# Scaleway privacy rating

French cloud provider, part of the Iliad group, offering virtual instances, bare-metal servers, Kubernetes, storage and AI infrastructure in European datacenters.

## Summary

Scaleway scores 30 out of 100 (grade F) on the server hosting criteria. It meets 3 of 12 criteria: TLS configuration, Reverse DNS and IPv6. It partly meets independent audit, security headers and mail-friendly (port 25). It does not meet open source, no trackers or telemetry, no ads or data sales, transparency report, tells users about requests and anonymous payment. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://www.scaleway.com/en/
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Grade: F (30/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The cookie policy lists Hotjar, HubSpot, LinkedIn and Google Ads cookies, loaded after consent. | https://www.scaleway.com/en/cookie/ |
| No ads or data sales | No | Optional marketing and advertising personalization cookies are used, though the privacy policy says personal data is not resold. | https://www.scaleway.com/en/cookie/ |
| Independent audit | Partial | Scaleway states ISO/IEC 27001 and HDS certification, but no audit report is public. | https://www.scaleway.com/en/security-and-compliance/ |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=console.scaleway.com&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=console.scaleway.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Partial | SMTP ports are blocked by default and can be opened in the console after identity verification. | https://www.scaleway.com/en/docs/instances/how-to/send-emails-from-your-instance/ |
| Reverse DNS | Yes | Reverse DNS for flexible IPv4 and IPv6 addresses is set in the console or through the IPAM API. | https://www.scaleway.com/en/docs/instances/how-to/configure-reverse-dns/ |
| IPv6 | Yes | Flexible IPv6 addresses are generally free, while IPv4 addresses are billed. | https://www.scaleway.com/en/docs/ipam/reference-content/understanding-ip-billing/ |
| Anonymous payment | No | Payment is by card or SEPA direct debit. Cryptocurrency is not accepted. | https://www.scaleway.com/en/docs/billing/faq/ |

Source: https://privacyratings.com/server-hosting/scaleway/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/scaleway.md