Myra AI Workspace vs Scaleway

Compare Myra AI Workspace and Scaleway on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Microsoft Azure

Myra AI Workspace

Germany· Collaboration Software

Needs review

Shortlist when you need a German-operated AI chat and gateway stack with Myra-hosted EU models, PII masking and IdP/SCIM controls for regulated teams. Skip when you only want a single-vendor Copilot inside Microsoft 365, or when every workload must be fully air-gapped on your own GPUs without a SaaS control plane. Consider Nextcloud plus a self-hosted model stack, or Microsoft 365 Copilot, depending on whether collaboration files or Office integration dominate.

EU-operatedAI gateway + workspacePII maskingBSI C5 Type 2 (claimed)SSO + SCIMMyra EU model fleet

View listing Visit Website

Scaleway

France· Cloud Computing

Needs review

Shortlist Scaleway for French-owned multi-AZ IaaS (Paris/Amsterdam/Warsaw) with bare metal, EU-resident GPUs and Kapsule Kubernetes—especially HDS/sovereignty-sensitive stacks. Skip if you need completed SecNumCloud today or hyperscaler global depth; consider OVHcloud, Exoscale/UpCloud, or AWS/Azure/GCP instead.

EU-operated regionsBare metal + Elastic MetalEU GPU for AIKapsule KubernetesISO 27001 (certified)HDS (claimed)

View listing Visit Website

Highlighted rows differ between the two products.

Myra AI Workspace vs Scaleway: Snapshot
Feature	Myra AI Workspace	Scaleway
Country of origin	Germany	France
Category	Collaboration Software	Cloud Computing
Open source	No	No
Self-hosted	No	No
Headquarters	Germany	France
Legal entity	Myra Security GmbH	SCALEWAY SAS (R.C.S. Paris 433 115 904), 8 rue de la Ville l'Évêque, 75008 Paris
Governing law	Not listed	French law (General Terms of Services)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Low
EU-hosted status	Partial	Not listed
Hosting / residency	Control plane and Myra EU model fleet hosted by Myra in the EU (German-operated). Optional inference to OpenAI, Anthropic, Google, Azure OpenAI, AWS Bedrock and other providers per admin config. Web search: Brave (US) by default or Linkup (France) under EU residency. Mobile push: Apple APNs and Google FCM. Marketing-site tools (HubSpot, Google Analytics) are separate from the AI product path.	Customer cloud workloads on Scaleway-operated European multi-AZ infrastructure (Paris, Amsterdam, Warsaw; Milan listed in availability docs)—not primary hosting on AWS/GCP/Azure. Account/controller activities use processors; privacy policy allows some non-EU transfers under SCCs. Full named subprocessor table is via Trust Center/contracts rather than a fully public marketing page.
Summary	German AI workspace combining chat, projects, agents and an AI gateway with PII masking and Myra-hosted EU models on BSI-attested infrastructure.	French iliad-group cloud platform: bare metal, virtual instances, EU-resident GPU for AI, managed Kubernetes, serverless, storage and databases on Scaleway-operated multi-AZ regions in Europe.
Tags	gdpr ai-workspace ai-gateway pii-masking eu-hosted-models bsi-c5 germany sso scim mcp	gdpr cloud infrastructure bare-metal kubernetes gpu european-cloud hds api terraform

At a glance: Myra AI Workspace vs Scaleway
At a glance	Myra AI Workspace	Scaleway
HQ	Munich, Germany	Paris, France (SCALEWAY SAS)
Legal entity	Myra Security GmbH (HRB 202428)	Not listed
Product URL	ai.myra.eu	Not listed
Founded (company)	2012	Not listed
Deployment	Hosted SaaS (Myra EU infra)	Not listed
Identity	OIDC, SAML 2.0, SCIM 2.0	Not listed
Group	Not listed	iliad Group subsidiary
Regions	Not listed	Paris, Amsterdam, Warsaw multi-AZ (+ Milan listed)
Model	Not listed	Public cloud IaaS/PaaS (not self-hosted)
Commercial model	Not listed	Pay-as-you-go; compute Savings Plans (GPU rules differ)
Open source	Not listed	Platform proprietary; open standards (K8s, S3 API, Terraform)

Key capabilities: Myra AI Workspace vs Scaleway
Key capabilities	Myra AI Workspace	Scaleway
EU-operated	Yes	Yes
AI gateway + workspace	Yes	Not listed
PII masking	Yes	Not listed
BSI C5 Type 2 (claimed)	Yes	Not listed
SSO + SCIM	Yes	Not listed
Myra EU model fleet	Yes	Not listed
Bare metal + Elastic Metal	Not listed	Yes
EU GPU for AI	Not listed	Yes
Kapsule Kubernetes	Not listed	Yes
ISO 27001 (certified)	Not listed	Yes
HDS (claimed)	Not listed	Yes

