Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Novita AI Model APIs
NA

Novita AI Model APIs

Sovereignty grade C (45/100). No EU residency; no training on your data. Novita AI, Singapore.

Category
inference-host
EU AI Act role
Deployer
Certifications
HIPAASOC 2 Type II
Deployments
Hosted API
Categories
Inference host
Countries
Singapore
Government access exposure
US CLOUD Act

Details

Deployment
hosted
Hq Country
Singapore
Hq City
Singapore
Ownership
private
Founded
2023
Trust Center Url
trust.novita.ai
Training Default
never
Residency Options
not published, transfers to the United States disclosed
Gov Access Exposure
us-cloud-act
Eu Ai Act Role
deployer
Certs
SOC 2 Type II, HIPAA
DPA available
yes
Retention Default
"We retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes." No inference-specific window.
Retention Exceptions
The privacy policy explicitly carves out customer content: "This Privacy Policy does not apply to content that we process on behalf of customers while providing services. Our use of that data is governed by our customer agreements" — which are not public.
Subprocessors
Amazon Web Services, Google Cloud, GitHub, Slack
Subprocessor Count
4
Transfer Mechanism
sccs+dpf
Eu Procurement Ready
fail
Eu Procurement Reason
SOC 2 Type II audited with a real trust center, an unambiguous "The Personal Information will not be used for model training", and SCCs plus DPF named for transfers. The problem for a European buyer is that the terms governing prompts and outputs are explicitly excluded from the public privacy policy and pushed into non-public customer agreements, there is no EU residency option, and the disclosed infrastructure is US hyperscaler.
Training Evidence Url
novita.ai/legal/privacy-policy
Training Claim Basis
stated
Training Confidence
high
Residency Evidence Url
novita.ai/legal/privacy-policy
Residency Claim Basis
inferred
Residency Confidence
medium
Retention Evidence Url
novita.ai/legal/privacy-policy
Retention Claim Basis
stated
Retention Confidence
medium
Subprocessors Evidence Url
trust.novita.ai
Subprocessors Claim Basis
stated
Subprocessors Confidence
medium
Residency Class
non-eu-only
Portability / Exit Path
serves-open-models
Subprocessor Jurisdiction
non-eu
Underlying model providers
Meta (Llama), DeepSeek, Qwen, Mistral AI, Z.ai (GLM)
At a glance
Governance Grade
C
Governance Score
45
EC SOV-2 Legal & Jurisdictional (0-4)
1
EC SOV-3 Data & AI (0-4)
1
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2