Loading the catalogue…
Loading the catalogue…
Upstage is a private, venture-backed South Korean company building the Solar family of language models and document-intelligence products; it has no US parent or controlling entity, so CLOUD Act exposure is low, but its privacy policy is governed primarily by South Korea's Personal Information Protection Act with GDPR provisions added as a supplementary layer. Its open-weights posture is genuinely mixed — some Solar models are released under Apache-2.0-derived licences while the flagship Pro line is API-only — and no EU AI Act compliance statement, GPAI Code of Practice signature, or independent security certification (SOC 2/ISO 27001) has been found. Upstage is also a lead consortium in South Korea's government-funded sovereign-AI programme, which lends public-sector vetting but also creates a degree of state alignment that EU regulated customers should weigh.
No evidence of a published EU AI Act compliance statement, GPAI Code of Practice signature, or Article 53-format training data summary for Upstage's GPAI models.
No publicly documented SOC 2, ISO 27001, or other independent security certification or bug bounty programme could be verified.
Upstage's privacy policy is governed primarily by South Korea's Personal Information Protection Act, with GDPR-equivalent protections layered on as supplementary provisions rather than being GDPR-native by design.
Significant and growing South Korean government ties (sovereign-AI programme finalist, public-sector procurement approval) create a degree of state alignment unusual among commercial model creators, which some regulated-sector EU buyers may want to weigh.
Stav’s assessment
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
Upstage publishes technical reports and open weights for several Solar models (10.7B, Open-100B, Open 2) on Hugging Face, including architecture and training-scale details.
Upstage's privacy policy has been repeatedly updated through 2026 to add explicit GDPR/UK GDPR sections, SCC references, and the EU-Korea adequacy decision, showing deliberate movement toward EU privacy alignment.
Solar 10.7B topped the Hugging Face Open LLM Leaderboard in December 2023, and later Solar models (Pro 2, Open 2, Pro 3) have continued to be positioned as competitive against major international models.
Upstage continues to ship new frontier models through 2026 (Solar Pro 3, Solar Open 2) and remains an active finalist in Korea's well-funded national sovereign-AI programme, indicating a growing, well-resourced organisation rather than one at risk of discontinuation.
Published safeguards & certifications