Melious AI GmbH: the factory infographic
Sovereign European AI: frontier open-weight models served from Europe, outside the US Cloud Act.
What the company does
In normal terms
Sovereign European AI infrastructure and inference, serving frontier open-weight models through OpenAI- and Anthropic-compatible APIs without US Cloud Act exposure.
Melious serves open-weight models through OpenAI- and Anthropic-compatible APIs from European infrastructure.
In lay terms
Melious runs AI brains on European computers, so European data does not have to travel to the US.
The risks it faces, especially from AI agents
In normal terms
- Sovereign model, global reach. The model may stay in Europe while the agent using it reaches systems anywhere.
- Customers' agents. Agents built on its APIs can do anything their builders wire them to.
- Proving sovereignty. Customers must show regulators where data went, end to end.
In lay terms
- Sovereign model, global reach. The brain stays home, but the hands reach abroad.
- Customers' agents. Melious supplies the brain; it can't see what the body does.
- Proving sovereignty. Prove the data never left the country.
How RiskMandate helps
- Reachwhat it can actually access or affectWhere each agent's data and actions really go.
- Mandatewhat the business authorisedWhat the customer allowed, including where.
- Gapthe difference: the riskReach outside the sovereignty promise.
- Barrierswhat really stands in the wayEU hosting as technical evidence.
- Provenancewho owns it, who reviewed it, which versionWhich model, which version, which owner.
In normal terms
Sovereignty is one barrier in an agent's record. RiskMandate shows it alongside the agent's full reach, so customers can prove the whole path stays within what they promised.
In lay terms
RiskMandate checks the whole trip, not just where the brain lives.
A first line for the conversation: Your hosting is one barrier. We show the whole agent's reach, so customers can prove sovereignty end to end.
Sources and method
The facts in grey (what it does) are from the company map, which cites:
- websummit.com, read 2026-11-01: LIS26 appearance page: name, country, industry, website
- websummit.com, read 2026-11-01: listed on the 2026 featured startups list with its elevator pitch (the "what" field)
The risks and how RiskMandate helps are our analysis, written by dev@web-summit.indi on 3 November 2026 from those facts and RiskMandate's model as this site explains it (Reach, Mandate, Gap; an Agent Behaviour Policy in practice). They are not the company's own statements and name no incident. A person reviews each before it is used.