Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Aleph Alpha

VERIFIED
Sovereign AI · Germany
Founded 2019 · aleph-alpha.com ↗

Heidelberg-based sovereign-AI lab (Pharia platform); merger with Canadian Cohere announced April 2026 — Aleph Alpha shareholders to receive ~10% of combined ~$20B entity.

Why this score?

Aleph Alpha (Heidelberg, Germany; founded 2019; offices in Berlin, Bayreuth, Munich) was structured as Germany's flagship sovereign AI vendor with anchor investors Schwarz Group, Bosch Ventures, SAP, and the German Federal Ministry for Economic Affairs — and on 24 April 2026 Toronto-based Cohere announced a merger that gives Cohere shareholders ~90% of the combined ~US$20B entity, with Aleph Alpha shareholders receiving ~10%; Schwarz Group is committing US$600M to Cohere's Series E to back the sovereign-AI delivery via STACKIT post-close. Pre-merger Aleph Alpha was structurally eu_owned; the imminent merger to a Canada-headquartered AI company with heavy US-VC funding shifts the listing to eu_hq_us_funded with material CLOUD Act exposure — score 3/5 pending re-verification after the merger closes.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Aleph Alpha

Aleph Alpha is a Heidelberg-based German sovereign-AI company founded in 2019 to build "specialised LLMs (SLLMs) for European organisations" — large language models that operate inside the customer's security perimeter and meet EU regulatory, defence, and public-sector procurement requirements. Co-founders include Samuel Weinbach (Co-Chief Research Officer); offices in Heidelberg (HQ), Berlin, Bayreuth, and Munich. Anchor investors pre-merger include **Schwarz Group** (Lidl / Kaufland parent, also the operator of STACKIT sovereign cloud), **Bosch Ventures**, **SAP**, and the **German Federal Ministry for Economic Affairs (BMWi)** — making Aleph Alpha until April 2026 the most-anchored German-sovereign-AI cap table. The strategic landscape changed on **24 April 2026**, when Toronto-based **Cohere announced a merger with Aleph Alpha** to form a transatlantic sovereign-AI group valued at approximately US$20B. The deal terms reported by Handelsblatt: Cohere shareholders receive ~90% of the combined entity, Aleph Alpha shareholders ~10% (Cohere's US$7B pre-deal valuation vs Aleph Alpha's US$3B book value); **Schwarz Group commits US$600M to Cohere's Series E**, the largest single cheque in Cohere's history, to backstop the sovereign-AI offering that will be delivered via STACKIT. The combined company will target regulated sectors — public sector, finance, defence, energy, manufacturing, telecommunications, healthcare — with Aleph Alpha's German anchor relationships intact through STACKIT delivery. The merger is subject to regulatory approval; closing date not publicly confirmed at audit time. For the directory's strict-ownership stance the implication is significant: pre-merger Aleph Alpha was `eu_owned` (German LLC with German + EU anchor investors); post-merger the entity is a subsidiary of Cohere — a Canadian-headquartered AI company with heavy US-VC funding history (Salesforce Ventures, NVIDIA, etc.) — and **Aleph Alpha shareholders will hold only ~10% of the combined group**. The listing is therefore moved to `eu_hq_us_funded` with material CLOUD Act exposure pending the transaction close. The on-premise Pharia platform that runs inside the customer firewall continues to offer an effective 5/5 / none posture for self-hosting buyers regardless of the parent-entity change — and Schwarz Group's STACKIT partnership ensures continued sovereign-EU-cloud delivery for the on-premise-adjacent hybrid use case. Best fit: regulated DACH buyers, defence and public-sector procurement, and any organisation that wants to deploy LLM inference behind the customer firewall on sovereign infrastructure — but procurement-grade buyers signing multi-year commitments should monitor the merger close before committing to long-term contracts.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
ALTERNATIVES

Alternatives in this category