Slovenia
— our headquarters since 2002.
EU member state and eurozone member with full GDPR application and native NIS2 compliance. The Constitutional Court of the Republic of Slovenia struck down the national data-retention regime in its judgment U-I-65/13 of 3 July 2014, ordering the immediate deletion of retained data. Ljubljana sits on the Central-European routing corridor toward Vienna and Milan, with short onward routes to Zagreb, peering through the Slovenian Internet Exchange. Our corporate counterparty is here. Our parent company is here. We have operated from this address since 2002.
Why Slovenia.
EU member and eurozone member with full GDPR application, a constitutional court that struck down blanket data retention in 2014, and a routing position on the Central-European corridor that links Vienna and Milan with the Adriatic and Zagreb — peering through the Slovenian Internet Exchange in Ljubljana.
Slovenia is our headquarters and our primary corporate jurisdiction. We registered the company in Ljubljana in 2002 and have operated from this address ever since. The reasons we are here are partly historical and partly deliberate. The deliberate part has weight that the marketing copy of vendors competing for the same buyer rarely matches. Slovenia combines full EU membership, eurozone participation, and a constitutional court with a documented record of striking down disproportionate surveillance legislation. GDPR enforcement is native and competent through the Information Commissioner. NIS2 and the Data Act apply natively. The country sits at the meeting point of the Germanic and Italian commercial traditions and the Slavic one, which makes it an unusually neutral base for cross-border European work.
The legal anchor most procurement teams ask about is the 2014 Constitutional Court judgment on data retention. In decision U-I-65/13 of 3 July 2014, the Constitutional Court of the Republic of Slovenia abrogated Articles 162 through 169 of the Electronic Communications Act (ZEKom-1) — the provisions that had transposed the EU Data Retention Directive — and ordered operators to delete the retained data immediately once the judgment was published. The Court found blanket retention disproportionate: it interfered with the privacy rights of a large share of the population who had given no cause to justify the intrusion, and it removed the possibility of anonymous communication that is sometimes a precondition for the exercise of other rights. The request had been lodged by the Slovenian Information Commissioner in March 2013. The combined effect is that Slovenia operates without a general bulk-retention mandate, with the constitutional reasoning anchored in Articles 37 and 38 of the national Constitution.
The infrastructure side carries its own weight. Ljubljana sits on the Central-European fibre corridor, with short, well-provisioned routes to Vienna and Milan, and onward paths to Zagreb and Frankfurt. The Slovenian Internet Exchange (SIX), operated by the national research network ARNES, provides dense local peering across two carrier sites in the city — the Ljubljana Technology Park and the Jožef Stefan Institute — interconnecting Telekom Slovenije and T-2 alongside Telemach and the regional ISPs at multiples of 100 Gbit/s. Tier-1 transit reaches Frankfurt and Vienna over diverse paths. The facility we operate is built to TIA-942 Tier III, with 2N power redundancy and free cooling for most of the year given the alpine climate. Pricing per rack sits in the central-European band — below Frankfurt or Zurich, broadly level with Vienna.
Slovenia makes operational sense for distinct buyer profiles. The first is EU-sovereign workloads that want a clean, eurozone-internal contracting relationship with no third-country transfer to characterise and no currency conversion in the invoice. The second is operations whose audience spans Central and South-Eastern Europe — the Adriatic, the Western Balkans, Austria, northern Italy — where Ljubljana's routing position gives latency and placement advantages a Western hub cannot match. The third is the corporate-jurisdiction match: senders who want their infrastructure provider domiciled in the same legal regime as their own EU entity can deploy alongside ours, which collapses the cross-jurisdictional contracting overhead in any future dispute resolution.
What Slovenia is not is the strongest single-statute privacy posture in our network. The protections are real — EU and eurozone membership, full GDPR application, the constitutional precedent on retention, the Articles 37-38 framing — but they are not Switzerland-grade or Iceland-grade for the narrow set of buyers whose compliance frameworks demand a named iconic statute. For workloads whose primary requirement is the strongest possible privacy posture, our Swiss or Icelandic facilities are better fits. For workloads whose primary requirement is a defensible, neutral, eurozone-internal EU baseline, Slovenia is the right answer. We have operated from this jurisdiction since 2002 and we recommend it on the strength of the operational track record, not on the strength of any single legal feature.
