Find Your Tool in 6 Steps
Result: 144

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 144
Research Images Video Music Agent Business Marketing Website API

Claude is an AI assistant and model family from Anthropic for chat, research, writing, analysis, coding, and agentic workflows.

Depending on the plan or product, the offering includes web/desktop/mobile chat, Research, Claude Code, Claude Cowork, web search, file/code execution, connectors, as well as APIs and Managed Agents for developers. Anthropic positions Claude for individuals, teams, education, and enterprise environments alike.Claude

Think fast, build faster “Brainstorm in Claude, build in Cowork”

8.5/10 Very good

Business Plan, Chatbot, Data Analysis, Document analysis, Function calls, AI agents, LLM API, Multimodal AI, Tutoring, Presentations, Programming, Reasoning model, Research, Language model, Spreadsheet, Text generation, Translation, Summary
Free Claude Free includes chat on web, iOS, Android, and desktop, code generation, data visualization, writing/editing texts, content generation, text and image analysis, as well as web search. Projects are also available to Free users, though in a limited number. Subscription Claude Pro: Includes everything in Free plus more usage, Claude Code, Claude Cowork, unlimited projects, Research, access to more Claude models, as well as Claude for Excel, PowerPoint, and Word Beta.

Claude Max: Includes everything in Pro plus significantly higher usage, higher output limits, early access to advanced Claude features, and priority during high demand.

Claude Team: For teams; includes all Claude features, more usage than Pro, Claude Code and Cowork, connectors like Microsoft 365 and Slack, Enterprise Search, centralized billing/administration, SSO, admin controls, and no model training on company content by default.

Claude Enterprise: For large companies; includes Team features plus advanced admin, security, compliance, and governance features such as Spend Controls, Audit Logs, SCIM, role-based access, Compliance API, custom data retention, and additional enterprise options. Other Claude API: Separates developer/platform model with usage-based billing by model, input/output tokens, prompt caching, and other factors. Claude models are also available through third-party platforms such as AWS Bedrock, Google Vertex AI, and Microsoft Foundry.

Additional features: The Claude Platform offers additional usage-based features such as Managed Agents, Web Search, Code Execution, as well as service tiers like Standard, Priority, and Batch.

Claude Design: Available for Pro, Max, Team, and Enterprise; usage runs through the respective subscription limits, with optional Extra Usage.

Special offers: Anthropic offers separate deals or programs for educational institutions, nonprofits, and certain government/public sector contexts.
Location: USA Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, United States.
GDPR: Partly GDPR-compliant use is possible, but subject to prerequisites: For commercial users (Claude for Work, API, Enterprise), a DPA with SCCs is automatically integrated into the Commercial Terms, EU data residency is selectable, and there is no training without explicit opt-in. For consumer plans (Free, Pro, Max), these guarantees are largely absent, and data may be used for training by default. Fully GDPR-compliant use therefore requires at least a commercial plan as well as active configuration of EU data residency.
Positive
DPA with Standard Contractual Clauses (SCCs) automatically included in the Commercial Terms; EU data residency configurable for API and Enterprise customers (EU endpoints, AWS Bedrock EU, GCP Vertex EU); no training on commercial customer data without explicit opt-in; Zero Data Retention option for Enterprise/API available on request; extensive certifications (ISO 27001:2022, ISO 42001:2023, SOC 2 Type I & II, CSA STAR, HIPAA-ready); subprocessors list published; Trust Portal with compliance documentation.
Negative
US-based provider (Anthropic), standard routing may include US servers; EU data residency only on commercial plans and only after active configuration; consumer users have limited control; Zero Data Retention only on request and after review by Sales; no on-premise operation of the model possible; subprocessors include several US cloud providers.
Server location
Multi-cloud infrastructure across multiple providers (according to the subprocessors list). By default, routing in the USA, Europe, Asia, and Australia is possible. For commercial customers, EU data residency (EU/EEA) can be configured via native API endpoints as well as AWS Bedrock EU and GCP Vertex EU. Specific data center locations (e.g. Frankfurt, Dublin) are not named explicitly on the website.
5.0 (3)

Link

Link

“to empower everyone in the world to design anything and publish anywhere”.

