- Deployment
- hosted
- Hq Country
- Netherlands
- Hq City
- Amsterdam
- Ownership
- public
- Founded
- 2024
- Trust Center Url
- https://nebius.com/trust-center
- Training Default
- never
- Residency Options
- EU (Finland, France), US, Israel
- Gov Access Exposure
- none-eu
- Eu Ai Act Role
- deployer
- Certs
- ISO 27001:2022, ISO 27701, SOC 2 Type II (incl. HIPAA), CSA STAR Level 1, NIS2/DORA aligned
- Dpa Available
- Yes
- Zero Retention Available
- Yes
- Retention Default
- Inputs/outputs used only for speculative decoding unless Zero Data Retention is enabled; no fixed retention duration published. Fine-tuning data stored exclusively in EU.
- Retention Exceptions
- With ZDR enabled, inputs/outputs not stored after processing. AI Cloud does not currently support special-category/sensitive personal data.
- Subprocessors
- Nebius-owned EU datacentres (FI/FR)
- Transfer Mechanism
- intra-eu
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- EU processor (Amsterdam) with EU datacentres, never-train, ZDR, fine-tuning data pinned to EU. Conditional because Nebius Group is Nasdaq-listed with US datacentre/operations (a US-region choice reintroduces exposure) and a DPF-certification claim in the legal guide is not enumerated on the trust center.
- Last Policy Change
- 2025-10-14T00:00:00.000Z
- Change Summary
- Published expanded enterprise-security portfolio — SOC 2 Type II (incl. HIPAA), full ISO family, CSA STAR L1, NIS2/DORA alignment; AI Cloud 3.0 'Aether' announced.
- Prior Value
- Narrower published certification set.
- Training Evidence Url
- https://docs.tokenfactory.nebius.com/legal/legal-quick-guide
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Evidence Url
- https://docs.tokenfactory.nebius.com/legal/legal-quick-guide
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Evidence Url
- https://docs.tokenfactory.nebius.com/legal/legal-quick-guide
- Retention Claim Basis
- stated
- Retention Confidence
- medium
- Subprocessors Evidence Url
- https://nebius.com/trust-center
- Subprocessors Claim Basis
- inferred
- Subprocessors Confidence
- low
