# Nebius

The Ultimate AI Cloud — Build and scale AI faster on a cloud engineered from silicon to API.

Source: https://wheredoirunthis.com/products/nebius · JSON: https://wheredoirunthis.com/api/products/nebius · Read on 2026-10-15

## At a glance

- Type: GPU cloud
- Kind: Hosted
- Isolation: Virtual machine
- Free tier: No
- Starting price: Not disclosed
- GPU: Yes
- Regions: 10
- Coverage: 28 of 61 assessed capabilities supported
- Agent readiness: read 11 of 11 signals, drive 9 of 11 signals

## Links

- Homepage: https://nebius.com/
- Docs: https://docs.nebius.com/
- Pricing: https://nebius.com/prices
- Repository: https://github.com/nebius

## Pricing

- Model: Usage; on-demand and dynamic preemptible spot; commitments up to 35% discount
- Unit: GPU-hour; CPU instance-hour; storage GiB-month
- Free tier: No

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Usage — on-demand GPU compute | H100 $4.50 / H200 $5.40 / B200 $8.50 / B300 $9.50 per GPU-hour; dynamic spot available | Managed Kubernetes and Soperator software free; infrastructure consumption billed; Managed Kubernetes and Soperator software free; infrastructure consumption billed | CPU advertised from $0.06 Intel/$0.13 AMD per instance-hour, not per-vCPU-hour; no persona cost decomposition without VM shape. Taxes excluded. $25 initial payment is account funding, not monthly base fee. [source](https://nebius.com/prices) |

- Card required: No
- Source: https://nebius.com/prices

## Website design

Desktop public website · assessed 2026-10-15

Complete assessment.

Desktop public pages combine oversized navy sans-serif headlines, lime branding and luminous abstract imagery with polished business layouts; documentation switches to a charcoal header and pale-blue, card-based service directory.

- Styles: Corporate
- Landing page: captured
- Pricing: captured
- Docs: captured