Canva is a browser-based platform for design, publishing, and visual communication. Users can use it to create, among other things, social posts, presentations, documents, websites, videos, and brand materials; in addition, it offers AI features for text, images, translation, code, and data-driven content.

Canva thus positions itself not only as a design tool, but as an integrated Visual Suite for individuals, teams, and companiesCanva

Visual Suite for Everyone

7.7/10 Good

Image editing, Image generation, Data visualization, Graphic Design, Logo Design, Mockups, Poster design, Presentations, Social media content, Text generation, Thumbnail generation, Translation, Video generation, Video editing, Website Development, Advertisements
Free Free basic version for designs, templates, and free content; suitable for creating simple social posts, presentations, posters, videos, logos, and designs. Pro content may contain watermarks for Free users or be licensed separately. Subscription Canva Pro For individuals and solo creators; includes premium content, templates, Brand Kit, Background Remover, Magic Resize, and AI-powered design features.

Canva Business For small businesses, solo entrepreneurs, and growing teams; includes everything in Pro plus higher AI access, advanced brand management, marketing/ad insights, collaboration, and shared workspaces.

Canva Enterprise For large organizations with multiple teams; includes enterprise security, SSO, SCIM, audit logs, data residency options, AI governance, advanced admin controls, approval workflows, integrations, and dedicated support. Other Free users can license individual Pro content for one design; in addition, there are print products as well as special offers for education and nonprofits.
Location: Australia Address, contact: Registered office/registered address: 110 Kippax St, Surry Hills 2010. Provider: Canva Pty Ltd. Authorized representative: Cliff Obrecht. Email: [email protected]; [email protected]. Telephone: +1 737 285 3388 (privacy contact, US listing)
GDPR: Partly Canva documents a GDPR-compliant legal basis for users in the EU/EEA, names an EEA representative in Ireland, refers to Standard Contractual Clauses and the UK Addendum for international transfers, and provides a Data Processing Agreement (DPA) for Canva Business and Enterprise. At the same time, the website does not guarantee a clear, general EU/EEA server location for standard use; rather, the documentation refers to international data transfers, and the list of subprocessors mentions several processing operations in the U.S. GDPR-compliant use therefore appears realistic only under certain conditions, particularly with a Business/Enterprise contract, a DPA, and careful review of the features used and third-party apps.
Positive
The following are positively documented: a privacy policy with a section for the EEA, Switzerland, and the UK; EEA representation by the EDPO in Dublin; a commitment to provide appropriate safeguards for transfers outside Europe via EU Model Clauses and the UK International Data Transfer Addendum; DPA for Canva Business and Canva Enterprise; published list of subprocessors; privacy settings and the option to disable the use of Business/Enterprise content to improve AI-powered features; security certifications including ISO 27001 and SOC 2 Type II.
Negative
A negative or limiting aspect is that the website does not specify a clear, general server or data center location within the EU/EEA for all customer data. The privacy policy states that Canva Pty Ltd receives and processes data in Australia and that data may be transferred to other countries. The list of subprocessors cites several U.S. entities for key services, including AWS, Google, MongoDB, OpenAI, and Snowflake. The website does not clearly guarantee explicit, full EU data residency for the entire product; for AWS, it only states “United States & Europe (when selected).” On-premises/self-hosting is not specified on the website.
Server Location
The website does not consistently specify a fixed EU/EEA server location. The list of subprocessors lists “United States & Europe (when selected)” for Amazon Web Services; other key subprocessors for hosting/AI are listed as being located in the U.S. From this, EU data residency can only be inferred partially or on a case-by-case basis, not generally for all uses of Canva.
5.0 (1)

Link

Link

“AI tools built for your WordPress site”

WordPress is a website builder and an open-source CMS, as well as a hosted platform known as WordPress.com.

