Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

Posts

Read our latest articles and updates.

Line diagram: a contract document connects to a roster card. Lines fan out from the roster to server buildings, some inside a dashed boundary and some outside it. One line ends at a blank card with nothing attached to it.
Sep 7, 2026Analysis

A DPA is not a sub-processor list

A DPA sets the rules, a sub-processor list names who is bound by them. Of 83 audited AI vendors, 69 publish a DPA and 13 disclose no sub-processors.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

A bar diagram of seven columns on a baseline. Three short columns are capped by a solid horizontal bar drawn across their tops. Four taller columns rise past that bar and reach a dashed horizontal line near the top of the frame.
Aug 31, 2026Analysis

Three ceilings that cap an AI vendor's sovereignty grade

Across 83 audited AI vendors, CLOUD Act exposure caps the sovereignty score at 66, undisclosed sub-processors at 54, and non-EU-only residency at 54.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Three stacked horizontal bars on a shared axis. The top bar is short and positioned to the right, the bottom bar is short and positioned to the left, and the middle bar is long enough to overlap both. A single vertical line crosses all three near the centre.
Aug 17, 2026Analysis

Pass, conditional, fail: how to read the procurement verdict

The registry grades every vendor twice. 43 of 83 records are conditional, and that band runs from 32 to 96. How to turn a verdict into a yes or a no.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Line drawing of five pipes carrying data away from servers inside a dashed boundary; one pipe is broken, one is wrapped in a contract scroll, one in two scrolls, one passes under an arch with a hanging seal, and one loops back inside the boundary.
Aug 10, 2026Analysis

SCCs, adequacy or nothing: how to read a vendor's transfer mechanism

What SCCs, the Data Privacy Framework and adequacy decisions actually cover, and what the mechanism an AI vendor names predicts about its sovereignty grade.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Schematic line drawing of a meeting room whose recording fans out into many lines crossing a dashed boundary
Aug 6, 2026Analysis

The meeting recorders tell you exactly who hears you

Thirteen meeting and transcription tools graded. EU-headquartered vendors score a median 63 against 35 for US ones, the widest gap in the registry.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Schematic line drawing of a code repository fanning out to eight destinations, five of which are empty outlines
Aug 6, 2026Analysis

The coding assistants that will not tell you who reads your code

Fifteen coding assistants graded. Median sovereignty score 49 against 58 for the rest of the registry, and five name no sub-processor at all.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Server racks inside a dashed boundary; a switch on the boundary is open and a pipe passes through it to a single rack outside.
Aug 5, 2026Analysis

An EU region option is not EU residency

Of 58 audited AI vendors, 21 offer a selectable EU region. Their median sovereignty score is 57 and none reaches the A-band. Why the checkbox stalls.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Line diagram: a grid of vendor record cards under a magnifying glass
Aug 4, 2026

"We don't train on your data" is table stakes

53 of 58 AI vendors promise never to train on your data. Their scores range from 27 to 96, so the promise predicts nothing. Here is what actually separates them.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Line diagram: three data centre buildings connected to an empty dashed outline representing a missing AI service
Aug 4, 2026

Europe's flagship sovereign clouds cannot sell you AI

Bleu, S3NS and Delos Cloud are Europe's flagship trusted clouds. None can sell a European buyer an AI service today - and the models coming are American.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry

Line diagram: a central routing hub connected to seventeen inference provider nodes
Aug 4, 2026

What you are actually using when you use Hugging Face Inference Providers

Hugging Face routes your prompts to 17 inference companies. None appears on its published subprocessor list. We graded them: median C, 5 disclose no subprocessors.

MR

Marta Reinders

Compliance analyst @ Sovereign AI Registry