Xqria
Sovereignty · Public procurement reference page

European agents. European data. European hands.

Xqria is designed for European public buyers, corporate CIOs and DPOs. Everything below is verifiable, citable, and can be copy-pasted into a tender or compliance memo.

Last updated : June 13, 2026

Hosting

Scaleway datacenters · France and EU only

  • Primary datacenter: Scaleway DC2 (Saint-Denis, Île-de-France, France).
  • Failover datacenter: Scaleway DC3 (Amsterdam, Netherlands, EU).
  • Operator certifications: ISO 27001, HDS (French Healthcare Data Hosting), TIER III/IV.
  • No US hyperscaler (AWS, Azure, GCP) on the customer data path.
  • Provider postal address: SCALEWAY SAS · 8 rue de la Ville l'Évêque · 75008 Paris · France.

Data

GDPR-native · zero transfer outside the EU · no model training

  • All client data (text, files, metadata) stays inside the EU for its entire lifecycle.
  • No client data flows to a non-EU model provider for training purposes.
  • Models used in inference mode only, via contractually-closed endpoints (Anthropic via EU gateway, self-hosted open-source models).
  • Encryption at rest (AES-256) and in transit (TLS 1.3) on all Postgres and S3 volumes.
  • Right to erasure (GDPR Art. 17) processed within 72h on simple request to dpo@teckpia.com.
  • No behavioral telemetry sent to third parties (no Google Analytics, no Meta Pixel).

Compliance

AI Act · NIS2 · DORA · ISO 27001 · CNIL

  • AI Act alignment (Regulation (EU) 2024/1689): all Xqria agents operate in minimal risk category (work assistance, integrated human supervision, full logging).
  • NIS2 compliance (Directive (EU) 2022/2555): access logging, business continuity plan, on-call internal SOC team.
  • DORA (Regulation (EU) 2022/2554): for financial clients, contracts framing digital operational resilience (TPP registry, BCP plans, penetration tests).
  • ISO 27001 certified host (Scaleway).
  • Publisher company (Teckpia SASU) declared to French CNIL for personal data processing.

Jurisdiction

French law · French contracts · French team

  • Publisher company: Teckpia SASU, SIREN 101 755 676, registered office 82B rue Roger Salengro · 92160 Antony · France.
  • Legal representative: Jérôme Ghozlan (President).
  • Contracts governed by French law · competent jurisdiction: Tribunal de Commerce de Nanterre.
  • US Cloud Act: not applicable (no American service provider in the processing chain).
  • All employees and subcontractors sign an NDA governed by French law.

Independence

No US hyperscaler · sovereign-mode capable

  • No operational dependency on a US cloud provider.
  • LLM models used: Anthropic Claude (via EU SOC2 gateway + Frankfurt/Dublin datacenters), Mistral (French, Plessis-Robinson datacenter), self-hosted open-source models on Scaleway for critical cases.
  • Contractual option to migrate to 100% on-premise customer infrastructure in under 30 days (Level 3 Full Ownership option).
  • Agent source code transferable to the customer (Level 3 option) with IP transfer and full technical documentation.
Citable in a public procurement file
« Xqria is the European agent firm, headquartered in Paris. Hosting on Scaleway France (ISO 27001, HDS), zero data outside the EU, human team and French jurisdiction. Alignment with AI Act, NIS2, DORA, ISO 27001. No dependency on any US hyperscaler. »

Teckpia SASU · SIREN 101 755 676 · June 13, 2026

A compliance question?

30 minutes with Jérôme (CEO) or a SOC member to answer all your compliance, GDPR, AI Act or sovereignty questions.

Book a compliance call