In the context of AI, WordPress now offers official features for text generation, rephrasing, translation, image generation and editing, design assistance, an AI website builder, and MCP-based agent integrations with tools such as Claude or ChatGPT.

In addition, the official WordPress AI team documents core-level components such as AI Client, the Abilities API, and the AI plugin.WordPress

AI tools built for your WordPress site

7.9/10 Good

Image editing, Image generation, E-commerce Optimization, AI agents, SEO, Text generation, Translation, Website Development
Free Free to get started for simple websites and blogs; WordPress.com offers a free plan and upgrades for additional features. WordPress itself is free to use if you have your own hosting. Subscription Personal Your own domain for the first year, 6 GB of storage, ad-free visitor view, premium themes, support, statistics, plugin installation, and customization of fonts and colors.

Premium Everything included in the Personal plan plus more storage, all premium themes, fast support, premium statistics, Google Analytics, and video uploads.

Business Managed WordPress hosting with more storage, 24/7 priority support, premium statistics, plugins, Google Analytics, video uploads, and developer features such as SFTP/SSH, WP-CLI, Git commands, and GitHub deployments.

Commerce For online stores with a WooCommerce-optimized environment, store themes, e-commerce tools, plugins, Google Analytics, video uploads, and developer features. Other Enterprise / WordPress VIP An enterprise offering for large organizations, with a focus on scalability, security, and data-driven WordPress experiences.

WordPress.org Self-Hosting Download the WordPress software for free and run it with your own hosting provider; you’ll then have greater responsibility for hosting, domain, security, updates, and data protection.
Location: USA Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, United States of America.
GDPR: Partly GDPR Assessment WordPress.com documents its GDPR compliance, provides a DPA/AVV for all WordPress.com site operators, and refers to standard contractual clauses for data transfers. At the same time, according to WordPress.com, it is not possible to restrict the data associated with the site to a single geographic location, as personal data is stored in both the U.S. and the EU. Regarding AI features, while WordPress.com itself describes ownership of input and output as well as an opt-out option for third-party content sharing, no comprehensive exclusion of the use of prompts, uploads, chat histories, or outputs for model training was found.

Positive Positive aspects include the available DPA/AVV, the explicitly stated GDPR support, standard contractual clauses for transfers, security measures such as SSL, scans, backups, WAF, and activity monitoring, as well as an opt-out option against third-party sharing of public content, including AI platforms.

Negative A notable negative is that no genuine EU data residency is guaranteed; according to WordPress.com, personal data is stored in the U.S. and the EU, and a site’s data cannot be restricted to a single geographic location. On WordPress.com itself, no complete list of subprocessors, no AI-specific “no-training” commitment for prompts/uploads/outputs, and no robust ISO 27001 or SOC 2 certifications for WordPress.com were found.

Server Location WordPress.com states that personal data is stored on servers in the U.S. and the EU and that it is not possible to restrict data to a single geographic location. For Business sites, a primary data center can be selected when hosting features are first activated, including EU West, US West, US Central, and US East; existing activated sites cannot currently be migrated, Commerce sites cannot currently change their primary location, and, according to the FAQ, data is replicated across multiple data centers.

Request a data processing agreement
3.0 (2)

Link

Link

ChatGPT is OpenAI's multimodal AI application for text, research, data analysis, coding, image generation, voice, and knowledge-based work.

