A small European team, building security that proves itself.
CloudSoul is a Luxembourg-headquartered security and compliance company. We were started by people who ran security programmes inside regulated European organisations and grew tired of watching good security work stay out of step with governance, risk and compliance.
The people behind CloudSoul.
Together we combine deep expertise in infrastructure technologies, regulatory compliance, and information security with the engineering and commercial experience to build a platform European operators can trust, all from years inside highly regulated environments.
Security and compliance should be one job. They are not.
Most security programmes are built backwards. Start from a framework checklist, layer in tools to tick the boxes, file the evidence separately. What comes out is a posture that satisfies an auditor on paper and a compliance effort that restarts every cycle.
CloudSoul starts from the other end. We assess what can actually hurt your business, then size the controls to the people, budget and time you have. Every recommendation traces to a risk, and the tooling to close the technical ones is already in the platform. We don't present a perfect policy nobody follows.
Compliance and security operations share one system because they describe the same work. A patch applied, an access review completed, a finding closed: each one produces the evidence for the control it maps to. The proof is a by-product of the work, not a parallel workstream.
We are based in Luxembourg by choice. EU-owned infrastructure, not an EU region of a US-owned provider, and no US Cloud Act exposure are hard requirements for the operators we serve. Open-source models on European infrastructure and a platform that runs from day one follow from the same decision.
Why Luxembourg
Luxembourg is a small jurisdiction with a disproportionately developed regulatory ecosystem. It hosts ILR (the national regulator for NIS2 transposition), the Luxembourg House of Cybersecurity, CIRCL (the national CSIRT), and a density of regulated financial-services operators that keeps compliance infrastructure sharp.
We’re here because the regulatory proximity is useful: we can walk into the CSIRT, not just email them. We’re here because the data-residency claim is load-bearing for our customers. We’re here because the Grand Duchy takes cybersecurity policy seriously enough to fund it. And we’re here because the multilingual workforce (English, French, German, Luxembourgish) matches our target customer geography naturally.
Everything a security-sensitive buyer needs.
Sub-processors, where your data is stored, DPAs and vulnerability reports: our security contact takes buyer due-diligence questions and answers them. security.txt is published.
Talk to us.
Press
[email protected]- Name
- CloudSoul S.à r.l.
- Office
- 9 Rue du Laboratoire, L-1911 Luxembourg, Luxembourg
- RCS
- B288476
- VAT
- LU35952049