Running AI agents in the EU: data residency, GDPR, and the EU AI Act

This guide walks through both laws for a business that puts AI agents to work, with the EU AI Act’s dates as they stand after the changes that entered into force on 27 July 2026. It is the practical map GATE uses when customers ask, not legal advice.

Does EU hosting, Ireland included, make an AI agent GDPR compliant?

Storing data in Ireland, Germany or any other EU or EEA country keeps that copy inside the area where personal data moves freely, so the transfer rules in Chapter V of the GDPR do not apply to it. That matters, and it is also where many reviews stop too early.

An AI agent has more hops than a normal app. Every time it reasons, it sends the task’s context to a model, and that context often holds personal data: the email it is answering, a support ticket, a customer record it pulled in. Around the model sit more services: the email that sends sign-in links, the edge network in front of the servers, the integration that holds your mailbox login, the people who support the system. Each hop that reaches outside the EEA is a transfer of its own.

So the question to ask a vendor is not “is the database in the EU” but “which hops leave the EU, and under what mechanism”. A vendor that names every hop and its legal basis is easy to assess. One that answers “EU-hosted” and stops there is not.

What does the GDPR need for a model call outside the EU?

Chapter V allows a transfer outside the EEA on a few bases. The two that matter for AI vendors:

• An adequacy decision. The European Commission has found that some countries protect personal data essentially as well as the EU does. For the United States this covers only organisations certified under the EU-US Data Privacy Framework; a US vendor that is not certified gets no benefit from it.
• Standard Contractual Clauses. The Commission’s pre-approved contract terms for transfers without adequacy. Since the Court of Justice’s Schrems II judgment, the exporter is expected to assess the destination’s laws and add safeguards where they fall short.

A transfer is doable, but it brings paperwork and assessments that need keeping up. A model served inside the EEA takes that hop out of Chapter V and leaves the ordinary duties: a lawful basis, data minimisation, a processor contract under Article 28 and the ability to honour access and deletion requests.

What does the EU AI Act ask of a business that deploys agents?

The EU AI Act regulates AI systems by risk. It does not ask where they are hosted. What it asks depends on your role: a provider develops an AI system or places it on the market under its own name, and a deployer uses one under its own authority. A business that puts agents to work in its own operations is usually a deployer, and its duties come in layers:

• AI literacy, since February 2025. Article 4 asks providers and deployers to take measures to support the AI literacy of the staff who use AI on their behalf. Since the July 2026 amendments it no longer requires them to guarantee any specific level of literacy.
• Transparency, from August 2026. Article 50 makes providers design systems that talk to people so the people know they are dealing with AI. Deployers must disclose deepfakes, and AI-written text published to inform the public, unless a person reviewed that text and holds editorial responsibility for it.
• High-risk duties, from December 2027. Article 26 adds the heavy deployer duties for high-risk systems only: use the system as instructed, give competent people the job of overseeing it, keep the logs it generates for at least six months, and tell workers before it is used on them.

Most ordinary business automation is not high-risk. The list in Annex III is specific: biometrics, critical infrastructure, education, employment and worker management, access to essential services such as credit, law enforcement, migration and justice. An agent that answers support mail, drafts posts or keeps the books sits outside it; an agent that screens job applicants does not. The two laws also stack: the AI Act governs the system, and the GDPR still governs the personal data inside it.

When do the AI Act’s rules apply after the July 2026 changes?

The AI Act entered into force on 1 August 2024 and applies in stages. The AI Omnibus, Regulation (EU) 2026/1744, entered into force on 27 July 2026 and moved the high-risk dates. As the European Commission’s AI Act page lists them:

• 2 February 2025: the bans on prohibited practices and the AI literacy duty.
• 2 August 2025: the rules for general-purpose AI models.
• August 2026: the transparency rules and most of the rest of the Act.
• December 2026: a new ban added by the Omnibus, on AI that generates non-consensual intimate images or child sexual abuse material.
• 2 December 2027: the high-risk rules for systems listed in Annex III.
• 2 August 2028: the high-risk rules for AI built into products covered by EU product safety law.

How long can an agent keep personal data?

The GDPR’s storage limitation principle in Article 5 applies to everything an agent keeps: the logs of what it did, the memory it builds, the files it stores and the backups behind them. Each needs a retention period you can state, and a deletion that reaches the backups too. Sector rules can set minimums on top, such as bookkeeping law for financial records, so write down which rule sets which period.

Retention is also a question for the vendor: how long a deletion takes, and how long a copy survives in backups.

What should an EU-hosted agent setup give you?

EU hosting does not make you compliant on its own, but a well-built setup makes the rest manageable. Look for:

• A named list of hops. Where the agent runs, where each model is served, where memory, files and logs sit, and which services sit around them, each with its transfer mechanism.
• Data minimisation. The model receives the context of the task at hand, not your whole mailbox or customer base.
• A way to see and stop the agent. What it did and in which order, and a person who can step in, which is what Article 26’s human oversight asks for once a system is high-risk.
• Contracts in writing. A Data Processing Agreement under Article 28 of the GDPR and a published list of subprocessors.
• Retention you can state. Deletion times, backups included.

Where GATE stands

GATE’s production servers, where agents run and memory, files and logs are stored, are in Nuremberg, Germany. Encrypted backups are kept in Falkenstein, Germany, and a few support servers run in Helsinki, Finland. The embeddings behind memory search are computed on GATE’s own server. A model receives only the context of the current task. By default, model calls and a few services around them, such as edge traffic, sign-in email and the logins for connected tools, run in the United States under the Standard Contractual Clauses, plus the Data Privacy Framework where the provider is certified.

GATE does not use customer content to train models. Two switches stay off unless an organization turns them on: providers in China, and providers that may train on your data. On Edge, GATE’s default release track, named GATE Intelligence staff can open chats, files and memory to operate, support and improve GATE; on Stable and on a dedicated server there is no standing staff access. An EU-only setup, with the models inside the EU too, is scoped on request, and the default setup applies until it is agreed and in place.

Every hop and its mechanism is listed on the subprocessors page and in Annex 2 of GATE’s Data Processing Agreement, and the controls are mapped in the Trust Center. Where GATE keeps your data shows the same picture on a map.

The takeaway

Treat EU hosting as the start of the answer, not the end. List every hop your agent’s data takes, give each one outside the EEA its legal basis, keep only what the purpose needs, and know which AI Act layer you are in: AI literacy now, transparency from August 2026, and the high-risk duties from December 2027 only if your use is on the list. If you want your own agent for the boring half of running your company, with that map already written down, GATE is invite only while we onboard a small number of businesses.