Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  3. Replit Agent
RA

Replit Agent

Sovereignty grade F (20/100). No EU residency. Replit, United States.

Category
coding-assistant
Categories
Coding assistant
EU AI Act role
Deployer
Deployments
Hosted API
Certifications
SOC 2 Type II
Government access exposure
US CLOUD Act
Countries
United States

Details

Deployment
hosted
Hq Country
United States
Hq City
Foster City
Ownership
private
Founded
2016
Trust Center Url
trust.replit.com
Residency Options
"Our Services are primarily hosted in the United States and may also be hosted in locations outside of the jurisdiction in which you live"
Gov Access Exposure
us-cloud-act
Eu Ai Act Role
deployer
Certs
SOC 2 Type II
DPA available
yes
Retention Default
No inference retention window is published, and no published Replit document states whether prompts and code submitted to Agent are used to train models. The privacy policy describes using data "to facilitate the Services"; the terms forbid users from scraping Replit for training but say nothing about Replit's own use.
Retention Exceptions
The privacy policy is explicit that cross-border transfer rests on user consent — "By using the Services, you agree to such transfer, storage, and processing" — rather than on a named Chapter V mechanism. Data deletion is self-service through account settings.
Subprocessors
Amplitude (USA) — Analytics, Anima App, Inc. (USA) — Design system imports, Anthropic (USA) — AI models, AppsFlyer INC (USA) — Analytics and customer interactions, Attribution Inc. (USA) — Marketing and analytics, Baseten (USA) — AI infrastructure platform, Catamorphic Co. DBA LaunchDarkly (USA) — Engineering, Civilized Discourse Construction Kit, Inc (USA) — Customer support, Clazar (USA) — Billing, Clerk (USA) — Enterprise SSO, Cloudflare (USA) — Cloud infrastructure, Common Room (USA) — Customer support, Datadog, Inc. (USA) — Analytics, Enterpret (USA) — Customer feedback, Fireworks AI, Inc. (USA) — AI infrastructure platform, Fivetran (USA) — Data storage and processing, Google, Inc (USA) — Cloud infrastructure, AI models, analytics and customer interactions, Grafana Labs (USA) — Cloud monitoring, Hashboard (USA) — Analytics, HashiCorp Cloud (USA) — Cloud infrastructure, Hex Technologies Inc (USA) — Analytics, HubSpot (USA) — Marketing, Inngest (USA) — Engineering, Iterable (USA) — Marketing, Looker Studio (USA) — Analytics, Mailgun Technologies, Inc. (USA) — Marketing, Microsoft Azure (USA) — Cloud infrastructure, Name.com (USA) — Domain registrar, Neon (USA) — Database management, OpenAI (USA) — AI models, OpenRouter (USA) — AI model selection for Integrations, Orb (USA) — Billing, OWND ApS (Parahelp) (USA) — Customer support, Parallel Web Systems (USA) — AI infrastructure platform, Segment (USA) — Analytics, Sentry (USA) — Cloud monitoring, SideGuide Technologies, Inc. d/b/a Firecrawl (USA) — Web data extraction for AI applications, Stripe (USA) — Payment processing, Stytch (USA) — Analytics and identity, Synadia Cloud (USA) — Cloud services, Temporal Technologies Inc. (USA) — Engineering, Twilio (USA) — SMS verification, Verifi Inc. (USA) — Payments, WorkOS (USA) — Engineering, Zapier (USA) — Collaboration, Zendesk (USA) — Customer support, ZoomInfo (USA) — Analytics and marketing
Subprocessor Count
0
Transfer Mechanism
none-stated
Eu Procurement Ready
fail
Eu Procurement Reason
Replit has the security engineering — isolated sandboxes moving to microVMs, per-customer Google Cloud projects even on the free tier, pre-publish SAST and SCA scanning, SOC 2 Type II audited annually — and almost none of the data governance a European buyer has to be able to read. Three things are missing at once, and each would be disqualifying on its own. No published document says whether code and prompts submitted to Agent are used to train models, so the registry records nothing there and scores it zero. The sub-processors page exists, is linked from the footer, and names no sub-processor — it lists categories. And the transfer basis offered for sending EU personal data to the United States is the user's consent to the terms, not Standard Contractual Clauses or any other Article 46 instrument. The trust centre confirms a DPA and a sub-processor list exist behind an access request; until they are public this row is what the public record supports.
Residency Evidence Url
replit.com/privacy
Residency Claim Basis
stated
Residency Confidence
high
Retention Evidence Url
replit.com/privacy
Retention Claim Basis
inferred
Retention Confidence
low
Subprocessors Evidence Url
replit.com/subprocessors
Subprocessors Claim Basis
stated
Subprocessors Confidence
high
Residency Class
non-eu-only
Portability / Exit Path
proprietary-only
Subprocessor Jurisdiction
undisclosed

