Fireworks AI — Inference Providers on Stav

Compliance posture

Jurisdiction

US · United States

Data residency

CLOUD Act / FISA 702

Exposed

Stav sovereignty level

L0 — Under third-country jurisdiction

Sovereignty ladder · how the level was reached

L0Foreign jurisdictionIndicative

Fireworks.ai, Inc. is a US-incorporated, US-controlled private company (Redwood City, CA) that is squarely CLOUD Act-exposed, making it unmet at L1 on the coercion criterion and by extension unable to reach L2 as a gating matter. The critical L1 blocker is l1.vuln_reporting_no_coercion: as a US entity, Fireworks can be compelled by US authorities regardless of which physical region serves a request. EU-region infrastructure exists or is on the roadmap for dedicated enterprise deployments, but the default serving configuration is US-located and the Microsoft Foundry EU Data Boundary is explicitly not yet available. To advance above L1, Fireworks would need to establish an EU/EEA legal entity that contracts for EU traffic, is beyond the reach of US compulsion, and has no US parent that could be ordered to reach into it — a structural change, not a configuration one.

3 criteria from L1: Customer data in the Union, Infrastructure in the Union, No coerced vulnerability silence.

Stav's own assessment against criterion registry 4.0 — indicative, not an official recognition, which only a national authority can confer. Criteria follow the proposed Cloud and AI Development Act and are expected to change. “Union” reads as EU/EEA at every rung.

Verified 9/4/2026About the ladder →

Stav's assessment · serving-side

60/100

Elevated risk

Fireworks AI is a US-incorporated operator (Fireworks.ai, Inc.) whose serverless inference is globally routed by default across a multi-cloud footprint of 8+ clouds and 18+ regions, with true EU-only residency available only as a paid, contracted add-on rather than the baseline — this undercuts the catalogue's unqualified 'eu_hosted' framing. The composite lands in elevated-risk territory primarily because of the two highest-weighted sovereignty dimensions: legal exposure is high given confirmed CLOUD Act reach over a US entity with a footprint spanning the US and EEA, and serving residency is weak because EEA-only processing is opt-in, not default. Security posture is the clear strength, backed by SOC 2 Type II and a triple-ISO certification stack (27001/27701/42001) plus HIPAA support and documented encryption/isolation controls. Serving retention is reasonably strong for open models (zero-retention default) but narrows for Fireworks' own proprietary models, and contractual posture is workable — a DPA and subprocessor list exist — but SCC and audit-rights detail could not be independently confirmed in this review. Stav's operational verdict: routed-only by default; sovereign EEA-pinned serving is available but requires an explicit enterprise regional-pinning contract and further verification of its DPA's transfer mechanics before it can be treated as a default-sovereign path.

Serving residency

Serverless inference is globally routed by default across 8+ clouds and 18+ regions; EU-only/regional pinning exists only as a premium add-on, not the baseline posture the catalogue's 'eu_hosted' tag implies.

Certifications & legal documents

SOC 2 Type II ↗

Security, availability, and confidentiality controls for the Fireworks inference platform · Current

ISO 27001 ↗

Information security management system covering access, encryption, incident response, and vendor management · Current

ISO 27701 ↗

Privacy information management extending ISO 27001, covering collection/processing/protection of personal data · Current