Which AI providers offer a GDPR Data Processing Agreement (DPA)?
The Data Processing Agreement is the legal contract that makes guarantees (residency, no training) binding — not the marketing page.
As of 2026-07-10 — confirmed (source seen): Aderian GDM, Berget AI, evroc, Glesys, grunden.ai, Opper AI, Mistral — La Plateforme, Nebius Token Factory, OVHcloud, Scaleway; claimed but unverified: Intric, IONOS AI, Nordference, WAYSCloud. Unknown means unresearched, not no.
Confirmed — we've seen the source10
Aderian GDMSwedish jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-10
Berget AISwedish jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-05
evrocSwedish jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-05
GlesysSwedish jurisdictioncompute/GPUYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-05
grunden.aiSwedish jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-05
Opper AIUS Cloud Act exposedgatewayYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-07
Mistral — La PlateformeEU/EEA jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-06-25
Nebius Token FactoryThird-country transferYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-06-25
Claimed — the provider's statement, unverified4
IntricJurisdiction not determinedplatformYesClaimed — the provider states this on its site, but we haven't yet verified it against a binding document. Ask for written evidence before you rely on it.Source ↗2026-06-25
IONOS AIEU/EEA jurisdictionYesClaimed — the provider states this on its site, but we haven't yet verified it against a binding document. Ask for written evidence before you rely on it.Source ↗2026-06-25
NordferenceEU/EEA jurisdictionYesClaimed — the provider states this on its site, but we haven't yet verified it against a binding document. Ask for written evidence before you rely on it.Source ↗2026-07-05
Unknown — not researched yet (8). Unknown does not mean no.
Aderian GDM — Dedikerad GPU · Aderian GDM — Eneo Hosting · Airon · Aixia · Aleph Alpha · Mimer (Sveriges AI Factory) · Staik · Vakta
See an error in this answer? Report it in our Discord — with a source →
Cite this page
OpenSverige AI-Infra, "Which AI providers offer a GDPR Data Processing Agreement (DPA)?", retrieved 2026-07-10, https://infra.opensverige.se/en/krav/gdpr-dpa. Data: CC-BY-4.0.