Does Scaleway Work in China? ICP, Data Residency & European Sovereignty
Scaleway runs only in Europe — Paris, Amsterdam, Warsaw and Milan, with no region inside mainland China — so a China-facing site is served offshore with no ICP-filing path, and the European data sovereignty Scaleway sells does nothing for China's PIPL and ICP rules. A compliance-first look at the two doors.
Does Scaleway work in China?
No — not as a compliant way to run a public site inside mainland China. Scaleway is a European cloud with regions only in Europe; it reaches the mainland, but a Scaleway-hosted site has no footing for the ICP filing a public mainland site requires, and the European data sovereignty Scaleway sells does nothing for China's regime.
Scaleway states in its own words that "all ten of Scaleway's data centers are located in Europe, including four in France," across "4 European regions (Paris, Amsterdam, Warsaw, and Milan)," and it markets that "all data remains solely under European jurisdiction, protected by GDPR." That European footing is genuine — and exactly the problem: a site served from Scaleway is offshore to the mainland, so a public site has no ICP footing (State Council Order No. 292; MIIT Order No. 33), and your Chinese users' personal data sits in the EU — a cross-border transfer PIPL governs. The table below is Scaleway's own wording and the rule each line triggers.
This is a risk map, not a verdict — which obligations bite turns on your entity, your data and who your users are. Our China team can map your exposure and the filing path with you →
What Scaleway's own documentation says about China
| Fact | Primary source |
|---|---|
| Scaleway runs only in Europe — there is no mainland-China region. In its own words, "all ten of Scaleway's data centers are located in Europe, including four in France," with "10 Availability Zones spread across 4 European regions (Paris, Amsterdam, Warsaw, and Milan)." None sits inside mainland China, so a public site served to mainland visitors has no in-country hosting resource to bind an ICP filing to — the regime under State Council Order No. 292 and MIIT Order No. 33. | Scaleway — European Sovereign Cloud (scaleway.com), retrieved 2026-10-07; State Council Order No. 292; MIIT Order No. 33 |
| Scaleway's selling point is European data sovereignty — which is exactly what China's regime does not recognize. Scaleway markets that its "GDPR-compliant services remain beyond the reach of extraterritorial laws, ensuring the full sovereignty of your data," and that "all data remains solely under European jurisdiction, protected by GDPR." Genuinely valuable in Europe — and silent on China: a site fully compliant under GDPR is still unfiled and offshore for the mainland. | Scaleway — European Sovereign Cloud (scaleway.com), retrieved 2026-10-07 |
| Your Chinese users' personal data lives in the EU — a cross-border transfer under China's law. Because Scaleway stores data in its European regions, personal information collected from mainland users leaves China — a cross-border transfer PIPL governs (notice, separate consent and a transfer mechanism, Articles 38–43). For a critical information infrastructure operator or large-volume handler, that data must instead be stored in the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty no European region can meet. | PIPL Articles 38–43 & 40; Cybersecurity Law Article 39 (formerly Article 37); Scaleway data-location statements (scaleway.com), retrieved 2026-10-07 |
| Reachability is the smaller half of the question. Scaleway is reachable from the mainland, not blocked — but because it publishes no mainland point of presence and serves China from Europe, that delivery crosses the border and is often slow and uneven. Even when a page loads, reachability is the delivery half; the half that decides whether you may operate is the ICP filing and the data-residency rules above. | Scaleway — European Sovereign Cloud / product availability (scaleway.com), retrieved 2026-10-07 |
Sources verified by the 21YunBox compliance team on 2026-10-07.
For a mainland-China audience, the question about Scaleway is not how fast a French cloud feels — it is whether a site served from it is allowed to operate inside China at all, and where your users’ data is allowed to live. Scaleway settles the geography itself: every one of its regions sits in Europe, and none inside mainland China. A China-facing site on Scaleway is therefore reachable but wholly offshore, which leaves it with no footing for the ICP filing a public mainland site requires, and turns the personal data you hold for Chinese users into a cross-border transfer China’s law governs. The sharpest twist is Scaleway’s own headline promise: the European data sovereignty it sells is real and valuable in Europe — and it does nothing for China’s regime.
