Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Amberscript transcription and subtitling
AT

Amberscript transcription and subtitling

Sovereignty grade B- (69/100). EU-only residency; no training on your data. Amberscript, Netherlands.

Category
meeting-ai
Deployments
Hosted API
Certifications
ISO 27001ISO 9001
Countries
Netherlands
Government access exposure
No non-EU government access
Categories
meeting-ai
EU AI Act role
provider

Details

Deployment
hosted
Hq Country
Netherlands
Hq City
Amsterdam
Ownership
private
Founded
2017
Trust Center Url
www.amberscript.com/en/privacy-policy
Training Default
never
Residency Options
Western Europe
Gov Access Exposure
none-eu
Eu Ai Act Role
provider
Certs
ISO 27001, ISO 9001
DPA available
yes
Retention Default
"All data is securely stored in Western Europe." The audio and the generated transcript are explicitly never used to train the language models, and the privacy policy extends that to third parties: "Third parties do not store data or use data for training purposes."
Retention Exceptions
The distinctive exposure here is human, not machine. For all languages Amberscript uses transcribers who see the audio file and the transcript in order to correct it. They have signed non-disclosure and data-processing agreements, they cannot download audio or transcripts because the data stays locked inside the platform, and Amberscript states all of this on the page rather than leaving it to be discovered. It is a materially different risk from a model endpoint and it is the reason this row is worth reading next to the fully automated ones.
Subprocessors
human transcribers under NDA and DPA, no download rights, Google (Workspace SSO and analytics, under a signed agreement)
Subprocessor Count
2
Transfer Mechanism
intra-eu
Eu Procurement Ready
pass
Eu Procurement Reason
A Dutch vendor storing everything in Western Europe, certified to ISO 27001 and ISO 9001, carrying the TPN badge for content security, and stating flatly that neither it nor its third parties train on customer audio. It is also the most honest row in the batch about what actually happens to a recording: a person reads it. The reviewed tiers put a human transcriber in front of the audio and the transcript, under NDA and DPA and without download rights, and the privacy policy says so instead of describing them as an unnamed category of service provider. For a buyer whose recordings are sensitive, that disclosure is worth more than a vendor promising full automation and naming no one.
Training Evidence Url
www.amberscript.com/en/privacy-policy
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
www.amberscript.com/en/blog/data-security-and-privacy
Residency Claim Basis
stated
Residency Confidence
medium
Retention Evidence Url
www.amberscript.com/en/privacy-policy
Retention Claim Basis
stated
Retention Confidence
medium
Subprocessors Evidence Url
www.amberscript.com/en/privacy-policy
Subprocessors Claim Basis
stated
Subprocessors Confidence
medium
Residency Class
eu-only
Portability / Exit Path
proprietary-only
Subprocessor Jurisdiction
mixed
Underlying model providers
Amberscript's own speech models, human transcribers for the reviewed service tiers
At a glance
Governance Grade
B-
Governance Score
69
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5