## Runtime

- **GPU & accelerators**: Yes — "NVIDIA H100/H200/B200/B300, RTX PRO 6000, L40S; GB200/GB300 NVL72 contact sales." [source](https://nebius.com/prices) (confidence: high)
- **BYOC (Bring your own cloud)**: No — "No customer-cloud deployment advertised; cloud interconnect is private connectivity, not BYOC" [source](https://nebius.com/llms.txt) (confidence: medium)
- **Secrets management**: SecretStash (formerly MysteryBox) + KMS [source](https://docs.nebius.com/mysterybox/overview.md) (confidence: high)
- **Storage options**: Not documented — "USD/GiB-month; object Standard egress is separately $0.015/GiB. Other networking free as disclosed." [source](https://nebius.com/prices) (confidence: high)
- **Supported workloads**: AI training, fine-tuning, data processing, batch/real-time inference, interactive notebooks; VMs and managed Kubernetes/Soperator. [source](https://docs.nebius.com/serverless/overview.md) (confidence: high)
- **Persistence**: Persistent VM disks/shared FS/object storage; Devlab workspace persists stop/restart; endpoint disk removed on stop/delete. [source](https://docs.nebius.com/serverless/overview.md) (confidence: high)
- **Data jurisdiction**: Nine public region IDs in Finland, Spain, France, Israel, US and UK; one private Iceland region for existing deployments. — "10 region IDs, not 6 datacenter locations. Service/GPU availability differs; preserve matrix evidence." [source](https://docs.nebius.com/overview/regions.md) (confidence: high)
- **Resource limits & quotas**: VM, storage and InfiniBand quotas count throughout VM lifecycle, even while stopped; increase requests depend on tenant capacity. [source](https://docs.nebius.com/compute/resources/quotas-limits.md) (confidence: high)
- **SDK languages**: go, python, javascript/typescript [source](https://docs.nebius.com/sdk/index.md) (confidence: high)
- **Network & egress controls**: pass — "pass; ALLOW/DENY packet-level rules, CIDR/port/protocol; default group allows all traffic" [source](https://docs.nebius.com/vpc/security-groups/overview.md) (confidence: high)
- **Snapshots & forks**: Yes — "Disk snapshots, including while VM runs; not live memory/process-state checkpoints." [source](https://docs.nebius.com/compute/storage/disk-snapshots.md) (confidence: high)
- **Deployment methods**: dashboard, cli, sdk, api, container-image, template — "Terraform provider also documented; retain prose note rather than noncanonical deploy_interface token. Docs MCP read-only; beta CLI MCP operations available." [source](https://docs.nebius.com/llms.txt) (confidence: high)
- **Isolation**: Virtual machine — "vm — Kubernetes tenant clusters isolated at VM level; GPU VM compute. Hypervisor undisclosed." [source](https://nebius.com/trust-center) (confidence: medium)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Not supported | "Proposed docs agents.md currently returns 404; no installable skills found in the complete AI Cloud docs corpus." [source](https://docs.nebius.com/agents.md) |
| AI app builder | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Autonomous QA agent | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Built-in coding agent | Not supported | "Echo explains services and operates resources with approval; not a first-party code-authoring agent." [source](https://docs.nebius.com/overview/nebius-echo.md) |
| BYOK for LLMs | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Credential-injection proxy | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| LLM gateway | Not supported | "Token Factory is a separate first-party inference product, not a multi-provider proxy; do not carry prior partial gateway score." [source](https://nebius.com/llms.txt) |
| MCP client | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| MCP-server hosting | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| MCP server | Supported | "Hosted docs MCP https://docs.nebius.com/mcp; beta CLI operations MCP github.com/nebius/mcp-server" [source](https://docs.nebius.com/docs-ai.md) |
| Model inference API (first-party) | Partially supported | "Nebius Token Factory provides OpenAI-compatible hosted models billed per token; explicitly separate sibling SKU, not AI Cloud GPU rentals." [source](https://nebius.com/llms.txt) |
| Preinstalled coding agent | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "Expose a service without configuring DNS and TLS certificates; https://<service_name>-<tunnel_masked_ID>.tunnel.applications.<region>.nebius.cloud" [source](https://docs.nebius.com/tunnels/overview.md) |
| Custom domains | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Direct public IPv6 | Not supported | "Private/public VM addresses documented as IPv4; no direct public IPv6 found." [source](https://docs.nebius.com/compute/virtual-machines/network.md) |
| Edge KV store | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Egress controls | Supported | "Security groups serve as a firewall controlling ingress and egress at packet level; ALLOW or DENY CIDRs, ports, protocols." [source](https://docs.nebius.com/vpc/security-groups/overview.md) |
| Email send / receive | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Public preview URLs | Supported | "Each service maps a public tunnel URL to a local HTTP or TCP endpoint; persistent tunnel URLs, not PR preview environments." [source](https://docs.nebius.com/tunnels/overview.md) |
| Private networking | Supported | "Isolating Nebius AI Cloud resources in separate networks" [source](https://docs.nebius.com/vpc/networking/isolation.md) |
