EU Hosting & Data Sovereignty
Socaity is EU-native, headquartered in Spain, and routes inference to European GPU regions by default. The serverless tier currently runs on RunPod's EU regions, selected by the platform. Per-workload region pinning is on the roadmap. Scaleway and Azure are listed in the APIPod provider enum but their backends are not yet implemented.
GDPR Data Processor
Socaity processes your data on your behalf, with inference kept in EU regions.
EU AI Act aware
Risk classification is the operator's call; Socaity supplies the inference layer, not the model itself.
EU region default
Inference runs in RunPod's EU regions, selected by the platform to keep traffic in the EEA.
DPA on request
Request the Data Processing Agreement and current sub-processor list from privacy@socaity.ai.
Socaity-hosted serverless inference runs in the European Economic Area by default. Today this means RunPod's EU regions, selected by the platform. Per-workload region selection is on the roadmap. Other providers in the APIPod enum are tracked in Providers.
| Region | Country | Provider | GPU Types | Status |
|---|---|---|---|---|
| EU (RunPod) | Multiple EU member states | RunPod | A4000, A100, H100 (subject to RunPod availability) | GA |
| Scaleway (Paris) | France | Scaleway | Planned | Planned |
| Azure Europe | EU member states | Microsoft Azure | Planned | Planned |
Socaity acts as a Data Processor under GDPR when you submit personal data to inference. You remain the Data Controller. The table below maps the relevant GDPR articles to Socaity's position on each. Operational specifics (retention windows, breach notification timelines, audit access) are governed by the Data Processing Agreement; contact privacy@socaity.ai for the current DPA.
| GDPR Requirement | Socaity Position | Article |
|---|---|---|
| Data Processing Agreement | Available on request for paid plans | Art. 28 |
| Data Subject Rights | Erasure routed through the Data Controller (you); Socaity executes on instruction | Art. 17 |
| Data Breach Notification | Statutory 72-hour controller notification; specifics in the DPA | Art. 33 |
| International Transfers | Default routing stays in the EEA (EU regions, platform-selected) | Art. 44-49 |
| Data Minimization | Inference inputs follow the retention window set in the DPA | Art. 5(1)(c) |
| Records of Processing | Available to controllers under the DPA | Art. 30 |
The EU AI Act entered into force in August 2024 and applies in phases; high-risk system obligations apply from August 2026. The Act classifies AI systems by risk level. Socaity provides inference infrastructure and does not train or operate the models you call. Where you place a workload on the risk ladder is your responsibility as the operator; most generative and assistive use-cases fall into Minimal Risk.
| Risk Class | Examples | Socaity Role | Your Obligation |
|---|---|---|---|
Unacceptable | Social scoring, real-time biometric surveillance | Out of scope; do not deploy this on Socaity | Prohibited by the Act |
High Risk | Hiring, credit scoring, medical diagnosis | Inference infrastructure only; Socaity does not train models | Conformity assessment, registration, technical documentation |
Limited Risk | Chatbots, deepfakes, emotion recognition | Inference provider | Transparency disclosure to end users |
Minimal Risk | Image generation, audio transcription, code assist | Inference provider | No additional obligations under the Act |
Socaity uses third-party infrastructure to run inference. The active sub-processor today is RunPod (EU regions, platform-selected). Scaleway and Azure are listed in the APIPod provider enum and will join this table once their backends ship. Request the current sub-processor list with DPA addenda from privacy@socaity.ai.
| Sub-Processor | Role | Location | Adequacy / SCCs |
|---|---|---|---|
| RunPod | Serverless GPU compute | EU regions (platform-selected) | SCCs |
| Scaleway | GPU compute (planned) | EU (Paris) | EEA |
| Microsoft Azure | GPU compute (planned) | EU regions | EEA |
socaity scan and socaity build generate a deployable container.