If you look at this list https://www.ripe.net/publications/documentation/cloud-technology-status/, even without access to the actual contracts, I would imagine that most of the contractual parties are European companies. That is, NCC buys services from entities incorporated in an EU country even if they're subsidiaries of a foreign parent.

Now, how much should one insist to be European? Is incorporating sufficient? Based on other responses there seem to be people implying it isn't. So, should one allow foreign ownership? If so, how many % should be allowed? What should happen should the company be acquired? If the company isn't listed, how could you even verify this, realistically? What about the company's subprocessors? Can they be foreign? 

So far it seems like NCC has been doing what is commercially reasonable. Most of the data is public one way or another or can be looked up from alternative sources.



Kaj

Sent from my iPad

From: Clement Cavadore via members-discuss <members-discuss@ripe.net>
Sent: Wednesday, May 7, 2025 10:38 AM
To: Rudolf E. Steiner <r.steiner@nemox.net>; members-discuss@ripe.net <members-discuss@ripe.net>
Subject: [members-discuss] Re: Revisited: Concerns about cloud usage at RIPE NCC
 
Hi everyone,

On Wed, 2025-05-07 at 00:01 +0200, Rudolf E. Steiner via members-
discuss wrote:
> > So, since the RIPE NCC applies a risk-based approach, my question
> > would be: What contingency plan is there in place for the RIPE NCC?
> > How quickly can they switch to a self hosted or "hosted in Europe"
> > model, while still providing essential services to the members?
>
> I fully support the concerns raised in this thread regarding the
> reliance on US-based cloud services, especially in light of recent
> political developments that undermine the foundations of the
> Transatlantic Data Privacy Framework.

I also fully support the idea. As a critical infrastructure provider,
and especially relying mostly on european entities fund, I think that
the NCC should focus on the idea to work with eu-based companies, even
if it's not cheaper. European companies should act like that, imho.

Kind regards,
--
Clément Cavadore
-----
To unsubscribe from this mailing list or change your subscription options, please visit: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ripe.net%2Fmailman3%2Flists%2Fmembers-discuss.ripe.net%2F&data=05%7C02%7C%7C1777c8d5783542083d6a08dd8d3a26ea%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638822003083715336%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C4000%7C%7C%7C&sdata=KdciwhRjuz4kbr%2BffK28rr%2FShRoNoFM7OkFkmEklbGk%3D&reserved=0
As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings.
More details at: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fmembership%2Fmail%2Fmailman-3-migration%2F&data=05%7C02%7C%7C1777c8d5783542083d6a08dd8d3a26ea%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638822003083735722%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C4000%7C%7C%7C&sdata=8AceqP7kwqWhGgqbS%2BqoHuYfWKm1CAVV2PcTAuA4GdU%3D&reserved=0