Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. AssemblyAI speech-to-text API
AS

AssemblyAI speech-to-text API

Sovereignty grade C+ (55/100). EU region selectable; no training on your data. AssemblyAI, United States.

Category
meeting-ai
Deployments
Hosted API
Certifications
SOC 2 Type II
Government access exposure
US CLOUD Act
Countries
United States
Categories
meeting-ai
EU AI Act role
provider

Details

Deployment
hosted
Hq Country
United States
Hq City
San Francisco
Ownership
private
Founded
2017
Trust Center Url
app.vanta.com/assemblyai/trust/7n80syl8zln1bn1qm3x8eg
Training Default
never
Residency Options
United States (default), EU Data Residency in Dublin, Ireland, enabled self-serve from the dashboard
Gov Access Exposure
us-cloud-act
Eu Ai Act Role
provider
Certs
SOC 2 Type II
DPA available
yes
Zero Retention Available
Yes
Retention Default
By default audio and transcripts are retained only as long as needed to process the request; a zero data retention option is available as an account-level setting, after which audio files and transcripts are never stored after processing.
Retention Exceptions
The Vanta trust centre names thirteen sub-processors with processing locations, and the locations are more mixed than the rest of the US cohort: AWS in the US and Ireland, Google Cloud in the US and Belgium, Baseten in the US, Europe and Australia. Several of the LLM processors are marked optional, so the audio-context features can be declined.
Subprocessors
Amazon Web Services (US, Ireland), Google Cloud (US, Belgium), Baseten (US, Europe, Australia), Anthropic (US), OpenAI (US), Cloudflare, Datadog, GitHub, Metronome, Pendo, Stripe, Stytch, Vercel
Subprocessor Count
13
Transfer Mechanism
sccs
Eu Procurement Ready
conditional
Eu Procurement Reason
The substrate several of the meeting apps in this batch sit on — Fireflies and Granola both name it — and, judged on its own, the best-disclosed American vendor here. Thirteen sub-processors named with processing locations in a live trust centre, SOC 2 Type 1 and Type 2, zero-retention available, and EU data residency in Dublin that a customer can enable themselves from the dashboard rather than negotiate. It remains a US company under US jurisdiction, and the EU residency is a setting rather than the default, so it lands in the same place as every other eu-selectable row: verifiable, conditional, and dependent on the buyer configuring it. Worth noting for procurement that buying a meeting app which routes to AssemblyAI is not the same as buying AssemblyAI — the app's own residency setting governs, not this one.
Training Evidence Url
www.assemblyai.com/legal/privacy-policy
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
www.assemblyai.com/security
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
www.assemblyai.com/security
Retention Claim Basis
stated
Retention Confidence
medium
Subprocessors Evidence Url
app.vanta.com/assemblyai/trust/7n80syl8zln1bn1qm3x8eg/subprocessors
Subprocessors Claim Basis
stated
Subprocessors Confidence
high
Residency Class
eu-selectable
Portability / Exit Path
open-api-standard
Subprocessor Jurisdiction
non-eu
Underlying model providers
AssemblyAI's own speech models, OpenAI, Anthropic, Google and Baseten as optional LLM processors for audio context

Change history

  1. Aug 19, 2026Retention Default

    US processing by default. "Adherence to EU Data Residency is available self-serve via the customer dashboard" and "AssemblyAI processes data in our European data processing center in Dublin, Ireland" — a real EU option that a customer can switch on without a sales conversation, which is rare in this batch. → By default audio and transcripts are retained only as long as needed to process the request; a zero data retention option is available as an account-level setting, after which audio files and transcripts are never stored after processing.

    Source
  2. Aug 19, 2026Governance Grade

    C+ → C

At a glance
Governance Grade
C
Governance Score
54
EC SOV-2 Legal & Jurisdictional (0-4)
1
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5