Token Factory

Sovereignty grade B (73/100). EU region selectable; no training on your data. Nebius, Netherlands.

Category: inference-host
Certifications: CSA STAR Level 1 ISO 27001:2022 ISO 27701
EU AI Act role: Deployer
Deployments: Hosted API
Categories: Inference host
Government access exposure: Mixed jurisdiction
Countries: Netherlands

Details

Deployment: hosted
Hq Country: Netherlands
Hq City: Amsterdam
Ownership: public
Founded: 2024
Trust Center Url: nebius.com/trust-center
Training Default: never
Residency Options: public endpoints: no region commitment — Region shows Global, processing location decided dynamically and can change at any time without prior notice, dedicated endpoints: customer-selected region, contractually fixed under DPA Section 6.1, with no multi-region routing or failover, speculative-decoding storage: Finland (EU), fine-tuning data storage: EU data centres only
Gov Access Exposure: mixed
Eu Ai Act Role: deployer
Certs: ISO 27001:2022, ISO 27701, SOC 2 Type II (incl. HIPAA), CSA STAR Level 1, NIS2/DORA aligned
DPA available: yes
Zero Retention Available: Yes
Retention Default: Inputs/outputs used only for speculative decoding unless Zero Data Retention is enabled; no fixed retention duration published. Fine-tuning data stored exclusively in EU.
Retention Exceptions: With ZDR enabled, inputs/outputs not stored after processing. AI Cloud does not currently support special-category/sensitive personal data.
Subprocessors: Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), Data Section (US entity — cloud infrastructure, hosted in Canada), EU entities (FI/DE/CZ)
Transfer Mechanism: intra-eu
Eu Procurement Ready: conditional
Eu Procurement Reason: EU regions exist, but Nebius Inc. (US) sits in the disclosed processing chain with no regional carve-out; US CLOUD Act exposure via the group's US operations.
Last Policy Change: 2025-10-14T00:00:00.000Z
Change Summary: Published expanded enterprise-security portfolio — SOC 2 Type II (incl. HIPAA), full ISO family, CSA STAR L1, NIS2/DORA alignment; AI Cloud 3.0 'Aether' announced.
Prior Value: Narrower published certification set.
Training Evidence Url: docs.tokenfactory.nebius.com/legal/legal-quick-guide
Training Claim Basis: stated
Training Confidence: high
Residency Evidence Url: docs.tokenfactory.nebius.com/legal/legal-quick-guide
Residency Claim Basis: stated
Residency Confidence: high
Retention Evidence Url: docs.tokenfactory.nebius.com/legal/legal-quick-guide
Retention Claim Basis: stated
Retention Confidence: medium
Subprocessors Evidence Url: docs.tokenfactory.nebius.com/legal/subprocessors
Subprocessors Claim Basis: stated
Subprocessors Confidence: high
Residency Class: eu-selectable
Portability / Exit Path: serves-open-models
Subprocessor Jurisdiction: mixed

Change history

Sep 12, 2026Residency Options
EU (Finland, France), US, Israel → public endpoints: no region commitment — Region shows Global, processing location decided dynamically and can change at any time without prior notice, dedicated endpoints: customer-selected region, contractually fixed under DPA Section 6.1, with no multi-region routing or failover, speculative-decoding storage: Finland (EU), fine-tuning data storage: EU data centres only
Source
Aug 29, 2026Subprocessors
Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), EU entities (FI/DE/CZ) → Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), Data Section (US entity — cloud infrastructure, hosted in Canada), EU entities (FI/DE/CZ)
Source
Aug 3, 2026Subprocessors
Nebius-owned EU datacentres (FI/FR) → Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), EU entities (FI/DE/CZ)
Source
Aug 3, 2026Governance Grade
A- → B
Aug 3, 2026Governance Grade
B+ → A-

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai

Governance Grade: F

Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai

Governance Grade: D

Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai

Governance Grade: D

More EU AI Act role

More Deployments

More Categories

More Government access exposure

More Countries

Token Factory

Sovereignty grade B (73/100). EU region selectable; no training on your data. Nebius, Netherlands.

