Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Aleph Alpha

VERIFIED
Sovereign AI · Germany
Founded 2019 · aleph-alpha.com ↗

Heidelberg-based sovereign-AI lab (Pharia platform); merger with Canadian Cohere announced April 2026: Aleph Alpha shareholders to receive ~10% of combined ~$20B entity.

In short

Aleph Alpha, in the Sovereign AI category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Aleph Alpha (Heidelberg, Germany; founded 2019; offices in Berlin, Bayreuth, Munich) was structured as Germany's flagship sovereign AI vendor with anchor investors Schwarz Group, Bosch Ventures, SAP, and the German Federal Ministry for Economic Affairs. On 24 April 2026 Toronto-based Cohere announced a merger that gives Cohere shareholders ~90% of the combined ~US$20B entity, with Aleph Alpha shareholders receiving ~10%; Schwarz Group is committing US$600M to Cohere's Series E to back the sovereign-AI delivery via STACKIT post-close. Pre-merger Aleph Alpha was structurally eu_owned; the imminent merger to a Canada-headquartered AI company with heavy US-VC funding shifts the listing to eu_hq_us_funded with material CLOUD Act exposure, pending re-verification after the merger closes. No public DPA or sub-processors list found at audit; certifications unconfirmed.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
CLOUD Act by deployment

Exposure depends on how you run this product.

Hosted SaaS (default)

Vendor-operated: the sub-processors below apply.

Self-hosted (open-source)

Deploy on your own EU infrastructure and you control hosting and every sub-processor.

Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Aleph Alpha

Aleph Alpha is a Heidelberg-based German sovereign-AI company founded in 2019 to build "specialised LLMs (SLLMs) for European organisations", large language models that operate inside the customer's security perimeter and meet EU regulatory, defence, and public-sector procurement requirements. Co-founders include Samuel Weinbach (Co-Chief Research Officer); offices in Heidelberg (HQ), Berlin, Bayreuth, and Munich. Anchor investors pre-merger include Schwarz Group (Lidl / Kaufland parent, also the operator of STACKIT sovereign cloud), Bosch Ventures, SAP, and the German Federal Ministry for Economic Affairs (BMWi), making Aleph Alpha until April 2026 the most-anchored German-sovereign-AI cap table.

The strategic landscape changed on 24 April 2026, when Toronto-based Cohere announced a merger with Aleph Alpha to form a transatlantic sovereign-AI group valued at approximately US$20B. The deal terms reported by Handelsblatt: Cohere shareholders receive ~90% of the combined entity, Aleph Alpha shareholders ~10% (Cohere's US$7B pre-deal valuation vs Aleph Alpha's US$3B book value); Schwarz Group commits US$600M to Cohere's Series E, the largest single cheque in Cohere's history, to backstop the sovereign-AI offering that will be delivered via STACKIT. The combined company will target regulated sectors (public sector, finance, defence, energy, manufacturing, telecommunications, healthcare) with Aleph Alpha's German anchor relationships intact through STACKIT delivery. The merger is subject to regulatory approval; closing date not publicly confirmed at audit time.

For the directory's strict-ownership stance the implication is significant: pre-merger Aleph Alpha was eu_owned (German LLC with German + EU anchor investors); post-merger the entity is a subsidiary of Cohere, a Canadian-headquartered AI company with heavy US-VC funding history (Salesforce Ventures, NVIDIA, etc.), and Aleph Alpha shareholders will hold only ~10% of the combined group. The listing is therefore moved to eu_hq_us_funded with material CLOUD Act exposure pending the transaction close. The on-premise Pharia platform that runs inside the customer firewall continues to eliminate CLOUD Act exposure for self-hosting buyers regardless of the parent-entity change, and Schwarz Group's STACKIT partnership ensures continued sovereign-EU-cloud delivery for the on-premise-adjacent hybrid use case. Best fit: regulated DACH buyers, defence and public-sector procurement, and any organisation that wants to deploy LLM inference behind the customer firewall on sovereign infrastructure, but procurement-grade buyers signing multi-year commitments should monitor the merger close before committing to long-term contracts.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Capability matrix

Self-hostable Yes
API access Yes
Chat assistant Yes
Open-weight models Yes
Fine-tuning Yes
Function calling Yes
RAG Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
ALTERNATIVES

Alternatives in this category

Black Forest Labs
Germany · Founded 2024
EU-HOSTED

Freiburg-based German image-generation lab (FLUX models, Stable Diffusion creators), but heavily US-VC-funded; open-weight FLUX [schnell] under Apache 2.0.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Freepik
Spain · Founded 2010
EU-BASED

Spanish AI image generation platform (Pikaso, F Lite model) by the Freepik Group; majority-owned by Swedish PE firm EQT; 200M+ users.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MINOR
Infomaniak AI Tools
Switzerland · Founded 1994
EU-SOVEREIGN

Swiss sovereign-AI API + Euria assistant (Infomaniak, Geneva, since 1994); open-source LLMs served on own Swiss DCs, no training on user data, no CLOUD Act.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE