Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Open-weights models (Apache 2.0), self-hosted
OM

Open-weights models (Apache 2.0), self-hosted

Sovereignty grade A (93/100). You control where it runs; no training on your data; self-hosted weights. Mistral AI, France.

Category
foundation-model
Categories
Foundation model
Countries
France
EU AI Act role
General-purpose AI (GPAI)
Government access exposure
No non-EU government access
Deployments
Self-hosted weights

Details

Deployment
self-hosted-weights
Hq Country
France
Hq City
Paris
Ownership
private-eu-owned
Founded
2023
Trust Center Url
trust.mistral.ai
Training Default
never
Residency Options
your-infrastructure, EU, on-prem
Gov Access Exposure
none-eu
Eu Ai Act Role
gpai
DPA available
structurally-na
Zero Retention Available
Yes
Self Host Option
Yes
Retention Default
customer-controlled (self-hosted — Mistral receives no inference data)
Retention Exceptions
none — no vendor-side data flow (Apache 2.0 weights)
Subprocessor Count
0
Transfer Mechanism
intra-eu
Eu Procurement Ready
pass
Eu Procurement Reason
EU-origin open-weights (Apache 2.0) run entirely on customer infrastructure; zero vendor data flow, no CLOUD Act exposure. Data-protection posture is determined by where the customer hosts.
Last Policy Change
2025-06-10T00:00:00.000Z
Change Summary
Mistral expanded its sovereign self-host story (Mistral Compute European AI cloud) alongside continued Apache-2.0 open-weights releases.
Prior Value
Reliance on third-party clouds for compute; fewer sovereign self-host options.
Training Evidence Url
docs.mistral.ai/admin/monitor-comply/privacy-data-controls
Training Claim Basis
inferred
Training Confidence
high
Residency Evidence Url
legal.mistral.ai/terms/privacy-policy
Residency Claim Basis
inferred
Residency Confidence
high
Retention Evidence Url
docs.mistral.ai/admin/monitor-comply/privacy-data-controls
Retention Claim Basis
inferred
Retention Confidence
high
Subprocessors Claim Basis
inferred
Subprocessors Confidence
high
Residency Class
customer-controlled
Portability / Exit Path
open-weights-permissive
Subprocessor Jurisdiction
structurally-none
At a glance
Governance Grade
A
Governance Score
93
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
3
Website

Similar

Gladia · Sep 2026

GSGladia speech-to-text API

Sovereignty grade C (51/100). EU residency by default; trains unless you opt out. Gladia, France.

meeting-ai
Governance Grade
C
Happy Scribe · Aug 2026

HSHappy Scribe transcription and subtitles

Sovereignty grade C+ (63/100). EU-only residency. Happy Scribe, Ireland.

meeting-ai
Governance Grade
C+
Amberscript · Sep 2026

ATAmberscript transcription and subtitling

Sovereignty grade B- (69/100). EU-only residency; no training on your data. Amberscript, Netherlands.

meeting-ai
Governance Grade
B-

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2