Dataset / reviewed 6 Nov 2026 / CC BY 4.0

The 2026 Sovereign AI Index

Every in-region AI inference endpoint we could document across the EU, UK, Switzerland, the GCC, Asia-Pacific and US government regions, with who owns it and how far US law reaches it.

Explore the endpoints Read the methodology

Rows by jurisdiction

EU19
UK4
CH5
GCC6
APAC7
US3

44 rows / 19 providers / 6 jurisdictions

44: in-region inference endpoints from 19 providers and self-hosted runtimes; Sovereign AI Index, reviewed 6 Nov 2026
8: rated None: no US parent or US operating group, including customer-operated runtimes; Sovereign AI Index, reviewed 6 Nov 2026
7: rated Indirect: non-US parent with US operations or listing, or a US company's locally operated sovereign subsidiary; Sovereign AI Index, reviewed 6 Nov 2026
29: rated Direct: operated by a US company or an ordinary region of one, residency satisfied but within US reach; Sovereign AI Index, reviewed 6 Nov 2026

Endpoint explorer

No US parent
Indirect exposure
Direct (US parent)
Mixed at one site
Self-hosted runtime

Selection

All jurisdictions

44 endpoints / 19 providers

CLOUD Act exposure

Zero data retention

Available: 15
On request: 26
Self-managed: 3

CLOUD Act exposureZero data retentionSearch

44 of 44 endpointssort: jurisdiction asc

						Certifications
Microsoft Azure Azure OpenAI Service GPT-4o family, GPT-4.1 family, o-series reasoning	EU Gävle, Sweden	swedencentral	United States	Direct	On request	ISO 27001 SOC 2 Type II
Microsoft Azure Azure OpenAI Service GPT-4o family	EU Paris, France	francecentral	United States	Direct	On request	ISO 27001 SOC 2 Type II HDS
Microsoft Azure Azure OpenAI Service (Data Zone EU deployment) GPT-4o family, GPT-4.1 family	EU Frankfurt am Main, Germany	germanywestcentral	United States	Direct	On request	ISO 27001 SOC 2 Type II BSI C5
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Nova, Meta Llama 3.x, Mistral	EU Frankfurt am Main, Germany	eu-central-1	United States	Direct	Available	ISO 27001 SOC 2 Type II BSI C5
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Nova, Meta Llama 3.x, Mistral	EU Dublin, Ireland	eu-west-1	United States	Direct	Available	ISO 27001 SOC 2 Type II
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Titan Embeddings	EU Paris, France	eu-west-3	United States	Direct	Available	ISO 27001 SOC 2 Type II HDS
AWS European Sovereign Cloud Amazon Bedrock (AWS European Sovereign Cloud) Region-specific Bedrock catalogue	EU Brandenburg, Germany	eusc-de-east-1	United States (operated by German subsidiaries)	Indirect	Available	Not confirmed for this service
Google Cloud Vertex AI (Generative AI) Gemini family, Gemini embeddings	EU Frankfurt am Main, Germany	europe-west3	United States	Direct	On request	ISO 27001 SOC 2 Type II BSI C5
Google Cloud Vertex AI (Generative AI) Gemini family, Gemini embeddings	EU Eemshaven, Netherlands	europe-west4	United States	Direct	On request	ISO 27001 SOC 2 Type II
Mistral AI La Plateforme API (EU endpoint) Mistral Large, Mistral Medium, Mistral Small, Codestral	EU EU data centres, European Union	eu	France	No US parent	On request	ISO 27001 SOC 2 Type II
Scaleway Generative APIs Llama 3.x, Mistral family, Qwen family	EU Paris, France	fr-par	France (Iliad Group)	No US parent	Available	ISO 27001 HDS
OVHcloud AI Endpoints Llama 3.3 70B, Mistral Nemo, Mixtral 8x7B, Qwen 2.5 Coder	EU Gravelines, France	gra	France	Indirect	On request	ISO 27001
STACKIT AI Model Serving Llama 3.3, Gemma 3, gpt-oss, Qwen3	EU Germany (eu01)	eu01	Germany (Schwarz Group)	No US parent	Available	ISO 27001 BSI C5
IONOS AI Model Hub Llama 3.3 70B, Mistral Small 24B, gpt-oss-120b	EU Berlin, Germany	de-txl	Germany	Indirect	On request	ISO 27001
T-Systems AI Foundation Services (LLM Serving, open-weight tier) Llama 3.3 70B, gpt-oss-120b, Mistral Small, Qwen family	EU Germany	otc-eu-de	Germany (Deutsche Telekom)	Indirect	On request	ISO 27001 BSI C5
Nebius Token Factory (dedicated endpoint) Llama 3.x, Qwen family, DeepSeek family	EU Mäntsälä, Finland	eu-north1	Netherlands	Indirect	Available	ISO 27001
Oracle Cloud Infrastructure OCI Generative AI Cohere Command, Meta Llama 3.x	EU Frankfurt am Main, Germany	eu-frankfurt-1	United States	Direct	On request	ISO 27001 SOC 2 Type II BSI C5
Oracle EU Sovereign Cloud OCI Generative AI (EU Sovereign Central) Cohere Command, Meta Llama 3.x	EU Frankfurt am Main, Germany	eu-frankfurt-2	United States (operated by EU subsidiaries)	Indirect	On request	Not confirmed for this service
