SpaceTime

Cover Block

Open sources

Attribute	Value
Company Name	SpaceTime
Tagline	Sovereign European infrastructure for organizations requiring absolute control over data, compliance, and operational resilience [SpaceTime, retrieved 2026]
Headquarters	Helsinki, Finland
Founded	2021
Stage	Seed
Business Model	B2B
Industry	Security
Technology	Software (Non-AI)
Geography	Western Europe
Growth Profile	Venture Scale
Founding Team	Co-Founders (3+)
Funding Label	Seed
Total Disclosed Funding	$3,500,000 [Author note, Oct 2026]

Links

Open sources

• Website: https://spacetime.eu/
• LinkedIn: https://www.linkedin.com/company/spacetime-ltd

Verified against public records -- Confirmed by company website and LinkedIn profile.

What an Investor Needs First

Open sources

SpaceTime is building sovereign European data infrastructure for organizations that can no longer tolerate the compliance and resilience risks of the public cloud, a bet that has become urgent amid escalating geopolitical and regulatory pressures [Forbes, Jul 2025]. The company, founded in Helsinki in 2021, commercializes a hardened infrastructure stack developed over a decade by its founders, who previously achieved ten years of uninterrupted uptime on their own Linux-based servers [Forbes, Jul 2025]. Its core product suite, including DataOcean storage and SpaceStation on-premise solutions, is designed to be immutable, jurisdictionally locked within Finland, and fully compatible with existing cloud APIs, aiming to provide control as an inherent property rather than a retrofit [SpaceTime, retrieved 2026].

The founding team brings a distinct blend of deep technical pragmatism and high-stakes operational experience. CEO Antti Pennanen has a background in designing secure telecom infrastructure for the Finnish government and is a serial entrepreneur, having previously founded MONI, a financial services company for refugees [Forbes, Jul 2025] [TechCrunch, Apr 2016]. The company is backed by a $3.5 million seed round from investors including Cyber Fund, Zeeprime, and industry veterans, closed in July 2022 [Author note, Oct 2026]. Over the next 12-18 months, the critical watchpoints will be the company's ability to convert its technical certifications and sovereign design into commercial traction beyond its home market, and to demonstrate that its project-finance-heavy capital structure can support scaling against well-funded incumbents and sovereign cloud initiatives from European telecom giants.

Partially corroborated -- Core company claims are from its own website or a single feature article; seed round is independently corroborated.

Taxonomy Snapshot

| Axis | Classification | |:--- | | Stage | Seed | | Business Model | B2B | | Industry / Vertical | Security | | Technology Type | Software (Non-AI) | | Geography | Western Europe | | Growth Profile | Venture Scale | | Founding Team | Co-Founders (3+) | | Funding | $3.5M Seed (Jul 2022) |

Inside the Company

Open sources

SpaceTime is a Finnish infrastructure startup founded in 2021, headquartered in Helsinki, that is building what it calls sovereign European data infrastructure [SpaceTime, retrieved 2026]. The company's legal entity, Space and Time Oy, is registered in Finland [Vainu]. Its founding narrative is rooted in a practical problem its CEO, Antti Pennanen, encountered while building an animation studio two decades prior, where physically transporting hard drives was deemed more reliable than contemporary internet-based storage [Forbes, Jul 2025]. This experience, combined with the founding team's prior work achieving a reported ten years of uninterrupted uptime on their own Linux-based servers, informed the conviction to commercialize a more resilient infrastructure model [Forbes, Jul 2025].

The company formalized its launch in 2021 and secured a $3.5 million seed round in July 2022 [Author note, Oct 2026]. Key milestones since founding include the development of its product suite, DataOcean, SurveillanceVault, SpaceStudio, and SpaceStation, and public engagement with defense sector initiatives, including a demonstration at the NATO Innovation Range [SpaceTime, retrieved 2026]. The company also reports pursuing a slate of security certifications, including ISO 27001 and the Finnish military's Katakri TI-3 standard, though these claims originate from the company or a single press article [Forbes, Jul 2025].

Partially corroborated -- Company details and founding year are public; key operational and certification claims are sourced from a single press article or the company itself.

