Which AI providers sit outside US access laws (CLOUD Act/FISA 702)?
US access laws — the CLOUD Act (criminal process, court order) and FISA 702 (intelligence collection, no individual court order) — can compel providers under US jurisdiction to hand over data regardless of where the server sits. Exposure follows the ownership and control chain, not the data center. Signals intelligence under EO 12333 follows data paths and encryption and cannot be read off this column — see the glossary.
As of 2026-08-24 — claimed but unverified: Aderian GDM, Aderian GDM — Dedikerad GPU, Aderian GDM — Eneo Hosting, Airon, Aixia, Berget AI, Elastx, evroc, Glesys, grunden.ai, Staik, IONOS AI, Mistral — La Plateforme, Nordference, OVHcloud, Scaleway. Unknown means unresearched, not no.
Self-reported — the provider's own statement, unverified16
Aderian GDMSwedish jurisdiction (utfäst i avtal)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-10
Aderian GDM — Dedikerad GPUSwedish jurisdiction (utfäst i avtal)compute/GPUNo known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-08-06
Aderian GDM — Eneo HostingSwedish jurisdiction (utfäst i avtal)platformNo known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-08-06
AironSwedish jurisdiction (egen uppgift)compute/GPUNo known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-05
AixiaSwedish jurisdiction (egen uppgift)compute/GPUNo known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-06-25
Berget AISwedish jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-06-19
ElastxSwedish jurisdiction (egen uppgift)compute/GPUNo known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-20
evrocSwedish jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-05
GlesysSwedish jurisdiction (egen uppgift)compute/GPUNo known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-05
grunden.aiSwedish jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-06-19
StaikSwedish jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-06-19
IONOS AIEU/EEA jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-06-25
Mistral — La PlateformeEU/EEA jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-06-25
NordferenceEU/EEA jurisdiction (egen uppgift)No known US chain of controlSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-05
Does not meet the requirement1
Unknown — not researched yet (4). Unknown does not mean no.
Aleph Alpha · Intric · Mimer (Sveriges AI Factory) · Nebius Token Factory
See an error in this answer? Report it in our Discord — with a source →
Cite this page
OpenSverige AI-Infra, "Which AI providers sit outside US access laws (CLOUD Act/FISA 702)?", retrieved 2026-08-24, https://infra.opensverige.se/en/krav/fri-fran-cloud-act. Data: CC-BY-4.0.