vLLM (self-hosted) Customer-operated vLLM runtime Llama 3.x, Mistral open-weight, Qwen family, gpt-oss	EU Customer data centre (EU), European Union	customer-vpc-eu	Customer entity	No US parent	Self-managed	Customer controls
Microsoft Azure Azure OpenAI Service GPT-4o family	UK London, United Kingdom	uksouth	United States	Direct	On request	ISO 27001 SOC 2 Type II Cyber Essentials Plus
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Titan Embeddings	UK London, United Kingdom	eu-west-2	United States	Direct	Available	ISO 27001 SOC 2 Type II
Google Cloud Vertex AI (Generative AI) Gemini family	UK London, United Kingdom	europe-west2	United States	Direct	On request	ISO 27001 SOC 2 Type II
Oracle Cloud Infrastructure OCI Generative AI Cohere Command, Meta Llama 3.x	UK London, United Kingdom	uk-london-1	United States	Direct	On request	ISO 27001 SOC 2 Type II
Amazon Web Services Amazon Bedrock Anthropic Claude Sonnet, Amazon Titan Embeddings V2	CH Zurich, Switzerland	eu-central-2	United States	Direct	Available	ISO 27001 SOC 2 Type II
Google Cloud Vertex AI (Generative AI) Gemini family	CH Zurich, Switzerland	europe-west6	United States	Direct	On request	ISO 27001 SOC 2 Type II
Swisscom Swiss AI Platform (managed inference) Apertus, Open-weight LLMs	CH Switzerland	ch	Switzerland	No US parent	On request	ISO 27001
Infomaniak AI Tools LLM API Llama 3.3, Mixtral, IBM Granite	CH Geneva, Switzerland	ch-gva	Switzerland	No US parent	Available	ISO 27001 ISO 9001
vLLM (self-hosted) Customer-operated vLLM runtime Llama 3.x, Mistral open-weight, Apertus	CH Customer data centre (CH), Switzerland	customer-onprem-ch	Customer entity	No US parent	Self-managed	Customer controls
Amazon Web Services Amazon Bedrock In-region Bedrock catalogue (model-dependent)	GCC United Arab Emirates	me-central-1	United States	Direct	Available	ISO 27001 SOC 2 Type II
Google Cloud Vertex AI (Generative AI) Gemini family	GCC Dammam, Saudi Arabia	me-central2	United States	Direct	On request	ISO 27001 SOC 2 Type II
Oracle Cloud Infrastructure OCI Generative AI Cohere Command, Meta Llama 3.x	GCC Dubai, United Arab Emirates	me-dubai-1	United States	Direct	On request	ISO 27001 SOC 2 Type II
Oracle Cloud Infrastructure OCI Generative AI Cohere Command, Meta Llama 3.x	GCC Riyadh, Saudi Arabia	me-riyadh-1	United States	Direct	On request	ISO 27001 SOC 2 Type II
Core42 (G42) Compass API Jais, Llama 3, gpt-oss-120b, gpt-oss-20b	GCC Abu Dhabi, United Arab Emirates	uae	United Arab Emirates	Indirect	On request	Not confirmed for this service
vLLM (self-hosted) Customer-operated vLLM runtime Llama 3.x, Jais, Qwen family	GCC Customer data centre (KSA), Saudi Arabia	customer-onprem-sa	Customer entity	No US parent	Self-managed	Customer controls
Microsoft Azure Azure OpenAI Service GPT-4o family	APAC Tokyo, Japan	japaneast	United States	Direct	On request	ISO 27001 SOC 2 Type II
Microsoft Azure Azure OpenAI Service GPT-4o family	APAC Sydney, Australia	australiaeast	United States	Direct	On request	ISO 27001 SOC 2 Type II IRAP
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Titan Embeddings	APAC Singapore	ap-southeast-1	United States	Direct	Available	ISO 27001 SOC 2 Type II MTCS Level 3
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Titan Embeddings	APAC Sydney, Australia	ap-southeast-2	United States	Direct	Available	ISO 27001 SOC 2 Type II IRAP
Amazon Web Services Amazon Bedrock Anthropic Claude, Amazon Nova, Amazon Titan Embeddings	APAC Tokyo, Japan	ap-northeast-1	United States	Direct	Available	ISO 27001 SOC 2 Type II
Google Cloud Vertex AI (Generative AI) Gemini family	APAC Singapore	asia-southeast1	United States	Direct	On request	ISO 27001 SOC 2 Type II MTCS Level 3
Google Cloud Vertex AI (Generative AI) Gemini family	APAC Sydney, Australia	australia-southeast1	United States	Direct	On request	ISO 27001 SOC 2 Type II IRAP
AWS GovCloud (US) Amazon Bedrock Claude 3.7 Sonnet, Claude 3.5 Sonnet, Claude 3 Haiku, Llama 3 8B / 70B	US US Northwest, United States	us-gov-west-1	United States	Direct	Available	FedRAMP High DoD IL4/IL5 ITAR
Azure Government Azure OpenAI Service GPT-4o family	US Arizona, United States	usgovarizona	United States	Direct	On request	FedRAMP High DoD IL2
Azure Government Azure OpenAI Service GPT-4o family	US Virginia, United States	usgovvirginia	United States	Direct	On request	FedRAMP High DoD IL2