Under the Hood

Reported and inferred SpaceTime’s product suite is built on a single, public premise: infrastructure must be sovereign by design, not by adaptation. The company offers four core services, all described as operating exclusively within Finland and engineered for jurisdictional control [SpaceTime, retrieved 2026]. These are not separate point solutions but interconnected components of a unified architecture the company calls “immutable, jurisdictionally locked, and physically decentralized” [Forbes, Jul 2025].

• DataOcean. Marketed as sovereign object and file storage with predictable pricing, this appears to be the foundational storage layer [SpaceTime, retrieved 2026].
• SurveillanceVault. A secure, offsite storage system specifically for surveillance footage, indicating a focus on regulated, high-volume data streams [SpaceTime, retrieved 2026].
• SpaceStudio. A high-performance production environment tailored for media workflows, suggesting compute capabilities integrated with the storage layer [SpaceTime, retrieved 2026].
• SpaceStation. A fully managed on-premise storage solution, which extends the sovereign model to customer-owned hardware [SpaceTime, retrieved 2026].

The underlying technology claims are architectural rather than technical. The system is described as a “federated protocol designed for collaboration” with a core anchored on immutable storage and decentralized architecture [Forbes, Jul 2025]. A key interoperability claim is full compatibility with current cloud storage APIs from any provider, which would lower migration friction for potential customers [Forbes, Jul 2025]. The company states its infrastructure is “GDPR-native,” a claim that remains a marketing assertion without public, third-party audit documentation [SpaceTime, retrieved 2026].

Reasoned from indirect evidence -- Product claims are sourced primarily from company materials and a single press article. The architectural descriptions and interoperability claim are uncorroborated by independent technical review. The reported military and sustainability certifications for physical facilities lack independent verification [Forbes, Jul 2025].

Market Research

Open sources The market for sovereign cloud infrastructure is being reshaped less by technological innovation and more by geopolitical and regulatory fracture, creating a premium on resilience over pure scale. While the global public cloud market is dominated by U.S. hyperscalers, a distinct, high-compliance segment is emerging in response to data localization laws, cyberattacks on national infrastructure, and a growing policy consensus that digital infrastructure is a matter of national security [Forbes, Jul 2025].

The sovereign cloud market specifically is projected to grow from $3.2 billion in 2023 to $21.5 billion by 2030, representing a compound annual growth rate of 31.5% [Forbes, Jul 2025]. This forecast positions it as one of the fastest-growing infrastructure categories globally. Demand is concentrated in high-growth regions where digital sovereignty is a top policy priority, including Europe, the Middle East, and the Asia-Pacific [Forbes, Jul 2025]. A December 2025 IDC survey indicated that 84% of European organizations using cloud technologies were either currently using or planning to adopt sovereign cloud solutions, suggesting a rapid shift in enterprise procurement criteria [IDC, Dec 2025].

Key demand drivers extend beyond compliance. The cited research points to ransomware attacks paralyzing public sector and healthcare systems, catastrophic provisioning errors at major cloud providers, and increasing geopolitical instability as primary catalysts [Forbes, Jul 2025]. These events are moving the market conversation from cost and scalability to survivability and jurisdictional control. Adjacent and substitute markets include traditional colocation, on-premise storage, and the broader $500+ billion public cloud market, though sovereign cloud is positioned as a specialized, compliance-mandated layer within that ecosystem rather than a direct replacement [Forbes, Jul 2025].

Regulatory forces are a primary macro driver. The European Union's General Data Protection Regulation (GDPR) established a baseline, but sector-specific regulations in defense, healthcare, and finance are creating stricter data residency requirements. The market is also being shaped by initiatives like the GAIA-X consortium and sovereign cloud partnerships from telecom operators, though these are often framed as retrofits of existing hyperscaler infrastructure [Forbes, Jul 2025].

Sovereign Cloud Market 2023 | 3.2 | $B
Sovereign Cloud Market 2030 | 21.5 | $B

The projected sevenfold expansion of the sovereign cloud market underscores the structural shift underway. However, the cited growth rate of 31.5% CAGR, while compelling, originates from a single source within a company profile and should be triangulated against broader industry forecasts. The high stated adoption intent among European organizations provides a more concrete, survey-based signal of near-term demand.

