Schwarz Digits Cloud GmbH & Co. KG Due Diligence

Run due diligence on Schwarz Digits Cloud GmbH & Co. KG: check compliance and get alerts when suppliers or ownership change.

Germany · owned by Schwarz Gruppe (Germany) · stackit.com · 15 vendors

STACKIT is the cloud brand of Schwarz Digits Cloud GmbH & Co. KG, operating as a European sovereign cloud provider and hyperscaler. It offers scalable, GDPR-compliant cloud services — including compute, storage, networking, databases, AI, and security — hosted exclusively in European data centers. STACKIT serves enterprises across various industries seeking digital sovereignty and independence from non-European cloud providers.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-25 · revision 3

15 direct vendors, 134 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

13 in-scope frameworks identified; showing 3.

BDSG — Evidence found

Evidence: https://stackit.com/de/datenschutz, https://stackit.com/de/compliance

SOC 2 (source) — Evidence found

Evidence: https://stackit.com/de/warum-stackit/vorteile/zertifikate, https://stackit.com/de/warum-stackit/vorteile/datensouveraenitaet

ISO 27001 (source) — Evidence found

Evidence: https://stackit.com/de/warum-stackit/vorteile/zertifikate, https://stackit.com/de/asset/download/50680/file/ISO%253AIEC%252027001_2022_DE.pdf?version=2, https://stackit.com/de/asset/download/41727/file/BSI-IGZ-0691-2025-STACKIT-05-2025.pdf?version=2

Financials

Three-year financials

Financial Resilience Score: 8/10

Schwarz Digits Cloud GmbH & Co. KG (STACKIT) benefits from exceptionally strong financial backing as a subsidiary of the Schwarz Group, one of Europe's largest privately held companies with €185.6 billion in FY2025 consolidated revenue and approximately 604,000 employees across 34 countries. This parent-company backing provides a long-term funding horizon that VC-backed cloud competitors lack, and STACKIT is explicitly promoted as independent of external investors. Captive demand from Lidl and Kaufland (14,500+ stores) provides stable, in-house workload volumes that de-risk data center utilization. High-profile external anchor contracts further strengthen resilience, including an EU Commission framework contract worth up to €180 million, a €250 million German BMDS sovereign AI-platform mandate, and partnerships with KPN, Bosch Mobility, Zscaler, and CrowdStrike. Strong regulatory positioning (GDPR-native, BSI C5 Type 2, ISO 27001, TISAX Level 3, DORA-conform, CLOUD Act-exempt) provides genuine differentiation versus US hyperscalers for EU public sector and regulated industries. However, STACKIT remains sub-scale versus AWS, Azure, and GCP, which each invest tens of billions annually in capex. The company is in a capital-intensive growth phase with new campus buildouts, data centers, and geographic expansion. Historical customer concentration in intra-group Schwarz consumption and limited financial transparency as a private KG are additional considerations. Standalone financial figures are not publicly disclosed, limiting external validation of the resilience thesis.

Key strengths: Backed by Schwarz Group with €185.6B FY2025 revenue and no external investors, Captive demand from Lidl and Kaufland (14,500+ stores across 34 countries), Anchor external contracts: EU Commission (€180M), German BMDS (€250M), KPN partnership, Strong regulatory positioning: GDPR, BSI C5 Type 2, ISO 27001, TISAX L3, DORA, CLOUD Act-exempt, Owns 7 data centers in Germany and Austria (not a reseller), Long-term funding horizon from private parent company

Risk factors: Sub-scale versus hyperscalers (AWS/Azure/GCP) with orders of magnitude less capex, Limited catalog breadth (~40 services vs 200+ at hyperscalers), Geographic footprint limited to Germany and Austria, Capital-intensive growth phase implying negative FCF at STACKIT level, Historical customer concentration in intra-group Schwarz consumption, Intense and expensive talent competition in Germany, Limited financial transparency as a private KG, Execution risk on European hyperscaler positioning dependent on EU regulatory alignment

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report