Aleph Alpha✓

Stav’s assessment

Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.

• compliance

  Holds ISO/IEC 27001:2022 certification for its information security management system.

• transparency

  Publishes a detailed, GDPR-referenced privacy notice with named DPO, EU supervisory authority, and explicit data retention/legal-basis breakdowns for each processing activity.

• compliance

  Reported to have signed the EU's GPAI Code of Practice and publicly states alignment work with EU AI Act requirements.

• community

  Publishes detailed model cards on Hugging Face (Pharia-1 family) documenting risks, limitations, appeals mechanisms, and training-data compliance claims.

• stability

  Established, long-running relationships with German public-sector bodies (federal digital ministry, Baden-Württemberg, Bavaria) cited as a key strategic asset in the Cohere deal.

Published safeguards & certifications