Poolside✓

Stav’s assessment

Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.

• compliance

  Publishes a formal Data Processing Agreement incorporating EU Standard Contractual Clauses, the UK ICO International Data Transfer Addendum, and explicit references to GDPR/UK GDPR/Swiss FADP.

• transparency

  Publishes detailed technical reports (arXiv) and a multi-part engineering blog series describing model architecture, training data practices, and evaluation methodology.

• community

  Growing open-weight release cadence (Laguna XS.2, XS 2.1, and M.1) under permissive licences (Apache 2.0 / OpenMDW-1.1) with active Hugging Face community engagement.

• security

  Enterprise deployment model allows customers to run models entirely within their own on-premises or VPC security boundary, avoiding data egress to Poolside.

Published safeguards & certifications