Loading the catalogue…
Regolo
L3 · SovereignregoloItalyEurope
Regolo is the inference brand of Seeweb, an Italian cloud company in the listed DHH Group. It serves open-weight models such as Gemma, Qwen, gpt-oss and Apertus from Seeweb's own data centres in Milan and Frosinone.
Compliance posture · Stav's assessment
Jurisdiction
EU · Italy
Data residency
EU
CLOUD Act / FISA 702
Not exposed
Stav sovereignty level
Stav's assessment
Five dimensions
Serving residency
Strong
Legal exposure
Strong
Serving retention
Strong
Security posture
Adequate
Contractual posture
Adequate
Bands only. The scores and Stav's notes per dimension are read in the workspace.
Customers only
The full assessment
Stav's narrative, every risk item with its source, the safeguards that offset them and the privacy-policy issues found: the part of the page a procurement review runs on.
Stav's narrative · 4 risk items · 6 safeguards · 2 privacy-policy issues · DPA, terms, privacy policy — sign in to read them.
Traffic through Stav is covered by Stav's customer DPA, which lists Stav's sub-processors.
Stav's serving-side assessment, compiled from the provider's published documentation and Stav's operational review. Last reviewed 18 Oct 2026. An assessment, not a guarantee or regulatory determination. Confirm against the provider's own documentation before contracting.
Sovereignty ladder · how the level was reached
L3SovereignIndicativeregistry 4.1
This level applies to traffic routed through Stav.
Regolo is at L3: Seeweb S.r.l. is Italian, owned by the Italian-listed DHH S.p.A., runs EU-only infrastructure and holds ISO 27001. L4 is blocked because it holds no sovereign qualification such as SecNumCloud, and model loading depends on US-headquartered VAST Data storage with no documented alternative.
3 criteria from L4: Sovereign cloud qualification, Effective software control, No revocable third-country dependency.
Stav's own assessment against criterion registry 4.1. Indicative, not an official recognition, which only a national authority can confer. Criteria follow the proposed Cloud and AI Development Act and are expected to change. “Union” reads as EU/EEA at every rung. CADA itself still says “in the Union”: until the Act is incorporated into the EEA Agreement, a Norwegian, Icelandic or Liechtenstein route does not evidence formal Union assurance for an EU public-sector buyer. UK and Swiss providers are capped at L1.
Verified 17 Oct 2026About the ladder →Certifications & legal documents · the provider's own facts
ISO/IEC 27001:2022
Information Security Management System. Holder: Seeweb S.r.l. Scope: design and provision of Cloud Computing and Cloud Storage services, Hosting, Housing and Colocation, Mail Services, Internet domains, Information Security and Disaster Recovery, meeting the ISO/IEC 27017:2015 and 27018:2019 guidelines. Sites: Via Caldera 21, Milano and Via Armando Vona 66, Frosinone. Current issue 31 October 2024. Stav has read the certificate. · substantial assurance · Current · verified 18 Oct 2026
ISO/IEC 27017:2015
Security and Privacy in Cloud. Holder named on the source is Seeweb S.r.l.; issued as an appendix to certificate IT18-27702D covering Seeweb cloud computing, cloud storage, hosting, housing/colocation, e-mail, internet domains, IT security and disaster recovery. · Claimed by the provider
ISO/IEC 27018:2014
Personal Data Protection in Cloud. Holder named on the source is Seeweb S.r.l.; issued as an appendix to certificate IT18-27702D covering Seeweb cloud computing, cloud storage, hosting, housing/colocation, e-mail, internet domains, IT security and disaster recovery. · Claimed by the provider
ISO 22301:2019
Business Continuity Management System. Holder named on the source is Seeweb S.r.l.; covers planning and providing of cloud computing and cloud storage, hosting, housing/colocation, mail, internet domains, information security and disaster recovery at Milano and Frosinone. · Claimed by the provider
ISO/IEC 20000-1:2018
IT Service Management. Holder named on the source is Seeweb S.r.l.; covers design and supply of cloud computing and cloud storage, hosting, housing and colocation, e-mail, internet domains, IT security and disaster recovery at Milano and Frosinone. · Claimed by the provider
ISO 9001:2015
Quality management. Holder named on the source is Seeweb S.r.l.; covers planning and providing of cloud computing and cloud storage, hosting, housing/colocation, mail, internet domains, information security and disaster recovery. · Claimed by the provider
ISO 14001:2015
Environmental management system. Holder named on the source is Seeweb S.r.l.; covers planning and providing of cloud computing and cloud storage, hosting, housing/colocation, mail, internet domains, information security and disaster recovery. · Claimed by the provider
CSA STAR Level 1
CSASTAR Level 1 self-assessment stated for Seeweb Virtual Private Cloud and Foundation Server PRO. Holder named on the source is Seeweb S.r.l. Level 1 is a self-assessment, not a third-party audit. · Claimed by the provider
CISPE Code of Conduct
Seeweb cloud services stated to adhere to the CISPE Data Protection Code of Conduct, with Seeweb listed in the CISPE public register of compliant providers; data stored exclusively in European territories. Holder named on the source is Seeweb S.r.l. · Claimed by the provider
ACN Qualified Cloud Service Provider (QI2/QC2)
Seeweb stated to be an ACN-qualified CSP for IaaS to the Public Administration, with QI2 qualification for infrastructure and QC2 for Cloud Server, Foundation Server Pro, VPC, Cloud Server Shared CPU, High Memory, and AI/supercomputing infrastructures. Qualification date stated as 31 August 2026. · Claimed by the provider
“Claimed by the provider” means the provider states the certification. Stav has not seen the certificate or report.
Terms of servicepublished
Privacy policypublished
Data processing agreement (DPA)published
Sub-processor listnot published
Links to every document and certificate — 3 legal documents, 10 certification sources
Compiled by Stav from the provider's published documentation. Last verified 18 Oct 2026. Reflects what the provider states, not a Stav guarantee or regulatory determination. Confirm against the provider's own pages before contracting.
Endpoints served · 6
| Model | Input / M | Output / M | TTFT | Tok/s |
|---|---|---|---|---|
| clef-flash | €0.15 | Free | — | — |
| glm-5-2 | €2.00 | €5.20 | 0.65 s | 19 |
| Gemma 4 31B IT | €0.40 | €2.10 | 0.27 s | 64 |
| mistral-small-2603 | €0.50 | €2.10 | 0.19 s | 192 |
| qwen3.5-9b | €0.07 | €0.35 | 0.21 s | 68 |
| gpt-oss-120b | €1.00 | €4.20 | 0.34 s | 166 |