Category: inference-host
Certifications: CSA STAR Level 1 ISO 27001:2022 ISO 27701
EU AI Act role: Deployer
Deployments: Hosted API
Categories: Inference host
Government access exposure: Mixed jurisdiction
Countries: Netherlands

Details

Deployment: hosted
Hq Country: Netherlands
Hq City: Amsterdam
Ownership: public
Founded: 2024
Trust Center Url: nebius.com/trust-center
Training Default: never
Residency Options: public endpoints: no region commitment — Region shows Global, processing location decided dynamically and can change at any time without prior notice, dedicated endpoints: customer-selected region, contractually fixed under DPA Section 6.1, with no multi-region routing or failover, speculative-decoding storage: Finland (EU), fine-tuning data storage: EU data centres only
Gov Access Exposure: mixed
Eu Ai Act Role: deployer
Certs: ISO 27001:2022, ISO 27701, SOC 2 Type II (incl. HIPAA), CSA STAR Level 1, NIS2/DORA aligned
DPA available: yes
Zero Retention Available: Yes
Retention Default: Inputs/outputs used only for speculative decoding unless Zero Data Retention is enabled; no fixed retention duration published. Fine-tuning data stored exclusively in EU.
Retention Exceptions: With ZDR enabled, inputs/outputs not stored after processing. AI Cloud does not currently support special-category/sensitive personal data.
Subprocessors: Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), Data Section (US entity — cloud infrastructure, hosted in Canada), EU entities (FI/DE/CZ)
Transfer Mechanism: intra-eu
Eu Procurement Ready: conditional
Eu Procurement Reason: EU regions exist, but Nebius Inc. (US) sits in the disclosed processing chain with no regional carve-out; US CLOUD Act exposure via the group's US operations.
Last Policy Change: 2025-10-14T00:00:00.000Z
Change Summary: Published expanded enterprise-security portfolio — SOC 2 Type II (incl. HIPAA), full ISO family, CSA STAR L1, NIS2/DORA alignment; AI Cloud 3.0 'Aether' announced.
Prior Value: Narrower published certification set.
Training Evidence Url: docs.tokenfactory.nebius.com/legal/legal-quick-guide
Training Claim Basis: stated
Training Confidence: high
Residency Evidence Url: docs.tokenfactory.nebius.com/legal/legal-quick-guide
Residency Claim Basis: stated
Residency Confidence: high
Retention Evidence Url: docs.tokenfactory.nebius.com/legal/legal-quick-guide
Retention Claim Basis: stated
Retention Confidence: medium
Subprocessors Evidence Url: docs.tokenfactory.nebius.com/legal/subprocessors
Subprocessors Claim Basis: stated
Subprocessors Confidence: high
Residency Class: eu-selectable
Portability / Exit Path: serves-open-models
Subprocessor Jurisdiction: mixed

Change history

Sep 12, 2026Residency Options
EU (Finland, France), US, Israel → public endpoints: no region commitment — Region shows Global, processing location decided dynamically and can change at any time without prior notice, dedicated endpoints: customer-selected region, contractually fixed under DPA Section 6.1, with no multi-region routing or failover, speculative-decoding storage: Finland (EU), fine-tuning data storage: EU data centres only
Source
Aug 29, 2026Subprocessors
Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), EU entities (FI/DE/CZ) → Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), Data Section (US entity — cloud infrastructure, hosted in Canada), EU entities (FI/DE/CZ)
Source
Aug 3, 2026Subprocessors
Nebius-owned EU datacentres (FI/FR) → Nebius Inc. (US — infra, maintenance, support), Nebius Israel Ltd. (IL), Nebius UK Ltd. (UK), RunPod (US — inference infra), Eigen AI (US — inference), BoostRun (US), Shadeform (US), Argentum AI (US), EU entities (FI/DE/CZ)
Source
Aug 3, 2026Governance Grade
A- → B
Aug 3, 2026Governance Grade
B+ → A-

Token Factory

Details

Change history

Similar

RARead AI meeting assistant

FAFathom AI notetaker

GAGranola AI notepad

More Certifications

More EU AI Act role

More Deployments

More Categories

More Government access exposure

More Countries

Token Factory

Details

Change history

Similar

RARead AI meeting assistant

FAFathom AI notetaker

GAGranola AI notepad

More Certifications

More EU AI Act role

More Deployments

More Categories

More Government access exposure

More Countries