AI Data Sovereignty Checker
Choose your model provider and how it runs to see exactly where your prompts and retrieved context go — and what it takes to keep them in the building.
Your AI setup
Pick the model provider you use (or are considering) and where it runs.
Where your data goes
RAGSuite runs every step on your own infrastructure and supports local models via Ollama — so the final node stays green: no egress, no foreign-authority reach, air-gappable. When you must use a hosted model, an EU-jurisdiction provider (e.g. a French or German one) is the cleaner path.
Directional guidance, not legal advice. Based on each provider’s stated jurisdiction and options (dated June 2026). Verify against the provider’s current DPA, sub-processor list and your own DPIA. “CLOUD Act exposure” reflects corporate reachability, not any specific disclosure.
Good to know
What does “CLOUD Act exposure” mean?
The US CLOUD Act (2018) lets US authorities compel any US-incorporated company to hand over data it controls — even data stored in EU data centres. So a US provider’s EU region reduces latency and some residency concerns, but the data is still legally reachable. Only a non-US provider, or self-hosting, removes that reach.
How is this judged?
From each provider’s stated jurisdiction, EU-residency options and deployment model (dated June 2026). It’s a directional read, not legal advice — verify against the provider’s current DPA and sub-processor list, and your own DPIA.
Is anything sent anywhere?
No. The check is a lookup that runs entirely in your browser. Nothing you select is transmitted or stored.
Want this guaranteed in your own infrastructure?
Get a copy of these results by email and see RAGSuite running on a setup like yours — citation-backed, self-hosted, EU-ready.
Thanks — we’ll be in touch within one business day (DE/EN).
Make the green path your default.
RAGSuite self-hosts retrieval and generation on your own infrastructure, with local models via Ollama and offline licence keys — nothing has to leave the building.