US-headquartered 2FA app by Twilio.
The most common reasons buyers tell us they're moving to an EU alternative.
CLOUD Act exposure
US authorities can compel non-EU providers to hand over data even when stored on EU servers — incompatible with strict data-sovereignty contracts.
DPAs & CJEU rulings
Multiple EU DPAs have ruled that data transfer to the US violates GDPR Article 44 without further safeguards.
Procurement requirements
Many EU public-sector and regulated tenders now require EU-jurisdiction software and data residency. Tools listed here meet those requirements out of the box.
Vendor diversity
Reducing dependence on a small number of US hyperscalers and SaaS providers is a strategic goal across many EU governments and enterprises.
Open-source MFA server supporting HOTP, TOTP, push, FIDO2, YubiKey and SSH keys
Open-source mobile authenticator that confirms logins by scanning a QR code
YubiKey hardware security keys for FIDO2, U2F, OTP, smart-card and OpenPGP