Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Home
  3. Certifications
  5. CSA STAR

CSA STAR

4 records in CSA STAR.

Microsoft · Sep 2026

M3Microsoft 365 Copilot

Sovereignty grade C (52/100). EU region selectable; no training on your data. Microsoft, United States.

saas-embedded
Governance Grade
C
Microsoft · Sep 2026

AOAzure OpenAI Service (Microsoft Foundry)

Sovereignty grade B- (66/100). EU region selectable; no training on your data; in your VPC. Microsoft, United States.

cloud-platform
Governance Grade
B-
Google · Sep 2026

GAGemini API / Vertex AI

Sovereignty grade C+ (61/100). EU region selectable; no training on your data. Google, United States.

cloud-platform
Governance Grade
C+
OpenAI · Jul 2026

GAGPT-5 API

Sovereignty grade C+ (58/100). EU region selectable; no training on your data. OpenAI, United States.

foundation-model
Governance Grade
C+