Its current feature set includes, among other things, Search, Deep Research, Data Analysis, Projects, Custom GPTs, Codex, Images, Voice Mode, and, additionally for Business/Enterprise, Apps and Company Knowledge. This makes ChatGPT today more of a broad work platform than just a chatbot.Chat GPT

ChatGPT is your AI chatbot for everyday use

7.8/10 Good

Image Generation, Business Plan, Chatbot, Data Analysis, Document Analysis, Function Calling, AI Agents, Multimodal AI, Tutoring, Programming, Reasoning Model, Research, Voice Assistant, Language Model, Spreadsheets, Text Generation, Translation, Summarization
Free Free offers, according to the official pricing/FAQ documentation, limited access to GPT-5.3, messages/uploads, image generation, Deep Research, Memory, and Codex; in addition, web search, file uploads, data analysis, and GPT usage are generally available, but limited. Subscription Go Expanded individual plan compared to Free; more access to GPT-5.3, more messages, more uploads, more image generation, and a longer memory function. According to OpenAI, it may contain ads.

Plus Individual plan for advanced use; includes, among other things, GPT-5.5 Thinking, expanded messages/uploads, better image generation, enhanced Deep Research and Agent Mode, Projects, Tasks, Custom GPTs, and expanded Codex access.

Pro Powerful individual plan for maximum productivity; includes more usage, GPT-5.5 Pro, maximum Codex tasks, unlimited GPT-5.3 and file uploads, faster image generation, maximum Deep Research and Agent Mode, as well as larger memory/context functions. Other Business Codex Usage-based team model for development-oriented teams; focus on AI-supported software development, code and security reviews, automation, cloud environments, admin controls, SAML/MFA, and no training on customer data.

Business ChatGPT & Codex Team plan for startups and growing companies; includes Plus and Business Codex features, unlimited core chat, apps/connectors such as Slack, Google Drive, SharePoint, GitHub, and Atlassian, data analysis, Record Mode, Canvas, shared projects, workspace GPTs, admin and security features.

Enterprise Custom enterprise model for large organizations; includes an expanded context window, enterprise security features such as SCIM, EKM, role-based controls, domain verification, data residency in multiple regions, 24/7 priority support, SLAs, custom contract terms, and no use of business data for training by default.

ChatGPT Edu / Higher Education Education plan for higher education institutions; offers expanded access to GPT-5, tools for data analysis, web browsing, file integrations, document summarization, and custom GPTs for campus workspaces.
Location: USA OpenAI OpCo, LLC, 1455 3rd Street, San Francisco, CA 94158, USA
GDPR: Partly The ChatGPT website includes several privacy-related commitments for Business and Enterprise use, including “no training on your business data by default,” references to GDPR support, a linked Data Processing Addendum for Business, and data residency in the EU for Enterprise. For the standard SaaS plans (Free/Go/Plus/Pro), however, the pricing page states that “opt-out is available” for model training and does not specify EU data residency. Therefore, GDPR-compliant use appears realistic only under certain conditions—particularly with the Business and Enterprise plans, and in some cases only with Enterprise features such as EU data residency.
Positive
The following points mentioned on the website are positive: Business and Enterprise specify “no training” for corporate data by default; Business refers to a Data Processing Addendum; Enterprise mentions support for GDPR compliance as well as data residency options, and relevant certifications and standards such as SOC 2 Type 2 and ISO/IEC 27001, 27017, 27018, and 27701 are listed.
Negative
A negative or limiting aspect is that the ChatGPT website explicitly states for the general end-user plans—Free, Go, Plus, and Pro—that content may be used for model training, though with an “opt-out available” option. Furthermore, the website does not specify a specific server location or data center for standard use. EU data residency is listed on the pricing page only for the Enterprise plan; for the Business plan, it is marked as “No.” Subprocessors and detailed server locations are not specified on the ChatGPT domain website evaluated here.
Server Location
No specific server or data center location is listed on the website. On the pricing page, only “Data residency in US, EU, UK, JP, CA, KR, SG, IN, AU, UAE” is listed for the Enterprise plan; for the Business plan and end-user plans, no data residency in the EU is available there.
4.0 (1)

Link

Link

“Get everything you need to build a website your way.”