Methodology: how CLOUD Act exposure is classified

The rating describes the operating entity behind each endpoint, judged by parent headquarters and control, not by where the servers are. Physical location satisfies a residency clause; it does not decide whether a US warrant can reach the provider. That turns on 18 U.S.C. § 2713, which applies to data in a provider's possession, custody or control wherever it sits.

Rating	Rule we apply	What it means for your TIA	Rows
NoneNo US parent	The operating entity and its parent are EU, Swiss or other non-US companies with no US operating group, no US stock listing and no US cloud, telecom or data centre business. Customer-operated runtimes are also rated None, because the provider column adds no third party.	A US court would first need jurisdiction over the provider, and an order would collide with Article 48 GDPR. For self-hosted rows, exposure follows your own corporate structure and your infrastructure provider's.	8
IndirectIndirect exposure	A non-US parent whose group runs material US cloud, telecom or data centre operations or holds a US listing, or a sovereign subsidiary of a US company operated by locally incorporated entities under local law.	Reach depends on corporate structure and on who can access production systems. Document the group structure and the sub-processor chain in your transfer impact assessment.	7
DirectDirect exposure	The operating entity is a US company, or an ordinary region or branch of one. This covers the standard EU, UK, Swiss, GCC and APAC regions of US hyperscalers.	Residency is satisfied, but 18 U.S.C. § 2713 reaches data within the provider's possession, custody or control wherever it is stored. Zero retention and customer-held keys are what limit what can be produced.	29

