Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Replicate
R

Replicate

Sovereignty grade F (27/100). No EU residency; no training on your data. Replicate, United States.

Category
inference-host
EU AI Act role
Deployer
Deployments
Hosted API
Categories
Inference host
Government access exposure
US CLOUD Act
Countries
United States

Details

Deployment
hosted
Hq Country
United States
Hq City
San Francisco
Ownership
private
Founded
2019
Trust Center Url
replicate.com/privacy
Training Default
never
Residency Options
not published
Gov Access Exposure
us-cloud-act
Eu Ai Act Role
deployer
DPA available
no
Retention Default
The privacy policy says only that Replicate retains customer personal information for as long as necessary to provide the Services, with no inference-specific window. No zero-retention option is documented.
Retention Exceptions
Terms section 5.2 grants Replicate a worldwide licence to use, store, host, modify and create derivative works of Customer Data — scoped to providing Output, training the customer's own derivative models, and compiling Resultant Data. The scope reads as no Replicate-side model training, but it is a licence grant, not a commitment not to train.
Subprocessor Count
0
Transfer Mechanism
none-stated
Eu Procurement Ready
fail
Eu Procurement Reason
The least documented vendor in the registry. No published DPA, no subprocessor list, no trust center, no security page, no certification page, and a privacy policy that names service-provider categories but not one company. No Article 46 transfer mechanism is stated. None of this means the practice is bad — it means a buyer has nothing to assess and nothing to hold Replicate to.
Training Evidence Url
replicate.com/terms
Training Claim Basis
inferred
Training Confidence
medium
Residency Evidence Url
replicate.com/privacy
Residency Claim Basis
inferred
Residency Confidence
medium
Retention Evidence Url
replicate.com/privacy
Retention Claim Basis
stated
Retention Confidence
low
Residency Class
non-eu-only
Portability / Exit Path
serves-open-models
Subprocessor Jurisdiction
undisclosed
Underlying model providers
community and marketplace model publishers, Meta (Llama), Black Forest Labs (FLUX), Stability AI
At a glance
Governance Grade
F
Governance Score
27
EC SOV-2 Legal & Jurisdictional (0-4)
0
EC SOV-3 Data & AI (0-4)
1
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2