If the provider changes the rules on Friday, what still works on Monday?

In June, a US export-control order took two frontier AI models offline overnight - for every customer, with contracts intact and data centres running. The capability was simply gone. This report is about making sure that never takes one of your business processes with it.

Inside

• The five control questions that replace ‘is this provider sovereign?’
• The court cases in plain language - Schrems II to Kneschke v LAION - and what each one means for procurement.
• Six European provider routes and what to verify with each: Mistral, Scaleway, IONOS, STACKIT, OVHcloud, Aleph Alpha.
• The hosting ladder: when a managed API is enough, and when self-hosting actually pays.
• The four-week test that proves you can switch providers - before you sign.
• Tools to use the same day: a 15-point control checklist, a 0-3 scorecard, twelve questions to send every provider, and every legal date through 2028.

Written for the six people who decide an AI purchase together: managing director, IT, security, legal, HR and works council, procurement.

The report recommends no product. It names providers, rulings, and dates you can check.