| Built-in reverse proxy | Supported | "The edge forwards the request back through the existing agent connection." [source](https://docs.nebius.com/tunnels/overview.md) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Supported | "Nebius IAM workload tokens; workloads exchange access tokens through STS for signed ID tokens" [source](https://docs.nebius.com/iam/wif/index.md) |
| BYOC | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Deploy into customers' VPCs | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Secrets management | Supported | "SecretStash (formerly MysteryBox) stores encrypted sensitive data" [source](https://docs.nebius.com/mysterybox/overview.md) |
| Self-host / OSS core | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Sharing | Supported | "Expose VM services on public HTTPS URLs; application access control must be configured separately" [source](https://docs.nebius.com/tunnels/overview.md) |
| SSO / SAML | Supported | "Single sign-on supports Entra ID, JumpCloud, Okta, Keycloak" [source](https://docs.nebius.com/iam/federations/saml-sso.md) |
| Teams | Supported | "Tenants, users, groups and service accounts" [source](https://docs.nebius.com/iam/service-accounts/manage.md) |
| Workload identity | Supported | "OIDC discovery; workload exchanges Nebius access token for signed ID token; external platform issues short-lived credentials" [source](https://docs.nebius.com/iam/wif/index.md) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "Official Nebius AI Cloud CLI" [source](https://docs.nebius.com/cli/index.md) |
| E2B-compatible API | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Filesystem API | Not supported | "S3 object operations are not remote VM filesystem operations; SSH and mounts are documented." [source](https://docs.nebius.com/object-storage/index.md) |
| Git deploy | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| HTTP data API | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| OpenAPI spec | Supported | "OpenAPI spec https://api.nebius.cloud/openapi.json; browser-fetched valid 3.0.3, 443 paths" [source](https://docs.nebius.com/rest-api/reference.md) |
| Private container registry | Supported | "Container Registry, authentication, registries and Docker images documented" [source](https://docs.nebius.com/llms.txt) |
| Public API | Supported | "Nebius AI Cloud REST API, plus gRPC API" [source](https://docs.nebius.com/rest-api/index.md) |
| SDK | Supported | "Official Go, Python and JavaScript SDKs" [source](https://docs.nebius.com/sdk/index.md) |
| SSH access | Supported | "How to connect to virtual machines in Nebius AI Cloud" [source](https://docs.nebius.com/compute/virtual-machines/connect.md) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Supported | "Create a user data configuration using cloud-init format" [source](https://docs.nebius.com/compute/virtual-machines/create.md) |
| Desktop / computer-use sandbox | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| GPU compute | Supported | "H100 $4.50, H200 $5.40, B200 $8.50, B300 $9.50 per GPU-hour" [source](https://nebius.com/prices) |
| Live-state (memory) snapshots | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Multi-region | Supported | "Nine public regions and one private Iceland region" [source](https://docs.nebius.com/overview/regions.md) |
| Object storage | Supported | "Object Storage is an S3-compatible service" [source](https://docs.nebius.com/object-storage/index.md) |
| Persistent disk | Supported | "Shared Filesystem; block volumes; persistent storage" [source](https://nebius.com/prices) |
| Sandbox templates / custom images | Supported | "Reusable VM boot images from disks/snapshots/uploaded image, Packer; registry definition includes VM custom images and snapshot import, not only OCI sandboxes." [source](https://docs.nebius.com/compute/storage/custom-disk-images.md) |
| Scale to zero | Partially supported | "Manual stop removes compute charges for Devlabs/endpoints; stopped endpoint has no compute/storage charge. No automatic idle suspend or wake-on-request documented; raw VM storage remains billable." [source](https://docs.nebius.com/serverless/overview.md) |
| Selectable isolation runtime | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Snapshots / forking | Supported | "A disk snapshot captures a point-in-time copy of a disk. To create a snapshot, you do not need to stop a virtual machine." [source](https://docs.nebius.com/compute/storage/disk-snapshots.md) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Ephemeral instant DB (no-signup) | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| First-party database | Supported | "Managed Service for PostgreSQL" [source](https://docs.nebius.com/llms.txt) |
| Vector search | Supported | "Managed PostgreSQL preinstalled pgvector: CREATE EXTENSION vector and distance queries" [source](https://docs.nebius.com/postgresql/databases/extensions.md) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Built-in observability | Supported | "First-party metrics, logging and tracing" [source](https://docs.nebius.com/observability/index.md) |
| Preview environments | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Scheduled tasks | Partially supported | "Slurm batch jobs and Serverless AI jobs are documented; no native cron/timed scheduling primitive found in complete docs corpus." [source](https://docs.nebius.com/llms.txt) |
| Project template marketplace | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |
| Durable workflows | Not supported | "Not advertised in the fetched AI Cloud documentation index, complete llms-full corpus, landing, and relevant service pages. No evidence found; not a claim of technical impossibility." [source](https://docs.nebius.com/llms.txt) |

