BXG AI Safety Agency

AI Sovereignty

AI Sovereignty Dashboard

Compare the AI providers businesses use most: jurisdiction, CLOUD Act exposure, open models and EU hosting options.

Business AI providers compared on sovereignty

Where each provider is headquartered, whether the US CLOUD Act reaches it, whether its models are open, and whether you can keep data in the EU. Last verified 6 November 2026.

Providers shown
15
Outside US CLOUD Act
10
EU-headquartered
6
Offer open weights
6

Alibaba Cloud

Qwen models, Model Studio

Hangzhou, China
CLOUD Act: does not applyEU optionOpen + closed

Frankfurt region stores data in the EU, but the newest models run with global inference.

Many Qwen models are open weights; Qwen-Max is closed.

Jurisdiction: PRC law applies to the company.

Source: Alibaba Cloud docs

Amazon Web Services

Bedrock

Seattle, United States
CLOUD Act: appliesEU optionModel host

EU regions and the European Sovereign Cloud (Brandenburg, Jan 2026), which is still US-owned.

Hosts Anthropic, Mistral, Meta, Amazon and other models.

Source: Cloudvisor

Anthropic

Claude models

San Francisco, United States
CLOUD Act: appliesEU via partner cloudClosed

First-party API processes in the US or globally; EU regions via AWS Bedrock or Google Vertex AI.

Models available by API and apps only.

Source: eSEOspace, Oct 2026

Berget AI

Inference API

Sweden
CLOUD Act: does not applyEU by defaultModel host

Runs on Swedish infrastructure under Swedish jurisdiction.

Serves open-weight models behind an OpenAI-compatible API.

Source: European Purpose

Cohere (incl. Aleph Alpha)

Command models, North

Toronto, Canada
CLOUD Act: does not applyEU optionClosed

Deploys in your VPC or on premises. Bought Germany's Aleph Alpha in 2026, with its European HQ in Berlin.

Commercial models are closed and sold as private deployments.

Jurisdiction: Canadian law.

Source: Doolpa

DeepSeek

DeepSeek models

Hangzhou, China
CLOUD Act: not if self-hostedSelf-host onlyOpen weights

The first-party API runs in China; self-host the weights to keep data in the EU.

Released under the MIT license.

Jurisdiction: PRC law applies to the first-party API.

Source: Blck Alpaca

Google

Gemini, Vertex AI

Mountain View, United States
CLOUD Act: appliesEU optionOpen + closed

EU regions on Vertex AI must be configured; the consumer Gemini API processes globally.

Gemini is closed; Gemma models are open weights.

Source: Google Cloud docs

IONOS

AI Model Hub

Montabaur, Germany
CLOUD Act: does not applyEU by defaultModel host

Hosted in Germany.

Serves curated open-weight models.

Source: LLM Radar

Meta

Llama models

Menlo Park, United States
CLOUD Act: not if self-hostedSelf-host onlyOpen weights

Download the weights and run them on any EU infrastructure you choose.

Llama Community License, which has use restrictions and is not OSI open source.

Source: Layer3 Labs

Microsoft

Azure OpenAI / AI Foundry

Redmond, United States
CLOUD Act: appliesEU optionModel host

EU Data Zone deployments keep processing in the EU; global deployments do not.

Hosts OpenAI and other labs' models.

Source: Wavect

Mistral AI

Mistral API, Le Chat

Paris, France
CLOUD Act: does not applyEU by defaultOpen + closed

First-party platform is EU by default. On Bedrock or Azure, the cloud region you pick decides.

Many models are open weights under Apache 2.0; some premium models are closed.

Source: Wavect

OpenAI

GPT models, ChatGPT Enterprise

San Francisco, United States
CLOUD Act: appliesEU optionOpen + closed

EU data residency for eligible API projects and new ChatGPT Enterprise/Edu workspaces.

Flagship GPT models are closed; gpt-oss models are open weights.

Source: OpenAI

OVHcloud

AI Endpoints

Roubaix, France
CLOUD Act: does not applyEU by defaultModel host

Runs on OVHcloud's own European data centers.

Serverless access to open-weight models.

Source: European Alternatives

Scaleway

Generative APIs

Paris, France
CLOUD Act: does not applyEU by defaultModel host

Serverless models are hosted in a Paris data center.

Serves open-weight models behind an OpenAI-compatible API.

Source: European Alternatives

STACKIT

AI Model Serving

Neckarsulm, Germany
CLOUD Act: does not applyEU by defaultModel host

Exclusively European data residency, hosted in Germany.

Serves open-weight models. Part of Schwarz Group (Lidl, Kaufland).

Source: LLM Radar

CLOUD Act status follows the parent company's headquarters. US authorities can also reach non-US companies with significant US operations, so "Does not apply" means lower exposure, not zero. EU hosting through a US provider keeps data in the EU but leaves it under US jurisdiction. This overview is for orientation, not legal advice.