AI Compliance Europe
AI infrastructure with complete GDPR compliance.
Compliance for LLM workloads is rarely about the model itself. It is about where prompts are processed, who can read them, which subprocessors touch the data, and whether you can prove all of that when a customer, auditor or regulator asks. HostYourAI serves open models such as Llama, Mistral and Qwen from European datacenters, so those answers stay inside EU jurisdiction from the first request.
This page describes what that means in practice: the GDPR paperwork you actually get, the guarantees we make, and the ones we deliberately do not make. If you are preparing for the EU AI Act, a fully European serving chain gives your documentation a solid foundation.
Why AI compliance in the EU
GDPR applies to prompts, not just databases
A prompt containing a customer name, a medical note or a contract clause is personal data in transit. The GDPR then requires a lawful basis, a processing agreement and clarity about where the data goes. With inference in European datacenters under a Data Processing Agreement, the prompt never becomes an undocumented third-country transfer.
The CLOUD Act problem does not go away with a region label
A US provider with an EU region is still a US company, and US law can compel disclosure regardless of where the servers stand. HostYourAI is a Dutch company from Groningen, and the serving chain contains no US cloud provider. That distinction matters in every data protection impact assessment.
Auditors want evidence, not assurances
Per-request usage records give you an audit trail: which model, when, how many tokens. Combined with a public subprocessor list and a signed DPA, you can answer procurement questionnaires with documents instead of promises.
The questions your DPO will ask, answered honestly
Where is my data processed? In multiple European regions, never outside the EU. Do you train on our prompts? No, never, and the DPA states it. Who are your subprocessors? The list is public, so you can review it before signing anything. Are you certified under the EU AI Act? No, such certification does not exist yet; an EU processing chain simply makes your own AI Act preparation easier to document. Is data encrypted? AES-256 at rest and TLS in transit. This honesty matters in regulated sectors, which is why teams in healthcare, finance, government and legal start with exactly these questions.
| Requirement | How HostYourAI meets it |
|---|---|
| Processing inside the EU | Inference runs in European datacenters only |
| Processing agreement | DPA available for every customer |
| Subprocessor transparency | Public subprocessor list |
| No secondary use of data | Customer data is never used for training |
| Encryption | AES-256 at rest, TLS in transit |
| Audit trail | Per-request usage records per API key |
from openai import OpenAI client = OpenAI( base_url="https://hostyourai.com/api/v1", api_key="hyai-...") client.chat.completions.create( model="llama-3.3-70b", messages=[{"role":"user","content":"Hallo!"}])
How to start
The API is OpenAI-compatible, so your existing tooling keeps working. Create a key, point the client at the EU endpoint and you are processing inside the EU. Costs are pay-as-you-go from one prepaid balance, see the pricing page.
from openai import OpenAI
client = OpenAI(
base_url="https://hostyourai.com/api/v1",
api_key="hyai-...",
)
resp = client.chat.completions.create(
model="llama-3.3-70b",
messages=[{"role": "user", "content": "Summarise this DPIA section."}],
)
print(resp.choices[0].message.content)Questions about AI compliance
Does HostYourAI sign a Data Processing Agreement?
Yes. A DPA is available for every customer and covers processing location, subprocessors and the commitment that your data is never used for training.
Is HostYourAI certified under the EU AI Act?
No, and be wary of anyone who claims to be, since no such certification scheme is in force yet. An EU-only serving chain does help you prepare for the Act's documentation and transparency duties.
Can prompts end up outside the EU?
No. Inference runs in European datacenters and there is no US cloud provider in the serving chain, so no transfer mechanism to a third country is needed.
Do you use customer data to train models?
Never. We serve open-weight models as published; your prompts and completions are not used for training and this is fixed in the DPA.
How do I evidence usage for an audit?
Every request is recorded per API key with model and token counts, so you can show an auditor exactly what was processed and when.
Which subprocessors are involved?
The subprocessor list is public. You can review every party before you send a single prompt, which is usually the first thing a DPO checks.
Everything you need for AI
From model hosting to a customer-facing API, it is built for developers and businesses who want their AI running on infrastructure they actually control, inside the EU.
Your data and your models stay on European GPUs. GDPR-friendly by design.
Llama, Qwen, DeepSeek, Mistral, FLUX and plenty more. Pick one and it is warm in minutes, with no DevOps on your end.
Point your existing client at the Router and keep your tools. No rewrite, no lock-in.
From zero to a warm endpoint in minutes
No infra to manage. Pick a model, get an OpenAI-compatible URL, ship.
Pick a model
Choose from the Model Garden or paste any HuggingFace ID. Set the VRAM and pick an EU GPU.
Get your endpoint
We deploy vLLM, run readiness probes, and hand you a warm OpenAI- and Anthropic-compatible URL plus an API key.
Route and ship
Point your client at the Router. It auto-routes to a warm instance, idles GPUs when nobody is online, and logs every request.
Private by Default
HostYourAI keeps your models, prompts and data on European GPUs. It is built for teams that care about compliance, reliability and real control.
GPUs and data residency inside Europe. Your prompts never leave the EU.
Run open-weight models with no black boxes or hidden telemetry.
GPUs idle when nobody is online, so you only pay for what you run.
Your infra, your keys, your models. Leave whenever you want.
Works with the tools you already use
The Router speaks the OpenAI and Anthropic APIs, so it drops straight into the clients and SDKs your team already runs. Just change the base URL.
Try HostYourAI for free
Frequently asked questions
Can I run this in the EU?
Yes. HostYourAI runs open models on GPUs in European datacenters via vLLM. Your prompts and outputs never leave the EU and there is no US cloud provider in the chain.
Is it GDPR-compliant?
Yes. All processing happens inside the EU, a Data Processing Agreement (DPA) is available and the subprocessor list is public. Open weights also mean no training on your data.
Is the API OpenAI-compatible?
Yes. Point your existing OpenAI or Anthropic client at our Router (https://hostyourai.com/api/v1), change only the base URL and API key. No rewrite, no lock-in.
What does it cost?
Pay-as-you-go on one prepaid credit balance: the shared router per token or a dedicated GPU per hour. Free to start, no minimum, no fixed monthly fee.
Works with 390+ open models
Text and image models on dedicated EU GPUs. Every model tested on our own hardware.
Related pages
Explore more about EU-hosted AI on HostYourAI.
The security of on-premise with the ease of cloud. Dedicated AI infrastructure without managing hardware yourself.
Read more →Host Llama 3.1 70B on dedicated NVIDIA A100 80GB in European data centers. GDPR compliant, pay-as-you-go, OpenAI-compatible API.
Read more →Host Yi 1.5 34B on dedicated NVIDIA A100 40GB in European data centers. GDPR compliant, pay-as-you-go, OpenAI-compatible API.
Read more →OpenRouter often routes prompts to US providers and gates EU processing behind enterprise plans. HostYourAI hosts on EU GPUs, self service.
Read more →Host Command R+ on dedicated NVIDIA A100 80GB in European data centers. GDPR compliant, pay-as-you-go, OpenAI-compatible API.
Read more →Host DeepSeek Coder V2 on dedicated NVIDIA A100 80GB in European data centers. GDPR compliant, pay-as-you-go, OpenAI-compatible API.
Read more →