Rasa

Open-source conversational AI framework for building enterprise chatbots and voice assistants

Scaleway Generative APIs

EU-sovereign managed LLM inference from France's developer-first cloud provider

Rasa

Strong

19/25

Scaleway Generative APIs

Excellent

23/25

Score Breakdown

DimensionRasaScaleway Generative APIs

Data Residency

Where is your data stored and processed?

Rasa: Open-source framework deployable on any infrastructure. Self-hosted option means data never leaves customer's environment. No cloud dependency for core functionality.

Scaleway Generative APIs: All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.

5/5

Open-source framework deployable on any infrastructure. Self-hosted option means data never leaves customer's environment. No cloud dependency for core functionality.

5/5

All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.

Legal Jurisdiction

Which laws govern the company and your data?

Rasa: Dual incorporation: Rasa Technologies GmbH (Germany) and Rasa Technologies Inc (USA). German R&D but US entity introduces CLOUD Act considerations. Self-hosted deployments mitigate jurisdiction risks.

Scaleway Generative APIs: French SAS under French law. GDPR applies as corporate law. Iliad Group is a French parent company. No US entity, no CLOUD Act. GAIA-X participant and committed to EU cloud sovereignty principles.

3/5

Dual incorporation: Rasa Technologies GmbH (Germany) and Rasa Technologies Inc (USA). German R&D but US entity introduces CLOUD Act considerations. Self-hosted deployments mitigate jurisdiction risks.

5/5

French SAS under French law. GDPR applies as corporate law. Iliad Group is a French parent company. No US entity, no CLOUD Act. GAIA-X participant and committed to EU cloud sovereignty principles.

Data Retention & Training

Is your data used for model training?

Rasa: Self-hosted architecture gives customers complete control over data retention. Rasa does not access or host customer data. Open-source code allows full audit of data handling.

Scaleway Generative APIs: Inference data not used for shared model training. Per-project data isolation. GDPR-compliant data processing with configurable retention for enterprise accounts.

5/5

Self-hosted architecture gives customers complete control over data retention. Rasa does not access or host customer data. Open-source code allows full audit of data handling.

4/5

Inference data not used for shared model training. Per-project data isolation. GDPR-compliant data processing with configurable retention for enterprise accounts.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Rasa: Controls aligned with ISO 27002. Supports GDPR and HIPAA compliance. No formal ISO 27001 or SOC 2 certifications listed. Self-hosted model shifts certification burden to customer.

Scaleway Generative APIs: Scaleway holds ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certifications across its cloud platform. Strong certification portfolio for a European cloud provider. HDS certification may be relevant for healthcare use cases—verify availability for Generative APIs product specifically.

2/5

Controls aligned with ISO 27002. Supports GDPR and HIPAA compliance. No formal ISO 27001 or SOC 2 certifications listed. Self-hosted model shifts certification burden to customer.

4/5

Scaleway holds ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certifications across its cloud platform. Strong certification portfolio for a European cloud provider. HDS certification may be relevant for healthcare use cases—verify availability for Generative APIs product specifically.

Regulatory Fit

Suitability for regulated industries and professional services

Rasa: Excellent for regulated industries due to self-hosting capability. Used by enterprises in financial services, healthcare, and government. Full data control enables compliance with strict regulatory requirements.

Scaleway Generative APIs: Excellent fit for European developers and businesses requiring EU-sovereign LLM inference. French jurisdiction, strong certifications, and GDPR-native posture make this one of the best choices for compliance-conscious EU organisations building AI applications.

4/5

Excellent for regulated industries due to self-hosting capability. Used by enterprises in financial services, healthcare, and government. Full data control enables compliance with strict regulatory requirements.

5/5

Excellent fit for European developers and businesses requiring EU-sovereign LLM inference. French jurisdiction, strong certifications, and GDPR-native posture make this one of the best choices for compliance-conscious EU organisations building AI applications.

Total Score

19/25

23/25

Best For

Rasa

Best for regulated industries (financial-services, healthcare); privacy-conscious teams who need strong data retention controls; organisations that need self-hosted or on-premise deployment; teams on a tight budget.

