xAI

United States8 models on Stav

xAI, now rebranded SpaceXAI and folded into SpaceX, is a US-jurisdiction provider. It is fully exposed to the CLOUD Act and FISA 702, and the Stav provider row shows global data residency at sovereignty level L0. It publishes model cards and a Grok 4.5 training-content summary, has signed the Safety & Security chapter of the EU GPAI Code of Practice (not Transparency or Copyright), and offers a DPA with SCCs plus no-training-by-default for API data. Offsetting that, there are open EU/UK/Irish regulatory proceedings over Grok-generated sexualised imagery and past training on EU user data, repeated data-exposure incidents, and a pattern of safety controversies. Reports of regulated-sector controls such as EU data residency and the SOC 2 report depend on sales or NDA access.