How sovereign are the AI tools: we reviewed 183

Every list says “choose GDPR-safe”. But what does it actually look like? We reviewed all 183 tools in our catalog on three things: where the supplier is based, where data is stored, and what certifications are available. This is the situation in mid-2026.

More than a third come from suppliers outside the EU

• 🇸🇪 Swedish: 26 % (47 tools)
• 🇪🇺 EU/EEA: 34 % (62 tools)
• 🌍 Outside the EU: 40 % (74 tools)

Six out of ten tools (60 %) come from a Swedish or European supplier, and just over a quarter are fully Swedish. But 40 % are governed from countries outside the EU, usually the USA, and may then be covered by the CLOUD Act even if the servers are in Europe. The share of non-EU tools rose slightly when we added the major American services (Slack, Zoom, Teams and others), precisely so you can compare them with the European alternatives.

Most store data in the EU, but not all on the plan you buy

• EU data storage: 62 % (114 tools)
• Enterprise plan only: 7 % (12 tools)
• No / unclear: 31 % (57 tools)

The important detail: for twelve tools, EU data storage is only available on the expensive enterprise plans. On a free account or cheap subscription, you do not get it. That is why we mark them separately. And one lesson from the July 2026 source verification: when we required every storage claim to be backed by the supplier’s own documentation, a dozen tools lost their EU badge. Marketing says EU; the documents often say something else.

Under half are ISO 27001 certified

• ISO 27001: 45 % (82 tools)
• At least one documented certification: 60 % (109 tools)

Certification is no guarantee, but its absence is a signal. More than every other tool lacks the most common security certification. It is worth weighing if you handle sensitive information.

What you can do with this

• Do you need to keep data in Sweden? There are more Swedish alternatives than you might think, from Bokio to AI hosting at Berget.
• Want a powerful AI chat inside the EU? Mistral is a European first choice.
• Filter yourself by Swedish, EU data storage or ISO 27001 in the explore view.

The numbers are updated continuously as we re-review tools. Ownership changes and new certifications alter the picture all the time. Quarterly compilations with citable key figures are available in the CLOUD Act Index.