Data Residency

Data Residency refers to the geographic location where data is stored and processed. The term describes location only — not control. That distinguishes it from data sovereignty and digital sovereignty.

Why it matters for AI tools

Every prompt is a data processing event. Inputs, logs and training data can contain personal or business-critical information. Location determines applicable law and GDPR obligations.

Which providers offer EU options (as of June 2026)

• Microsoft: EU Data Boundary completed in February 2025 — covers M365, core Azure services and Copilot.
• OpenAI: EU data residency for ChatGPT Enterprise/Edu and API customers.
• Anthropic: EU options for enterprise customers; Claude also runs via Vertex AI and AWS Bedrock in EU regions.
• Google: Gemini via Vertex AI with EU regions and processing commitments.

”Stored in the EU” is not control

EU storage does not mean European control. US providers remain subject to US law, including the CLOUD Act. For the strategic perspective, see EU-hosted & data sovereignty.

Quick checklist:

1. Is data stored and processed in the EU?
2. Do prompts feed into model training?
3. Who has support and admin access — and from where?
4. Is there a DPA with clearly named subprocessors?

Last updated: June 2026