Orq.ai is a European company. Every customer’s data stays in the EU by default, no configuration required. There is no US region; all Orq.ai platform infrastructure is EU-only.Documentation Index
Fetch the complete documentation index at: https://docs.orq.ai/llms.txt
Use this file to discover all available pages before exploring further.
Sovereignty
What does sovereignty mean in the context of an AI platform? Full sovereignty means no third party (including a cloud provider, a parent company, or a foreign government) can compel access to the customer’s data or infrastructure. It operates at three layers:- Business entity: the contracting company is governed by EU law and not subject to foreign surveillance frameworks.
- Infrastructure: the compute and storage that runs the platform is under the customer’s control.
- Data: data is stored and processed exclusively within EU jurisdiction, and the customer controls what is retained and what is masked.
| Model | Description |
|---|---|
| Orq.ai Cloud | Fully managed, hosted in EU data centers. No setup required. |
| Virtual Private Cloud (VPC) | Orq.ai runs inside the customer’s own AWS or Azure account, fully isolated within the customer’s network. The customer owns and controls the compute and storage. |
| Dedicated Cloud / On-prem | Orq.ai deployed on any cloud or on-premises infrastructure of the customer’s choice. Suitable for organizations that require full hardware-level control or air-gapped environments. |
Data Residency
Is EU residency an option or the default? It is the default and the only option. Every Orq.ai customer has their data stored and processed in the European Union. Does data ever leave the EU? All Orq.ai platform data (traces, logs, datasets, prompts, evaluations, and workspace configuration) is stored and processed exclusively within the European Union. Data never leaves EU jurisdiction at the platform layer. Model API calls are routed to the model provider of the customer’s choice. Customers retain full control over which providers they use and can restrict selections to providers that offer EU-region inference or zero data retention commitments. Can model inference stay within the EU? Yes. Many providers in Orq.ai’s model catalog offer EU-region inference endpoints, including (but not limited to) Anthropic Claude and Amazon Nova via AWS Bedrock EU, Azure OpenAI in EU regions, Google Vertex AI in EU regions, and Mistral AI (a European company whose API processes data under EU jurisdiction). Model IDs for EU-region Bedrock deployments carry theaws/eu.* prefix. See the Supported Models page for the full list.
The AI Router includes a built-in Zero Data Retention (ZDR) filter. When enabled, the model pool shows only providers that guarantee no request data is retained after the call completes. See Sovereign AI for details.
Privacy and GDPR
Is Orq.ai GDPR compliant? Yes. Orq.ai is GDPR compliant. Compliance is maintained and monitored continuously through Vanta. The real-time compliance status is available at trust.orq.ai. How can my organization use Orq.ai and remain GDPR compliant? Orq.ai provides the controls needed to operate under GDPR:- Input and output masking: Mark input variables as PII; they are sent to the model but never stored. Mask entire model responses so they are never persisted. See Data Compliance for details.
- EU-only model routing: Use the AI Router to restrict traffic to EU-region inference providers, or enable the built-in ZDR filter to limit routing to providers with zero data retention guarantees.
- Data Processing Agreement: Orq.ai acts as a data processor under Article 28 GDPR. A DPA is available on request; contact privacy@orq.ai.
- VPC / On-prem deployment: For the highest level of data control, run Orq.ai inside the customer’s own infrastructure so no platform data leaves the customer’s environment.
Security and Compliance
SOC 2 Type 2 certified and GDPR compliant, with compliance continuously monitored through Vanta. Up-to-date audit reports and certification status are available at the Orq.ai Trust Center.trust.orq.ai
Real-time certification status, audit reports, and security documentation.