Sovereign AI Hosting · EU-hosted

Run AI on European infrastructure — on your terms.

KODIFY delivers three ready-to-deploy sovereign AI hosting templates. Choose where your data resides, which stack you trust, and how strict your sovereignty requirements are. Live in four weeks.

3 hosting templates · Live in 4 weeks EU AI Act · GDPR · NIS2 — compliant by design
EU Sovereign AI Cloud — KODIFY
Built on a stack the EU trusts
Scaleway Mistral AI Anthropic OpenAI Microsoft NVIDIA
Security illustration — a stack with a checkmark
What is Sovereign AI?

AI you can take responsibility for. Data that stays where the law requires.

Sovereign AI means your data, your inference, and your audit trail reside within a jurisdiction you control — on infrastructure operated by an entity subject to that jurisdiction. Not the US CLOUD Act. Not the Chinese Cybersecurity Law.

For most European organisations that means: EU-based cloud providers, GPUs within the EU, and clear contracts about who can compel what. KODIFY makes this concrete with three ready-to-deploy templates.

1
Where the data lives

Storage and inference within the EU — not just the front door.

2
Who can be compelled

EU-based operators outside the reach of foreign extraterritorial legislation.

3
What the auditor sees

End-to-end logging, model cards and DPIAs your DPO will actually sign.

Why now

Four regulations converging this year. Don't buy the wrong AI.

The window in which 'we'll sort compliance later' was a defensible answer has closed. Every template ships with the documentation your risk, security, and legal teams need from day one.

In force

EU AI Act

Risk classification, transparency and post-market monitoring built into every template.

In force
In force

GDPR

Legal basis, data minimisation and DPIAs ready for your DPO.

Since 2018
Active

NIS2

Supply-chain security, incident reporting and board accountability covered.

Implemented 2024
Active

EU Data Boundary

Tenant controls that keep processing within the EU Data Boundary.

Microsoft template
The three templates

One of these is the right starting point for your organisation.

Choose based on where your data may reside, which stack you're already standardised on, and how strict your sovereignty requirements are.

1 EU Sovereign Stack

Servers in Europe. Choose any model. Choose your GPU.

Your data and inference stay within the EU on Scaleway infrastructure — aligned with the EU AI Act, GDPR and NIS2. Use frontier models such as Claude, Mistral and ChatGPT on the GPU class that fits your workload.

  • Data residency in Paris & Amsterdam regions
  • Recommended by the European Parliament
  • ISO 27001 · SOC 2 · HDS · Tier III
  • Zero data retention at model providers
Choose model
Choose GPU
Top tier
NVIDIA H100
80GB · flagship
Popular
NVIDIA L40S
48GB · balanced
Budget
NVIDIA L4
24GB · efficient
Pilot
NVIDIA P100
16GB · entry
Gehost in Europese Unie
2 Microsoft-first

Use the Microsoft stack you're already paying for.

For organisations standardised on Microsoft 365. We configure Copilot to ground on your SharePoint, with Purview for labels, DLP and retention. Entra ID for SSO. Data stays in your tenant.

  • Copilot grounded on your SharePoint corpus
  • Purview labels, DLP & lifecycle enforced end-to-end
  • EU Data Boundary configuration
  • Your IT & Security teams retain control
C
Microsoft Copilot
Generative AI for M365
Configured
S
SharePoint
Document grounding & search
Configured
P
Microsoft Purview
Data governance & DLP
Configured
E
Entra ID
Identity & access
Configured
K
KODIFY-orkestratie Policy- & prompt-governance-laag
3 On-prem / local

The model runs on a machine inside your own network.

Maximum sovereignty. We install an open-weights model on hardware that stays inside your network. Nothing leaves your perimeter — ideal for legal, healthcare, defence, and highly classified data.

