# Best EU-hosted sandboxes for AI agents in 2026 > Eight ways to run AI agent sandboxes in the EU, compared by contracting company, location, persistence, DPA and price, including where each is stronger. - Source: Sanbox knowledge base, by Sanlabs GmbH - URL: https://sanbox.cloud/compare/best-eu-hosted-sandboxes-for-ai-agents-2026/ - Type: comparison - Section: Comparisons - Language: en - Published: 2026-11-06 - Updated: 2026-11-06 If you want both the company and the machines in the EU, the short list is orkestr, Koyeb, Scaleway, a server you run yourself at Hetzner or OVHcloud, and Sanbox. E2B, Daytona and Blaxel offer EU regions, but you sign with a US company. Then choose by lifetime: short code runs suit a per-second sandbox, while an agent that works for weeks needs a persistent computer, which is what Sanbox gives it. ## What does "EU-hosted" mean for an agent sandbox? Three separate questions decide it: 1. **Where does the machine run?** That is the region: the data centre holding the VM, its disk and its snapshots. 2. **Who do you sign with, under which law?** A region doesn't change the contracting company. A US company with an EU region is still a US company, and your data processing agreement (DPA) follows its terms. 3. **Where do the model calls go?** Your agent sends prompts to a model provider. An EU sandbox calling a US model endpoint still sends data out. See [where your agent's model calls go](https://sanbox.cloud/kb/eu/where-do-agent-model-calls-go/). The table below covers the first two. All facts were checked on each vendor's own site on 2026-11-06. ## How do the EU options compare? | Option | Company and law | Where compute runs | What persists | DPA | Pricing model | |---|---|---|---|---|---| | **Sanbox** | Sanlabs GmbH, German law | EU data centres | Computers stay on until stopped; stop keeps the disk | Art. 28 DPA under German law | Per organisation; talk to us | | **orkestr** | WhiteCloud Project S.R.L., Romania | Falkenstein and Helsinki (Hetzner), Roubaix (OVH) | Pause and resume; snapshots include memory; paused snapshots kept 7 days (free) or 30 days (pay as you go); persistent volumes | Signed DPA on request | Per second, about €0.06 to €0.30 an hour; €5 trial credit | | **Koyeb** | Koyeb SAS, France, French law | Frankfurt and Paris, plus non-EU regions | Sandboxes described as ephemeral | Art. 28 DPA published | Per-second compute; Starter plan pay as you go, Pro $29 a month | | **Scaleway** | Scaleway SAS, France | Paris, Amsterdam, Warsaw, Milan | Whatever you build | DPA published | Per resource; no dedicated agent-sandbox product listed | | **Self-run server** | Hetzner Online GmbH (Germany), or the OVHcloud company for your country (French OVH Groupe) | The data centre you pick | Everything on the disk; isolation is your job | Provider's DPA covers the server | Hetzner from about €6.49, OVHcloud from about €3.81 a month, excl. VAT | | **E2B (EU cluster)** | FoundryLabs, Inc., Delaware law | Shared EU cluster; ask E2B for the location | Pause keeps memory and files; paused sandboxes kept until deleted | DPA template on request | Per second; free Hobby tier with $100 one-time credit | | **Daytona (eu region)** | Daytona Platforms Inc., Delaware law | Shared `eu` region; ask Daytona for the location | Stop keeps files; containers auto-stop after 15 idle minutes | Part of its terms | Per second, about $0.05 per vCPU-hour; $200 free compute | | **Blaxel** | Blaxel, Inc. (Delaware), California law | Frankfurt, plus London (UK) and two US regions | Standby about 15 s after the last connection keeps files and processes | Ask Blaxel | Per GB of RAM per second; up to $200 credits | ## Which options are EU companies running in the EU? **orkestr** sells pay-as-you-go sandboxes alongside container hosting. Its sandboxes page says code runs on dedicated machines orkestr operates, and its data-residency docs list regions at Hetzner in Falkenstein and Helsinki and at OVH in Roubaix. The same docs name the legal entity as a Romanian company and say all listed sub-processors are EU companies. Each sandbox is a VM with its own kernel, outbound network is off by default, and pausing stops the compute meter. Per-create timeouts run from 10 seconds to 24 hours. **Koyeb** is a French serverless platform with sandboxes accessed through Python and JavaScript SDKs. In February 2026 