Yubico, based in Stockholm, makes hardware security keys for FIDO2 and multi-factor authentication. Its range includes the YubiKey 5 Series, the YubiKey 5 FIPS Series, the YubiKey Bio Series and the Security Key Series, as well as the YubiHSM 2 hardware security module. Yubico also provides the Yubico Authenticator software. The keys are physical devices that users carry, and the company is publicly traded.
Yubico is a Swedish company whose registered office and headquarters are at Gävlegatan 22 in Stockholm, so it is established in the EU. Its ownership structure is described on its investor pages, and organisations should check the current shareholders there before a decision. The pages reviewed do not present the YubiKey hardware or firmware as open source. They also do not state where any cloud-hosted service of Yubico runs, so organisations that use such services should request the data location in writing. For a European organisation, the keys are a hardware product from an EU supplier.