  • Air-gapped or VLAN-isolated deployment
  • Open-weights models (Llama 3, Mistral, Mixtral, Qwen)
  • Hardware sourced & certified by KODIFY
  • Quarterly on-site model refresh
kodify-local-ai · zsh
$ kodify-local-ai start
→ loading mistral-7b-instruct.gguf
✓ weights verified · sha256
✓ loaded into VRAM (12.4 GB)
✓ listening on 10.0.0.42:8080
netwerk: privé-VLAN · 0 egress
$ gereed
Op uw LAN
How it works

From kickoff to production in approximately four weeks.

01

Discovery

Two-hour workshop on sovereignty & use cases with your stakeholders from IT, Legal and Security.

Week 1
02

Template selection

We choose template 1, 2 or 3 based on data classification, existing stack and compliance requirements.

Week 1–2
03

Provisioning

Infrastructure deployed, identity configured, governance and logging set up.

Week 2–3
04

Go live

First production use case live, with monitoring, runbooks and your team trained.

Week 4
The Illusion of Security

An 'Enterprise' licence is not sovereignty.

Many organisations assume a standard Enterprise licence provides sufficient protection. In high-compliance industries the reality is more complex — when data leaves the EU, you lose not only physical control but enter a legal grey area.

  • 01
    Data leaks outside the EU

    Even under an Enterprise licence, metadata often leaves the European jurisdiction — your IP becomes part of a foreign stack you don't control.

  • 02
    Legal grey area

    Outside the EU, European law loses its grip. For regulators in finance, healthcare and the public sector this is an unacceptable vulnerability.

  • 03
    IP becomes training data

    Your unique business knowledge can inadvertently end up in public models. The strategic risk of this decade: giving away your competitive advantage.

  • 04
    No audit trail for the regulator

    'We didn't know' is not a valid argument. Without documented governance, the evidence that you are in control is missing — with fines and reputational damage as a result.

What a digital fortress provides
S
Full Data Sovereignty Your data never leaves the European jurisdiction. IP stays yours, is not used for training, and remains beyond the reach of foreign governments.
C
Certified by Design Our environments meet the strictest international standards — we speak the language of your Risk & Compliance officers.
P
Unmatched Performance The speed of the latest AI models paired with the robustness of local, certified data centres.
A
Compliance as Accelerator AI transforms from a headache into an accelerator. Your employees innovate freely — without worrying about sensitive figures or customer data.
Step 2 — Guardrails & Observability

A sports car without a dashboard is not an option.

Powerful AI infrastructure is worthless if you can't see what's happening inside it. We install the systems that give you full oversight — from transparent audit trails to intelligent guardrails.

  • 1
    Full Transparency

    A crystal-clear window into your AI ecosystem. Measure usage, analyse patterns, identify anomalies and monitor quality in real time.

  • 2
    Data Leakage Prevention

    Automatic blocks on sharing sensitive customer data or source code — even within your own environment.

  • 3
    Ethical & Brand Alignment

    Filter outputs that conflict with your company values or the strict regulations in your sector.

  • 4
    Hallucination Detection

    Systems guard factual accuracy — essential when decisions are based on complex data analyses.

In partnership with Scaleway
References

Sovereign cloud, already in production at scale.

Three Scaleway references from the public sector and industry showing that sovereignty is achievable — not theory.

FR
Agence du Numérique de la Sécurité Civile Public sector · France
Public sector

Ultra-resilient infrastructure for the 112 emergency line.

NexSIS 18-112 — the unified communication system for fire & civil safety — has run on Scaleway Instances, Managed DB, Kapsule and KMS since 2023.

112 Critical service
Tier III Sovereignty
A
Agence de la transition écologique (ADEME) Sustainability · France
Public sector

+40 ADEME web applications hosted on a green French cloud.

ADEME chose Scaleway for its 100% green energy stack and full Infrastructure-as-Code on Kapsule (managed Kubernetes).

+40 Web apps
100% Green energy
L
LACROIX Electronics Industrial IoT · Top 50 global EMS
Industrial IoT

Centralising connected device data on one sovereign cloud.

Multi-AZ UDP servers, BareMetal, LoadBalancing, Elastic File System and IoT Hub — in production since 2024.

Multi-AZ Architecture
SaaS+IoT Value case
Frequently asked questions

The questions your CISO asks first.

Yes — via inference endpoints hosted in the EU, under contracts that exclude US extraterritorial reach for that workload, plus zero-data-retention agreements with the model provider. Template 1 is built precisely around this.
Microsoft's EU Data Boundary keeps processing within the EU, and Purview gives your security team enforcement of labels and DLP. We document remaining gaps explicitly so your CISO can decide.
Workstation-class machines with 1–2 GPUs (RTX 6000 Ada, A6000) for small teams; rack servers with H100 / L40S for department scale. We source, certify and deliver as a turnkey unit.
Approximately four weeks from kickoff to first production use case for Templates 1 and 2. Template 3 adds 2–3 weeks for hardware procurement and certification.
Templates start from €18k for a 4-week implementation (Template 2), €24k for Template 1, and €38k+ for Template 3 including hardware. Contact us for a fixed quote.
Scaleway is EU-based (French), explicitly recommended at European Parliament hearings on digital sovereignty, runs on green energy, and has the broadest service catalogue of all EU-only hyperscalers.
The team

Meet your sovereignty partners.

Two senior partners guiding your sovereign AI stack from strategy to production — with deep expertise in EU jurisdiction, regulated sectors and Risk & Compliance.

Marten — KODIFY
Marten
Co-founder · AI Strategy

Guides leadership teams in choosing the right sovereignty level — from Hybrid Cloud to Air-Gapped — ensuring Risk & Compliance are on board.

Book an intake with Marten →
Tanmay — KODIFY
Tanmay
Solution Architect · Senior Principal Consultant

Designs and builds the infrastructure and RPA processes with AI and ERP systems. Deploys the sovereign AI stack fully scripted on major hyperscalers, Scaleway or locally.

Schedule a tech deep-dive with Tanmay →
EU Compliance

Your data and model stay in Europe.

GDPR and EU AI Act compliance is not an afterthought — it's the foundation. All data and models run within European borders, with full transparency and auditability.

  1. 1 Step 1. Your data and model in the EU — fully GDPR compliant.
  2. 2 Step 2. AI policy & training — awareness, prompts, agents and Excel.
  3. 3 Step 3. Security, quality, uniformity and governance — by design.
Certified for
Live data flow — bound to EU jurisdiction
EU jurisdiction
Your prompt
EU-hosted model
Your data corpus
Audit log
KODIFY orchestration
  • Storage in EU. Your data corpus never leaves Paris & Amsterdam.
  • Inference in EU. GPU compute on Scaleway, Mistral or your own hardware.
  • Identity in EU. Entra ID tenants pinned to the EU Data Boundary.
  • Audit in EU. SIEM & logging within the perimeter.

IT infrastructure, ready for AI.

  • The sovereign AI stack of 2026 — from GPU layer to governance.
  • Open EU, hybrid and air-gapped scenarios compared.
  • Concrete checklist: what to choose, when and why.
Whitepaper
Gratis · direct in uw inbox
PDF · 24 pages · EN
Sovereign cloud for AI
Run AI on European infrastructure — on your terms.

Ready to connect?

A Power Session day, or a coffee at your office — we enjoy both equally. We listen first, think out loud with you, and follow up with a short, honest summary containing our first advice.

Free · 20 minutes · Google Meet

Spar for 20 minutes with a KODIFY AI consultant.

No sales pitch. One conversation where we sharpen together where AI makes the difference for your organisation — and which sovereign scenario fits best.

  • Bring your question, dream or dilemma — we think out loud with you.
  • Concrete advice on template, GPU layer and compliance path.
  • Directly into Marten or Tanmay's calendar — no intermediaries.
Marten van der Tempel · Co-founder
AI strategy · Sovereignty · Compliance
Liever direct mailen? hello@kodify.eu