# EU, GDPR and data residency

Where agent data and model calls go, and which contracts you need in the EU.

## Pages

- [Where do my AI agent's model calls go? Claude, OpenAI and Mistral EU options](https://sanbox.cloud/kb/eu/where-do-agent-model-calls-go.md): To the provider and endpoint you configure. Claude via Bedrock or Google Cloud, OpenAI or Azure OpenAI with EU residency, and Mistral's EU endpoint keep inference in Europe; the exact scope differs by route.
- [Do I need a DPA for AI agents?](https://sanbox.cloud/kb/eu/dpa-for-ai-agents.md): Usually, yes. If an AI agent processes personal data on a vendor's infrastructure or model, Article 28 GDPR normally requires a DPA with each such vendor, including the model provider.
