APIs)

MetaKube (Managed K8s) + Docs/Howtos unterstützen DevOps; CI/CD nicht als eigenes Produkt. (partial)

Everyday SDLC/DevOps (CI/CD, registry, secrets, K8s)

DBaaS erwähnt Monitoring; weitere Observability-Stack-Komponenten nicht konsistent dokumentiert. (partial)

Observability (logs/metrics/traces, alerting)

Quota API (inkl. Object Storage) dokumentiert. (stated)

Limits/quotas (transparency & increase)

Docs/Howtos + IaC-Beispiele unterstützen Standard-Setups (kein explizites „Landing Zone“-Branding). (partial)

Reference architectures / landing zones

Portabilität explizit („Daten portierbar – ohne Vendor Lock‑in“), OpenStack APIs. (stated)

Unified security stack

DE Footprint: HAM1 (Hamburg), DUS2 (Düsseldorf). (stated)

Energieeffizienz / PUE & Zielwerte

Angaben zu PUE (z. B. < 1.3) und 100% Ökostrom; keine konsolidierten Targets/Reporting. (Quelle: SysEleven Rechenzentren)

CO₂-/Wasser-Reporting + erneuerbare Energiequellen

100% Ökostrom (Angabe) + Effizienz; kein umfassendes Carbon/Wasser-Reporting (Scopes/WUE) in Quelle. (Quelle: SysEleven Rechenzentren)

Service catalog (core/security)

Expand to load the service catalog …