Scaleway in China at a glance
| What decides it | In Scaleway's own terms |
|---|---|
| Where it runs | Ten availability zones across four European regions — Paris, Amsterdam, Warsaw and Milan — with "all ten of Scaleway's data centers... located in Europe, including four in France." No region is inside mainland China. |
| What Scaleway sells | European data sovereignty: its "GDPR-compliant services remain beyond the reach of extraterritorial laws," with "all data... solely under European jurisdiction, protected by GDPR." Valuable in Europe — and silent on China's rules. |
| Serving the public | A site served to mainland visitors from inside China needs an ICP filing tied to a mainland hosting resource. With no mainland region, Scaleway offers no ICP-filing path of its own. |
| Your data on Scaleway | Chinese users' personal data stored in Scaleway's EU regions sits offshore — a cross-border transfer PIPL governs, plus an in-mainland storage duty for CIIOs and large-volume handlers that a European region cannot meet. |
| Is it reachable? | Reachable, not blocked — but served from Europe, so the offshore distance shows up as slow, uneven delivery. That is the delivery half, not the legal half that decides whether you may operate. |
Europe-only regions, so nothing to file an ICP against
Scaleway’s footprint is entirely European. On its own pages it states that “all ten of Scaleway’s data centers are located in Europe, including four in France,” spread across “4 European regions (Paris, Amsterdam, Warsaw, and Milan).” Not one of those regions sits inside mainland China, and no amount of configuration adds one.
That geography decides the licensing question before performance is ever on the table. A public-facing website delivered to mainland visitors from inside China turns on an ICP filing (ICP 备案) under State Council Order No. 292 and MIIT Order No. 33, and that filing must attach to a hosting resource that physically sits in the mainland. Scaleway operates none, so there is nothing on Scaleway to file against. “We already run on Scaleway” ends exactly here: a European region can reach China, but reaching it is not the same as being cleared to operate there.
European sovereignty is real — and it is the wrong passport for China
Scaleway’s distinguishing promise is data sovereignty inside Europe. It markets that its “GDPR-compliant services remain beyond the reach of extraterritorial laws, ensuring the full sovereignty of your data,” and that “all data remains solely under European jurisdiction, protected by GDPR.” For a European or GDPR-bound business that is a genuine advantage — and it is precisely why Scaleway is a poor fit for the mainland. European jurisdiction and GDPR describe how data is protected in Europe; they say nothing about China’s ICP regime or its cross-border rules. A deployment that is flawless under GDPR is, from the mainland’s point of view, still an unfiled site on foreign soil. Sovereignty earned in one legal system does not travel to another.
Your China users’ data stays in the EU — and so does the exposure
Serve China from Scaleway and the personal information of your mainland users is stored in Paris, Amsterdam, Warsaw or Milan — outside China. Under China’s Personal Information Protection Law that is a cross-border transfer, and the handler — you, not Scaleway — must give notice, obtain separate consent, and clear one transfer mechanism: a CAC security assessment, the CAC standard contract, or certification (Articles 38–43). If you are a critical information infrastructure operator or a large-volume handler, personal information collected in China has to be stored in the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty that an EU region, however sovereign, cannot satisfy. And because the site is served from offshore, mainland delivery tends to be slow and uneven — but that is the delivery half of the problem, and it is the licensing and residency gaps that no network tuning will close.
This is a risk map, not a verdict: whether you owe an ICP filing, in-country storage, or both depends on what you serve, how much personal data you hold, and who your users are — worth settling with counsel before you build.
Where 21YunBox fits — a compliant overlay, not a migration
You keep building on Scaleway. We add the one piece a Europe-only cloud cannot: compliant, ICP-filed delivery from inside the mainland, placed in front of your existing Scaleway origin — no rebuild, no second codebase, and no move off Scaleway. Our China team maps your ICP and data-residency obligations against your entity and data volumes, then stands up the in-country delivery and storage a lawful China presence needs, while your application and its European data sovereignty stay exactly where they already are.
Related reading:
