Sovereign AI: what it means to work only on your data

Every AI vendor now says “your data is safe with us.” Almost none of them can tell you, precisely, where it goes, what the model sees, and under which country’s laws the answer would be settled. Sovereignty is our answer to those three questions — and it’s a design decision, not a legal disclaimer.

Here’s what it means in practice, without the fog.

Where your data lives

Everything you put into 5DAYS — notes, tasks, documents, transcripts, and every Spark AI conversation — is processed and stored on European infrastructure, under European jurisdiction. Not “EU region of a US cloud,” where the CLOUD Act can reach across the ocean regardless of where the server rack sits. European providers, European law, full stop.

This matters for a simple reason: jurisdiction follows the operator, not the datacenter. If your provider answers to a foreign court, so does your data. Ours doesn’t.

What the model sees

Spark AI runs on Mistral, hosted in Europe. When it answers a question, it retrieves from your layers 01 and 02 — your knowledge and your execution — and nothing else:

• No public web. Spark AI never blends your workspace with search results or someone else’s content. If the answer isn’t in your data, it says so.
• No cross-tenant anything. Your workspace is never used to answer another organization’s questions, and theirs never leaks into yours.
• No training on your data. Your notes are your notes. They ground answers; they don’t tune models.
• Permissions all the way down. Every retrieval runs under the permissions of the person asking. Spark AI can’t show you a document you couldn’t open yourself.

There’s a common objection: doesn’t restricting the model to your data make it less useful? We think the opposite is true for the questions that matter at work. “What did we decide?” “What did we promise?” “Who owns this?” — these have exactly one good source, and it isn’t the open internet. An assistant that answers from your workspace, with links to the actual note or transcript, is more useful than one that answers from everywhere and sources nothing.

Your data shouldn’t leave home to be useful.

Who answers for it

Sovereignty is also about accountability. When something goes wrong — a breach, a dispute, a regulator’s question — you need to know who is responsible and under which law. With 5DAYS, the chain is short: a Belgian company, European subprocessors, GDPR as the floor rather than the ceiling. You can read the whole chain; it fits on one page.

Compare that with the usual stack: a US model provider behind a US cloud behind a reseller, each with their own terms, each pointing at the next when you ask a hard question.

Sovereignty as a feature, not a flag

We didn’t build this way to wave a European flag. We built this way because the teams we serve — agencies, consultancies, industrial SMEs — hold client data they’ve promised to protect, and “trust us” is not a data-processing agreement.

Sovereign AI means you can adopt an assistant without renegotiating that promise. Your data stays home. It works harder there anyway.