Sovereignty ledger

Residency is not ownership.

A provider can host every byte in Frankfurt and still belong to a group with a US-incorporated entity — which is precisely what the CLOUD Act reaches. So we assess the corporate group, not the datacentre, and we publish the whole assessment including the providers we turned down.

Currently routing

Providers that pass

No US legal entity anywhere in the corporate group. Verified against public corporate filings on the date shown, and re-checked when a provider's ownership changes.

STACKIT

routing

api.openai-compat.model-serving.eu01.onstackit.cloud

  • Schwarz Digits Cloud GmbH & Co. KG · DE
  • Group: Schwarz Group (Schwarz Unternehmenstreuhand KG)
  • No US legal entity
  • Verified 2026-09-07

German infrastructure (eu01, Germany South) and a German privately-held parent. Disclosed exception: the Schwarz Group also owns Lidl, and Lidl US, LLC has been a US-incorporated company (Arlington, Virginia) since 2015, so the group is not free of US entities the way Scaleway's is. Routed to by owner decision on 2026-09-07 on the basis that a retail sibling has no path to the inference plane. Listed here in full rather than quietly, because the ledger is the claim.

Scaleway

routing

api.scaleway.ai

  • Scaleway SAS · FR
  • Group: Iliad Group (Iliad SA)
  • No US legal entity
  • Verified 2026-09-06

French SAS, wholly owned by Iliad Group (Paris). No US parent and no US-incorporated subsidiary in the inference path. Generative APIs are served from fr-par with zero data retention. Prices are read directly from Scaleway's public product catalogue and passed through 1:1.

Assessed and not used

Who we turned down, and why

These are capable providers. Several are European-controlled and host only in the EU. They are listed here because the bar is about the legal group, and each of them has a US entity in it.

ProviderLegal entityGroupCountryUS entityStatusAssessment
Aleph AlphaAleph Alpha GmbHmerging with Cohere (Canada/US)DEyesunder reviewGerman origin, but the announced Cohere merger changes the ownership chain. Blocked pending the completed structure.
Mistral AIMistral AI SASMistral AI SASFRyesunder reviewFrench and independent, but operates US entities and offers US regional routing. Needs an EU-pinned contract before listing.
NebiusNebius Group N.V.Nebius Group N.V. (Nasdaq: NBIS)NLyesrejectedNasdaq-listed with US datacentres and US entities. Fails the no-US-entity bar despite EU datacentre options.
OVHcloudOVH Groupe SAOVH Groupe SA (Euronext Paris)FRyesunder reviewFrench-controlled and a strong candidate, but the group holds a US entity (OVHcloud US). Admissible once a review documents that the inference path never touches it.

Enforcement

The policy is a build step, not a promise

A sovereignty claim nobody can check is marketing. Ours is a script that fails the deploy.

Egress allowlist

The only hosts inference traffic may reach. Anything else is a build failure — including a model with no explicit endpoint, which would silently default to a US one.

  • api.scaleway.ai
  • api.openai-compat.model-serving.eu01.onstackit.cloud
  • 127.0.0.1

Prices you can audit

Model prices are generated from the provider's own public billing API, so our per-token rate is theirs by construction and cannot drift. A model we cannot price is not served at all, rather than served for free and silently mis-billed.