Scaleway Generative APIs

Best for EU-headquartered organisations needing maximum data sovereignty; organisations requiring broad certification coverage (ISO 27001, ISO 27017, ISO 27018); regulated industries (CNIL, BaFin); privacy-conscious teams who need strong data retention controls; teams on a tight budget.

Detailed Comparison

Rasa vs Scaleway Generative APIs: Trust & Compliance Comparison

Rasa (Rasa, DE) scores 19/25 overall with a Silver (Strong) trust badge. Open-source conversational AI framework for building enterprise chatbots and voice assistants. Scaleway Generative APIs (Scaleway, FR) scores 23/25 with a Gold (Excellent) trust badge. EU-sovereign managed LLM inference from France's developer-first cloud provider.

Dimension-by-Dimension Breakdown

#### Data Residency

Both score equally at 5/5.

●Rasa (5/5): Open-source framework deployable on any infrastructure. Self-hosted option means data never leaves customer's environment. No cloud dependency for core functionality.

●Scaleway Generative APIs (5/5): All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.

#### Legal Jurisdiction

Scaleway Generative APIs leads with 5/5 vs 3/5.

●Rasa (3/5): Dual incorporation: Rasa Technologies GmbH (Germany) and Rasa Technologies Inc (USA). German R&D but US entity introduces CLOUD Act considerations. Self-hosted deployments mitigate jurisdiction risks.

●Scaleway Generative APIs (5/5): French SAS under French law. GDPR applies as corporate law. Iliad Group is a French parent company. No US entity, no CLOUD Act. GAIA-X participant and committed to EU cloud sovereignty principles.

#### Data Retention & Training

Rasa leads with 5/5 vs 4/5.

●Rasa (5/5): Self-hosted architecture gives customers complete control over data retention. Rasa does not access or host customer data. Open-source code allows full audit of data handling.

●Scaleway Generative APIs (4/5): Inference data not used for shared model training. Per-project data isolation. GDPR-compliant data processing with configurable retention for enterprise accounts.

#### Certifications

Scaleway Generative APIs leads with 4/5 vs 2/5.

●Rasa (2/5): Controls aligned with ISO 27002. Supports GDPR and HIPAA compliance. No formal ISO 27001 or SOC 2 certifications listed. Self-hosted model shifts certification burden to customer.

●Scaleway Generative APIs (4/5): Scaleway holds ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certifications across its cloud platform. Strong certification portfolio for a European cloud provider. HDS certification may be relevant for healthcare use cases—verify availability for Generative APIs product specifically.

#### Regulatory Fit

Scaleway Generative APIs leads with 5/5 vs 4/5.

●Rasa (4/5): Excellent for regulated industries due to self-hosting capability. Used by enterprises in financial services, healthcare, and government. Full data control enables compliance with strict regulatory requirements.

●Scaleway Generative APIs (5/5): Excellent fit for European developers and businesses requiring EU-sovereign LLM inference. French jurisdiction, strong certifications, and GDPR-native posture make this one of the best choices for compliance-conscious EU organisations building AI applications.

Certifications at a Glance

Certification	Rasa	Scaleway Generative APIs
ISO 27001	No	Yes
ISO 27017	No	Yes
ISO 27018	No	Yes
SOC 2 Type II	No	Yes

Overall Verdict

Scaleway Generative APIs has a clear trust advantage, scoring 23/25 compared to Rasa's 19/25. Scaleway Generative APIs particularly excels in legal jurisdiction, certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Rasa or Scaleway Generative APIs?

Rasa has a TrustKit score of 19/25 while Scaleway Generative APIs scores 23/25. Scaleway Generative APIs currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Rasa and Scaleway Generative APIs compare on data residency?

Rasa scores 5/5 for data residency (Open-source framework deployable on any infrastructure. Self-hosted option means data never leaves customer's environment. No cloud dependency for core functionality.), while Scaleway Generative APIs scores 5/5 (All inference processed in French data centres (Paris region). Maximum EU data sovereignty. French cloud, French law, French infrastructure.).

Are Rasa and Scaleway Generative APIs GDPR compliant?

Both tools are assessed across five compliance dimensions. Rasa has a regulatory fit score of 4/5 and Scaleway Generative APIs scores 5/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool

Rasa

View full review →

76%

Scaleway Generative APIs

View full review →

92%