The laws that apply.
The instruments below form the operative legal framework for data processing on Slovenian infrastructure. Supervision by the Information Commissioner, the Constitutional Court's data-retention judgment, and EU-and-eurozone membership combine to give Slovenia its profile — predictable, native to GDPR, and the home jurisdiction of the operating entity.
The 2014 retention judgment plus the routing position.
Slovenia has two features that distinguish it operationally: a Constitutional Court judgment that struck down national data retention and ordered deletion of the data already held, and a routing position on the Central-European corridor that serves Adriatic and Western-Balkan audiences better than any Western hub.
Slovenia's data sovereignty position rests on the Constitutional Court's judgment U-I-65/13 of 3 July 2014. The Court abrogated the data-retention provisions of the Electronic Communications Act that had implemented Directive 2006/24/EC, holding that unselective retention of communications metadata breached the privacy rights of the population at large and the constitutional protection of personal data under Articles 37 and 38. Crucially, the Court did not merely strike the provisions going forward — it ordered operators to delete the data already retained, immediately upon publication of the judgment in the Official Gazette. The ruling followed the CJEU's Digital Rights Ireland decision of April 2014 but went further on the remedy. Slovenia operates in 2026 with no general data-retention mandate.
The second feature is the routing position. Ljubljana sits where the Central-European fibre corridor meets the Adriatic and the Western Balkans. Short routes reach Vienna and Milan; Zagreb is close, and onward transit reaches Frankfurt over diverse paths. The Slovenian Internet Exchange, run by the national research network ARNES across two Ljubljana sites, gives dense local peering with Telekom Slovenije and T-2, plus Telemach and the regional carriers. For senders whose recipients are concentrated in Austria and northern Italy, in Croatia, and across the wider Adriatic-Balkan region, this routing position translates the geographic advantage into measurably better placement at the regional mailbox providers, while Western-European recipients remain a short transit hop away through Frankfurt.
The practical implication is that Slovenia is both our home and a genuine sweet spot for Central and South-Eastern European work. The combination of a full EU and eurozone regulatory frame, a constitutional court with a documented anti-surveillance record, and a routing position on the Adriatic corridor produces a profile that fits EU-sovereign senders and regionally-focused operators particularly well — without the perception overhead that a less familiar jurisdiction would carry in procurement.
What we operate here.
Beneath the legal layer sits the operational one. The Ljubljana Tier III facility, low-latency transit through Vienna and Frankfurt, peering at the Slovenian Internet Exchange, and the Information Commissioner audit cadence — documented to the level a procurement compliance team will request.
- Facility: Tier III, Ljubljana
- Power: 2N redundancy, mixed grid
- Cooling: free cooling 8 months/year
- Square metres: 4,200 white space
- Floor: raised, hot-aisle containment
- Cabinet density: up to 12 kW per rack
- Physical security: biometric + escort
- Provisioning lead: 1-3 business days
- Carriers: Telekom Slovenije, T-2, Telemach, A1
- Internet exchange: SIX (Slovenian Internet Exchange)
- Peering: DE-CIX FRA via direct lines
- Transit providers: Telia, Cogent, GTT, Arnes
- IPv4 capacity: /24 PI assignments standard
- IPv6 capacity: /29 prefix, /64 per server
- Backbone: 10 Gbps LJU ↔ FRA
- Latency to FRA: 18-24 ms
- Authority: Informacijski pooblaščenec
- DPO requirement: per GDPR Article 37
- Breach notification: 72h to the IP
- Constitutional law: Articles 37, 38
- Data retention: no general bulk regime
- MLAT process: via Justice Ministry
- Tax residency: EU full · eurozone
- Currency: EUR (no conversion)
Who picks Slovenia.
The customer profiles where Slovenia is the strongest fit in our portfolio. EU-and-eurozone workloads needing native GDPR enforcement, clean EU-internal contracting, and a corporate counterparty that has been operating in-country since 2002 — those land here. About one in five location-specific calls ends with us routing the customer to a different jurisdiction; the call covers that openly.