Koyeb announced that it would join Mistral AI. Its docs call sandboxes "ephemeral compute environments", so plan for short-lived work. **Scaleway** is a French cloud provider with regions in Paris, Amsterdam, Warsaw and Milan. We found no dedicated agent-sandbox product on its site, so you would build isolation, egress rules and persistence yourself on its compute. **A server you run** at Hetzner (cloud servers in Germany and Finland from its own data centre parks in Falkenstein, Nuremberg and Helsinki, plus the US and Singapore) or OVHcloud is the cheapest option. You get a persistent disk and full control. You also handle the OS updates, isolation between agents, egress rules and secrets. **Sanbox** gives each agent its own persistent cloud Computer: a Firecracker microVM with its own kernel and private disk. Computers, disks, snapshots, files, run records, logs and monitoring are stored and processed in EU data centres. Sanlabs GmbH, a company under German law, signs an Article 28 GDPR DPA governed by German law. It lists sub-processors and gives at least 14 days' notice by email before adding or replacing one. Breach notification comes within 48 hours at most, with a 24-hour target. Some sub-processors have parent companies outside the EU, under the Standard Contractual Clauses. The [EU post](https://sanbox.cloud/blog/eu-hosted-gdpr-compliant-ai-agents/) and the [Data Act page](https://sanbox.cloud/data-act/) have the detail. ## What about E2B, Daytona and Blaxel's EU regions? All three are US companies with an EU location. - **E2B** offers a "shared EU cluster" on every plan. You verify your workspace by adding a payment method and ask support to set it up. Its compliance FAQ says managed sandboxes run on Google Cloud. - **Daytona** has shared `us` and `eu` regions, plus dedicated regions and custom regions on your own compute. Its DPA governs the EU SCCs under Irish law. - **Blaxel** lists Frankfurt as its EU region, alongside London and two US regions, and notes that not every region is available in self-service by default. If your requirement is only "the VM runs in the EU", these work. If you also need an EU contracting party, they don't. ## Do I need a sandbox or a persistent computer? Decide by what the agent must keep between sessions. - **One-shot code execution** (run a script, return the result, throw the box away): any per-second sandbox above fits, and is usually cheaper. - **An agent that lives for days or weeks** (a repo, installed packages, browser logins, running services): you want a machine that keeps its disk and stays on. On Sanbox, OpenCode and Hermes Computers stay active until you stop them. A stop keeps `/workspace` and installed packages but not RAM or running processes. ```bash sanbox run --template --json sanbox runs stop --wait --json sanbox runs resume --wait --json ``` The [persistent vs ephemeral guide](https://sanbox.cloud/kb/agent-computers/persistent-vs-ephemeral-sandboxes/) goes deeper. ## Where the other options are stronger - **Per-second billing.** orkestr, E2B, Daytona and Blaxel charge for what runs. For many short jobs that beats a flat plan. - **Memory-preserving pause.** E2B pauses with memory, orkestr's snapshots include memory, Daytona's VM sandboxes pause with memory, and Blaxel's standby keeps running processes. A Sanbox stop keeps the disk only. - **A free start.** orkestr gives €5 of credit without a card, E2B a $100 one-time credit, Daytona $200 of compute, and Blaxel up to $200. Sanbox has no free tier. - **SDKs.** E2B, orkestr and Koyeb ship Python and JavaScript SDKs, Blaxel Python, TypeScript and Go, and Daytona five languages. Sanbox has a CLI, an API and a console. - **Certifications.** E2B has a SOC 2 Type II report, Blaxel lists SOC 2, HIPAA and ISO 27001 on its security page, and Koyeb lists ISO 27001 and SOC 2 with its Enterprise plan. Sanbox doesn't hold SOC 2 or ISO 27001; its DPA, sub-processor list and technical and organisational measures are available on request. - **An all-EU supply chain.** orkestr says every listed sub-processor is an EU company. Some of Sanbox's sub-processors have parents outside the EU. - **Lowest cost.