Loading the catalogue…
🇩🇪Germany · Mixed · 0 models
Aleph Alpha✓
Aleph Alpha is a German AI lab founded in 2019, headquartered in Heidelberg, that built the Luminous LLM family and the PhariaAI enterprise platform specifically for regulated European sectors and government use. It holds ISO 27001 certification, has signed the EU GPAI Code of Practice, and operates infrastructure on STACKIT (Schwarz Group's German sovereign cloud), giving it a strong data-sovereignty posture with no CLOUD Act exposure. However, the company underwent significant instability in 2025—founder Jonas Andrulis departed as CEO in October 2025 and a ~17% workforce reduction followed—and in April 2026 announced its pending acquisition by Canadian AI company Cohere, which introduces a new transatlantic ownership structure still awaiting regulatory approval.
AI Act 75/100Outside CLOUD ActHF verified
Stav AI Act verdict
governancehigh
Pending acquisition by Cohere (Canada) announced April 24, 2026, subject to regulatory approval. If approved, Aleph Alpha will no longer exist as an independent German entity. Cohere shareholders will hold ~90% of the combined entity. European customers' sovereignty and continuity guarantees depend on the outcome and post-merger governance structure — which is not yet finalised.
stabilityhigh
Significant instability in 2025: founder/CEO Jonas Andrulis removed in October 2025; ~17% workforce reduction in January 2026; strategic pivot away from foundation models; reported failure to meet revenue targets. The company is in the midst of major structural change.
jurisdictionmedium
Post-Cohere merger, CLOUD Act and jurisdictional exposure will need re-evaluation. Canada is a Five Eyes nation; depending on the combined entity's legal structure and data flows, exposure to US or Canadian government data access demands may emerge.
privacylow
Aleph Alpha's marketing website uses Namecheap (US) hosting and Mailchimp (US) newsletter platform, with data transfers to the US covered by SCCs and the EU-US DPF. This is a minor data sovereignty inconsistency for an organisation marketing itself on European sovereignty.
securitylow
No public coordinated vulnerability disclosure (CVD) policy or bug bounty programme confirmed. ISO 27001 certification scope and issuing body not directly verifiable from public sources.
governancemedium
Increasing Schwarz Group (Lidl/Kaufland retail conglomerate) influence over Aleph Alpha is noted by industry analysts and journalists, including acquisition of Bosch Ventures' stake and appointment of Schwarz-aligned executives as Co-CEOs. This concentration of shareholder power in a single industrial group raises governance concentration risk.
Stav AI Act assessment
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
Safeguards in place
- complianceUnknown
Aleph Alpha signed the full EU GPAI Code of Practice (all three chapters) on July 29, 2025, among the first 26 signatories. This is the strongest available public signal of EU AI Act compliance commitment for a GPAI model provider.
- complianceUnknown
ISO 27001 certified for information security management — a recognised, auditable standard for enterprise and government customers assessing data protection practices.
- transparencyUnknown
Comprehensive, GDPR-compliant privacy notice on the official website covering all data subject rights, legal bases, third-party sub-processors, data transfer mechanisms, and retention schedules — with a named external DPO (Fresh Compliance GmbH / Frank Trautwein).
- transparencyUnknown
Model cards on HuggingFace for all Pharia-1-LLM and T-Free models explicitly reference EU AI Act Article 5 prohibited practices, GDPR compliance in training data curation, and clearly state no user data training policy.
- complianceUnknown
Strong EU sovereign cloud posture: PhariaAI deployed exclusively on STACKIT (Schwarz Group EU sovereign cloud) with no US hyperscaler infrastructure layer — directly addresses regulated-sector data residency requirements.
- communityUnknown
Strong EU government and enterprise customer base: German Federal Ministry for Digital Affairs, Bundesagentur für Arbeit, states of Baden-Württemberg and Bavaria, Deutsche Bank, Bosch, SAP, Hella, Infineon, Schwarz Group — demonstrating validated trust among exactly the regulated sectors Stav serves.
- stabilityUnknown
German and Canadian government backing for the Cohere merger, with Germany's Digital Minister, Chancellor Merz, and Canada's AI Minister all publicly endorsing the deal — providing an unusual level of state-level continuity assurance for enterprise and government customers.
