LightOn

Sovereign enterprise GenAI platform deployed on-prem, air-gapped, or EU cloud

Scaleway Generative APIs

EU-sovereign managed LLM inference from France's developer-first cloud provider

LightOn

Excellent

22/25

Scaleway Generative APIs

Excellent

23/25

Score Breakdown

DimensionLightOnScaleway Generative APIs

Data Residency

Where is your data stored and processed?

LightOn: Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.

Scaleway Generative APIs: All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.

5/5

Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.

5/5

All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.

Legal Jurisdiction

Which laws govern the company and your data?

LightOn: French SA incorporated in France, listed on Euronext Growth Paris, with no US parent. Fully under EU/French jurisdiction.

Scaleway Generative APIs: French SAS under French law. GDPR applies as corporate law. Iliad Group is a French parent company. No US entity, no CLOUD Act. GAIA-X participant and committed to EU cloud sovereignty principles.

5/5

French SA incorporated in France, listed on Euronext Growth Paris, with no US parent. Fully under EU/French jurisdiction.

5/5

French SAS under French law. GDPR applies as corporate law. Iliad Group is a French parent company. No US entity, no CLOUD Act. GAIA-X participant and committed to EU cloud sovereignty principles.

Data Retention & Training

Is your data used for model training?

LightOn: In-perimeter deployment means no customer data is sent out or used to train shared models, and retention is governed by the customer's own infrastructure. Scored 4 rather than 5 as public DPA/retention-control documentation is limited.

Scaleway Generative APIs: Inference data not used for shared model training. Per-project data isolation. GDPR-compliant data processing with configurable retention for enterprise accounts.

4/5

In-perimeter deployment means no customer data is sent out or used to train shared models, and retention is governed by the customer's own infrastructure. Scored 4 rather than 5 as public DPA/retention-control documentation is limited.

4/5

Inference data not used for shared model training. Per-project data isolation. GDPR-compliant data processing with configurable retention for enterprise accounts.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

LightOn: Holds SOC 2 Type 1. ISO 27001 and SOC 2 Type II are not confirmed in published sources, and ANSSI SecNumCloud appears to be a positioning goal rather than a confirmed qualification.

Scaleway Generative APIs: Scaleway holds ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certifications across its cloud platform. Strong certification portfolio for a European cloud provider. HDS certification may be relevant for healthcare use cases—verify availability for Generative APIs product specifically.

3/5

Holds SOC 2 Type 1. ISO 27001 and SOC 2 Type II are not confirmed in published sources, and ANSSI SecNumCloud appears to be a positioning goal rather than a confirmed qualification.

4/5

Scaleway holds ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certifications across its cloud platform. Strong certification portfolio for a European cloud provider. HDS certification may be relevant for healthcare use cases—verify availability for Generative APIs product specifically.

Regulatory Fit

Suitability for regulated industries and professional services

LightOn: Purpose-built for regulated and sovereign EU buyers, with public-sector and defense/aerospace references (CNES, Safran, French tax authority) and GDPR/AI Act alignment.

Scaleway Generative APIs: Excellent fit for European developers and businesses requiring EU-sovereign LLM inference. French jurisdiction, strong certifications, and GDPR-native posture make this one of the best choices for compliance-conscious EU organisations building AI applications.

5/5

Purpose-built for regulated and sovereign EU buyers, with public-sector and defense/aerospace references (CNES, Safran, French tax authority) and GDPR/AI Act alignment.

5/5

Excellent fit for European developers and businesses requiring EU-sovereign LLM inference. French jurisdiction, strong certifications, and GDPR-native posture make this one of the best choices for compliance-conscious EU organisations building AI applications.

Total Score

22/25

23/25

Best For

LightOn

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (CNIL, AMF); privacy-conscious teams who need strong data retention controls; organisations that need self-hosted or on-premise deployment.

Scaleway Generative APIs

Best for EU-headquartered organisations needing maximum data sovereignty; organisations requiring broad certification coverage (ISO 27001, ISO 27017, ISO 27018); regulated industries (CNIL, BaFin); privacy-conscious teams who need strong data retention controls; teams on a tight budget.

