Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Paradigm
P

Paradigm

Sovereignty grade B+ (76/100). You control where it runs; no training on your data; on-prem. LightOn, France.

Category
cloud-platform
Categories
Cloud platform
EU AI Act role
Deployer
Countries
France
Government access exposure
No non-EU government access
Deployments
On-premise

Details

Deployment
on-prem
Hq Country
France
Hq City
Paris
Ownership
public
Founded
2016
Trust Center Url
lighton.ai/privacy-policy
Training Default
never
Residency Options
customer's own infrastructure (air-gap capable), customer infrastructure with sovereign European cloud GPUs, sovereign European cloud (managed SaaS)
Gov Access Exposure
none-eu
Eu Ai Act Role
deployer
DPA available
yes
Zero Retention Available
Yes
Self Host Option
Yes
Retention Default
In the on-premise deployment both compute and data stay on the customer's infrastructure, so LightOn retains nothing. The corporate privacy policy's retention schedule (6 months for application and connection data) covers LightOn's own website and customer-relationship data, not Paradigm workloads.
Retention Exceptions
"Most of the processing directly under the control of LightOn is carried out in France or in the UE." Sub-processor processing "can take place in various locations" under SCCs, Data Privacy Framework or BCRs — but that is the corporate estate, not the on-premise product.
Subprocessor Count
0
Transfer Mechanism
intra-eu
Eu Procurement Ready
pass
Eu Procurement Reason
Europe's only listed generative-AI pure play — Euronext Growth Paris since November 2024 — selling a GenAI platform that deploys on the customer's own servers, air-gap capable, with a hybrid mode that keeps data on-premise while borrowing sovereign European cloud GPUs for inference. Jurisdiction and data control are as good as the rubric allows. Two things hold it below the self-hosted open-weight rows: Paradigm is proprietary, so exit means rebuilding rather than changing a base URL, and there is no certification this pass could verify — for a vendor selling to defence, critical infrastructure and the French public sector, the absence of a published ISO 27001 or SecNumCloud position is conspicuous. The privacy policy is also a corporate one; it says nothing about Paradigm workloads, which in an on-premise product is defensible but leaves the buyer inferring the most important commitment.
Training Evidence Url
lighton.ai/deployment-options
Training Claim Basis
inferred
Training Confidence
medium
Residency Evidence Url
lighton.ai/deployment-options
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
lighton.ai/privacy-policy
Retention Claim Basis
inferred
Retention Confidence
medium
Subprocessors Evidence Url
lighton.ai/privacy-policy
Subprocessors Claim Basis
inferred
Subprocessors Confidence
medium
Residency Class
customer-controlled
Portability / Exit Path
proprietary-only
Subprocessor Jurisdiction
structurally-none
Underlying model providers
LightOn (proprietary Paradigm models), open-weight models deployed on customer infrastructure
At a glance
Governance Grade
B+
Governance Score
76
EC SOV-2 Legal & Jurisdictional (0-4)
3
EC SOV-3 Data & AI (0-4)
3
Website

Similar

Gladia · Sep 2026

GSGladia speech-to-text API

Sovereignty grade C (51/100). EU residency by default; trains unless you opt out. Gladia, France.

meeting-ai
Governance Grade
C
tl;dv · Sep 2026

TMtl;dv meeting recorder

Sovereignty grade C (52/100). EU region selectable; no training on your data. tl;dv, Germany.

meeting-ai
Governance Grade
C
Happy Scribe · Aug 2026

HSHappy Scribe transcription and subtitles

Sovereignty grade C+ (63/100). EU-only residency. Happy Scribe, Ireland.

meeting-ai
Governance Grade
C+

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2