LightOn

Sovereign enterprise GenAI platform deployed on-prem, air-gapped, or EU cloud

Nscale

European AI hyperscaler with sovereign GPU cloud infrastructure in Norway and UK

LightOn

Excellent

22/25

Nscale

Strong

17/25

Score Breakdown

DimensionLightOnNscale

Data Residency

Where is your data stored and processed?

LightOn: Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.

Nscale: Norwegian data centres offer EEA data residency with renewable hydropower. UK facilities planned. Customer workloads stay on Nscale infrastructure. Norway option provides strong EU data residency.

5/5

Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.

4/5

Norwegian data centres offer EEA data residency with renewable hydropower. UK facilities planned. Customer workloads stay on Nscale infrastructure. Norway option provides strong EU data residency.

Legal Jurisdiction

Which laws govern the company and your data?

LightOn: French SA incorporated in France, listed on Euronext Growth Paris, with no US parent. Fully under EU/French jurisdiction.

Nscale: UK incorporation provides GDPR adequacy but UK CLOUD Act equivalent (Investigatory Powers Act) applies. Norwegian data centres under EEA law offer stronger protection for EU workloads.

5/5

French SA incorporated in France, listed on Euronext Growth Paris, with no US parent. Fully under EU/French jurisdiction.

3/5

UK incorporation provides GDPR adequacy but UK CLOUD Act equivalent (Investigatory Powers Act) applies. Norwegian data centres under EEA law offer stronger protection for EU workloads.

Data Retention & Training

Is your data used for model training?

LightOn: In-perimeter deployment means no customer data is sent out or used to train shared models, and retention is governed by the customer's own infrastructure. Scored 4 rather than 5 as public DPA/retention-control documentation is limited.

Nscale: Infrastructure provider only—Nscale does not access, process, or retain customer workload data. Customers have full control over their compute environments.

4/5

In-perimeter deployment means no customer data is sent out or used to train shared models, and retention is governed by the customer's own infrastructure. Scored 4 rather than 5 as public DPA/retention-control documentation is limited.

5/5

Infrastructure provider only—Nscale does not access, process, or retain customer workload data. Customers have full control over their compute environments.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

LightOn: Holds SOC 2 Type 1. ISO 27001 and SOC 2 Type II are not confirmed in published sources, and ANSSI SecNumCloud appears to be a positioning goal rather than a confirmed qualification.

Nscale: No publicly listed certifications yet. Expected for a fast-growing infrastructure company at this stage. Data centre certifications likely in progress.

3/5

Holds SOC 2 Type 1. ISO 27001 and SOC 2 Type II are not confirmed in published sources, and ANSSI SecNumCloud appears to be a positioning goal rather than a confirmed qualification.

2/5

No publicly listed certifications yet. Expected for a fast-growing infrastructure company at this stage. Data centre certifications likely in progress.

Regulatory Fit

Suitability for regulated industries and professional services

LightOn: Purpose-built for regulated and sovereign EU buyers, with public-sector and defense/aerospace references (CNES, Safran, French tax authority) and GDPR/AI Act alignment.

Nscale: Strong for organisations needing European GPU compute sovereignty. Norwegian facilities particularly suitable for EU regulated workloads. UK incorporation is adequate but not optimal for strict EU sovereignty requirements.

5/5

Purpose-built for regulated and sovereign EU buyers, with public-sector and defense/aerospace references (CNES, Safran, French tax authority) and GDPR/AI Act alignment.

3/5

Strong for organisations needing European GPU compute sovereignty. Norwegian facilities particularly suitable for EU regulated workloads. UK incorporation is adequate but not optimal for strict EU sovereignty requirements.

Total Score

22/25

17/25

Best For

LightOn

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (CNIL, AMF); privacy-conscious teams who need strong data retention controls; organisations that need self-hosted or on-premise deployment.

Nscale

Best for privacy-conscious teams who need strong data retention controls.

Detailed Comparison

LightOn vs Nscale: Trust & Compliance Comparison

LightOn (LightOn, FR) scores 22/25 overall with a Gold (Excellent) trust badge. Sovereign enterprise GenAI platform deployed on-prem, air-gapped, or EU cloud. Nscale (Nscale, GB) scores 17/25 with a Silver (Strong) trust badge. European AI hyperscaler with sovereign GPU cloud infrastructure in Norway and UK.

Dimension-by-Dimension Breakdown

#### Data Residency

LightOn leads with 5/5 vs 4/5.

●LightOn (5/5): Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.

●Nscale (4/5): Norwegian data centres offer EEA data residency with renewable hydropower. UK facilities planned. Customer workloads stay on Nscale infrastructure. Norway option provides strong EU data residency.

#### Legal Jurisdiction

LightOn leads with 5/5 vs 3/5.

●LightOn (5/5): French SA incorporated in France, listed on Euronext Growth Paris, with no US parent. Fully under EU/French jurisdiction.

●Nscale (3/5): UK incorporation provides GDPR adequacy but UK CLOUD Act equivalent (Investigatory Powers Act) applies. Norwegian data centres under EEA law offer stronger protection for EU workloads.

#### Data Retention & Training

Nscale leads with 5/5 vs 4/5.

●LightOn (4/5): In-perimeter deployment means no customer data is sent out or used to train shared models, and retention is governed by the customer's own infrastructure. Scored 4 rather than 5 as public DPA/retention-control documentation is limited.

●Nscale (5/5): Infrastructure provider only—Nscale does not access, process, or retain customer workload data. Customers have full control over their compute environments.

#### Certifications

LightOn leads with 3/5 vs 2/5.

●LightOn (3/5): Holds SOC 2 Type 1. ISO 27001 and SOC 2 Type II are not confirmed in published sources, and ANSSI SecNumCloud appears to be a positioning goal rather than a confirmed qualification.

●Nscale (2/5): No publicly listed certifications yet. Expected for a fast-growing infrastructure company at this stage. Data centre certifications likely in progress.

#### Regulatory Fit

LightOn leads with 5/5 vs 3/5.

●LightOn (5/5): Purpose-built for regulated and sovereign EU buyers, with public-sector and defense/aerospace references (CNES, Safran, French tax authority) and GDPR/AI Act alignment.

●Nscale (3/5): Strong for organisations needing European GPU compute sovereignty. Norwegian facilities particularly suitable for EU regulated workloads. UK incorporation is adequate but not optimal for strict EU sovereignty requirements.

Certifications at a Glance

Certification	LightOn	Nscale
SOC 2 Type 1	Yes	No

Overall Verdict

LightOn has a clear trust advantage, scoring 22/25 compared to Nscale's 17/25. LightOn particularly excels in data residency, legal jurisdiction, certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, LightOn or Nscale?

LightOn has a TrustKit score of 22/25 while Nscale scores 17/25. LightOn currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do LightOn and Nscale compare on data residency?

LightOn scores 5/5 for data residency (Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.), while Nscale scores 4/5 (Norwegian data centres offer EEA data residency with renewable hydropower. UK facilities planned. Customer workloads stay on Nscale infrastructure. Norway option provides strong EU data residency.).

Are LightOn and Nscale GDPR compliant?

Both tools are assessed across five compliance dimensions. LightOn has a regulatory fit score of 5/5 and Nscale scores 3/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool