STACKIT AI Model Serving — Inference Providers on Stav

Compliance posture

Jurisdiction

EU · Germany

Data residency

CLOUD Act / FISA 702

Not exposed

Stav sovereignty level

L3 — EU/EEA ownership & control

Sovereignty ladder · how the level was reached

L3SovereignIndicative

STACKIT AI Model Serving clears L1 (German DC infrastructure, EU data residency, no CLOUD Act exposure), L2 (ISO/IEC 27001 + BSI C5 Type 2 at substantial assurance; serving entity not compellable by any third country), and L3 (serving entity is a German KG with a fully German private ownership chain via the Schwarz Group / Dieter Schwarz Foundation — no third-country parent or controller). L4 is blocked by the absence of a sovereign qualification (SecNumCloud not held; ISO 27001 and BSI C5 do not satisfy l4.sovereign_qualification) and by inability to confirm full effective software control across the complete stack without a public SBOM, though the open-weight model layer and self-owned DC infrastructure are strong positive indicators.

3 criteria from L4: Sovereign cloud qualification, Effective software control, No revocable third-country dependency.

Stav's own assessment against criterion registry 4.0 — indicative, not an official recognition, which only a national authority can confer. Criteria follow the proposed Cloud and AI Development Act and are expected to change. “Union” reads as EU/EEA at every rung.

Verified 9/4/2026About the ladder →

Stav's assessment · serving-side

86/100

Conditional

STACKIT AI Model Serving is operated by Schwarz Digits Cloud GmbH & Co. KG, a German entity running its own vertically-integrated stack across German and Austrian data centers, with prompts and outputs processed exclusively in EU region eu01 and no non-EU fallback identified. The composite lands in the conditional band on the strength of an exceptionally broad, currently-sourced certification portfolio (ISO 27001, BSI C5 Type 2, ISAE 3000/3402, ISO 27017/27018, ISO 20000/50001, TISAX) and a clean CLOUD Act exposure profile from owning its own full stack rather than reselling US hyperscaler capacity. The weakest link is serving retention: the 'no storage, no training on prompts' commitment is asserted only in marketing and partner materials rather than in a technical retention/deletion clause, and no AI-Model-Serving-specific sub-processor list was located, leaving regulated buyers without a written SLA to point to. A 2026 renaming of the contracting legal entity also warrants reconciliation against existing DPAs before reliance. Given strong residency and security fundamentals offset by an unverified retention commitment, Stav rates this sovereign serving available for most EU workloads, but recommends buyers obtain a written retention/deletion SLA and confirm entity continuity before onboarding regulated data.

Serving residency

AI Model Serving runs exclusively in region eu01 on STACKIT's own ISO 27001-certified German/Austrian data centers, with no non-EU fallback path documented.

Certifications & legal documents

ISO/IEC 27001 ↗

ISMS based on IT-Grundschutz for provision and operation of STACKIT IaaS/PaaS cloud services (Compute Engine, Network & Security, Block Storage, Object Storage/S3) and associated processes, applications, systems, networks and locations · Current

BSI C5 (Type 2) ↗

Cloud Computing Compliance Criteria Catalogue (C5:2020) effectiveness audit covering STACKIT IaaS (Compute Engine, Network & Security, Block Storage, Object Storage) · Current

ISAE 3000 (SOC 2) ↗

International compliance/security controls attestation for STACKIT cloud infrastructure (Type 1) · Current