amazee.io and amazee.ai Bring Shadow AI and Sovereign Infrastructure to DrupalCon Rotterdam

Drupal teams taking artificial intelligence beyond experiments are running into a harder set of questions: where organisational data goes, which models can be used, how costs are monitored, and who retains control when AI becomes part of production workflows. amazee.io and amazee.ai are making those questions part of their DrupalCon Rotterdam 2026 presence, including an Open Stage session on shadow AI and sovereign infrastructure.

Thomas Schröpfer, Go-to-Market Program Manager for AI Products at amazee.ai, and Hank VanZile, Senior Director of Customer Experience at Tag1 Consulting, are scheduled to present From Shadow AI to Sovereign AI Infrastructure on 29 September from 14:25 to 15:10 CEST on the Open Stage.

Katy Walsh, marketing lead at amazee.io, told The DropTimes that the change the companies are seeing is not simply greater interest in generative AI. She said privacy, compliance, cost management, and observability are becoming more prominent as organisations move from experimentation towards routine use.

Katy said those priorities are shaping the conversations amazee.io and amazee.ai are bringing to Rotterdam. Their stated focus is on ways Drupal teams can introduce AI while retaining visibility over data, infrastructure, model selection, and spending.

The sponsorship also has a community and business dimension. Katy said DrupalCon gives the companies an opportunity to support the Drupal community, maintain relationships, and learn directly from agencies, enterprise teams, and developers working with the platform.

“Sponsoring the event allows us to support that community, strengthen existing relationships, and learn directly from the people who build and work with Drupal,” she said.

She also described the event as an opportunity to show how the two businesses fit together. According to the supplied response, amazee.io provides managed Kubernetes-based infrastructure for Drupal applications, while amazee.ai provides a governed access layer for AI models. The distinction becomes relevant when AI introduces additional infrastructure decisions around endpoints, credentials, model availability, data handling, and expenditure.

Shadow AI provides the starting point for Thomas's Open Stage discussion. The term is commonly used for AI tools or integrations adopted inside an organisation without the visibility and governance normally applied to approved technology. Thomas argues that unmanaged use can create uncertainty around what data is leaving an organisation, which services are being used, and what those services are costing.

The session will present a private AI gateway as one possible control point between applications and multiple model providers. Rather than requiring each application or team to maintain separate integrations, the gateway exposes models through a common OpenAI-compatible API while allowing access and spending to be managed centrally.

amazee.ai's current documentation lists models from providers including Anthropic, Google, Mistral, OpenAI, and DeepSeek, with availability varying by region and plan. API keys are associated with a workspace and region, and the platform documents budgets and spending controls by workspace, region, user, and key.

Data location is another part of the model. amazee.ai currently documents regional endpoints covering Switzerland, Germany, the United States, Australia, and the United Kingdom. Its security documentation states that user prompts and model responses are not logged or retained by the gateway, while operational metadata such as API-key usage, IP addresses, model identifiers, and regions is retained for security and audit purposes.

Those are documented characteristics of amazee.ai's service rather than proof that a gateway by itself resolves every privacy or sovereignty requirement. Organisations still need to assess the model provider, client application, regional path, contractual controls, and any other systems through which a request passes.

Hank will bring Scolta into the session as Tag1's practical implementation example. Tag1 describes Scolta as an open-source search system built on Pagefind, with a static index and browser-side result scoring. Optional AI capabilities can expand natural-language queries, summarise results, and support follow-up questions.

For Drupal, Scolta integrates through Search API and currently supports Drupal 10.3 and Drupal 11. Tag1's documentation describes it as a Search API backend that builds a static Pagefind index rather than requiring a continuously running Solr or Elasticsearch search server.

Scolta's optional AI functions can also be connected through different provider routes. Tag1 documents direct provider integrations, amazee.ai, and Drupal's AI provider abstraction among the available approaches. That makes the project relevant to the Rotterdam session because it separates the application feature from the organisation's decision about how model access should be governed.

Thomas identified four areas he wants attendees to take away: recognising security, privacy, and cost risks associated with unmanaged AI; understanding how a private gateway can centralise model access and policy; seeing how Tag1 applies the infrastructure through Scolta; and considering practical controls before deploying AI capabilities across Drupal and other open-source platforms.

The emphasis is therefore less on another generative feature than on what happens after an organisation decides AI will become maintained infrastructure. Provider choice, credentials, data location, observability, and spending become operational questions alongside whatever application-level capability a Drupal site exposes.

Thomas said he is particularly interested in comparing how Drupal teams are handling AI integration outside demonstrations and prototypes. Data sovereignty and the role of open-source platforms in responsible AI adoption are among the subjects he expects to discuss with attendees in Rotterdam.

From Shadow AI to Sovereign AI Infrastructure is scheduled for 29 September 2026 from 14:25 to 15:10 CEST on DrupalCon Rotterdam's Open Stage. The current conference schedule lists Thomas Schröpfer and Hank VanZile as speakers and identifies the presentation as a sponsored amazee.ai session. Readers should consult the official DrupalCon Rotterdam schedule for any further programme changes.