How a row gets into the index

01
Documented in-region inference
A row needs provider documentation that the named service runs inference inside the region for the listed models. Global or multi-region deployment types that may process prompts elsewhere do not qualify.
02
Facility and region identified
We record the provider's region id and the city or country it maps to. Where a provider only publishes a country or a jurisdiction-level endpoint, the city column says so.
03
Parent and control traced
We follow the operating entity to its ultimate parent and note any US subsidiary, listing or operating group. The parent HQ column records what we found; the exposure rating applies the rules above.
04
Retention terms checked
Available means zero data retention is a documented option for the service. On request means it needs approval or a contract change. Self-managed means the customer operates the runtime and sets retention.
05
Certifications per service
Only attestations that cover the specific service and region in the provider's published compliance documentation are listed. We do not inherit a parent's certifications.
06
Reviewed as a whole
Each review re-checks every row. Changes of control, new regions and retired models trigger an update outside the normal cycle.

How to cite

Free to reuse under CC BY 4.0

YTT Secunet, Sovereign AI Index (reviewed 6 Nov 2026), yttsecunet.com/resources/sovereign-ai-index.

Use the CSV export above the table for the full field set.

Excluded at this review

Azure OpenAI, UAE North
At review time we could not confirm a regional deployment type that keeps inference for current models inside the UAE.
Azure OpenAI, Switzerland North
We could not confirm a regional (Standard) deployment of current GPT models in the Swiss region at review time.
Aleph Alpha
Its agreed acquisition by Cohere, announced in April 2026, changes the parent analysis. The provider will be re-rated once the change of control is settled.

Also excluded throughout: consumer chat apps, global routing modes, and regions not generally available on the review date.

Next actions

Test a sovereign route Read the CLOUD Act guide See the endpoint registry

GuidesRegulatory transfer guidesWhich regime applies to a tenant, and the routing rule that enforces it.TemplatesDPIA and FRIA templatesRecord the endpoint, parent and retention per hop in your assessment.JurisdictionsJurisdiction overviewsLaws, regulators and the failover boundary for each of the six zones.

Sovereign AI Index: frequently asked questions

Does a None rating mean the CLOUD Act cannot reach the data?

No. It means we found no US parent, US operating group or US listing in the provider's structure, so a US court would first need to establish jurisdiction over it. That is a materially stronger position than a US-parented region, not an absolute one. Record the analysis in your transfer impact assessment.

Why are the sovereign clouds of US companies rated Indirect rather than Direct?

They are operated by locally incorporated subsidiaries with separate infrastructure and local staff, which changes the possession, custody or control analysis under 18 U.S.C. § 2713. They still have a US parent. Indirect places them between an ordinary US-operated region and an EU-parented provider; it is not a finding that they are outside US reach.

Why do some rows have no certifications listed?

We only list attestations that the provider's published compliance documentation shows for that specific service and region. Where we could not confirm one, the cell says so instead of inheriting the parent company's certificates. Ask the provider for the current scope statement.

Can I cite or reuse the dataset?

Yes. The index is published under the Creative Commons Attribution 4.0 licence. Cite it as YTT Secunet, Sovereign AI Index, with the review date shown on this page, and link back to this URL. The CSV export gives you the same fields as the table.

Does YTT Secunet route to every endpoint in the index?

The Sovereign Endpoints registry inside YTT Secunet uses the same data. Which endpoints a given request may reach is decided by your policy pack and by the provider accounts you connect: an eu-gdpr-strict tenant will never be routed to a US government region, whatever the index lists.

How should I use the exposure rating in a TIA?

As an input, not a conclusion. EDPB Recommendations 01/2020 ask you to assess the law and practice of the destination and the effectiveness of supplementary measures. The rating tells you where to look harder; zero retention, pseudonymisation before inference and customer-held keys are the measures that change the answer.

Sovereign route ready

Stop risking 4% global turnover GDPR fines on AI inference.

Deploy sovereign, cryptographically proven AI routing in 15 minutes.

Schedule an architecture demo Start 14-day trial