Wix is a no-code website builder that enables individuals and businesses to create websites, blogs, portfolios, online stores, and booking pages. The platform combines a drag-and-drop editor, templates, hosting, SEO, marketing, CRM, and commerce features in one interface.

Since 2026, Wix has also positioned the editor with Wix Harmony as a hybrid AI editor with prompting plus manual fine control.Wix

Get everything you need to build a website your way

7.2/10 Good

Image generation, E-commerce Optimization, Logo Design, Newsletter, SEO, Scheduling, Text generation, Website Development
Free Free website creation and publishing; a Premium plan is required for your own domain, ad-free use, or advanced business features. Subscription Light Basic plan with your own domain, hosting, AI creation tools, storage, a light marketing suite, and a few collaborators.

Core For growing websites and initial business features; includes more storage, multi-cloud hosting, basic marketing, payments, basic eCommerce, scheduling/service features, and more collaborators.

Business For businesses with growth; includes more storage, standard marketing suite, payments, standard eCommerce, scheduling/services, and more collaborators.

Business Elite For larger requirements; includes unlimited storage, multi-cloud hosting, Advanced Marketing Suite, payments, Advanced eCommerce, scheduling/services, Advanced Developer Platform, and many collaborators. Other Wix Enterprise Custom enterprise solution for larger organizations with more complex governance, support, developer, and scaling requirements. Wix refers to enterprise solutions as a separate area.

Wix Studio / Velo / Custom Hosting Solutions For agencies, developers, and more complex web projects; Wix states that selected custom hosting solutions may be available with Velo in the enterprise context.
Location: Israel Wix.com Ltd., 5 Yunitsman St., Tel Aviv, Israel. Investor Relations lists the headquarters in Tel Aviv, Israel.
GDPR: Partly GDPR assessment: From a GDPR perspective, Wix is conditionally suitable.

Positive is that Wix provides a Data Processing Agreement for users, which governs the processing of personal data between Wix and users. Wix also states that website operators can build a GDPR-compliant website with Wix, but makes it clear that website operators themselves remain responsible for what data they collect and how they process it. Also positive are security measures such as hosting on AWS and Google Cloud Platform, Equinix colocation, certifications of the infrastructure providers such as ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and PCI DSS Level 1, as well as access controls and security monitoring.

Negative is that Wix uses servers and cloud providers worldwide, may share data with affiliates, third-party providers, analytics, advertising, and social media partners, and the website operator must configure external apps, tracking, cookies, forms, and payment providers in a privacy-compliant manner themselves.

Server location: Wix has servers in multiple locations worldwide, including Europe and the USA; according to Wix, users currently cannot select or change the host server themselves. Further links: Wix DPA, Wix GDPR Help, Wix Security Measures, Wix Host Server.

Wix's Data Processing Agreement for Wix Users
1.0 (1)

Link

Link

Robotics

“More than Wisdom, Be with You”; in its online store, Unitree describes itself as a robotics company focused on the development, production, and sale of consumer and industrial robots.

Unitree develops and sells humanoid robots such as the G1, H1/H1-2, H2, and R1, as well as quadruped robots, robotic arms, LiDAR/perception products, and components. The humanoid models are primarily positioned for research, development, education, demonstration, embodied AI, teleoperation, motion research, and early industrial/service pilot projects. Unitree itself points out that global humanoid robotics is still in an early exploratory phase and that users should understand the limitations of humanoid robots before purchasing.Unitree

More than Wisdom, Be with You

3.7/10 Insufficient

Autonomous Navigation, Embodied AI, Humanoid Robots, Industrial Robots, Robot Learning, Robot Manipulation, Robot Teleoperation, Service Robots
Other Unitree R1 / R1 Air / R1 EDU Compact humanoid robot available for pre-order; according to the official store page, it features a multimodal speech/vision model, 20 to 26 degrees of freedom, open joint and sensor interfaces, and simulation platform support. According to the store description, the standard version does not support secondary development; the EDU version is recommended for customization.

