All posts

Falkenstein vs US-East: The Real Cost and Sovereignty Math for EU Teams

US-East looks cheaper per gigabyte until you read your data back at $0.09/GB. Storage in Falkenstein flips that math — and removes a CLOUD Act exposure no "EU region" of a US provider can.

Storage is the cheap part. Reading your data back out is the bill.

Amazon S3 in US-East-1 (N. Virginia) lists $0.023/GB-month for Standard storage on the first 50 TB. That is the number every pricing page leads with, and it is genuinely low. The number nobody puts on the hero slide is the one that decides your bill: data transfer out to the internet runs $0.09/GB for the first 10 TB each month. Azure Blob sits right next to it at $0.087/GB. Google Cloud Storage starts higher, around $0.12/GB for the first terabyte.

Put storage and egress side by side and the asymmetry jumps out. Keeping 1 TB on S3 for a month costs about $23.55. Reading that same terabyte back out once costs about $92. A workload that actually serves files — a media library, a backup target, a sync client that re-downloads — pays the egress rate far more often than it pays the storage rate. The headline $23/TB is the floor of the bill. It is not the bill.

Why EU object storage inverts the structure

Object storage hosted in Falkenstein, Germany prices transfer like the commodity it is. A representative Falkenstein plan runs around €5.99/TB-month with 1 TB of egress included, and overage billed at roughly €1.20/TB. That is a little over a tenth of a cent per gigabyte against the hyperscaler's nine cents. The model is not "storage is cheap, transfer is where we make the margin back." Transfer just isn't the profit center.

For a team that uses its data instead of parking it, that single difference flips the all-in monthly number. Take a like-for-like month — 5 TB stored, 5 TB read back:

  • S3 US-East-1: roughly $118 in storage plus roughly $460 in egress, so about $580/month before request and retrieval charges.
  • Falkenstein object storage: roughly €30 in storage plus a few euros of egress overage after the included terabyte, so about €35/month.

That gap is not a cherry-picked tier. Egress is where the hyperscaler margin lives, and any workload that moves data hits it on every read. If your data sits cold and is never touched, US-East can still win on raw storage. The instant it moves, the EU number pulls ahead — and most real workloads move.

An "EU region" is not the same as EU jurisdiction

The cost case is the easy half. The harder half is legal: an "EU region" of a US provider does not put your data beyond US reach. The US CLOUD Act binds US-incorporated companies no matter where their servers physically sit. A warrant served on a US parent can reach into a datacenter in Germany operated by that parent's subsidiary. The map pin and the jurisdiction are different things.

This is not a hypothetical lawyers trade in the abstract. On 18 June 2025, before a French Senate inquiry, Microsoft France's director of public and legal affairs was asked under oath whether he could guarantee that French citizens' data held in Microsoft's cloud would never be handed to US authorities without French approval. His answer was "Non, je ne peux pas le garantir" — no, I cannot guarantee that. It is the most senior, most direct confirmation on record that residency and jurisdiction come apart.

The question is never "where is the datacenter." It is "which government can compel the company that holds the keys."

Brussels has started writing this into policy. The Tech Sovereignty Package the Commission presented on 27 May 2026 floats restricting US cloud platforms for the most sensitive public-sector data — financial, judicial, healthcare. Private companies aren't in scope, and it still needs all 27 member states. But the direction is unambiguous: "stored in an EU region" is being treated as necessary, not sufficient.

What actually closes the gap

Two things move you from "EU region" to "EU jurisdiction with no US lever." The first is corporate: jurisdiction follows control, not server geography. Beebeeb is operated by Initlabs B.V., a Dutch company (KvK 95157565), with data in Falkenstein. No US parent means no CLOUD Act lever to pull in the first place.

The second is cryptographic, and it is the part most "EU cloud" pitches quietly skip. Even a lawful German order can only produce what the provider actually holds. With zero-knowledge encryption, where the keys never leave your device, the server holds ciphertext and nothing that decrypts it — Argon2id key derivation, X25519 for sharing, AES-256-GCM on every file. Account metadata is producible. File contents are not, because they mathematically can't be. Residency answers where your data lives. Encryption answers who can read it, and it holds even if the residency assumption ever fails.

Where the honest tradeoffs are

A few things before a skeptic gets to them. EU object storage is not magically free of every cost — request and retrieval charges exist, and a genuinely cold archival workload that almost never reads its data can still come out cheaper on a US deep-archive tier. Switzerland is a real non-US option too: Tresorit, the Swiss zero-knowledge incumbent, sits outside the CLOUD Act and now offers a 3 GB free plan alongside its paid tiers. We aren't the only credible answer here. We're the German-jurisdiction, open-source-client one.

And we'll name our own limits. The product clients — web app, CLI, mobile, desktop, and the core crypto library — are open source, so you can read exactly how the encryption works instead of trusting a claim. The server and this marketing site are not open source. An independent audit is planned, and we'll publish the findings; it hasn't happened yet, and we'd rather say so than imply otherwise.

The math, for an EU team

If you move data, storage in Falkenstein is usually cheaper than US-East once egress is in the calculation, not in spite of it. It also removes a legal exposure that no amount of "but the servers are in Frankfurt" can remove from a US provider. For anyone handling client records under GDPR, the cleanest transfer impact assessment is the one with no transfer in it.

You can test the encryption side without spending anything — Beebeeb's 14-day free trial is zero-knowledge, the same as every paid tier, starting at Starter for €1.99/mo (100 GB) up through transparent per-TB scaling from Pro (to 99 TB self-serve at +€10.99 per extra TB, custom quote beyond that). No US parent, keys on your device, data in Germany.

Files only you can read

Beebeeb is end-to-end encrypted, zero-knowledge cloud storage — stored in Falkenstein, Germany, open source, with a 14-day free trial on every plan. Encryption happens on your device; we only ever hold ciphertext we can’t read.

Join the waitlist See pricing How the encryption works