GDPR LLM API with EU data residency and a DPA

To keep LLM prompts and outputs in the EU, send your requests to the EU-only host https://api.eu.munito.ai. To keep stored data in the EU, choose the EU data region when you sign up. The GDPR Data Processing Agreement (DPA) forms part of the Terms of Service, so it applies with no signature.

Send requests to the EU hostCopy Anchor Link

The EU host runs each request in the EU. Your key and your code stay the same. Only the base URL changes.

Each response names its region in the munito-region header: EUROPE, US or GLOBAL.

pip install openai
export MUNITO_API_KEY="munitoai_..."

import os
from openai import OpenAI

client = OpenAI(
    base_url="https://api.eu.munito.ai/inference/v1",
    api_key=os.environ["MUNITO_API_KEY"],
)
raw = client.chat.completions.with_raw_response.create(
    model="qwen/qwen3.8-27b",
    messages=[{"role": "user", "content": "Say hello in French."}],
    max_tokens=2048,
)
print("Region:", raw.headers["munito-region"])
print(raw.parse().choices[0].message.content)

The script prints Region: EUROPE.

Pin one request with a regional model IDCopy Anchor Link

On the global host https://api.munito.ai/inference/v1, add @eu to the model ID. The request then runs in the EU, as on the EU host.

curl -i https://api.munito.ai/inference/v1/chat/completions \
  -H "Authorization: Bearer $MUNITO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "qwen/qwen3.8-27b@eu",
    "messages": [{"role": "user", "content": "Hello!"}],
    "max_tokens": 2048
  }'

The response carries munito-region: EUROPE. The model catalog shows the regions of each model.

Choose where stored data livesCopy Anchor Link

Each workspace stores its data in one data region: EU or US. The console asks at signup, and EU is the default. You can change it until your account is active. After that, the data region is fixed.

The data region applies to the work that Munito AI keeps for you:

• Responses with store: true, and background responses.
• Chat completions with store: true.
• OCR requests that you retrieve later.

The Admin API returns the data region in GET /organization.

Errors with status 421Copy Anchor Link

A request that the host cannot serve in the region you asked for gets 421 Misdirected Request. Send the same request to the host that the message names.

To pin your whole account to the EU, contact us through Support in the console. A pinned account must use the EU host.

What residency coversCopy Anchor Link

Overflow is off by default. When you opt in, an EU request can go to an inference provider that is based and regulated in the EU.

Residency covers processing and storage. It does not cover transit. TLS terminates on Munito AI's own gateways, in the EU for the EU and global hosts. Cloudflare provides only DNS for Munito AI's domains.

A request to the global host without a pin can run in any region. Account, sign-in, phone verification, payment and abuse checks use services that can process data outside the EU. The Privacy Policy names them.

GDPR documentsCopy Anchor Link

Munito AI is the processor for the content that you send. It is the controller for account, security, usage and billing data.

Munito AI France, a French SAS in Paris, operates Munito AI and is the seller for EU and self-serve customers. The DPA names Munito AI France.

For a signed copy of the DPA, print the DPA page, sign it, and send it to legal@munito.ai. Munito AI returns a countersigned copy.

The trust center lists each sub-processor for the EU, US and Global regions. Munito AI announces a new sub-processor there before it receives customer data. The DPA states the notice period.

Related pagesCopy Anchor Link

• Regions
• Data privacy
• Security