Digital sovereignty for AI: control you can prove.
Digital sovereignty means you decide about your own data and systems, and can prove it. For AI four things matter: data, model, operations and proof. Here you see what each of three ways, US provider, Cloud in Germany, your own server, delivers.
Scored honestly · our own RAGSuite Engine too
- DataEU data centre, provider has accesspartly
- ModelThe provider’s selectionpartly
- RuntimeOnly with a connection to the providerno
- ProofA promise in the contractpartly
Jurisdiction: the provider’s home country
- DataYour servers, your accessyes
- ModelLocal or a provider you pickyes
- RuntimeRuns with no connection to usyes
- ProofVerifiable on the network, audit logyes
Jurisdiction: yours
- DataData centre in Germany, run by RAGSuitepartly
- ModelModel per project, location shown: no local modelpartly
- RuntimeRun by us; move to your own server possiblepartly
- ProofAudit log with export, source on every answeryes
Provider based in Germany
Key takeaways
- Digital sovereignty means being able to decide about data, systems and providers yourself, and to prove it.
- For AI there are four tests: data, model, operations, proof.
- Data residency (“hosted in Frankfurt”) is not the same as sovereignty.
- Only running it yourself gives full sovereignty; the Cloud in Germany is the pragmatic middle way.
What is digital sovereignty, and what is sovereign AI?
Digital sovereignty is the ability to decide for yourself about your own data, systems and dependencies. For a company this means: it can switch providers, knows who can access its data, and can prove both to auditors.
Sovereign AI applies this to AI. The server location alone is not enough. What matters is who has access, who can be compelled to hand data over and whether the AI keeps running without the vendor.
Four tests for sovereign AI.
An AI platform is as sovereign as the number of these tests it passes. Many offerings pass one or two.
Data
Documents, search index and metadata sit in an environment you own or fully control. You check on the network that nothing leaves, not just in the contract.
Model
You choose the language model yourself and can use one that never leaves your network.
Operations
The software runs on infrastructure you control and keeps running without phoning home.
Proof
What happens in the platform is logged, and every answer names its source.
Three ways to run AI: measured against the four tests.
| Test | US provider, EU region | RAGSuite Engine | RAGSuite self-hosted |
|---|---|---|---|
| Data | EU data centre, provider has access: partly | data centre in Germany, run by RAGSuite: partly | your servers, your access: ✓ |
| Model | provider’s selection: partly | per project, no local model: partly | local or a provider you pick: ✓ |
| Operations | only with a connection to the provider: no | by RAGSuite; move to your own server possible: partly | runs with no connection to us: ✓ |
| Proof | a promise in the contract: partly | audit log with export, source on every answer: ✓ | verifiable on the network, audit log: ✓ |
| Provider’s seat | USA | Germany | you run it |
The Cloud in Germany is no substitute for running it yourself if you need full sovereignty. It is the pragmatic way if you do not want to run servers, with provider and data in Germany.
Data residency is not data sovereignty.
| Data residency | Data sovereignty | |
|---|---|---|
| Question | Where is the data? | Who controls it, and who can be compelled to hand it over? |
| Typical claim | “Hosted in Frankfurt” | “Runs in your environment, under your law” |
| EU region of a US provider | met | not met (US CLOUD Act) |
| What is protected | the location | control and jurisdiction |
Data residency or data sovereignty? →The CLOUD Act and your AI vendor →
Why digital sovereignty matters for AI now.
According to Bitkom, 91 per cent of companies in Germany want a cloud provider based in Germany, and 53 per cent already have one. 37 per cent would even accept compromises on features or cost for a sovereign cloud (Bitkom, June 2026).
Regulation rewards control
The EU AI Act, DORA and NIS2 require documentation and traceable processes.
The provider’s jurisdiction
A provider based in the USA is subject to the CLOUD Act: wherever its servers are.
Predictable costs
A fixed plan price is easier to plan than usage-based pricing.
Which way fits you?
For a team without personal or regulated data, a hosted service is often the pragmatic choice. If you want provider and data in Germany without running servers, take the Cloud in Germany. If you need full control, air-gapped operation or proof on your own network, run RAGSuite yourself.
Because the core is open source, you can switch later, from the cloud to your own server, without changing vendor.
Check it yourself: no sign-up.
Check your AI data sovereignty
How sovereign is your current setup? A short check with a result.
Start the check →Check your AI provider’s location
Where does your provider process data, and under which law?
Start the check →Trust Center
Architecture, data flows, documents, for your audit team.
Open the Trust Center →Our clients in the housing sector cannot send tenant data to a US cloud. RAGSuite lets us give them a real AI assistant that never leaves their building.
Questions about sovereign AI.
What does digital sovereignty mean?
Digital sovereignty is the ability to decide for yourself about your own data, systems and dependencies. For companies this means: they know who can access their data, can switch providers and can prove both to auditors. With AI, control over the language model is added to this.
What is sovereign AI?
Sovereign AI is AI your company stays in control of: data, language model, operations and proof. The server location alone is not enough. What matters is who has access, who can be compelled to hand data over and whether the application keeps running without the vendor, and whether you can prove all of it.
Is RAGSuite Engine sovereign?
Partly, and we say so openly. Provider and data centre are in Germany, and you have the audit log and sources as proof. But we run it, and there are no local models in the cloud. Full sovereignty comes from running it yourself, which you can switch to at any time with the same software.
Can RAGSuite run fully air-gapped?
Yes, self-hosted. With a local language model via Ollama and an offline licence, RAGSuite needs no outbound connection. There is no telemetry and no licence server; Enterprise is activated with a signed key that is checked on your server. That fits networks with no outbound connection at all.
Who is behind RAGSuite?
RAGSuite is a brand of NITSAN GmbH, based in Germany (Dresden local court, HRB 48599). Support is available in German and English, and partners in Germany also handle on-site rollout. The Community Edition source code is public on GitHub, and all legal details are in the legal notice.
How do I prove sovereignty to auditors?
With evidence instead of promises: network proof that no data leaves; a record of which model handled which requests; the licence and system overview showing that operations sit with you; and the audit log plus sources for every answer. The Trust Center helps you put it together.
Sovereignty your auditor can follow.
We show you exactly what runs where in RAGSuite, in the Cloud in Germany and on your server, and how to verify it yourself.