Unitree G1 / G1 EDU Humanoid robot for research, development, and robotics experiments; according to the official product page, it features 23 to 43 joint motors, support for imitation and reinforcement learning, a force-controlled dexterous hand in the EDU version and options, and high mobility.

Unitree H1 / H1-2 Full-size humanoid with 3D LiDAR, depth camera, high mobility, replaceable battery, and high joint torque density; intended primarily for research, demonstration, and advanced robotics development.

Unitree H2 / H2 EDU New full-size humanoid with 31 degrees of freedom, powerful chip, bionic head, and optional EDU/development options; H2 EDU is available through sales/contact.

Custom Robots / Professional Service Unitree lists Professional Service and Custom Robots in the shop; specific services, SLAs, privacy policies, and integration packages must be requested individually.

Shipping, Customs, Import In its international shop, Unitree notes that customers are responsible for shipping costs, customs duties, taxes, and import clearance; contact information and, if applicable, a Tax ID are required for customs clearance.
Location: China Official Privacy Policy: Hangzhou Unitree Robotics Co., Ltd., Room 306, Building 1, No. 88 Dongliu Road, Binjiang District, Hangzhou, Zhejiang, China. The international store also lists: 3rd Floor, Building 1, Fengda Creative Park, No. 88 Dongliu Road, Binjiang District, Hangzhou City, Zhejiang Province, China.
GDPR: Unclear Overall assessment: Unclear to critically compliant with the GDPR. Unitree is a Chinese robotics manufacturer based in Hangzhou, China.

On the positive side, Unitree describes protective measures such as encryption, access controls, firewalls, de-identification/anonymization, host isolation, and internal access restrictions in its official privacy policy. The Unitree Go Privacy Policy also lists data subject rights such as access, rectification, erasure, withdrawal of consent, and account deletion. For certain robotics functions, Unitree states that individual control and device information is stored locally within the app or on the device and is not uploaded to servers.

A negative aspect is that no verified information was found regarding a GDPR-compliant DPA, EU representative, EU hosting, standard contractual clauses, a complete list of subprocessors, or specific GDPR corporate documentation for European B2B customers. Depending on app/product usage, Unitree potentially processes device information, IDs, location data, Wi-Fi/Bluetooth/sensor information, camera/video/image data, account data, usage data, and robot control data. The Unitree Go Privacy Policy also lists third-party providers and third-party SDKs, including iFLYTEK for real-time speech recognition.

Server location: For Unitree Go data, Unitree states that storage takes place in the People’s Republic of China. For EU customers, online store orders, support, and robotics telemetry, no reliable EU data residency is guaranteed.

Conclusion: Unitree can be very interesting for research, laboratory work, education, and robotics development. However, for GDPR-critical use in Europe, the robots should only be deployed after technical and legal review: Offline/LAN operation, disabled cloud functions, network analysis, AVV/DPA requests, sub-processor review, telemetry review, a security concept, and clear rules for camera, audio, and location data are required. No verified information is available regarding blanket GDPR compliance for corporate use within the EU.

Unitree Security Response Center
– (0)

Link

Link

Firefly: “Create like never before.”

Adobe Firefly is used to generate and edit images, videos, audio, and designs.

Adobe positions Firefly as a family of generative AI models embedded both in the Firefly web app and in Adobe flagship products such as Photoshop, Illustrator, Lightroom, InDesign, Adobe Express, and Adobe Stock. Creative Cloud provides the app, asset, collaboration, and subscription infrastructure for this.Adobe Firefly / Adobe Creative Cloud.

Creative Cloud for Business: “Create exceptional on-brand content faster.”

7.4/10 Good

Image editing, Image generation, Graphic Design, Illustrations, Sound Effects, Vector graphic, Video generation, Video editing
Free Free entry with limited access to standard and premium AI features for image, video, audio, and more. Subscription Firefly Standard Creative AI subscription with monthly generative credits, standard image features, and access to premium features via credits.

