Baguette Bot
Commencer

Sovereign AI agents: what GDPR, the CLOUD Act and the AI Act really mean for your data

An AI agent reads your email, logs into your accounts and keeps a memory of you. Here is what data sovereignty actually means for AI agents in Europe in 2026: transfers, US law, SecNumCloud and the AI Act.

By the Baguette Bot team 7 min read
GDPR · CLOUD Act · AI Act
Contents
  1. Three things an AI agent does with your data
  2. GDPR: sending a prompt can be an international transfer
  3. Schrems II and the EU–US Data Privacy Framework
  4. The CLOUD Act: why "EU region" is not enough
  5. France: SecNumCloud and the SREN law
  6. The EU AI Act: obligations for people who deploy agents
  7. A practical checklist before choosing an AI agent
  8. What Baguette Bot does, and what it doesn't
  9. Sources

A chatbot sees what you paste into it. An AI agent sees far more: it reads your inbox, signs into your accounts, keeps files and a long-term memory about you, and acts while you are away. That makes the old question of where the data lives and which law applies to it much sharper.

"Sovereign" has become a marketing word. This guide tries to give it a precise meaning for AI agents, based on the actual legal texts, and to show what a provider can and cannot honestly promise. It is not legal advice; for a regulated activity, talk to your DPO or a lawyer.

Three things an AI agent does with your data

Before talking law, it helps to separate the three flows that every agent creates:

  1. Storage. The agent's computer holds files, browser sessions, logs, memory and sometimes encrypted secrets. This can be anywhere: on your machine, in a European data centre, in the US.
  2. Inference. Every step the agent thinks through is sent to a language model. The prompt contains whatever the agent is working on: an email, a contract, a customer's name. Inference happens wherever the model provider runs it, which is often not where the agent's computer is.
  3. Access. Who can reach the data: the provider's staff, support teams abroad, sub-processors, and possibly foreign authorities.

A provider that says "hosted in Europe" usually means flow 1. Sovereignty requires looking at all three.

GDPR: sending a prompt can be an international transfer

Under the GDPR (Regulation 2016/679), personal data may leave the European Economic Area only under the conditions of Chapter V (articles 44 to 49): an adequacy decision, appropriate safeguards such as Standard Contractual Clauses (SCCs), or narrow derogations meant for occasional transfers, not routine traffic.

The European Data Protection Board's Guidelines 05/2021 define a transfer with three cumulative criteria: the exporter is subject to the GDPR, it discloses or makes data available to another entity, and that entity is in a third country. In practice, for AI agents:

  • a prompt containing personal data, sent to a model API that processes it in the US, is a transfer;
  • remote access from outside Europe (support staff, administrators) is also a transfer, even if storage stays in Europe;
  • logs and memories that can be linked to a person are personal data.

Article 48 adds an important point: an order from a foreign court or authority is not, on its own, a lawful basis for handing data over.

Schrems II and the EU–US Data Privacy Framework

In Schrems II (case C‑311/18, 16 July 2020), the Court of Justice of the EU invalidated the Privacy Shield because US surveillance programmes (FISA section 702, Executive Order 12333) were not limited to what is strictly necessary, and Europeans lacked an effective remedy. SCCs survived, but with a duty to assess the destination country's law case by case.

The replacement, the EU–US Data Privacy Framework (adequacy decision of 10 July 2023), relies on Executive Order 14086 and a new Data Protection Review Court. It covers only US companies that self-certify.

Where does it stand in late 2026?

  • In Latombe v Commission (T‑553/23, 3 September 2025), the EU General Court upheld the framework.
  • An appeal (C‑703/25 P) was lodged on 31 October 2025 and is pending before the Court of Justice.
  • Critics point to two fragilities: an executive order can be revoked by any US president, and the US privacy oversight board (PCLOB), which the Commission relied on, lost its quorum in January 2025 after its Democratic members were removed, a decision still being litigated.

So the framework is valid today, and it may not be tomorrow. Organisations that built on Privacy Shield in 2016 learned what that means.

The CLOUD Act: why "EU region" is not enough

The US CLOUD Act (2018) requires US providers to hand over data in their "possession, custody or control" wherever it is stored. What matters is the nationality and control of the company, not the location of the server. A European subsidiary controlled by a US parent remains exposed.

FISA section 702 goes further: it allows targeted collection from "electronic communication service providers" about non-US persons. Its statutory authority lapsed in June 2026 after Congress failed to renew it, but certifications approved earlier in 2026 allow collection to continue into 2027, according to the Brennan Center's September 2026 tracker. The debate is not over.

Encryption only protects you if you hold the keys and the provider never needs the plaintext. A language model, by definition, needs to read your prompt. For an AI agent, the honest conclusion is simple: if the company operating the agent or running the model is under US jurisdiction, US authorities can in principle compel access, whatever the region.

