Skip to content
FREN
Login

EU Hosting · Governance

Two labels.
A distinction that matters.

ELYSÉA does not group ethics and EU hosting under a single vague label. These are two distinct guarantees, with different conditions. Ethics is always present — EU hosting is conditional and documented honestly.

The two labels

What each label means.

Guaranteed EthicsAlways

The 4 prohibitions engraved in code

Domination, dependency, manipulation, substitution — four behaviours ELYSÉA cannot produce, regardless of hosting, region, or pricing plan. The barrier is in the code, not in the contract.

  • —Active in sandbox (sk_test_) and production (sk_live_)
  • —Active in EU region and outside EU
  • —Non-deactivatable by configuration
  • —Automatically inherited at SDK integration
EU HostingConditional

EU hosting — data residing in Europe

When region: 'EU' is active, user data is processed and stored in European datacentres. EU hosting is verifiable — it is a property of the infrastructure, not a statement of principle.

  • —Requires region: 'EU' in ElyseaClient
  • —Proven on deployed infrastructure (region:eu active)
  • —LLM inference operated in Europe (AWS Bedrock eu-west-3 Paris) — active since 2026-08-21
  • —Required for EU public procurement and regulated sectors
ContextGuaranteed EthicsEU Hosting
sk_test_ (sandbox)✓✓ if region:'EU'
sk_live_ EU✓✓
sk_live_ outside EU✓✗
Global region (temporary)✓✗
Active EU region (target)✓✓

Infrastructure

What “EU region” covers.

EU hosting is not a marketing claim. It is a property of the infrastructure configuration — verifiable by configuration, by region logs, by audit.

Front (edge)Paris, France (EU) — cdg1curl x-vercel-id
Front (static CDN)Vercel global CDN (distribution)vercel.json
DatabaseFrankfurt, Germany (EU) — eu-central-1Supabase dashboard
Core / orchestratorBelgium (EU) — europe-west1endpoint ew.a.run.app
LLM inference (main pipeline)Paris, France (EU) — eu-west-3BASCULE_EU_2026-08-21: 6/6 bedrock_eu
Safety netParis, France (EU) — eu-west-3BASCULE_EU_2026-08-21: SAFETY=BEDROCK_EU
SMTP (contact form)France (EU) — Brevosmtp-relay.brevo.com
LLM outage fallbackUS (OpenAI) — documented fallbackBASCULE_EU §7

The US fallback has not been the normal route since 2026-08-21. It activates only in the event of proven eu-west-3 unavailability — documented openly, not hidden.

Front & distribution

Proven (cdg1 Paris)

The site is served from the Vercel cdg1 node (Paris, France, EU). The CDN distributes static assets globally — that is the nature of a CDN. Data processing (form, auth) goes through the EU node.

Data at rest EU

Proven

User memory data (M1–M6), compliance logs, consents — stored in EU (Supabase eu-central-1 Frankfurt). No transatlantic transfer without explicit mention.

LLM inference in Europe

Active — bedrock_eu (Paris)

LLM calls go through AWS Bedrock eu-west-3 (Paris). Main pipeline and safety net on the same EU provider since 2026-08-21. Models: eu.anthropic.claude-haiku-4-5 and eu.anthropic.claude-sonnet-4-6.

Documented fallback

US fallback — documented

In the event of eu-west-3 unavailability, a temporary fallback to OpenAI (US) activates automatically. It is not the normal route. This fallback is documented here, not hidden — that is honesty about actual state.

User memory

Memory belongs to the user.
Not to your app, not to ELYSÉA.

Memory data (M1–M6) is indexed by the user, not by your app. The user can consult, export, and erase it via their ID portal. Your app can never read raw memory — it receives a consented filtered synthesis (Guarantee K).

Read access

Filtered synthesis only. No /memory/raw endpoint exists — architectural 404.

Memory write

Possible with explicit consentToken from the user and mandatory TTL. 403 without consentToken.

Portability

User exports their data via their ELYSÉA ID portal — GDPR Art. 20 compliant.

Erasure

GDPR Art. 17 erasure via memory.delete() or direct request. TTL guarantees automatic expiry.

Honest scope

What we assert.
What we do not claim.

ELYSÉA does not claim total legal immunity. EU hosting is a property of the region:EU configuration — documented, verifiable, honest about its current state.

Inference operated in Europe (AWS Bedrock eu-west-3 Paris) since 2026-08-21. A US fallback remains active in the event of proven unavailability — it is not the normal route, and it is documented here.

To our knowledge, after documented research on 2026-09-04 covering SDK offerings combining ethics-by-code guarantees and inference operated in Europe, we found no commercial actor combining both properties. What we did not find may exist — this is a research finding, dated and revisable.

Ethics by architecture.
EU hosting by configuration.

Embed the SDK →AI Act Compliance →EU hosting questions →