## Agent readiness

### Read: 11 of 11 signals present

11/11 signals (7 full, 4 partial)

- Llms txt: pass — "https://nebius.com/llms.txt — Substantive apex directory plus extensive docs index; full credit under rubric v3. Confidence: high."
- Llms full txt: pass — "https://docs.nebius.com/llms-full.txt — Complete 4.6MB documentation corpus fetched; bounded title/source index retained. Confidence: high."
- Robots AI policy: partial — "https://nebius.com/robots.txt — User-agent * Allow /; no explicit major-AI-UA directives. Confidence: high."
- JSON LD: partial — "https://nebius.com/ — Corporation, WebSite and WebPage JSON-LD; no Product/SoftwareApplication offers. Confidence: high."
- Sitemap: pass — "https://nebius.com/server-sitemap.xml — Nontrivial URL sitemap; sitemap index also points to docs sitemap. Confidence: high."
- Meta quality: pass — "https://nebius.com/ — The Ultimate AI Cloud; descriptive title, description and OG metadata. Confidence: high."
- Markdown negotiation: pass — "https://docs.nebius.com/overview/regions — Accept: text/markdown serves raw markdown from docs page; apex remains HTML. Confidence: high."
- Content efficiency: partial — "https://nebius.com/ — Landing raw HTML 402909 bytes, script/style excluded, tags stripped and entities unescaped, whitespace normalized: readable text ratio 4.872%; partial per rubric. Recommendation text saying before normalization is a wording error: measurement is after normalization. Confidence: medium."
- Docs discoverable: pass — "https://nebius.com/ — Developers navigation and Tech docs links to docs.nebius.com. Confidence: high."
- Pricing machine readable: pass — "https://nebius.com/prices — Structured GPU/CPU/storage rate tables. Confidence: high."
- Anti bot: partial — "https://api.nebius.cloud/openapi.json — Plain OpenAPI GET returned 403 error code 1010, recovered through foxcrawl 200. Other sampled public pages fetched cleanly. Confidence: high."

### Drive: 9 of 11 signals present

9/11 signals (8 full, 1 partial)

- Public API: pass — "https://docs.nebius.com/rest-api/index.md — Documented REST and gRPC APIs. Confidence: high."
- Openapi spec: pass — "https://docs.nebius.com/rest-api/reference.md — Valid browser-fetched OpenAPI 3.0.3 with 443 paths; bounded parsed extract retained. Confidence: high."
- MCP server: pass — "https://raw.githubusercontent.com/nebius/mcp-server/refs/heads/main/README.md — Remote documentation MCP and uvx-installable official beta CLI-operations MCP. Confidence: high."
- SDK packages: pass — "https://docs.nebius.com/sdk/index.md — Go, Python, JavaScript official SDKs. Confidence: high."
- Auth docs: pass — "https://docs.nebius.com/rest-api/authentication.md — Bearer tokens, 12-hour user token lifetime, service-account authorized-key/JWT instructions. Confidence: high."
- Agent self serve creds: pass — "https://docs.nebius.com/rest-api/authentication.md — After human account/billing bootstrap, CLI programmatic key upload and JWT-to-token issuance documented; no anonymous self-registration claim. Confidence: medium."
- Webhooks: fail — "https://docs.nebius.com/llms-full.txt — No webhook hits in complete documentation corpus. Confidence: high."
- CLI tool: pass — "https://docs.nebius.com/cli/index.md — Official CLI. Confidence: high."
- Error model: pass — "https://docs.nebius.com/rest-api/errors.md — JSON code/message body and detailed gRPC/HTTP status mapping. Confidence: high."
- Rate limit docs: fail — "https://docs.nebius.com/rest-api/errors.md — 429 describes resource quota exhaustion, not documented API request rates/response headers; corpus search only incidental limits. Confidence: medium."
- Agent config: partial — "https://docs.nebius.com/docs-ai.md — Documented MCP file configurations for VS Code/Cursor; linked agents.md is proposed and 404; no multiple config/skill discovery surfaces. Confidence: high."

## Coding harnesses

- GitHub Copilot (GitHub) — "Using VSCode Copilot: ensure Copilot extension installed; add server; open Chat panel and select Agent mode." [source](https://github.com/nebius/mcp-server)
- Cursor (Anysphere) — "Cursor and other clients: documented mcpServers configuration using https://docs.nebius.com/mcp. Documentation search only, not cloud operations." [source](https://docs.nebius.com/docs-ai)

Plausible compatibility (derived, not stored):

- Aider
- Amp
- Antigravity
- Claude Code
- Codex CLI
- Devin
- Droid
- Gemini CLI
- Goose
- Hermes Agent
- Kilo Code
- Kiro CLI
- OpenCode
- Pi
- Qwen Code

