XcellHost|Germany Go-To-Market Strategy

It can be transferred, but not by default. Under GDPR, processing in India is a transfer to a third country and needs a transfer tool such as the European Commission's standard contractual clauses. Health data under section 393 SGB V may only go to C5-attested cloud providers, and public buyers expect German hosting. So customer data stays in XcellHost's Frankfurt and Düsseldorf partner DCs, and Mumbai runs tooling, monitoring and second-line support under SCCs.

Not for every buyer, but for some it is decisive. Hospitals and other providers under SGB V may process health and social data only with C5-attested cloud providers, and the federal sovereign AI cloud uses ISO 27001 and C5 as its baseline. The BSI published C5:2026 in March 2026; Type 2 audit periods starting from 1 June 2027 must use it. Attestations follow ISAE 3000 and come from audit firms. We plan to deliver regulated workloads on C5-attested partner infrastructure first and scope our own attestation in phase 2.

The NIS2 Implementation Act took effect on 6 December 2025 without a transition period. Medium and large firms in covered sectors must self-assess, register with the BSI, run risk management, and report significant incidents with an early warning in 24 hours, a report in 72 hours and a final report in one month. Management must approve and oversee the measures. Fines reach 10 million euros or 2% of turnover for essential entities. The registration grace period ended on 31 July 2026.

The Digital Omnibus on AI took effect on 27 July 2026. It moved Annex III high-risk duties to 2 December 2027 and Annex I product duties to 2 August 2028. Transparency duties have applied since 2 August 2026, and AI literacy since 2 February 2025. Germany's KI-MIG took effect on 29 July 2026 and makes the Bundesnetzagentur the central AI market-surveillance authority. Customers need an AI inventory, risk classification and staff training, which is a natural opening for governance advisory and AI literacy cohorts.

German VAT is 19% standard and 7% reduced; how it applies to services from India depends on the place-of-supply rules, so confirm reverse-charge treatment with an adviser. Royalties paid abroad carry 15% withholding tax, or 10% under the India treaty, which can matter for software licences. A German GmbH pays 15.825% corporation tax including the solidarity surcharge, plus municipal trade tax, about 30 to 33% combined in large cities, with corporation tax falling from 2028. Get advice for each contract structure.

Analysts define markets differently. For cloud, Fortune Business Insights puts 2025 at 53.94 billion US dollars and Mordor at 56.52 billion. For data centres, Bitkom counts 2,980 MW for all of Germany, while Frankfurt alone is put at 745 MW of IT load by Black Ridge and 981 MW operational by Cushman and Wakefield. We show both ends with sources and do not average them.

No. The 18-month goals and the revenue model use assumptions for target accounts, win rates and contract values, chosen to start a discussion. Change them in the revenue model. Only the market-size, legal and macro figures come from cited third parties.