Partially corroborated -- Market sizing and growth rate from a single source; adoption intent corroborated by a separate industry survey.

Competition and Substitutes

Reported and inferred SpaceTime's competitive position is defined by a fundamental architectural choice, positioning it against both hyperscale incumbents and a wave of sovereign-focused challengers. The company's core bet is that a sovereign-by-design infrastructure, built from the ground up for jurisdictional and operational resilience, will prove more durable than retrofitted compliance layers on top of existing global clouds.

The competitive map for sovereign infrastructure splits into three distinct tiers. At the top are the hyperscalers, AWS, Microsoft Azure, and Google Cloud, which dominate the broader cloud market. Their sovereign offerings, such as Microsoft's partnership with Orange (Bleu) or Google Cloud's with T-Systems, are typically retrofits, adding European data residency and compliance wrappers to their global architectures [Forbes, Jul 2025]. The second tier consists of specialized sovereign challengers, including healthcare-focused firms like Corti, Allonia, and Owkin, which often build privacy-preserving applications on top of localized infrastructure rather than reinventing the underlying stack [Forbes, Jul 2025]. The third tier includes European infrastructure providers like Hetzner, which offer regional hosting but do not necessarily market a sovereign-by-design, jurisdictionally locked architecture as a primary feature. SpaceTime aims to compete across these tiers by arguing that its foundational design principles, immutability, decentralization, and no foreign control, are non-negotiable for the most critical workloads, a claim that retrofitted solutions cannot authentically make [Forbes, Jul 2025].

SpaceTime's current defensible edge appears to be its early focus on military-grade certifications and a design-first philosophy. The company claims its physical facilities have been audited for the Finnish Katakri TI-3 military certification and hold multiple ISO standards [Forbes, Jul 2025]. This regulatory head start, combined with a narrative of infrastructure built for survival rather than just scale, could resonate with defense, government, and critical industry buyers in Europe. However, this edge is perishable. Larger incumbents have vast resources to pursue similar certifications if customer demand justifies the investment. The durability of SpaceTime's advantage will depend on its ability to operationalize these certifications into a smooth, performant service that is not just more secure, but also competitively reliable and priced.

The company's most significant exposure is to the distribution and ecosystem power of the hyperscalers. A competitor like Microsoft, through its Bleu initiative with Orange, can use existing enterprise relationships, a vast portfolio of integrated software (like Microsoft 365 and Azure services), and massive sales channels to push its sovereign offering. SpaceTime, by contrast, must build its go-to-market motion from scratch. Furthermore, while SpaceTime's architecture is "fully compatible with current cloud storage APIs" [Forbes, Jul 2025], this is a table-stakes feature for interoperability, not a differentiator. The real risk is that customers, even those with sovereign requirements, may prioritize the convenience and breadth of a hyperscaler's platform over the purist architectural benefits of a smaller, specialized provider.

A plausible 18-month scenario sees the sovereign cloud market segmenting further by vertical and risk tolerance. In this view, SpaceTime could be a winner if geopolitical tensions in Europe escalate, making its Finnish jurisdiction, military certifications, and design narrative decisively attractive to defense and critical national infrastructure clients. The reported involvement with a NATO Innovation Range event is a signal in this direction [SpaceTime, retrieved 2026]. Conversely, a challenger like Corti could be a loser in the broader infrastructure race if its focus on sovereign AI applications in healthcare is perceived as too narrow, and if it fails to match the depth of infrastructure-level certifications that SpaceTime is pursuing [Forbes, Jul 2025]. The outcome likely hinges less on raw technology and more on which company can first convert its specialized value proposition into a referenceable, large-scale deployment with a flagship European institution.

Partially corroborated -- Competitor identification and general positioning are publicly documented, but specific claims about competitor certifications and architectural shortcomings are primarily sourced from a single feature article [Forbes, Jul 2025].

Opportunity

Open sources

If SpaceTime successfully defines the standard for sovereign infrastructure in Europe, it could capture a meaningful share of a market projected to exceed $20 billion by the end of the decade [Forbes, Jul 2025].