## Compliance & regions

- SOC 2 Type II: certified (scope: hosted) — "in SOC 2 Type II SOC 2 Type II (Service and Organization Controls) is a reporting framework developed by the American Institute of Certified Public Accountants (AICPA) under the SSAE 18 standard. It evaluates how a service organization’s controls align with the Trust Services Criteria, which include security, availability and confidentiality. Access the report Nebius undergoes regular independent SOC 2 Type II audits covering its products, systems and infrastructure. These audits are conducted by an accredited third-party firm that evaluates the design and operational effectiveness of our controls over a defined audit period. The resulting SOC 2 Type II report provides an independent attestation of the controls Nebius has implemented to protect customer data. Customers can use the SOC 2 Type II report to better understand and assess the risks associated with using Nebius services during the covered audit period. You can also use SOC 3 report to get a summarized version of the SOC 2 Type II report. The report is available upon signing an NDA. Fill out this form to sign the NDA and access the report. HIPAA The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a U.S. federal law that establishes requirements for safeguarding the privacy and" [source](https://nebius.com/trust-center/soc-2)
- SOC 3: certified (scope: hosted) — "3 SOC 3 (Service and Organization Controls 3) is a high-level report that confirms Nebius’ compliance with the AICPA’s Trust Services Criteria. It is designed for broad distribution and offers a high-level summary of the same controls evaluated in the SOC 2 report. Our SOC 3 report reflects our ongoing commitment to transparency and trust. The report confirms that Nebius systems have been independently audited and meet rigorous standards for protecting customer data and ensuring reliable service. pdf SOC 3 Report Relevant to Security, Availability and Confidentiality + HIPAA Mapping Questions and answers Does SOC 3 include customer-specific data or findings? No, SOC 3 is a general-use report and does not include any customer-specific information or detailed audit results. What’s the difference between SOC 2 and SOC 3? SOC 2 is a detailed, confidential report intended for customers under NDA. SOC 3 is a summarized version of the same audit, designed for public consumption. Can SOC 3 report be shared with external parties? Yes, SOC 3 is meant to be publicly distributed and can be shared freely. What Nebius products are within the scope of the audit? The audit includes Nebiius AI Cloud, AI Studio (now Nebius Token Factory) and Tracto AI within its scope, confirmi" [source](https://nebius.com/trust-center/soc-3)
- ISO 22301: certified (scope: hosted) — "ISO 22301 Nebius is certified for compliance with ISO 22301:2019, the international standard for Business Continuity Management Systems (BCMS). This certification demonstrates our ability to prepare for, respond to and recover from disruptive incidents while maintaining the continuity of critical services. At the core of ISO 22301 is the Business Continuity Management System (BCMS), which ensures that Nebius can anticipate risks, minimize the impact of incidents, and continue to deliver essential services to customers even under adverse conditions. To meet the requirements of ISO 22301, Nebius: Identifies potential threats and assesses their impact on business operations. Maintains tested plans for incident response, disaster recovery, and service continuity. Defines roles and responsibilities to ensure rapid and coordinated action during disruptions. Regularly tests, reviews, and improves continuity processes to remain resilient against evolving risks. This certification reinforces Nebius commitment to operational resilience, assuring customers that our AI cloud services remain available and reliable even in the face of unexpected events. pdf ISO 22301:2019 Questions and answers Why is ISO 22301 certification important? ISO 22301 provides a globally recognize" [source](https://nebius.com/trust-center/iso-22301)