Detailed Comparison

LightOn vs Scaleway Generative APIs: Trust & Compliance Comparison

LightOn (LightOn, FR) scores 22/25 overall with a Gold (Excellent) trust badge. Sovereign enterprise GenAI platform deployed on-prem, air-gapped, or EU cloud. Scaleway Generative APIs (Scaleway, FR) scores 23/25 with a Gold (Excellent) trust badge. EU-sovereign managed LLM inference from France's developer-first cloud provider.

Dimension-by-Dimension Breakdown

#### Data Residency

Both score equally at 5/5.

●LightOn (5/5): Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.

●Scaleway Generative APIs (5/5): All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.

#### Legal Jurisdiction

Both score equally at 5/5.

●LightOn (5/5): French SA incorporated in France, listed on Euronext Growth Paris, with no US parent. Fully under EU/French jurisdiction.

●Scaleway Generative APIs (5/5): French SAS under French law. GDPR applies as corporate law. Iliad Group is a French parent company. No US entity, no CLOUD Act. GAIA-X participant and committed to EU cloud sovereignty principles.

#### Data Retention & Training

Both score equally at 4/5.

●LightOn (4/5): In-perimeter deployment means no customer data is sent out or used to train shared models, and retention is governed by the customer's own infrastructure. Scored 4 rather than 5 as public DPA/retention-control documentation is limited.

●Scaleway Generative APIs (4/5): Inference data not used for shared model training. Per-project data isolation. GDPR-compliant data processing with configurable retention for enterprise accounts.

#### Certifications

Scaleway Generative APIs leads with 4/5 vs 3/5.

●LightOn (3/5): Holds SOC 2 Type 1. ISO 27001 and SOC 2 Type II are not confirmed in published sources, and ANSSI SecNumCloud appears to be a positioning goal rather than a confirmed qualification.

●Scaleway Generative APIs (4/5): Scaleway holds ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certifications across its cloud platform. Strong certification portfolio for a European cloud provider. HDS certification may be relevant for healthcare use cases—verify availability for Generative APIs product specifically.

#### Regulatory Fit

Both score equally at 5/5.

●LightOn (5/5): Purpose-built for regulated and sovereign EU buyers, with public-sector and defense/aerospace references (CNES, Safran, French tax authority) and GDPR/AI Act alignment.

●Scaleway Generative APIs (5/5): Excellent fit for European developers and businesses requiring EU-sovereign LLM inference. French jurisdiction, strong certifications, and GDPR-native posture make this one of the best choices for compliance-conscious EU organisations building AI applications.

Certifications at a Glance

Certification	LightOn	Scaleway Generative APIs
ISO 27001	No	Yes
ISO 27017	No	Yes
ISO 27018	No	Yes
SOC 2 Type 1	Yes	No
SOC 2 Type II	No	Yes

Overall Verdict

LightOn and Scaleway Generative APIs are closely matched on trust and compliance, with scores of 22/25 and 23/25 respectively. The right choice depends on your specific regulatory requirements and existing technology stack.

Frequently Asked Questions

Which is better for EU compliance, LightOn or Scaleway Generative APIs?

LightOn has a TrustKit score of 22/25 while Scaleway Generative APIs scores 23/25. Scaleway Generative APIs currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do LightOn and Scaleway Generative APIs compare on data residency?

LightOn scores 5/5 for data residency (Deploys on-premise, in customer VPC, or air-gapped on EU infrastructure, so data never leaves the customer's own security perimeter. Strongest possible residency posture.), while Scaleway Generative APIs scores 5/5 (All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.).

Are LightOn and Scaleway Generative APIs GDPR compliant?

Both tools are assessed across five compliance dimensions. LightOn has a regulatory fit score of 5/5 and Scaleway Generative APIs scores 5/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool

LightOn

View full review →

88%

Scaleway Generative APIs

View full review →

92%