European sovereignty

Sovereign infrastructureData independence by design.

Maintain EU jurisdiction — legal and technical intelligence stays within European boundaries you control.

Infrastructure flow

AssessDesignDeployOperate

Stages are structured so engineering, security, and compliance can align on one plan — fewer handoffs, clearer ownership, faster deployment.

Cloud strategy

Agent Mai targets European-owned infrastructure to reduce CLOUD Act and extraterritorial exposure for sensitive audits and customer data.

No US-cloud residency (design goal)
Architect for OVHcloud / Scaleway-class EU regions — validate in your deployment.
GDPR & Schrems II aware
Minimize transfers; document supplementary measures where needed.

EU hosting

Sovereign compute

Private Vault

Docker-based deployment with isolation — pair with the repository compose profile for your environment.

Containers with no persistent storage outside the vault profile (tmpfs / RAM-only modes).

Air-gapped ready

Local inference: typically NVIDIA 24GB+ VRAM for bundled models — see pricing for hardware notes.

Controls we design toward for production-grade deployments.

Standard	Implementation	Status
AES-256-GCM	Data-at-rest encryption for stored reports.	ACTIVE
TLS 1.3	Transport security with modern cipher suites.	ACTIVE
Sovereign keys	Customer-held KMS/HSM integration (enterprise).	ACTIVE
SOC 2 Type II	Operational controls — roadmap for production SaaS.	PLANNED

Target regions for latency and localized compliance alignment.

Coverage

EU-first footprint

Request an infrastructure review or deploy the Vault image on your hardware.

Start with a compliance audit and convert the output into a staged rollout plan for your team.