TL;DR
GrapheneOS said it has removed its servers from France and is leaving OVHcloud, citing worries about France's approach to digital privacy and possible demands for access to encrypted services. The move follows broader debate over cloud sovereignty, an EU legislative proposal dubbed "Chat Control," and an ongoing legal dispute involving OVHcloud in Canada.
What happened
GrapheneOS, the privacy-focused mobile operating system project, announced it no longer operates servers in France and is in the process of moving away from OVHcloud. The project framed the decision as driven by fears that French authorities expect access to encrypted devices and services, and that France may not be a safe jurisdiction for open-source privacy initiatives. OVHcloud did not supply a formal reply to The Register; its founder, Octave Klaba, posted that no incident had occurred on OVHcloud’s infrastructure and said the project's description was confusing. The dispute reflects wider tensions over data sovereignty: France has supported a proposed EU measure sometimes called "Chat Control," which critics say could require service providers to enable scanning or access, while Germany has opposed it. Separately, OVHcloud faces legal action in Canada over data held on French servers, a case observers warn could set a precedent for cross-border access to customer data.
Why it matters
- Privacy-focused projects may avoid hosting in jurisdictions perceived to allow government access to encrypted services, affecting where open-source projects operate.
- Legal rulings over cross-border data access could weaken practical guarantees of cloud sovereignty, forcing providers and customers to reassess data protection strategies.
- Progress on EU-level proposals like the so-called "Chat Control" could change provider obligations for scanning or enabling access to user content across member states.
- Reputational and operational impacts on cloud providers like OVHcloud may drive industry discussions about how to deliver genuine sovereignty assurances to customers.
Key facts
- GrapheneOS announced it no longer has active servers in France and is leaving OVHcloud.
- The project cited fears that French authorities expect backdoors or device access, making France unsafe for privacy-first open-source work.
- OVHcloud did not provide a formal response to The Register; CEO Octave Klaba said nothing had happened to OVHcloud servers and described the project's message as confusing.
- France has backed a proposed EU measure referred to in coverage as "Chat Control," which critics say could require providers to enable content scanning; Germany has opposed the proposal.
- OVHcloud is involved in legal proceedings in Canada over data stored on French servers, a case observers warn could create a precedent for compelled access.
- The Register noted OVHcloud experienced a Strasbourg datacenter fire less than five years ago; the current dispute is framed as legal and political rather than technical.
- Privacy-focused organizations such as Proton have criticized France's stance toward privacy-first companies and open-source projects.
- Industry figures, including the CEO of UK cloud provider Civo, have said the Canadian case could force a practical rethink of how sovereignty is protected.
What to watch next
- Outcome of the legal action in Canada involving OVHcloud and potential implications for cross-border data access.
- Progress and final form of the proposed EU "Chat Control" legislation and any obligations it may impose on providers.
- Whether other privacy-focused projects or companies decide to relocate infrastructure away from France or OVHcloud in response to policy and legal developments.
Quick glossary
- GrapheneOS: An open-source mobile operating system focused on privacy and security for mobile devices.
- OVHcloud: A European cloud infrastructure provider offering servers, storage, and related services.
- Cloud sovereignty: The principle that data stored in the cloud should remain subject to the laws and protections of a trusted jurisdiction.
- Backdoor: A method by which authorities or others might gain access to encrypted systems or data without the user's consent.
- Chat Control: A proposed EU legislative approach referenced in coverage that critics say could require providers to enable scanning or access to user communications.
Reader FAQ
Did GrapheneOS stop using OVHcloud entirely?
GrapheneOS said it has no active servers in France and is continuing the process of leaving OVHcloud.
Did OVHcloud confirm any security incidents or server compromises?
OVHcloud did not provide The Register with a formal response; its founder stated no incident had occurred on OVHcloud servers.
Is France legally requiring backdoors in services now?
The source says France supports a proposed EU measure nicknamed "Chat Control," which critics argue could require providers to enable access; whether such requirements become law is not confirmed in the source.
Will other projects follow GrapheneOS out of France?
Not confirmed in the source.
SECURITY 52 GrapheneOS bails on OVHcloud over France's privacy stance Project cites fears of state access as cloud sovereignty row deepens Richard Speed Fri 28 Nov 2025 // 15:44 UTC French cloud outfit OVHcloud…
Sources
- GrapheneOS bails on OVHcloud over France's privacy stance
- GrapheneOS bails on OVHcloud over France's privacy …
- GrapheneOS migrates workloads off of OVH, cites issues …
- GrapheneOS exits France — what it means for encryption
Related posts
- UK tech minister pledges more whole-government megadeals after £9bn Microsoft pact
- DJ Garman drops the ball instead of the bass in AWS re:Invent keynote
- Microsoft faces UK tribunal over alleged multibillion‑pound cloud overcharges