OVH SAS Due Diligence

Run due diligence on OVH SAS: check compliance and get alerts when suppliers change.

France · www.ovhcloud.com · 11 vendors

OVH SAS, operating as OVHcloud, is a French cloud computing company that provides public and private cloud products, dedicated servers, web hosting, and other web services globally. Founded in 1999, the company is known for its vertically integrated infrastructure and extensive network of data centers across four continents. It serves over 1.6 million customers worldwide, offering high-performance and cost-effective solutions for managing, protecting, and scaling data.

Resilience scores

Technology vendors

Services catalogue

21 services in catalogue across 5 categories; runs on 11 sub-vendors.

Insights

Last updated 2026-09-26 · revision 20

11 direct vendors, 158 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

12 in-scope frameworks identified; showing 3.

CSA STAR — Evidence found

Evidence: https://us.ovhcloud.com/compliance/, https://cloudsecurityalliance.org/star/registry

SOC 2 (source) — Evidence found

Evidence: https://us.ovhcloud.com/compliance/soc-1-2-3/, https://us.ovhcloud.com/compliance/

French Cybersecurity Law — No public evidence

Evidence: https://www.ssi.gouv.fr/entreprise/qualifications/prestataires-de-services-de-confiance-qualifies/, https://www.ovhcloud.com/en/enterprise/certification-conformity/, https://www.anssi.fr/

Financials

Three-year financials

Financial Resilience Score: 6/10

OVHcloud demonstrates solid operational resilience through its recurring subscription-based revenue model and strong Adjusted EBITDA margins near 38-39%, well above most hyperscaler resale models. The company benefits from vertical integration, designing and manufacturing its own servers and building/owning most data centers, which provides structural cost advantages. Its European sovereignty positioning aligns favorably with EU regulatory tailwinds including GAIA-X, Cloud de Confiance, NIS2, and DORA, making it attractive to public sector, banks, and healthcare organizations. The founder-controlled ownership structure (Klaba family retaining majority voting rights) supports long-term strategic orientation. However, financial resilience is constrained by high capital intensity, with heavy capex on data centers, servers, and network leading to elevated depreciation and amortization that suppresses EBIT and free cash flow. Statutory EBIT has been thin or slightly negative, and net results have typically been negative or near zero over FY2022-FY2024. The group carries meaningful net debt post-IPO with leverage around 2x Net debt/adjusted EBITDA. Scale disadvantage versus hyperscalers (AWS, Azure, Google Cloud) remains a competitive concern, and the share price has traded well below the €18.50 IPO price, limiting equity-financed acquisitions.

Key strengths: Recurring, subscription-like revenue with high gross retention, Adjusted EBITDA margins near 38-39%, Vertical integration with self-manufactured servers and owned data centers, European sovereignty positioning benefiting from EU regulatory tailwinds, Founder-controlled with long-term strategic orientation, Diversified product mix across Bare Metal, Private Cloud, and Public Cloud, 1.6+ million customers across 140+ countries with no material single-customer concentration

Risk factors: High capital intensity leading to negative or slim free cash flow, Scale disadvantage vs hyperscalers (AWS, Azure, Google Cloud), Operational/concentration risk highlighted by March 2021 SBG2 data-center fire, FX exposure as international revenue expands (USD, CAD, GBP), Meaningful net debt post-IPO with leverage around 2x Net debt/adjusted EBITDA, Share price trading well below IPO price of €18.50, Statutory EBIT thin or slightly negative due to high D&A

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report