What Counts as EU-Hosted AI (and What Doesn't)
An EU datacenter is not the same as EU jurisdiction. The four levels of EU-hosted AI, and how to tell marketing from architecture.
What does EU-hosted AI mean?
EU-hosted AI means the AI platform, and the models it calls, run on infrastructure physically located in the European Union. That is the easy part. The harder question is who operates that infrastructure and which laws can reach it. That is where most "EU-hosted" claims get thin.
Two vendors can both say "your data stays in Europe" and mean very different things. One means a rented rack in Frankfurt operated from California. The other means an EU company, under EU law, on EU soil. Same sentence, different risk profile.
Is an EU datacenter enough?
For many organisations, yes. For some, no. A datacenter in the EU answers the question "where is my data stored?" It does not answer "who can be legally compelled to hand it over?" An operator headquartered outside the EU can be subject to its home country's laws even for data it stores in Europe.
Whether that gap matters depends on your sector and your regulator. A marketing team can usually live with it. A bank, a hospital, or a defence supplier often cannot. The point is to decide deliberately, not to discover the difference during an audit.
The four levels of EU-hosted AI
From "EU address" to "EU everything". Each level closes a gap the previous one leaves open.
US cloud, EU region
Residency: Data stored in the EU · Jurisdiction: Non-EU operator
Solves latency and the basic residency question. The operator remains subject to non-EU law.
US cloud, EU region, your own tenant
Residency: Data stored in the EU, under your keys · Jurisdiction: Non-EU operator, your control plane
You hold the subscription, the access policies, and the audit trail. A meaningful step up from vendor SaaS.
European sovereign cloud
Residency: Data stored in the EU · Jurisdiction: EU operator, EU law
Providers like OVHcloud or Scaleway. Both the data and the company operating the infrastructure sit under EU jurisdiction.
Your own infrastructure
Residency: Your data centre · Jurisdiction: You are the operator
On-premises or air-gapped. Nobody else in the chain. Also the most operational work.
Which level do you actually need?
Most organisations need level 2: their own tenant, in an EU region, with their own keys and audit trail. Regulated sectors with an explicit sovereignty mandate need level 3 or 4. Very few need level 4 on day one, and starting there usually costs months you did not need to spend.
The Plainsight AI Assistant supports all four levels with the same platform, so the pragmatic path is to start at the level your compliance team accepts today and move up if a regulator, a client, or a contract demands it later.
Related articles
Ready to see it in action?
Schedule a personalised demo and see how the Plainsight AI Assistant fits your organisation.