- Deployment
- hosted
- Hq Country
- Germany
- Hq City
- Bad Friedrichshall
- Ownership
- private-eu-owned
- Founded
- 2018
- Training Default
- never
- Residency Options
- Germany South (EU01), Germany, Austria
- Gov Access Exposure
- none-eu
- Eu Ai Act Role
- deployer
- Certs
- ISO 27001 (BSI IT-Grundschutz), ISO 27017, BSI C5 Type 2, ISAE 3000 (SOC 2), ISAE 3402, TISAX Level 3, ISO 20000, ISO 50001, TÜViT Trusted Site Infrastructure
- DPA available
- yes
- Zero Retention Available
- Yes
- Retention Default
- "Your data and queries are neither stored nor used to train models." No inference retention window is published because the service states it stores nothing.
- Retention Exceptions
- None published. The certificates page states that collection, storage and processing in the STACKIT Cloud "take place exclusively in our own German data centers", and that cloud development happens exclusively in Germany.
- Subprocessors
- Schwarz Digits Cloud GmbH & Co. KG — first-party data centres in Germany and Austria
- Subprocessor Count
- 1
- Transfer Mechanism
- intra-eu
- Eu Procurement Ready
- pass
- Eu Procurement Reason
- The highest-scoring hosted service in the registry, and it gets there structurally rather than rhetorically. Group-owned data centres in Germany and Austria, development and operations in Germany, no transfer out of the Union to have a mechanism for, and the deepest certification stack anywhere in these 58 rows — ISO 27001 on BSI IT-Grundschutz, BSI C5 Type 2, ISAE 3000 and 3402, ISO 27017, TISAX. The service serves open weights (Qwen3-VL, gpt-oss, Llama, Mistral) over an ordinary API, so leaving costs a base URL. The one soft spot is disclosure, not architecture: STACKIT publishes no sub-processor list, so a claim that would be trivially verifiable is left to be inferred from the certification scope. That costs it evidence points, not jurisdiction points, and it is the single thing standing between this row and a perfect one.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- high
- Subprocessors Claim Basis
- inferred
- Subprocessors Confidence
- medium
- Residency Class
- eu-only
- Portability / Exit Path
- serves-open-models
- Subprocessor Jurisdiction
- vertically-integrated-eu
- Underlying model providers
- Alibaba (Qwen3-VL), OpenAI (gpt-oss, open weights), Meta (Llama), Mistral AI
