To access the Gaia-X CISPE catalog, beware not to follow the link the association displays on its homepage.
We learned that the hard way. The link points to an older version of the catalog… one that is only partially functional. Some filters do not work (for example, service location), while others return no results (sorting by provider, by certification, or by the Gaia-X label). Many records are duplicated or more; and on each, the source JSON is inaccessible (503 error). The content itself is not up to date, reflecting Gaia-X principles as they stood essentially at the end of 2022.
A maintenance from France
At the “correct” address, the reference Gaia-X specification is the March 2025 version. Service registration still goes through CISPE (a free process for members and affiliates). The operation and maintenance of the catalog remain the responsibility of Cloud Data Engine, a SASU based in Île-de-France, founded in 2023, a few weeks before going into production.
The listed services meet a minimal set of requirements—what is called “standard conformity”—expected to participate in the Gaia-X ecosystem. They can receive labels at three additional levels.
The first level includes requirements on applicable law, governance, and transparency. It is achieved through self-certification.
The second level requires the ability to process data only within Europe. The third adds criteria to ensure immunity to extraterritorial laws. The first two levels involve a third-party audit of data protection and cybersecurity; not of portability and sustainability.
First Gaia-X Level 3 labeled offerings
On the occasion of Gaia-X Summit 2025, CISPE highlighted the integration of a first bundle of Level-3 labeled service offerings. Nine offerings across five providers were showcased, including three French providers:
- Cloud Temple (open-source IaaS, bare-metal IaaS, and PaaS OpenShift)
- OVHcloud (Hosted Private Cloud by VMware)
- Thésée Datacenter (hosting in its two data centers in the Yvelines)
The labels corresponding to the other conformity levels have not yet been attached to any service (they were attached to a few in the old version of the catalog).
Cloud Temple joins Ikoula, OVHcloud and Thésée Data Center
Other labels, such as C5 (the German SecNumCloud), return almost no results, due to the lack of national providers listed in the catalog. For the moment, there are thirteen of them:
- Four French providers (Cloud Temple, Ikoula, OVHcloud, Thésée Data Center)
- Two Spanish providers (Gigas Hosting, Jotelulu)
- Five Italian providers (Aruba, CoreTech, Netalia, Opiquad, Seeweb)
- One Dutch provider (Leaseweb)
- One American provider (AWS)
Cloud Temple—not a CISPE member, like OVHcloud and Thésée Data Center—and Seeweb were the only providers among these to not appear in the old catalog*.
The roughly 600 listed services are almost all located in the EU. The 15 exceptions (United States, Canada, Australia, Singapore) are tied to OVHcloud.
The tags related to service categories swing widely. “Authentication,” for example, is attributed to Jotelulu’s remote desktop and virtual PBX just as it is to OVHcloud’s hosting and Veeam.
* Its integration “after the fact” shows: it does not respect alphabetical order (Cloud Temple is positioned after CoreTech in the provider filter dropdown).