Change history

  1. Sep 8, 2026Subprocessors

    Amplitude (USA) — Analytics, Anima App, Inc. (USA) — Design system imports, Anthropic (USA) — AI models, AppsFlyer INC (USA) — Analytics and customer interactions, Attribution Inc. (USA) — Marketing and analytics, Baseten (USA) — AI infrastructure platform, Catamorphic Co. DBA LaunchDarkly (USA) — Engineering, Civilized Discourse Construction Kit, Inc (USA) — Customer support, Clazar (USA) — Billing, Clerk (USA) — Enterprise SSO, Cloudflare (USA) — Cloud infrastructure, Common Room (USA) — Customer support, Datadog, Inc. (USA) — Analytics, Enterpret (USA) — Customer feedback, Fireworks AI, Inc. (USA) — AI infrastructure platform, Fivetran (USA) — Data storage and processing, Google, Inc (USA) — Cloud infrastructure, AI models, analytics and customer interactions, Grafana Labs (USA) — Cloud monitoring, Hashboard (USA) — Analytics, HashiCorp Cloud (USA) — Cloud infrastructure, Hex Technologies Inc (USA) — Analytics, HubSpot (USA) — Marketing, Inngest (USA) — Engineering, Iterable (USA) — Marketing, Looker Studio (USA) — Analytics, Mailgun Technologies, Inc. (USA) — Marketing, Microsoft Azure (USA) — Cloud infrastructure, Name.com (USA) — Domain registrar, Neon (USA) — Database management, OpenAI (USA) — AI models, OpenRouter (USA) — AI model selection for Integrations, Orb (USA) — Billing, OWND ApS (Parahelp) (USA) — Customer support, Parallel Web Systems (USA) — AI infrastructure platform, Segment (USA) — Analytics, Sentry (USA) — Cloud monitoring, Stripe (USA) — Payment processing, Stytch (USA) — Analytics and identity, Synadia Cloud (USA) — Cloud services, Temporal Technologies Inc. (USA) — Engineering, Twilio (USA) — SMS verification, Verifi Inc. (USA) — Payments, WorkOS (USA) — Engineering, Zapier (USA) — Collaboration, Zendesk (USA) — Customer support, ZoomInfo (USA) — Analytics and marketing → Amplitude (USA) — Analytics, Anima App, Inc. (USA) — Design system imports, Anthropic (USA) — AI models, AppsFlyer INC (USA) — Analytics and customer interactions, Attribution Inc. (USA) — Marketing and analytics, Baseten (USA) — AI infrastructure platform, Catamorphic Co. DBA LaunchDarkly (USA) — Engineering, Civilized Discourse Construction Kit, Inc (USA) — Customer support, Clazar (USA) — Billing, Clerk (USA) — Enterprise SSO, Cloudflare (USA) — Cloud infrastructure, Common Room (USA) — Customer support, Datadog, Inc. (USA) — Analytics, Enterpret (USA) — Customer feedback, Fireworks AI, Inc. (USA) — AI infrastructure platform, Fivetran (USA) — Data storage and processing, Google, Inc (USA) — Cloud infrastructure, AI models, analytics and customer interactions, Grafana Labs (USA) — Cloud monitoring, Hashboard (USA) — Analytics, HashiCorp Cloud (USA) — Cloud infrastructure, Hex Technologies Inc (USA) — Analytics, HubSpot (USA) — Marketing, Inngest (USA) — Engineering, Iterable (USA) — Marketing, Looker Studio (USA) — Analytics, Mailgun Technologies, Inc. (USA) — Marketing, Microsoft Azure (USA) — Cloud infrastructure, Name.com (USA) — Domain registrar, Neon (USA) — Database management, OpenAI (USA) — AI models, OpenRouter (USA) — AI model selection for Integrations, Orb (USA) — Billing, OWND ApS (Parahelp) (USA) — Customer support, Parallel Web Systems (USA) — AI infrastructure platform, Segment (USA) — Analytics, Sentry (USA) — Cloud monitoring, SideGuide Technologies, Inc. d/b/a Firecrawl (USA) — Web data extraction for AI applications, Stripe (USA) — Payment processing, Stytch (USA) — Analytics and identity, Synadia Cloud (USA) — Cloud services, Temporal Technologies Inc. (USA) — Engineering, Twilio (USA) — SMS verification, Verifi Inc. (USA) — Payments, WorkOS (USA) — Engineering, Zapier (USA) — Collaboration, Zendesk (USA) — Customer support, ZoomInfo (USA) — Analytics and marketing