Privacy posture
- Flagged issues
- 1
- Aleph Alpha's marketing website uses Namecheap (US) hosting and Mailchimp (US) newsletter platform, with data transfers to the US covered by SCCs and the EU-US DPF. This is a minor data sovereignty inconsistency for an organisation marketing itself on European sovereignty.low
Privacy policy review
Identity & profile
- Country
- 🇩🇪 Germany
- Open-weights policy
- Mixed
- Models in catalogue
- 0
- HuggingFace
- Aleph-Alpha · Verified · 364 followers
- HF published
- 29 models · 3 datasets · 0 papers
Creator profile
COMPLIANCE & TRUST
Stav’s creator score.
Stav compliance has not yet scored Aleph Alpha. Scores are published once the policy review and infrastructure assessment complete.
Findings
Findings from privacy & terms
Citations gathered when the Compliance Curator last reviewed this creator’s public-facing documents. Grouped by source so the picture stays auditable.
aleph-alpha.com · 2 citations
“Aleph Alpha GmbH Speyerer Straße 14 69115 Heidelberg E-mail: privacy@aleph-alpha.com ... ”
“Heidelberg, 1 February 2026 – Aleph Alpha appoints Ilhan Scheer as Co-CEO. Following the completion of the company’s strategic and operational realign...”
artificialintelligenceact.substack.com · 1 citation
“Twenty-six organisations have signed the full code, including major technology companies such as Amazon, Anthropic, Google, IBM, Microsoft, and OpenAI...”
Editorial sources
- Cohere & Aleph Alpha Merge at $20B Valuation
Aleph Alpha, founded in Heidelberg in 2019 by Jonas Andrulis and Samuel Weinbach, carved out a distinct niche in the European AI landscape by prioriti...
- Imprint | ALEPH ALPHA
Aleph Alpha GmbH Speyerer Straße 14 69115 Heidelberg E-mail: privacy@aleph-alpha.com ...
- Press - Aleph Alpha
Heidelberg, 1 February 2026 – Aleph Alpha appoints Ilhan Scheer as Co-CEO. Following the completion of the company’s strategic and operational realign...
- Aleph Alpha Luminous · innFactory AI Consulting - AI Strategy & Consulting
As a German company, Aleph Alpha is fully subject to German and European law - without CLOUD Act or other US access possibilities. German Headquarters...
- Top 5 sovereign AI platforms in Europe for 2026: ranked by compliance, regional fit, and data control - Vstorm
Aleph Alpha (operating its enterprise platform as PhariaAI) is a German AI company with the strongest institutional sovereignty posture of any commerc...
- Aleph Alpha - Wikipedia
In a financing round in November 2023, German companies Schwarz Gruppe and Dieter Schwarz Foundation, with the Innovation Park Artificial Intelligence...
- Cohere to acquire Germany’s Aleph Alpha in sovereign AI play | BetaKit
The combined company will bear the Cohere name, with Cohere co-founder and CEO Aidan Gomez leading as CEO. Its global headquarters will be located in ...
- Cohere Acquires Aleph Alpha: Deal Born of Sovereignty, Necessity - Futurum
Reference citations
- Cohere & Aleph Alpha Merge at $20B Valuation
Aleph Alpha, founded in Heidelberg in 2019 by Jonas Andrulis and Samuel Weinbach, carved out a distinct niche in the European AI landscape by prioriti...
- Imprint | ALEPH ALPHA
Aleph Alpha GmbH Speyerer Straße 14 69115 Heidelberg E-mail: privacy@aleph-alpha.com ...
- Press - Aleph Alpha
Heidelberg, 1 February 2026 – Aleph Alpha appoints Ilhan Scheer as Co-CEO. Following the completion of the company’s strategic and operational realign...
- Aleph Alpha Luminous · innFactory AI Consulting - AI Strategy & Consulting
As a German company, Aleph Alpha is fully subject to German and European law - without CLOUD Act or other US access possibilities. German Headquarters...
- Top 5 sovereign AI platforms in Europe for 2026: ranked by compliance, regional fit, and data control - Vstorm
Aleph Alpha (operating its enterprise platform as PhariaAI) is a German AI company with the strongest institutional sovereignty posture of any commerc...
- Aleph Alpha - Wikipedia
In a financing round in November 2023, German companies Schwarz Gruppe and Dieter Schwarz Foundation, with the Innovation Park Artificial Intelligence...
- Cohere to acquire Germany’s Aleph Alpha in sovereign AI play | BetaKit
The combined company will bear the Cohere name, with Cohere co-founder and CEO Aidan Gomez leading as CEO. Its global headquarters will be located in ...
- Cohere Acquires Aleph Alpha: Deal Born of Sovereignty, Necessity - Futurum