Myra AI Workspace

Colour-coded multi-model chat and projects
Employees work in a familiar chat and shared project workspace with model switching. Green marks Myra-hosted EU models, orange marks frontier models with PII masking, and red marks unmasked frontier use where administrators permit it.
PII masking and two-tier guardrails
Before prompts reach external providers, configurable guardrails can detect and replace personal data (names, emails, IBANs and similar) and block jailbreak or injection patterns. Tier 1 runs in-process; tier 2 optional sidecars add NLP PII and prompt-guard checks. Masking is skipped on wholly Myra-local legs because data does not leave Myra.
Myra EU model fleet with residency controls
Open-weight models such as Qwen (docs cite the current default Myra on-prem chat model) run on Myra's EU fleet without a BYOK key. Gateways can enable EU-region routing that returns HTTP 403 data_residency_blocked for non-EU routes, including post-dispatch host re-checks when the Myra router would overflow off-EU.
OpenAI-compatible AI gateway and BYOK
A unified compatibility endpoint resolves twenty-plus providers (OpenAI, Anthropic, Gemini/Vertex, Azure OpenAI, AWS Bedrock, Mistral and others). Admins store provider keys in an AES-256 vault, set fallbacks, exact-match response caching, and organisation/team/user budgets with hard enforcement.
Agents, workflows and MCP connectors
Documented agents support versioning, scheduling, webhooks and required approval before tool runs. Workflows include human-approval steps. MCP connectors attach external tools and data sources; the connector catalog documents Microsoft SharePoint, OneDrive and Graph with Entra OAuth.
Enterprise identity: OIDC, SAML and SCIM
SSO authenticates existing users via OIDC or SAML 2.0 (including Microsoft Entra ID) with domain allowlists. SCIM 2.0 on the admin API provisions and deactivates users and groups. Access can be limited by IP allowlist (IPv4).

Scaleway

Elastic Metal, Dedibox and Apple Silicon bare metal
Single-tenant physical servers without a shared hypervisor layer: Dedibox for a wide dedicated catalogue, Elastic Metal for bare metal integrated with Scaleway VPC, load balancing, storage and Kubernetes, plus Apple Silicon Mac mini hosts for native macOS/iOS CI. Best when you need hardware isolation, custom kernels, or GPU bare metal without VM overhead—product lines are still converging, so compare availability zone coverage per SKU.
EU-resident GPU instances for AI training and inference
On-demand GPU VMs with recent NVIDIA options (including L4, L40S, H100 PCIe/SXM and B300-SXM) aimed at LLM fine-tuning, inference and graphics/media acceleration, with data residency in European regions. Integrates with Kapsule via the NVIDIA GPU Operator; pay-as-you-go by the minute. GPU capacity and Savings Plan eligibility differ from general instances—validate stock and zone before committing multi-node jobs.
Kubernetes Kapsule and multi-cloud Kosmos
Managed Kubernetes control planes on Scaleway nodes (Kapsule) with autoscaling-oriented operations, plus Kosmos for hybrid/multi-cloud worker pools including non-Scaleway infrastructure. Suits teams standardising on portable Kubernetes rather than proprietary orchestrators; external Kosmos pools remain your responsibility to patch and size.
Multi-AZ European regions with VPC networking
Place compute and storage in Paris, Amsterdam and Warsaw multi-AZ regions (docs also reference Milan), using regional private networking, load balancers and related network services. Useful for EU latency and residency designs without a US region on the primary map—confirm each product’s AZ matrix in the product-availability guide before multi-region DR planning.
Managed storage and databases on open-ish APIs
S3-compatible Object Storage (including multi-AZ class options), block volumes, and managed database engines (PostgreSQL, MySQL, Redis, MongoDB, ClickHouse-oriented analytics) plus serverless containers/functions/jobs. Reduces day-2 ops for common stack pieces while keeping export paths closer to open standards than pure proprietary PaaS—always check engine versions, HA options and backup retention for production.
API, CLI and Terraform-first operations
Full console plus documented APIs, CLI and Infrastructure-as-Code workflows for provisioning instances, networks and managed services. Fits platform teams automating environments; IAM permissions and account Owner roles still need deliberate design for production orgs.

