Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Generative APIs / Managed Inference
GA

Generative APIs / Managed Inference

Sovereignty grade A (86/100). EU-only residency; no training on your data. Scaleway, France.

Category
sovereign-host
Certifications
CSA STAR Level 1GDPRHDSISO 27001:2022
EU AI Act role
Deployer
Countries
France
Deployments
Hosted API
Government access exposure
No non-EU government access
Categories
Sovereign host

Details

Deployment
hosted
Hq Country
France
Hq City
Paris
Ownership
private-eu-owned
Founded
1999
Trust Center Url
security.scaleway.com
Training Default
never
Residency Options
France (FR-PAR), EU
Gov Access Exposure
none-eu
Eu Ai Act Role
deployer
Certs
ISO 27001:2022, HDS, CSA STAR Level 1, GDPR
DPA available
yes
Zero Retention Available
Yes
Retention Default
Zero Data Retention by default — content not collected, read, reused, or analyzed; inference data not used for shared model training.
Retention Exceptions
only data required to operate/bill the service
Subprocessors
Iliad/Scaleway-owned EU datacentres
Transfer Mechanism
intra-eu
Eu Procurement Ready
pass
Eu Procurement Reason
Iliad-owned (French/EU), EU-hosted (Paris), ZDR by default, no CLOUD Act exposure. IMPORTANT: SecNumCloud is NOT yet held — Scaleway entered the ANSSI qualification process in Jan 2025 (targeted end-2025, unconfirmed as of Jul 2026). Confirmed certs are ISO 27001:2022, HDS, CSA STAR L1.
Last Policy Change
2025-01-15T00:00:00.000Z
Change Summary
Scaleway (Iliad) entered the ANSSI SecNumCloud qualification process; Generative APIs moved past beta with EU-sovereign zero-retention inference.
Prior Value
No SecNumCloud process; GPU/infra without managed sovereign inference GA.
Training Evidence Url
www.scaleway.com/en/news/scaleway-launches-generative-apis-a-drop-in-alternative-to-openai-apis-100percent-made-in-europe
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
www.scaleway.com/en/news/scaleway-managed-inference-brings-sovereign-open-source-ai-to-all-in-europe
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
www.scaleway.com/en/docs/generative-apis/reference-content/data-privacy
Retention Claim Basis
stated
Retention Confidence
medium
Subprocessors Evidence Url
www.scaleway.com/en/security-and-resilience
Subprocessors Claim Basis
inferred
Subprocessors Confidence
low
Residency Class
eu-only
Portability / Exit Path
serves-open-models
Subprocessor Jurisdiction
vertically-integrated-eu

Change history

  1. Aug 3, 2026Governance Grade

    A- → A

At a glance
Governance Grade
A
Governance Score
86
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7