Choose where your AI work goes.

EU data sovereignty for AI means you run OpenAI and Anthropic models hosted in the EU, keep your existing provider accounts, and decide per team where data is processed.

OpenAI and Anthropic,
hosted in the EU.

Keep Claude, add OpenAI where it works best, and make the processing region part of the plan.

Plan your EU deployment
EU model hosting European Union
Three-dimensional map of Europe with the European Union’s ring of stars

OpenAI

GPT models

EU hosted

Anthropic

Claude models

EU hosted

Your choice of models. EU hosting for both providers.

Your data, your choices

Hosting, models and connected systems, checked against the same requirements.

01

Choose where data lives

Deploy in the regions your business needs.

02

Keep model choice open

EU-hosted OpenAI and Anthropic, the right model for each task.

03

See the whole picture

Know where connected systems send your data.

Full transparency on training,
with zero data retention available.

Know how your data is used. Choose zero data retention where you need it.

EU hosting does not mean paying enterprise-tier prices for every seat.

See what this does to your AI bill

What sovereign AI means
for a business.

Sovereign AI is the principle that your organisation decides where AI processing happens, what is kept, and which of your systems a model can reach. Not the vendor, and not the default settings of a consumer app.

For most companies it comes down to four things: models hosted in the region your regulator expects, a data processing agreement someone has actually read, retention you control, and a record of which connected systems send data where. None of it requires training your own model.

Harriet gives you all four with OpenAI and Anthropic models hosted in the EU, chosen per team, on your own provider accounts or ours.

Review the security controls

Questions we get asked

Can we use both OpenAI and Anthropic in the EU?
Yes. Both providers are available EU-hosted, and you choose per team which models run where.
What about model training and data retention?
Full transparency on training. Zero data retention is available on request.
Can we keep our existing provider accounts?
Yes. Bring your own OpenAI and Anthropic accounts and keep your provider relationships, or use Harriet-managed credits. Either way you see spend per team.
Can you help us choose the right setup?
Yes. Hosting region, model choice and connected systems are agreed as part of the rollout plan, with your DPO in the room if you want them there.
Where is our data stored?
Model processing runs in the EU when you choose EU-hosted models. Each connected system shows where it sends data before you enable it.
What contracts cover this?
A DPA with EU and UK transfer safeguards, and a SOC 2 Type II report in the Trust Center.
What is sovereign AI?
Sovereign AI means your organisation, not the model vendor, decides where AI processing happens, what is retained, and which systems the model can reach. In practice that is EU-hosted models, a data processing agreement you have read, retention you control, and a record of which connected systems send data where. It does not require training your own model.
Is Claude GDPR compliant?
Anthropic states that Claude Enterprise is GDPR compliant and offers a DPA, with EU processing available to enterprise customers. Compliance is still about how you deploy it: where processing runs, what is retained and which connected systems see personal data. Through Harriet, Anthropic models run EU-hosted with zero data retention available, and every connected system shows where it sends data before you enable it.
Is ChatGPT GDPR compliant?
OpenAI offers a DPA and lists EU data residency among its Enterprise features, and states that it does not train on business data by default. The published residency list is an Enterprise feature rather than part of ChatGPT Business. Through Harriet, OpenAI models run EU-hosted on the same terms as Anthropic’s, without a seat minimum or an annual contract.

Make data requirements part of the plan.

Bring the regions, systems and policies your rollout has to respect.