- ISO/IEC 27001: certified (scope: hosted) — "in ISO/IEC 27001 Nebius is certified for compliance with ISO/IEC 27001:2022, a globally recognized standard for information security management. This certification, conducted by an independent external third-party auditor, demonstrates our commitment to maintaining robust security practices across all levels of our organization. At the core of this certification is our Information Security Management System (ISMS), which defines how Nebius continuously manages information security in a comprehensive and systematic way. This certification demonstrates that Nebius has implemented comprehensive measures to protect personal data, comply with global privacy regulations and uphold the highest standards of trust and accountability. To meet the requirements of ISO/IEC 27001:2022, Nebius: Conducts regular, systematic evaluations of information security risks, considering evolving threats, vulnerabilities and business impacts. These risk-based approach guides our decision-making and ensure proactive risk mitigation. Implements a comprehensive set of security controls and documented customized procedures, aligned our technical architecture, operational needs and customer expectations. Maintains an overarching management framework to ensure these controls remain effectiv" [source](https://nebius.com/trust-center/iso-27001)
- ISO/IEC 27701: certified (scope: hosted) — "in ISO/IEC 27701 Nebius is certified for compliance with ISO/IEC 27701:2019, the international standard for Privacy Information Management Systems (PIMS). This certification extends our ISO/IEC 27001 program with privacy-specific requirements and controls for managing personally identifiable information (PII). Nebius has been certified as both a PII controller and a PII processor, reflecting our responsibility to protect personal data across different service and operational contexts. This dual certification demonstrates that Nebius can securely manage its own data processing activities as a controller and also process customer data responsibly on their behalf as a processor. To meet the requirements of ISO/IEC 27701, Nebius: Extends its Information Security Management System (ISMS) into a Privacy Information Management System (PIMS). Applies privacy-specific controls to the collection, processing, storage, and deletion of PII. Defines clear responsibilities and accountability measures when acting as both a controller and a processor. Implements processes to support compliance with global privacy regulations, including the GDPR and similar frameworks. Ensures transparency, data subject rights support, and customer trust through independently audited privacy p" [source](https://nebius.com/trust-center/iso-27701)
- ISO/IEC 27018: self-attested (scope: hosted) — "in ISO/IEC 27018 Nebius aligns with ISO/IEC 27018:2019, the internationally recognized standard for the protection of personal data in cloud computing. This standard provides guidelines based on ISO/IEC 27002 and ISO/IEC 29100, with a specific focus on safeguarding Personally Identifiable Information (PII) in public cloud environments. Following ISO/IEC 27018 demonstrates our commitment to protecting personal data entrusted to us, ensuring that it is handled responsibly and transparently in line with global best practices. To meet the requirements of ISO/IEC 27018, Nebius: Implements controls designed specifically to protect PII in cloud environments, ensuring confidentiality, integrity, and availability of personal data. Maintains strict processes for obtaining and documenting customer consent and for limiting data processing to agreed purposes. Provides transparency around where and how personal data is processed and ensures customer control over its use. Applies additional safeguards to support compliance with privacy regulations and reinforce trust in cloud services. Our adherence to ISO/IEC 27018 underlines Nebius role as a responsible cloud provider, enabling customers to use AI cloud services with confidence that their data is processed securely and in" [source](https://nebius.com/trust-center/iso-27018)
- ISO/IEC 27032: self-attested (scope: hosted) — "in ISO/IEC 27032 Nebius aligns with the guidelines of ISO/IEC 27032:2012, an international standard focused on cybersecurity — the protection of information, systems and digital interactions across the broader cyberspace. This standard provides a framework for managing cybersecurity risks that go beyond traditional information security, addressing threats that stem from interconnected systems and external environments. ISO/IEC 27032 complements our existing security management practices by enhancing our ability to detect, prevent and respond to cyber threats across networks, applications and services. It promotes coordinated efforts between stakeholders, including internal teams, partners and external entities, to ensure a resilient and trusted digital ecosystem. To align with the guidance of ISO/IEC 27032, Nebius: Identifies and assesses cybersecurity risks related to digital services, communication networks, and third-party dependencies. Strengthens defenses against threats such as malware, phishing and unauthorized access through layered technical and organizational measures. Establishes clear protocols for incident response, information sharing and stakeholder collaboration in the event of a cybersecurity incident. By incorporating ISO/IEC 27032 guidance" [source](https://nebius.com/trust-center/iso-27032)