** A self-run VPS costs a few euros a month if you're willing to operate it. ## When not to use Sanbox - You run thousands of short code executions and want per-second billing. - You need RAM and running processes kept across a pause. - You need GPUs, Windows or static egress IPs. - You need large disks self-serve. Computers take 1 to 8 GB, and larger disks are enabled on request. - Your policy requires every sub-processor to be EU-owned. Ask for Sanbox's sub-processor list at [support@sanlabs.ai](mailto:support@sanlabs.ai) first. - Your contract names a specific country. Sanbox's standard commitment is EU data centres. To run in your own cloud or hardware, write to [sales@sanlabs.ai](mailto:sales@sanlabs.ai). For a business use case, [talk to us](mailto:sales@sanlabs.ai). Our [forward-deployed engineers](https://sanbox.cloud/kb/teams/forward-deployed-engineering/) can build it with you. ## Related - [Do I need a DPA for AI agents?](https://sanbox.cloud/kb/eu/dpa-for-ai-agents/) - [Where do my AI agent's model calls go?](https://sanbox.cloud/kb/eu/where-do-agent-model-calls-go/) - [Sanbox vs E2B](https://sanbox.cloud/compare/sanbox-vs-e2b/) - [Sanbox vs Daytona](https://sanbox.cloud/compare/sanbox-vs-daytona/) - [Persistent vs ephemeral sandboxes for AI agents](https://sanbox.cloud/kb/agent-computers/persistent-vs-ephemeral-sandboxes/) ## Sources - orkestr, [Sandboxes](https://orkestr.eu/sandboxes), [Data residency](https://orkestr.eu/docs/sandboxes/data-residency), [Limits](https://orkestr.eu/docs/sandboxes/limits) and [llms.txt](https://orkestr.eu/llms.txt) (sandbox sizes and hourly prices), checked 2026-11-06 - Koyeb, [Koyeb is joining Mistral AI](https://www.koyeb.com/blog/koyeb-is-joining-mistral-ai-to-build-the-future-of-ai-infrastructure), [Sandboxes](https://www.koyeb.com/docs/sandboxes), [Regions](https://www.koyeb.com/docs/reference/regions), [Pricing](https://www.koyeb.com/pricing), [Pricing FAQ](https://www.koyeb.com/docs/faqs/pricing) (Starter plan), [Terms](https://www.koyeb.com/docs/legal/terms) and [Data Processing Agreement](https://www.koyeb.com/docs/legal/data-processing-agreement), checked 2026-11-06 - Scaleway, [Instances concepts](https://www.scaleway.com/en/docs/instances/concepts/) and [Product availability](https://www.scaleway.com/en/docs/account/reference-content/products-availability/) (regions), [Legal notice](https://www.scaleway.com/en/legal-notice/) and [Data Processing Agreement](https://www-uploads.scaleway.com/DPA_2024_ENG_b0abb5cc26.pdf), checked 2026-11-06 - Hetzner, [Cloud](https://www.hetzner.com/cloud/) (locations and prices), [Legal notice](https://www.hetzner.com/legal/legal-notice/) and [Data protection at Hetzner](https://docs.hetzner.com/general/company-and-policy/data-protection-at-hetzner/), checked 2026-11-06 - OVHcloud, [VPS](https://www.ovhcloud.com/en-ie/vps/) (VPS-1 from €3.81 ex. VAT a month) and [Terms and conditions](https://www.ovhcloud.com/en-ie/terms-and-conditions/) (contracting company, a subsidiary of OVH Groupe SA), checked 2026-11-06 - E2B, [Can I run sandboxes in the EU?](https://docs.e2b.dev/faq/eu-region), [Security and compliance](https://docs.e2b.dev/faq/security-and-compliance), [Persistence](https://docs.e2b.dev/sandbox/persistence), [Pricing](https://e2b.dev/pricing) and [Terms](https://e2b.dev/terms), checked 2026-11-06 - Daytona, [Regions](https://www.daytona.io/docs/en/regions), [Persistence](https://www.daytona.io/docs/en/persistence), [Pricing](https://www.daytona.io/pricing), [DPA](https://www.daytona.io/dpa) and [Terms of service](https://www.daytona.io/terms-of-service), checked 2026-11-06 - Blaxel, [Regions](https://docs.blaxel.ai/Infrastructure/Regions), [Active vs standby states](https://docs.blaxel.ai/knowledge-base/configuration-and-operation/understanding-sandbox-active-vs-standby-states-and-billing), [Pricing](https://blaxel.ai/pricing) (rates, credits, SDKs), [Security](https://blaxel.ai/company/security) and [Standard Terms](https://blaxel.ai/legal/terms/2025-12-10-blaxel-terms-and-conditions.pdf), checked 2026-11-06 ## Next step Talk to us at sales@sanlabs.ai. Sanlabs' forward-deployed engineers build agent use cases with your team, with experience in aviation, pharmaceuticals, supply chain and logistics, and internal admin workflows. How we work: https://sanbox.cloud/kb/teams/forward-deployed-engineering.md Existing customers can use Sanbox from a coding agent: install the CLI with `npm install -g @sanlabs/sanbox-cli@latest`, sign in with `sanbox login`, then run `sanbox skill` for the full agent guide.