LLM APIs with EU endpoints
Last updated: 22 August 2026
Using language models via an API legally means using a cloud service: for health and social data, the requirements of § 393 SGB V apply, since July 2025 generally with a C5 Type 2 attestation. This overview lists LLM APIs with EU endpoints and what providers publicly commit to on storage (zero data retention), training exclusion, and C5.
| Provider | Country | EU endpoint | Zero data retention | Training | C5 (platform) | Source |
|---|---|---|---|---|---|---|
| Sherlock CloudFerro | PL | yes (EU) | default, no storage | excluded | Type 2 | Source |
| AI Model Hub IONOS | DE | yes (DE) | excluded | Type 1 | Source | |
| Serverless Inference Lyceum | DE | yes (EU) | no | Source | ||
| La Plateforme Mistral AI | FR | yes (EU) | on request, otherwise 30 days | excluded (paid plans) | no | Source |
| AI Endpoints OVHcloud | FR | yes (EU) | default, no storage | excluded | Type 2 | Source |
| Generative APIs Scaleway | FR | yes (FR) | default, no collection | excluded | no | Source |
| AI Model Serving STACKIT | DE | yes (DE/AT) | default, no storage | excluded | Type 2 | Source |
| AI Foundation Services T-Systems | DE | yes (DE) | default, no storage | excluded | Type 2 | Source |
| Bedrock AWS | US | yes, incl. Frankfurt | default, no storage | excluded | Type 2 | Source |
| Vertex AI Google | US | yes (EU regions) | contractually available | excluded | Type 2 | Source |
| Azure OpenAI Microsoft | US | yes (EU Data Zone) | on request, otherwise 30-day abuse monitoring | excluded | Type 2 | Source |
| API Platform OpenAI | US | yes (EU residency, new projects) | default with EU residency | excluded (default) | no | Source |
A curated selection based on public statements. Empty fields mean no reliable public statement is available. Providers without their own EU endpoint are not listed, Anthropic models, for example, run in the EU via Bedrock or Vertex AI. Commitments differ by plan and contract, and C5 attestations apply per service: check scope and current contracts (DPA, amendments) before deciding. For US providers, access under the CLOUD Act remains possible despite an EU endpoint.
For background, read The cloud in healthcare, reconsidered and the C5 provider overview.
Is a provider missing or an entry outdated? Write to us at hello@thalamiq.io.