Assurance & compliance: Myra AI Workspace vs Scaleway
Assurance & compliance	Myra AI Workspace	Scaleway
Independent security / no-logs audit	Not found BSI C5 Type 2 and ISO 27001 IT-Grundschutz are published company attestations; no separate public AI Workspace no-logs audit PDF found.	Not applicable IaaS provider (not a no-logs VPN). Trust Center references penetration testing and security reports available on request; not a public no-logs audit product claim.
ISO 27001	Vendor claimed Vendor certifications page cites ISO 27001 based on BSI IT-Grundschutz, certificate BSI-IGZ-0667-2024.	Verified ISO/IEC 27001:2022 certificate documentation published (e.g. certificate IS 787020 for SCALEWAY, Paris). Confirm scope covers the services you buy.
SOC 2 / SOC 3	Not found IDW PS 951 Type 2 (ISAE 3402-related) is claimed instead; no SOC 2 report located on public pages.	Not found Not listed among public Trust Center compliance badges reviewed (GDPR, HDS, ISO 27001, CSA STAR L1).
BSI C5 Type 2	Vendor claimed Vendor states Type 2 attestation for cloud services over a twelve-month period.	Not listed
GDPR / EU data protection	Vendor claimed EU controller Myra Security GmbH; product privacy policy at ai.myra.eu/privacy; Art. 30-oriented audit logging claimed on marketing pages.	Vendor claimed EU controller/processor with published privacy policy and DPA; French entity. Not legal advice.
US CLOUD Act exposure (indicative)	Partial German GmbH, no known US parent. Exposure rises when admins enable US frontier LLM providers or Brave Search / FCM. Myra-local EU fleet paths can avoid those providers. Not legal advice.	Partial French SAS / iliad Group; customer IaaS on self-operated EU regions; no US parent found. Controller-side processors and possible third-country transfers per privacy policy; SecNumCloud not complete. Assessment only—not a vendor “safe” claim.
Data processing agreement (B2B)	Vendor claimed Product privacy policy states DPAs with default-enabled providers; Trust Center/subprocessor register supports Art. 28 transparency. Confirm signed AVV for AI Workspace in procurement.	Vendor claimed DPA PDF downloadable on https://www.scaleway.com/en/contracts/ alongside TOMs.
EU AI Act	Partial Product is AI-centric (gateway and workspace). No public EU AI Act conformity assessment package found as of research; buyer remains responsible for use-case classification.	Not applicable Infrastructure/GPU host; customer models and apps drive AI Act roles. Not an AI Act conformity product claim.
HDS (French health data hosting)	Not listed	Vendor claimed Vendor security and healthcare pages claim HDS certification; Trust Center lists HDS. Confirm certified service scope for your architecture.
CSA STAR Level 1	Not listed	Vendor claimed Trust Center announces CSA STAR Level 1 (CCM self-assessment / CAIQ).
ANSSI SecNumCloud	Not listed	Partial Qualification process started (public news); security pages mark SecNumCloud as ongoing—not obtained as a finished qualification in sources reviewed.

Considerations & known limitations: Myra AI Workspace vs Scaleway
Considerations & known limitations	Myra AI Workspace	Scaleway
Optional US frontier model path	Medium Out of the box the product markets 20+ providers including major US labs. Without EU-region lock and provider allowlists, prompts can leave the EU even though the control plane is German-operated.	Not listed
Company certs vs product scope	Low ISO 27001 IT-Grundschutz, C5 and related seals are published for Myra's security platform. Confirm in writing that AI Workspace production is in scope of the current attestation period.	Not listed
Myra fleet overflow edge case	Low Docs describe that a saturated Myra EU fleet router can overflow to a cloud fallback; residency-armed gateways re-check the observed host and fail closed, but residency routing is off by default.	Not listed
Live subprocessor register requires Trust Center	Low The authoritative provider list is the live register on the Trust Center / privacy page. Review the current German-language entries before contracting; do not rely on a static blog list.	Not listed
SecNumCloud not yet obtained	Not listed	Medium ANSSI SecNumCloud is in progress on public materials. Regulated French public-sector tenders that hard-require a qualified cloud today may need another SKU/provider or a delayed migration plan.
Smaller service catalogue than US hyperscalers	Not listed	Medium Expect fewer proprietary managed services and less global region density than AWS/Azure/GCP. Multi-cloud or complementary SaaS may still be required for parts of the estate.
Account-plane processors and possible non-EU transfers	Not listed	Low Even with EU workload regions, privacy policy allows processor use and SCC-backed transfers for some controller purposes (support, payments, marketing, etc.). Pull the live subprocessor list for DPIAs.
Shared responsibility for guest security	Not listed	Medium Scaleway secures the platform; you own OS hardening, IAM, application security, encryption keys and backups. Recent Trust Center advisories on kernel issues illustrate customer patching duties on instances and Kapsule nodes.
Dedibox vs Elastic Metal product split	Not listed	Low Two bare-metal experiences still coexist while Scaleway documents convergence. Mis-choosing the line can affect API integration, networking features and migration effort.