France: SecNumCloud and the SREN law

France has gone further than most EU countries.

  • SecNumCloud is the ANSSI's security qualification for cloud providers. Version 3.2 (March 2022) adds a requirement of immunity from non-EU laws: registered office in the EU, limits on control by non-EU shareholders, no access to the service from outside the EU.
  • The State's "cloud au centre" doctrine (2021, updated 2023) makes cloud the default for public IT and requires sensitive data to be hosted on SecNumCloud or an equivalent offer.
  • The SREN law of 21 May 2024 (article 31) writes this into law: State administrations and their operators entrusting data "of particular sensitivity" to a commercial cloud must use offers protected against access by non-EU authorities.

For a private company, none of this is mandatory, but it is the clearest benchmark of what "sovereign" means in France.

The EU AI Act: obligations for people who deploy agents

The AI Act (Regulation 2024/1689) does not impose data localisation; sovereignty stays a GDPR and national-law matter. But if you use AI agents in a business, it applies to you as a deployer:

  • since 2 February 2025: banned practices, and a duty to ensure AI literacy among staff who use AI;
  • since 2 August 2025: obligations for general-purpose model providers;
  • from August 2026: transparency (people must know they are dealing with an AI, AI-generated content must be labelled);
  • for high-risk uses (hiring, credit scoring…): human oversight, logs, monitoring. The 2026 "Digital Omnibus" pushed these high-risk deadlines back, to December 2027 for most systems, according to the European Commission.

For agents that send emails or post content on your behalf, transparency is the obligation to watch first.

A practical checklist before choosing an AI agent

Ask every provider, in writing:

  1. Where does inference run, for each model and each fallback? Can a request ever be routed to another region?
  2. Where is everything stored: files, memories, logs, backups? For how long?
  3. Is my data used for training or evaluation? Opt-out or contractually excluded?
  4. Who are the sub-processors, in which countries, and how am I told about changes (GDPR art. 28)?
  5. Which company operates the service, and who controls it? That decides CLOUD Act exposure.
  6. Who can access my data: support staff, administrators, from where?
  7. Can I export my agents and delete everything when I leave?
  8. Human approval: can I require confirmation before the agent sends, buys or deletes?

What Baguette Bot does, and what it doesn't

We build Baguette Bot in France, so we owe you a precise answer rather than a slogan.

What is true:

  • The platform, its database and every bot's computer (files, browser sessions, encrypted secrets) are hosted in Paris, by a European host. Baguette Bot is not a US company.
  • You choose the model for each bot. With sovereign mode, every bot uses Mistral AI models only, served by Mistral AI with no data retention, and services hosted outside Europe (image, voice and video generation) are switched off.
  • Sensitive actions wait for your approval by default; secrets are encrypted and never shown to the model.
  • You can export your bots at any time to an open .bot file, and delete your account.

What is not (yet) true:

  • Outside sovereign mode, a bot's messages go to the provider of the model you chose, often in the US. That is a transfer, and our privacy policy lists every sub-processor.
  • During the beta, sovereign-mode requests pass through a model router configured to send them only to Mistral AI, with no retention.
  • Our team administers the service remotely from outside the EU (the publishing company is established in the United Arab Emirates), for administration and support only, as our privacy policy states.
  • We are not SecNumCloud-qualified. If your data falls under the SREN law, you need a qualified provider, and we will say so rather than pretend.

Sovereignty is not a label. It is a list of answers to precise questions, and you should get those answers from any provider you trust with an agent.

Sources

ShareXLinkedInReddit
Made in France
Your AI agents, on their own computer in Paris.

Build your team of bots in two minutes. Free to start.

Create my bots

Keep reading

All articles
5 agents compared
Comparison
OpenAI Dots, Grok Bot, Meta Muse, Hermes Agent, Baguette Bot: which AI agent to pick in 2026

An honest comparison of the five AI agents people actually use in late 2026: where they run, which models they use, what they cost, whether they're available in Europe, where your data goes and whether you can take your agents with you.

7 min read
Hosted in France
Guide
How to run an AI agent hosted in France (or in Europe) in 2026

Self-hosting on a European server, European models, a hosted agent in Paris, or a SecNumCloud provider? The four realistic ways to run an AI agent in France or Europe, what each one costs and protects, with no marketing.

5 min read
vs OpenAI Dots
Comparison
Baguette Bot vs OpenAI Dots: the ChatGPT agent, and the one you can use in Europe

OpenAI's dots give ChatGPT users a personal agent with its own cloud computer. They are not available on personal plans in the EU, UK or Switzerland. How dots compare with Baguette Bot on availability, models, price, data and portability.

5 min read