    Source
  2. Aug 29, 2026Subprocessors

    Amplitude (USA) — Analytics, Anima App, Inc. (USA) — Design system imports, Anthropic (USA) — AI models, AppsFlyer INC (USA) — Analytics and customer interactions, Attribution Inc. (USA) — Marketing and analytics, Baseten (USA) — AI infrastructure platform, Catamorphic Co. DBA LaunchDarkly (USA) — Engineering, Civilized Discourse Construction Kit, Inc (USA) — Customer support, Clazar (USA) — Billing, Clerk (USA) — Enterprise SSO, Cloudflare (USA) — Cloud infrastructure, Common Room (USA) — Customer support, Datadog, Inc. (USA) — Analytics, Enterpret (USA) — Customer feedback, Fivetran (USA) — Data storage and processing, Google, Inc (USA) — Cloud infrastructure, AI models, analytics and customer interactions, Grafana Labs (USA) — Cloud monitoring, Hashboard (USA) — Analytics, HashiCorp Cloud (USA) — Cloud infrastructure, Hex Technologies Inc (USA) — Analytics, HubSpot (USA) — Marketing, Inngest (USA) — Engineering, Iterable (USA) — Marketing, Looker Studio (USA) — Analytics, Mailgun Technologies, Inc. (USA) — Marketing, Microsoft Azure (USA) — Cloud infrastructure, Name.com (USA) — Domain registrar, Neon (USA) — Database management, OpenAI (USA) — AI models, OpenRouter (USA) — AI model selection for Integrations, Orb (USA) — Billing, OWND ApS (Parahelp) (USA) — Customer support, Parallel Web Systems (USA) — AI infrastructure platform, Segment (USA) — Analytics, Sentry (USA) — Cloud monitoring, Stripe (USA) — Payment processing, Stytch (USA) — Analytics and identity, Synadia Cloud (USA) — Cloud services, Temporal Technologies Inc. (USA) — Engineering, Twilio (USA) — SMS verification, Verifi Inc. (USA) — Payments, WorkOS (USA) — Engineering, Zapier (USA) — Collaboration, Zendesk (USA) — Customer support, ZoomInfo (USA) — Analytics and marketing → Amplitude (USA) — Analytics, Anima App, Inc. (USA) — Design system imports, Anthropic (USA) — AI models, AppsFlyer INC (USA) — Analytics and customer interactions, Attribution Inc. (USA) — Marketing and analytics, Baseten (USA) — AI infrastructure platform, Catamorphic Co. DBA LaunchDarkly (USA) — Engineering, Civilized Discourse Construction Kit, Inc (USA) — Customer support, Clazar (USA) — Billing, Clerk (USA) — Enterprise SSO, Cloudflare (USA) — Cloud infrastructure, Common Room (USA) — Customer support, Datadog, Inc. (USA) — Analytics, Enterpret (USA) — Customer feedback, Fireworks AI, Inc. (USA) — AI infrastructure platform, Fivetran (USA) — Data storage and processing, Google, Inc (USA) — Cloud infrastructure, AI models, analytics and customer interactions, Grafana Labs (USA) — Cloud monitoring, Hashboard (USA) — Analytics, HashiCorp Cloud (USA) — Cloud infrastructure, Hex Technologies Inc (USA) — Analytics, HubSpot (USA) — Marketing, Inngest (USA) — Engineering, Iterable (USA) — Marketing, Looker Studio (USA) — Analytics, Mailgun Technologies, Inc. (USA) — Marketing, Microsoft Azure (USA) — Cloud infrastructure, Name.com (USA) — Domain registrar, Neon (USA) — Database management, OpenAI (USA) — AI models, OpenRouter (USA) — AI model selection for Integrations, Orb (USA) — Billing, OWND ApS (Parahelp) (USA) — Customer support, Parallel Web Systems (USA) — AI infrastructure platform, Segment (USA) — Analytics, Sentry (USA) — Cloud monitoring, Stripe (USA) — Payment processing, Stytch (USA) — Analytics and identity, Synadia Cloud (USA) — Cloud services, Temporal Technologies Inc. (USA) — Engineering, Twilio (USA) — SMS verification, Verifi Inc. (USA) — Payments, WorkOS (USA) — Engineering, Zapier (USA) — Collaboration, Zendesk (USA) — Customer support, ZoomInfo (USA) — Analytics and marketing

    Source
  3. Aug 19, 2026Subprocessors

    not published by name — replit.com/subprocessors describes categories ("cloud infrastructure, payments processors, analytics providers, and other software providers") without naming a single entity → Amplitude (USA) — Analytics, Anima App, Inc. (USA) — Design system imports, Anthropic (USA) — AI models, AppsFlyer INC (USA) — Analytics and customer interactions, Attribution Inc. (USA) — Marketing and analytics, Baseten (USA) — AI infrastructure platform, Catamorphic Co. DBA LaunchDarkly (USA) — Engineering, Civilized Discourse Construction Kit, Inc (USA) — Customer support, Clazar (USA) — Billing, Clerk (USA) — Enterprise SSO, Cloudflare (USA) — Cloud infrastructure, Common Room (USA) — Customer support, Datadog, Inc. (USA) — Analytics, Enterpret (USA) — Customer feedback, Fivetran (USA) — Data storage and processing, Google, Inc (USA) — Cloud infrastructure, AI models, analytics and customer interactions, Grafana Labs (USA) — Cloud monitoring, Hashboard (USA) — Analytics, HashiCorp Cloud (USA) — Cloud infrastructure, Hex Technologies Inc (USA) — Analytics, HubSpot (USA) — Marketing, Inngest (USA) — Engineering, Iterable (USA) — Marketing, Looker Studio (USA) — Analytics, Mailgun Technologies, Inc. (USA) — Marketing, Microsoft Azure (USA) — Cloud infrastructure, Name.com (USA) — Domain registrar, Neon (USA) — Database management, OpenAI (USA) — AI models, OpenRouter (USA) — AI model selection for Integrations, Orb (USA) — Billing, OWND ApS (Parahelp) (USA) — Customer support, Parallel Web Systems (USA) — AI infrastructure platform, Segment (USA) — Analytics, Sentry (USA) — Cloud monitoring, Stripe (USA) — Payment processing, Stytch (USA) — Analytics and identity, Synadia Cloud (USA) — Cloud services, Temporal Technologies Inc. (USA) — Engineering, Twilio (USA) — SMS verification, Verifi Inc. (USA) — Payments, WorkOS (USA) — Engineering, Zapier (USA) — Collaboration, Zendesk (USA) — Customer support, ZoomInfo (USA) — Analytics and marketing

    Source
At a glance
Governance Grade
F
Governance Score
20
EC SOV-2 Legal & Jurisdictional (0-4)
0
EC SOV-3 Data & AI (0-4)
0
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2