Loading the catalogue…
Blix AI
L3 · Sovereignblix-aiNorwayEurope
Norwegian inference provider serving open-weight models on Blix group GPUs in two data centres in Oslo. Part of the Blix group; the GPUs are owned and the service is operated by Blix Solutions AS, a Norwegian network and data-centre operator. All processing stays in Norway, with zero data retention and no training under its data processing agreement.
Compliance posture · Stav's assessment
Jurisdiction
EEA · Norway
Data residency
EEA
CLOUD Act / FISA 702
Not exposed
Stav sovereignty level
Stav's assessment
Five dimensions
Serving residency
Strong
Legal exposure
Strong
Serving retention
Strong
Security posture
Adequate
Contractual posture
Strong
Bands only. The scores and Stav's notes per dimension are read in the workspace.
Customers only
The full assessment
Stav's narrative, every risk item with its source, the safeguards that offset them and the privacy-policy issues found: the part of the page a procurement review runs on.
Stav's narrative · 8 risk items · 7 safeguards · 2 privacy-policy issues · DPA, sub-processor list, terms, privacy policy — sign in to read them.
Traffic through Stav is covered by Stav's customer DPA, which lists Stav's sub-processors.
Stav's serving-side assessment, compiled from the provider's published documentation and Stav's operational review. Last reviewed 30 Oct 2026. An assessment, not a guarantee or regulatory determination. Confirm against the provider's own documentation before contracting.
Sovereignty ladder · how the level was reached
L3SovereignIndicativeregistry 4.3
This level applies to traffic routed through Stav.
Blix AI AS is a Norwegian company, wholly owned through Blix Solutions AS by Blix Group AS, with ownership and control in Norway throughout. Blix Solutions AS owns the GPU hardware and operates the service with staff resident in Norway. All processing takes place in Norway, at Blix NR5 and Blix BDC in Oslo. The ISO/IEC 27001 certificate held by Blix Solutions AS covers the data-centre facilities. For traffic routed through Stav, Blix has committed to a certificate covering the Blix AI service by 31 January 2027, and L3 is granted on that basis for a transition period.
3 criteria from L4: Sovereign cloud qualification, Effective software control, No revocable third-country dependency.
Stav's own assessment against criterion registry 4.3. Indicative, not an official recognition, which only a national authority can confer. Criteria follow the proposed Cloud and AI Development Act and are expected to change. “Union” reads as EU/EEA at every rung. CADA itself still says “in the Union”: until the Act is incorporated into the EEA Agreement, a Norwegian, Icelandic or Liechtenstein route does not evidence formal Union assurance for an EU public-sector buyer. UK and Swiss providers are capped at L1.
Verified 30 Oct 2026About the ladder →Certifications & legal documents · the provider's own facts
ISO/IEC 27001
Held by Blix Solutions AS, which operates the Blix AI service. Scope: 'Maintenance and operation of 24x7 data center facilities (Co-location)' at Lindeberg Næringsvei 26 and Nedre Rommen 5 (Blix NR5), Oslo. The scope covers the data-centre facilities and does not yet name the Blix AI service. Accredited by Norsk Akkreditering; annual surveillance. · substantial assurance · Current · verified 21 Sept 2026
NSM grunnprinsipper for IKT-sikkerhet
The provider states that it follows the Norwegian National Security Authority's (NSM) basic principles for ICT security. Self-declared; not an audited certification. · Claimed by the provider · verified 30 Oct 2026
ISO/IEC 42001
AI management system. Listed on the provider's compliance page as on the roadmap; not held. · In progress · verified 30 Oct 2026
SOC 2
Listed on the provider's compliance page as on the roadmap; not held, and no type stated. · In progress · verified 30 Oct 2026
Eco-Lighthouse (Miljøfyrtårn)
Environmental management certification, not a security certification. Held jointly by Blix Data Center AS and Blix Solutions AS for Lindeberg Næringsvei 26, Oslo. Recognised as equivalent to EMAS for public procurement. · Current · verified 21 Sept 2026
“Claimed by the provider” means the provider states the certification. Stav has not seen the certificate or report.
Terms of servicepublished
Privacy policypublished
Data processing agreement (DPA)published
Sub-processor listpublished
Links to every document and certificate — 4 legal documents, 5 certification sources
Compiled by Stav from the provider's published documentation. Last verified 30 Oct 2026. Reflects what the provider states, not a Stav guarantee or regulatory determination. Confirm against the provider's own pages before contracting.
Endpoints served · 5
| Model | Input / M | Output / M | TTFT | Tok/s |
|---|---|---|---|---|
| Qwen3.8-Flash-Next-FP8 | €0.69 | €1.96 | 0.16 s | 239 |
| GLM-5.3-FP4 | €1.37 | €3.92 | 0.28 s | 45 |
| DeepSeek V4 Flash (0731) | €0.69 | €1.96 | 0.19 s | 76 |
| bge-reranker-v2-m3 | €0.98 | Free | — | — |
| bge-m3 | €0.49 | Free | — | — |