An established information-security standard. Achieved certification is always distinguished from planned — and confirmed requires opened certificate artifacts: certificate number, accredited certification body, validity period and scope. A logo or a sentence on the website is not enough, and a certificate covers one legal entity and one defined scope — a group company's certificate does not automatically cover the service you buy.
As of 2026-08-24 — confirmed (source seen): Elastx, Glesys, IONOS AI; claimed but unverified: Aderian GDM, Aderian GDM — Dedikerad GPU, Aderian GDM — Eneo Hosting, Airon, Aixia, Intric, Mistral — La Plateforme, Nebius Token Factory, OVHcloud, Scaleway. Unknown means unresearched, not no.
Confirmed — we've seen the source3
ElastxSwedish jurisdiction (egen uppgift)compute/GPUYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-20
GlesysSwedish jurisdiction (egen uppgift)compute/GPUYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-14
IONOS AIEU/EEA jurisdiction (egen uppgift)YesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-14
Self-reported — the provider's own statement, unverified10
Aderian GDMSwedish jurisdiction (utfäst i avtal)YesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
Aderian GDM — Dedikerad GPUSwedish jurisdiction (utfäst i avtal)compute/GPUYesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
Aderian GDM — Eneo HostingSwedish jurisdiction (utfäst i avtal)platformYesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
AironSwedish jurisdiction (egen uppgift)compute/GPUYesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-05
AixiaSwedish jurisdiction (egen uppgift)compute/GPUYesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
IntricJurisdiction not determinedplatformYesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-11
Mistral — La PlateformeEU/EEA jurisdiction (egen uppgift)YesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
Nebius Token FactoryThird-country transferYesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
OVHcloudEU/EEA jurisdiction (egen uppgift)YesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
ScalewayEU/EEA jurisdiction (egen uppgift)YesSelf-reported — the provider states this itself (site, docs or llms.txt), and we haven't yet verified it against a register or binding document. Ask for written evidence before you rely on it.Source ↗2026-07-14
Does not meet the requirement2
Berget AISwedish jurisdiction (egen uppgift)NoPlanned — the provider says it's on the way, not done. Treat it as a goal, not a fact.Source ↗2026-07-05
grunden.aiSwedish jurisdiction (egen uppgift)NoPlanned — the provider says it's on the way, not done. Treat it as a goal, not a fact.Source ↗2026-07-14
Unknown — not researched yet (6). Unknown does not mean no.
OpenSverige AI-Infra, "Which AI providers are ISO 27001 certified?", retrieved 2026-08-24, https://infra.opensverige.se/en/krav/iso-27001. Data: CC-BY-4.0.
