Which AI providers are ISO 27001 certified?
An established information-security standard. Achieved certification is always distinguished from planned.
As of 2026-07-10 — confirmed (source seen): Aderian GDM, Aderian GDM — Dedikerad GPU, Aderian GDM — Eneo Hosting, Aixia, evroc, Glesys, IONOS AI, Mistral — La Plateforme, Nebius Token Factory, OVHcloud, Scaleway; claimed but unverified: Airon, Intric. Unknown means unresearched, not no.
Confirmed — we've seen the source11
Aderian GDMSwedish jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-10
Aderian GDM — Dedikerad GPUJurisdiction not determinedcompute/GPUYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-10
Aderian GDM — Eneo HostingJurisdiction not determinedplatformYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-10
AixiaSwedish jurisdictioncompute/GPUYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-06-25
evrocSwedish jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-05
GlesysSwedish jurisdictioncompute/GPUYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-07-05
IONOS AIEU/EEA jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-06-25
Mistral — La PlateformeEU/EEA jurisdictionYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-06-25
Nebius Token FactoryThird-country transferYesConfirmed — we've seen the primary source (contract, documentation or certificate) and checked the field ourselves. You can rely on it.Source ↗2026-06-25
Claimed — the provider's statement, unverified2
Does not meet the requirement2
Berget AISwedish jurisdictionNoPlanned — the provider says it's on the way, not done. Treat it as a goal, not a fact.Source ↗2026-07-05
grunden.aiSwedish jurisdictionNoPlanned — the provider says it's on the way, not done. Treat it as a goal, not a fact.Source ↗2026-06-19
Unknown — not researched yet (7). Unknown does not mean no.
Aleph Alpha · Mimer (Sveriges AI Factory) · Nordference · Opper AI · Staik · Vakta · WAYSCloud
See an error in this answer? Report it in our Discord — with a source →
Cite this page
OpenSverige AI-Infra, "Which AI providers are ISO 27001 certified?", retrieved 2026-07-10, https://infra.opensverige.se/en/krav/iso-27001. Data: CC-BY-4.0.