EU Hosting & Data Sovereignty
Socaity lets you choose where your services run. The default for Socaity-hosted serverless inference is RunPod EU, and you can switch to other regions per service. If you need EU-only deployment for GDPR, the EU AI Act, or national data residency, that configuration is fully supported.
GDPR Compliant
No cross-border data transfer. Your inference data never leaves the EEA.
EU AI Act Ready
Infrastructure aligned with the EU AI Act risk classification framework.
Data Residency
Explicit region pinning in apipod.json. Auditable logs on request.
DPA Available
Data Processing Agreement available for Pro and Ultimate plans.
The default Socaity-hosted serverless tier runs in the European Economic Area (EEA), specifically RunPod EU. Non-EEA regions are available on opt-in for users who choose them explicitly per service. Other regions (US, Asia) are listed in Providers.
| Region | Country | Provider | GPU Types | Status |
|---|---|---|---|---|
| eu-west-1 | France | Scaleway | A4000, H100 | GA |
| eu-central-1 | Germany | Azure | A100, H100 | GA |
| eu-north-1 | Netherlands | Scaleway | A4000, A100 | Beta |
| eu-south-1 | Italy | Azure | A100 | Coming Soon |
Socaity acts as a Data Processor under GDPR when you process personal data via inference. You remain the Data Controller.
| GDPR Requirement | Socaity Position | Article |
|---|---|---|
| Data Processing Agreement | Available on request (Pro/Ultimate) | Art. 28 |
| Data Subject Rights | Deletion within 30 days on request | Art. 17 |
| Data Breach Notification | 72-hour notification to controller | Art. 33 |
| Cross-border Transfer | Prohibited without explicit consent | Art. 44–49 |
| Data Minimization | Inference inputs not stored beyond TTL | Art. 5(1)(c) |
| Records of Processing | Available for audit on request | Art. 30 |
The EU AI Act (effective August 2026) classifies AI systems by risk level. Most inference use-cases on Socaity fall into the Minimal Risk category.
| Risk Class | Examples | Socaity Role | Your Obligation |
|---|---|---|---|
Unacceptable | Social scoring, real-time biometric surveillance | Prohibited — not offered | Do not build on Socaity |
High Risk | Hiring decisions, credit scoring, medical diagnosis | Infrastructure only — no training data | Conformity assessment, registration |
Limited Risk | Chatbots, deepfakes, emotion recognition | Inference provider | Transparency obligations (disclosure) |
Minimal Risk | Image generation, audio transcription, code assist | Inference provider | None mandated |
Pin your service to a specific EU region using the region key in apipod.json.
{
"service": {
"name": "my-model",
"provider": "socaity"
},
"compute": {
"gpu": "A4000",
"region": "eu-west-1"
},
"data": {
"retention_ttl": "24h",
"store_outputs": false
}
}The following third-party sub-processors may handle data as part of the EU hosting stack.
| Sub-Processor | Role | Location | Adequacy / SCCs |
|---|---|---|---|
| Scaleway | GPU compute (France, Netherlands) | EU — France, NL | EEA |
| Microsoft Azure | GPU compute (Germany) | EU — Germany | EEA |
| Cloudflare | CDN, DDoS protection, DNS | Global (EU nodes for EU traffic) | SCCs |
| Datadog | Infrastructure monitoring | EU region only | SCCs |
| PostHog EU | Product analytics | EU — Germany | EEA |