Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Cortex AI
CA

Cortex AI

Sovereignty grade C+ (55/100). EU region selectable; no training on your data. Snowflake, United States.

Category
cloud-platform
Categories
Cloud platform
EU AI Act role
Deployer
Deployments
Hosted API
Certifications
ISO 27001SOC 2 Type II
Government access exposure
US CLOUD Act
Countries
United States

Details

Deployment
hosted
Hq Country
United States
Hq City
Bozeman
Ownership
public
Founded
2012
Trust Center Url
www.snowflake.com/en/legal
Training Default
never
Residency Options
customer-selected region incl. EU (Frankfurt), EU (Zurich), EU (Stockholm), EU (Ireland), EU (Paris), Europe (London), cross-region inference (optional, moves data out of region)
Gov Access Exposure
us-cloud-act
Eu Ai Act Role
deployer
Certs
ISO 27001, SOC 2 Type II
DPA available
yes
Retention Default
Not stated as an inference-specific window in the public Cortex documentation; data stays within the customer's Snowflake account and region.
Retention Exceptions
Cross-region inference is the material exception: when enabled, AWS, Azure and Google Cloud appear as subprocessors specifically to serve Cortex requests from other regions, so an EU account's inference can leave the EU by feature flag.
Subprocessors
Amazon Web Services, Microsoft Azure, Google Cloud Platform, Cloudflare
Subprocessor Count
4
Transfer Mechanism
sccs
Eu Procurement Ready
conditional
Eu Procurement Reason
Snowflake states every LLM it offers is deployed inside the Snowflake service perimeter rather than called out to a model vendor's API, which is a genuinely stronger position than the routing model most platforms use, and six European regions are selectable with AWS EMEA SARL (Luxembourg) as the contracting entity. The sub-processor table is precise about which entity serves which region and under what transfer mechanism. Cross-region inference undoes the residency guarantee when switched on, and Snowflake Inc. remains US-domiciled.
Training Evidence Url
docs.snowflake.com/en/user-guide/snowflake-cortex/llm-functions
Training Claim Basis
inferred
Training Confidence
medium
Residency Evidence Url
www.snowflake.com/legal/snowflake-sub-processors
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
docs.snowflake.com/en/user-guide/snowflake-cortex/llm-functions
Retention Claim Basis
inferred
Retention Confidence
low
Subprocessors Evidence Url
www.snowflake.com/legal/snowflake-sub-processors
Subprocessors Claim Basis
stated
Subprocessors Confidence
high
Residency Class
eu-selectable
Portability / Exit Path
serves-open-models
Subprocessor Jurisdiction
mixed
Underlying model providers
Anthropic, Meta (Llama), Mistral AI, OpenAI, Snowflake (Arctic)
At a glance
Governance Grade
C+
Governance Score
55
EC SOV-2 Legal & Jurisdictional (0-4)
1
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2