- ISO 27799: self-attested (scope: hosted) — "hy Nebius Developers Pricing Company Investors Contact sales Log in ISO/IEC 27799 ISO/IEC 27799 is an international standard that provides guidelines for managing information security in healthcare environments. It helps healthcare organizations and service providers apply the principles of ISO/IEC 27001 to systems that process personal health information (PHI). Nebius aligns with the guidance of ISO/IEC 27799 to support the confidentiality, integrity and availability of health data across its services. The standard offers a framework tailored to the specific risks and regulatory requirements associated with health informatics, bridging the gap between general information security practices and the unique needs of the healthcare sector. By following ISO/IEC 27799, Nebius strengthens its security controls for health-related data, supports compliance with applicable legal and regulatory obligations, and reinforces trust with customers, partners and healthcare stakeholders. pdf ISO 27799:2016 Questions and answers What is ISO/IEC 27799? ISO/IEC 27799 is a healthcare-specific security standard that provides guidance on protecting personal health information (PHI) in line with ISO/IEC 27001. It helps healthcare organizations implement information security best prac" [source](https://nebius.com/trust-center/iso-27799)
- CSA STAR: self-attested (scope: hosted) — "Log in CSA STAR Level 1 CSA STAR (Security, Trust, Assurance, and Risk) is a cloud security assurance program developed by the Cloud Security Alliance (CSA). It helps cloud providers demonstrate the security of their services through a standardized framework built on the Cloud Controls Matrix (CCM). CSA STAR gives customers a standardized way to evaluate a cloud provider’s security controls. By publishing our CSA STAR Level 1 assessment in the CSA STAR Registry, Nebius provides transparent, standardized information that supports customer security reviews and vendor due diligence. CSA STAR Level 1 is based on a self-assessment. Nebius completed the CSA Consensus Assessments Initiative Questionnaire (CAIQ), which maps our security controls against the CSA Cloud Controls Matrix (CCM). The completed assessment is published in the CSA STAR Registry . Questions and answers What is CSA STAR Level 1? CSA STAR stands for Security, Trust, Assurance, and Risk, a cloud assurance program created by the Cloud Security Alliance (CSA). It is designed to help cloud service providers demonstrate the security of their services and help customers assess cloud security risks. At Level 1, the provider completes the Consensus Assessments Initiative Questionnaire, which is based on t" [source](https://nebius.com/trust-center/csa-star)
- HIPAA: self-attested (scope: hosted) — "SOC 2 Type II With HIPAA" [source](https://nebius.com/trust-center)
- GDPR: self-attested (scope: hosted) — "GDPR and CCPA-compliant policies and practices" [source](https://nebius.com/trust-center)
- CCPA: self-attested (scope: hosted) — "GDPR and CCPA-compliant policies and practices" [source](https://nebius.com/trust-center)
- NIS 2: self-attested (scope: hosted) — "Nebius aligns its cybersecurity practices with European Union’s cybersecurity law" [source](https://nebius.com/trust-center)
- DORA: self-attested (scope: hosted) — "Nebius aligns with EU uniform ICT risk management requirements for the financial sector" [source](https://nebius.com/trust-center)
- Regions: eu-north1 (Finland), eu-south1 (Madrid, Spain), eu-west1 (France), eu-west2 (France), me-west1 (Israel), us-central1 (Kansas City, Missouri, US), us-north1 (Woodbury, Minnesota, US), uk-south1 (United Kingdom), uk-south2 (United Kingdom), eu-north2 (Iceland; only existing deployments)
- Regions note: 10 region IDs, not 6 datacenter locations. Service/GPU availability differs; preserve matrix evidence.

## Company & presence

- Headquarters: Amsterdam, Netherlands
- Privacy policy: https://docs.nebius.com/legal/privacy
- Terms of service: https://docs.nebius.com/legal/terms-of-use
- GitHub: https://github.com/nebius
- Docs: https://docs.nebius.com/
- Blog: https://nebius.com/blog
- Careers: https://careers.nebius.com/
- linkedin: https://www.linkedin.com/company/nebius
- x: https://x.com/nebiusai
- youtube: https://www.youtube.com/@nebiusofficial
- facebook: https://www.facebook.com/nebiusofficial

## Nearby in the atlas

- [CoreWeave (CoreWeave Sandboxes)](/products/coreweave.md)
- [Runpod](/products/runpod.md)
- [Appbox](/products/appbox.md)
- [Bastion](/products/bastion.md)
- [bhatti](/products/bhatti.md)
- [Blaxel Sandboxes](/products/blaxel.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.