Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Gladia speech-to-text API
GS

Gladia speech-to-text API

Sovereignty grade C (51/100). EU residency by default; trains unless you opt out. Gladia, France.

Category
meeting-ai
Countries
France
Deployments
Hosted API
Government access exposure
Mixed jurisdiction
Certifications
SOC 2 Type II
Categories
meeting-ai
EU AI Act role
provider

Details

Deployment
hosted
Hq Country
France
Hq City
Paris
Ownership
private
Founded
2022
Trust Center Url
www.gladia.io/compliance-hub
Training Default
opt-out-clear
Residency Options
France by default (European provider), other geographies on request, EU and US workloads on separate region-specific infrastructure
Gov Access Exposure
mixed
Eu Ai Act Role
provider
Certs
SOC 2 Type II
DPA available
yes
Zero Retention Available
Yes
Retention Default
Twelve months by default, with 1-month, 1-week, 1-day and zero-retention policies available to customers. "By default, we use a European provider based in France to respect GDPR constraints, but offer other geographies and specific providers per customer request." EU and US workloads are kept on separate region-specific infrastructure.
Retention Exceptions
Training is tiered by plan rather than by setting: "User audio data may be used for the training of the models. Only users in the Free Plan are subject to data used for model training. All users and customers that are in the Pro Plan or Enterprise Plan, will not have their data used for model training." The terms of use repeat it — the Free offer includes internal processing to improve the service, and free-tier output may be used to train the models. Paid tiers are excluded, so the escape is real, but it is bought rather than toggled.
Subprocessors
not published — the sub-processor list is available only on request through the Trust Center
Subprocessor Count
0
Transfer Mechanism
sccs+dpf
Eu Procurement Ready
conditional
Eu Procurement Reason
A French speech-to-text vendor with a French default region, EU and US workloads on separate infrastructure, zero-retention available on request, and a real SOC 2 Type II. Two things hold it back and both are the vendor's own doing. It is the only row in this batch that does not publish its sub-processors: the compliance hub says "a maintained list of subprocessors, purposes, and locations is available" and the Trust Center provides it "upon request", so a buyer cannot see who touches the audio before signing anything. And the ISO 27001 claim does not survive reading two pages together — the body text says Gladia "is working towards ISO 27001 compliance" while the footer of every page reads "ISO 27001 Compliant". Only the SOC 2 is credited here. Free-tier audio also trains the models, which matters more than it looks: evaluation traffic is exactly what a team sends before it has a contract.
Training Evidence Url
www.gladia.io/security
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
www.gladia.io/security
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
www.gladia.io/security
Retention Claim Basis
stated
Retention Confidence
high
Subprocessors Evidence Url
www.gladia.io/compliance-hub
Subprocessors Claim Basis
stated
Subprocessors Confidence
high
Residency Class
eu-default
Portability / Exit Path
proprietary-only
Subprocessor Jurisdiction
undisclosed
Underlying model providers
Gladia's own Solaria speech models
At a glance
Governance Grade
C
Governance Score
51
EC SOV-2 Legal & Jurisdictional (0-4)
1
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5