Gcore

Luxembourg · gcore.com · 17 vendors

Gcore is a global provider of edge AI, cloud, network, and security solutions, headquartered in Luxembourg. The company offers a range of services including content delivery network (CDN), cloud computing, AI infrastructure, DDoS mitigation, and web application and API protection. Gcore manages a global infrastructure designed to provide enterprise-level businesses with first-class edge and cloud-based services internationally.

Resilience scores

Technology vendors

Services catalogue

5 services in catalogue across 4 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-07-06 · revision 2

17 direct vendors, 235 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Gcore exhibits high migration readiness primarily due to its highly cloud-native and containerized technology stack. The extensive use of Kubernetes, Docker, Container as a Service (CaaS), Function as a Service (FaaS), and Serverless Edge Computing indicates a modular and flexible architecture that is well-suited for migration to various cloud environments. The adoption of Infrastructure as Code (Terraform) streamlines infrastructure provisioning and management, significantly simplifying migration processes. Gcore's offerings like 'Everywhere AI' and 'AI Cloud Stack' support hybrid environments, demonstrating inherent flexibility for deployments across on-premises, Gcore Cloud, and public clouds. The availability of S3-compatible object storage and various managed services (PostgreSQL, DNS, Logging) further reduces migration complexity. Regulatory compliance with ISO/IEC 27001, PCI DSS, and GDPR also provides a solid foundation for managing compliance requirements during migration. Key challenges and unknowns include the unspecified data residency requirements, which can significantly impact migration strategies. The vendor lock-in risk remains unknown as the total number of unique vendors for the 21 services is not provided, making it difficult to assess the complexity of disentangling from existing vendor relationships. Additionally, the absence of financial stability data makes it challenging to evaluate the company's capacity to fund a significant migration effort.

Compliance

9 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Gcore is headquartered in Luxembourg (EU) and operates across multiple EU member states (Lithuania, Poland, Cyprus), making GDPR mandatory and directly enforceable by the Luxembourg CNPD (Commission Nationale pour la Protection des Données) as lead supervisory authority. As a cloud, CDN, and AI infrastructure provider, Gcore processes substantial volumes of personal data both as a data controller (employee data, customer account data, billing data) and as a data processor (customer workloads hosted on Gcore infrastructure). The scale of operations — 600+ employees, 210+ PoPs, enterprise customers like Microsoft, Orange, and ProSieben — significantly elevates the risk profile. Non-compliance penalties can reach €20M or 4% of global annual turnover. The company does publish a Privacy Policy and references GDPR compliance, but no independent audit evidence or DPO appointment confirmation was publicly accessible. Risk is rated High due to the volume and sensitivity of data processed, the cross-border nature of operations, and the role as both controller and processor for enterprise clients.

Evidence: https://gcore.com/legal?tab=privacy_policy, https://gcore.com/legal, https://gcore.com/secure-infrastructure, https://gcore.com/about, https://gcore.com/case-studies/prosieben, https://cnpd.public.lu/en.html

ISAE 3000 (source) — Assessment Required

ISAE 3000 is an international assurance standard used for non-financial assurance engagements, including sustainability reporting, data privacy attestations, and controls reporting (analogous to SOC 2 in non-US jurisdictions). For a Luxembourg-headquartered EU cloud provider, ISAE 3000 (or its derivative ISAE 3402 for service organizations) may be relevant as an alternative or complement to SOC 2 for European enterprise customers. Risk is Low because: (1) ISAE 3000 is not legally mandated; (2) it is less commonly required than SOC 2 or ISO 27001 in the cloud infrastructure sector; (3) no evidence of ISAE 3000 engagements was found; (4) Gcore's primary compliance frameworks are likely GDPR, NIS2, and ISO 27001.

Evidence: https://gcore.com/secure-infrastructure, https://gcore.com/legal

EU AI Act (source) — Assessment Required

The EU AI Act entered into force on August 1, 2024, with phased application through 2027. Gcore is a significant AI infrastructure provider offering GPU Cloud, Everywhere AI, Everywhere Inference, and AI Cloud Stack products. As a provider of general-purpose AI infrastructure and potentially AI models/systems, Gcore may have obligations under the EU AI Act as: (1) a provider of general-purpose AI models (GPAI) if it develops or deploys AI models; (2) a deployer of AI systems in its own operations; (3) an infrastructure provider enabling customers to deploy AI systems. The ProSieben case study demonstrates Gcore's active role in AI inference at scale. Risk is Medium because the Act's full application to infrastructure providers is still being clarified, but Gcore's AI product portfolio is substantial and growing.

Evidence: https://gcore.com/gpu-cloud, https://gcore.com/everywhere-ai, https://gcore.com/everywhere-inference, https://gcore.com/ai-cloud-stack, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202401689, https://gcore.com/case-studies/prosieben

Financials

Three-year financials

Financial Resilience Score: 6/10

Gcore is a privately held, Luxembourg-domiciled cloud/edge/AI infrastructure company that does not publicly disclose consolidated audited financials. What is publicly known indicates a company with strong strategic backing, a diversified product portfolio, and rapid growth—particularly in its AI/GPU cloud segment, which the company claims grew ~150% year-over-year through 2023-2024. The June 2024 Series A round of USD 60 million led by Wargaming, at a reported ~USD 500 million post-money valuation, provides an equity cushion and validates its strategic positioning. However, financial resilience is tempered by significant capex intensity inherent to cloud/GPU/edge infrastructure, meaningful competitive pressure from hyperscalers (AWS, Azure, GCP), specialized CDNs (Cloudflare, Akamai, Fastly), and GPU-cloud pure-plays (CoreWeave, Lambda, Nebius) that are far better capitalized. Gcore's USD 60m Series A is materially smaller than the billions raised by direct GPU-cloud competitors, potentially constraining fleet expansion pace. Additional considerations include limited financial transparency, unknown customer concentration risk, and reputational/geopolitical due-diligence questions stemming from the company's original G-Core Labs Russian technology origins (since restructured under Luxembourg S.A.). Overall, the company appears to have solid operational momentum and marquee enterprise references (Microsoft, Orange, LALIGA, ProSieben), but the absence of audited consolidated figures limits confidence in a higher resilience score.

Key strengths: USD 60M Series A raised in June 2024 led by Wargaming at ~USD 500M valuation, Strong strategic backers including Wargaming, Constructor Capital, Han River Partners, Diversified product portfolio across CDN, edge cloud, bare metal, security, streaming, and AI/GPU cloud, Owned infrastructure moat: 210+ PoPs, 50+ cloud locations, 200+ Tbps network capacity, Marquee enterprise customer base (Microsoft, Orange, Wargaming, Avast, LALIGA, ProSieben, RTL), AI/GPU cloud tailwind; recognized as Leader in 2025 GigaOm Radar for AI Infrastructure, European (Luxembourg) domicile advantageous for EU data-sovereignty concerns, Company-reported ~150% YoY growth in AI/GPU cloud; business tripled 2021-2023

Risk factors: Heavy capex intensity for GPU/edge/cloud infrastructure creates cash burn risk if growth slows, Competitive pressure from hyperscalers (AWS, Azure, GCP) and better-capitalized GPU-cloud competitors (CoreWeave, Lambda, Nebius), Historical Russian technology origins (G-Core Labs) may raise reputational/geopolitical due-diligence concerns, Limited financial transparency; abridged private filings only, Unknown customer concentration—large names like Microsoft could represent material revenue share, USD 60m Series A is smaller than direct competitors' funding rounds, constraining GPU expansion pace, No publicly disclosed audited consolidated financials for revenue, EBIT, or equity

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report