The headline opportunity is to become the foundational sovereign storage layer for European critical infrastructure, a role that transcends a simple cloud provider. This outcome is reachable because the company is not retrofitting existing technology but building from a first-principles architecture designed to meet the highest European and military-grade security standards. Its facilities have been audited for the Katakri TI-3 military certification, and its systems are built to be immutable and jurisdictionally locked within Finland [Forbes, Jul 2025]. For government, defense, and healthcare entities where data residency and resilience are non-negotiable, this design posture positions SpaceTime as a potential default choice, not just another compliant option.

Growth could follow several distinct, high-impact paths. The company's early engagement with defense technology showcases one plausible avenue.

Scenario	What happens	Catalyst	Why it's plausible
Defense & Government Anchor	SpaceTime becomes the mandated storage provider for NATO-aligned defense projects and Finnish/EU public sector digital services.	A formal procurement contract following a successful pilot at the NATO Innovation Range [SpaceTime].	The company has already demonstrated defense technologies at a NATO event, signaling active engagement with this highly regulated, high-stakes customer segment [SpaceTime].
Regulatory Standard-Bearer	The company's architecture and certifications become the de facto blueprint for sovereign cloud compliance in Europe, driving adoption across regulated industries.	The EU enacts stricter, more technical data sovereignty laws that favor infrastructure built "by design" rather than adapted.	SpaceTime actively certifies operations under ISO 27001/22 and publicly contrasts its design-first approach with retrofitted solutions from telecom partnerships [Forbes, Jul 2025].
Hyperscaler Complement	SpaceTime is adopted by large enterprises as a compliant, resilient data haven for their most sensitive European workloads, operating alongside their primary hyperscaler contracts.	A major, public ransomware attack on a European corporation using traditional cloud storage triggers a board-level mandate for sovereign backup.	The company's infrastructure is fully compatible with current cloud storage APIs, lowering integration barriers for enterprises already using AWS or Azure [Forbes, Jul 2025].

Compounding for SpaceTime would manifest as a trust and compliance flywheel. Each new government or defense contract would serve as a powerful reference case, lowering the perceived risk for the next regulated entity in a neighboring sector, such as finance or energy. The company's blog actively engages in the sovereignty debate, comparing European providers and arguing for architectural purity, which builds its reputation as a technical authority [SpaceTime]. This thought leadership, combined with a growing roster of high-stakes customers, could create a distribution lock-in where selecting a sovereign provider without SpaceTime's pedigree becomes a perceived compliance risk in itself.

The size of the win, should the defense or regulatory standard-bearer scenario play out, can be framed by the market's projected growth. The sovereign cloud market is projected to reach $21.5 billion by 2030 [Forbes, Jul 2025]. Capturing even a single-digit percentage of this specialized, high-value segment would represent a business of significant scale. While no direct public comparable exists for a pure-play sovereign infrastructure provider, the valuation would be driven by the strategic necessity of the asset and its potential to command premium pricing in a fragmented, compliance-driven market. This outcome represents a scenario, not a forecast, contingent on the company executing its focused go-to-market and maintaining its architectural edge.

Partially corroborated -- Market sizing and certification claims are primarily from a single featured article [Forbes, Jul 2025]; NATO engagement is corroborated by the company's own blog [SpaceTime]. The growth scenarios are analyst-constructed based on these public positioning signals.

Sources

Open sources

1. [Forbes, Jul 2025] The Cloud Is Breaking. This Finnish Startup Is Building What Comes Next. | https://www.forbes.com/sites/sindhyavalloppillil/2025/07/15/the-cloud-is-breaking-this-finnish-startup-is-building-what-comes-next/

2. [SpaceTime, retrieved 2026] SpaceTime, Bring your data home | https://spacetime.eu/

3. [Dealroom.co, retrieved 2026] SpaceTime funding round | https://dealroom.co/companies/spacetime

4. [Vainu] Space and Time Oy liikevaihto ja yritystiedot | Vainu | https://search.vainu.com/company/space-and-time-oy-taloustiedot-ja-liikevaihto/FI17814991/yritystiedot

5. [TechCrunch, Apr 2016] New initiatives emerge to help refugees | https://techcrunch.com/2016/04/30/new-initiatives-emerge-to-help-refugees/