- EU-sovereign workloads that want eurozone-internal contracting — euro invoicing, no currency conversion, no third-country transfer to characterise — with a corporate counterparty domiciled in the EU since 2002.
- Operations whose audience is concentrated in Central and South-Eastern Europe — Austria, northern Italy, Croatia, the Adriatic and the Western Balkans — where Ljubljana's routing position improves latency and placement.
- Senders who want full EU jurisdiction and GDPR application with a neutral base that sits across the Germanic, Italian and Slavic commercial traditions rather than defaulting to one of them.
- Multi-region failover deployments where Ljubljana serves as a Central-European node alongside a Luxembourg or Frankfurt primary, with the EU-internal data-flow benefits.
- Workloads that value a constitutional anti-surveillance track record — the 2014 retention judgment and the active Information Commissioner — within a mainstream, familiar EU-and-eurozone frame.
Slovenia, specifically.
Questions specific to operating in Slovenia — the corporate registration, native GDPR enforcement, the Ljubljana infrastructure footprint. The main FAQ covers the cross-jurisdiction operational topics.
01 Why Slovenia rather than a larger EU hub like Frankfurt or Amsterdam? +
02 Is the euro invoicing genuinely simpler, or just cosmetic? +
03 Slovenia is a smaller market. Is the connectivity actually good? +
04 What is the data-retention position in Slovenia in 2026? +
05 Can Slovenia serve as primary for European customer data, or only as secondary? +
Three gaps in the jurisdictional posture.
The honest counterweight. Slovenia is our home and structurally strong in specific dimensions, but it lacks the iconic statutes that some procurement frameworks specifically reference. The list below is what we tell prospects on the discovery call when they ask if Slovenia fits their situation.
Three things Slovenia does not protect against. The first is iconic-statute requirements. Procurement teams whose internal compliance frameworks specifically reference Article 41 (Luxembourg) or Article 47 BankG (Switzerland) will not find equivalent named protection in Slovenia. The Slovenian regulatory frame is solid GDPR plus the constitutional protections of Articles 37 and 38 — competent and predictable, but without the named financial-secrecy statutes that some compliance frameworks require by reference. Buyers whose internal vendor approval process specifically names Luxembourg or Switzerland should not expect Slovenia to satisfy that requirement.
The second is constitutional press-freedom carve-out. Slovenia's press-freedom provisions follow the EU charter baseline and the Article 39 freedom-of-expression guarantee. There is no IMMI-grade or Tryckfrihetsförordningen anchor. Buyers seeking jurisdiction-grade press freedom should look at Iceland or Sweden, which provide journalism-specific carve-outs that Slovenia does not.
The third is the perception gap. The Slovenian profile is structurally strong but carries less perception capital than Luxembourg or Switzerland in international procurement, simply because it is a smaller and less familiar jurisdiction. Buyers selecting Slovenia may face additional explanation requirements during procurement review at organisations whose vendor list defaults assume the larger Western-European jurisdictions. We provide the documentation needed to support that explanation — the U-I-65/13 ruling, the GDPR and NIS2 compliance evidence, the SOC 2 reports on the Ljubljana facility — but the perception gap is real and worth flagging upfront. For buyers who can absorb the additional procurement explanation, the eurozone-internal simplicity and the routing position make the case. For buyers whose procurement framework cannot accommodate the explanation overhead, Luxembourg is the operationally simpler choice.
Or pick another one.
Five European jurisdictions in our footprint. The table below sets out how Slovenia (our home jurisdiction) compares against the other four on the operational and legal axes that matter most during a vendor selection.
Pick Slovenia, or pick another.
This is our home jurisdiction. Ljubljana is where the company has operated since 2002, where the management is established, and where the Constitutional Court struck down blanket data retention in 2014 — ordering operators to delete the data they already held. If your workload benefits from a eurozone-internal counterparty and a Ljubljana-anchored evidence trail, we will lay out the technical and contractual specifics on a call. Where another of our jurisdictions is the stronger answer for your threat model, we will route you there instead of selling Slovenia.