Fit

Myra AI Workspace

Best fit when

Public sector, finance, insurance or other regulated EU orgs that need central AI governance
Teams that want both an employee chat/projects UI and an OpenAI-compatible gateway in one contract
Workloads that can stay on Myra-hosted EU open-weight models for sensitive content
IT teams rolling out Entra ID / OIDC / SAML SSO with SCIM provisioning
Buyers already evaluating Myra Security for KRITIS-oriented edge security and wanting the same vendor for AI adoption

Poor fit when

Organisations that mandate fully on-prem, air-gapped LLM hosting with no SaaS control plane
Teams standardised on Microsoft 365 Copilot or Google Gemini only and unwilling to add another workspace
Use cases that require continuous frontier-model quality with a hard ban on any US provider path (possible only if you lock to Myra-local models and EU search)
Buyers seeking an open-source, self-hosted chat UI as the primary deliverable

Consider instead when

When: You mainly need Office-integrated Copilot inside an existing Microsoft estate
Consider: Microsoft 365 Copilot
Deeper Word/Excel/Outlook integration; single-vendor jurisdiction and model stack.
When: You want EU file collaboration with optional self-hosted AI rather than a managed AI gateway
Consider: Nextcloud
Strong EU collaboration suite; AI features are not a Myra-class multi-provider gateway.
When: You only need European IaaS/GPU cloud, not an AI workspace product
Consider: STACKIT or Scaleway
Infrastructure layer; you still build the adoption UI and guardrails yourself.

Scaleway

Best fit when

Teams that need compute, storage, networking and managed Kubernetes in documented EU multi-AZ regions under a French legal entity
AI/ML workloads that require NVIDIA GPUs with European data residency rather than US-region training defaults
Workloads that benefit from single-tenant bare metal (Elastic Metal or Dedibox) alongside cloud APIs
Healthtech or French-market buyers that need HDS-oriented hosting signals plus a published B2B DPA
Platform engineers standardising on Terraform/API-driven provisioning with S3-compatible storage and managed Postgres/MySQL

Poor fit when

Organisations that require a finished ANSSI SecNumCloud qualification on day one (process is ongoing, not completed on public pages)
Architectures that must run primary production in US or APAC regions on the same cloud account
Buyers that need the full hyperscaler catalogue (global edge, proprietary PaaS density, enterprise marketplace breadth)
Teams expecting a self-hosted “install Scaleway on your own DC” product rather than a managed cloud
Procurement processes that accept only SOC 2 Type II as the primary assurance artefact (not surfaced as a public Trust Center badge here)

Consider instead when

When: You need completed SecNumCloud-qualified private cloud or a larger non-EU region footprint under one European operator
Consider: OVHcloud
Compare exact qualified product SKUs and region maps; OVH and Scaleway are both French industrial clouds with different strengths.
When: You want simpler EU VPS/dedicated economics with a smaller product surface
Consider: UpCloud, Exoscale, or Cyso Cloud
Leaner catalogues; validate GPU, HDS and multi-AZ needs separately.
When: You need maximum global managed-service depth and partner ecosystem
Consider: Amazon Web Services, Microsoft Azure, or Google Cloud Platform
Accept US-parent CLOUD Act exposure and design residency/controls explicitly.
When: German SMB hosting plus EU cloud under a DE-centric brand is the priority
Consider: IONOS
Different product mix and market focus than Scaleway’s developer/AI-oriented public cloud.

Open questions for due diligence

Myra AI Workspace

Will procurement receive the current BSI C5 Type 2 and ISO 27001 packs with AI Workspace explicitly in scope?
What is the default provider allowlist for a new production tenant (Myra-only vs frontier enabled)?
Can Linkup and Myra-local models fully replace Brave and US frontier providers for your residency policy?
Is a signed AVV/DPA for AI Workspace available without NDA, and does it list the live subprocessor register?

Scaleway

What is the exact HDS certificate scope (services, regions, shared responsibility) for our architecture?
What is the current ANSSI SecNumCloud milestone and target date for the SKUs we would buy?
Which named subprocessors (including any non-EU) process account, billing, support or security telemetry data?
For multi-region DR, which products are GA in each AZ (including Milan) at contract time?
Are independent SOC 2 / C5 or other reports available under NDA if our assurance programme requires them?