Firefly Pro More generative credits and expanded access to creative AI features.

Firefly Pro Plus Significantly more credits, broader access to advanced image/video/audio features, and external AI models within Firefly.

Firefly Premium Highest regular Firefly tier with a very high credit amount and content creation on a larger scale.

Creative Cloud Single Apps / All Apps Photoshop, Illustrator, Premiere Pro, After Effects, Express, Acrobat, and other Adobe apps; Firefly and generative credits included depending on the plan. Other Creative Cloud for Teams / Enterprise Company management, Admin Console, DPA, enterprise controls, team/brand workflows, and extended contract options.

Generative Credits / Credit Add-ons Additional credits for Firefly and Creative Cloud generative AI features.

Firefly Custom Models Enterprise feature for training brand-specific Firefly models on your own brand assets.
Location: USA Adobe, 345 Park Avenue, San Jose, CA 95110-2704, USA
GDPR: Partly Adobe documents several components relevant to the EU/EEA region for Creative Cloud for Enterprise, including Adobe Firefly: a privacy policy, a published Data Processing Agreement (DPA), a list of subprocessors, documented hosting regions in Europe, and certifications for Adobe Creative Cloud for Enterprise. At the same time, it cannot be conclusively demonstrated that the service is fully GDPR-compliant across the board, because Adobe also lists U.S. components and international subprocessors for the overall service, hosts the Adobe Admin Console in the U.S., and stores certain identity data in the U.S.; Additionally, according to the security document, certain Firefly inputs for Firefly Custom Models are processed in the AWS US East and US West regions, regardless of location. This means that use in compliance with the GDPR is possible from an EU/EEA perspective, but only under certain conditions and with a thorough review of the subscribed plan, data flows, and contractual settings.
Positive
Positive aspects include the published Data Processing Addendum, the documented involvement of Adobe Systems Software Ireland Limited as the initial recipient for European data transfers, the published list of subprocessors, the European hosting regions for Creative Cloud for Enterprise, including Adobe Firefly, the statement that content will not be used to train generative AI models, and published compliance certifications such as SOC 2 Type 2 and ISO 27001:2022 for Adobe Creative Cloud for Enterprise.
Negative
A negative or limiting factor is that Adobe does not consistently document exclusive EU/EEA processing for the entire service. The Adobe Admin Console is hosted in US-East; user licensing and identity data are stored in the U.S.; Adobe lists global subprocessors and processing locations outside the EEA. For Firefly Custom Models, Adobe also documents that certain additional Firefly inputs are currently processed, cached, and stored in AWS data centers in US-East and US-West, regardless of the user’s location. On-premises or self-hosting for Firefly/Creative Cloud is not specified on the website.
Server Location
Creative Cloud for Enterprise, including Adobe Firefly, uses Adobe Cloud Storage on AWS in multiple regions, including Europe. Content is stored in the regional storage region assigned at the time of deployment. For identity and license data, however, Adobe specifies the U.S. (Virginia and Oregon); additional edge servers are located in Ireland and France, among other places. For Firefly Custom Models, Adobe lists Ireland, Virginia, Oregon, and Japan as storage locations; in addition, certain additional Firefly inputs are currently processed in US East and US West.
– (0)

Link

Link

"The AI for your tax return"

SteuerGPT is an AI-powered chatbot for tax-related questions within WISO Steuer. Users can ask questions in everyday language while completing their tax return; the AI explains matters, guides them to the appropriate input forms, suggests missing information, and helps them understand their tax assessment notice.TaxGPT

SteuerGPT: Your digital advisor - The AI for your tax return

8.2/10 Very good

Chatbot, Tax Return
Subscription Advantage Subscription: According to the official WISO page, includes SteuerGPT as a personal AI advisor, technical hotline, tax coaching, automatic completion, and annual use in a subscription model.

Trial version: Complete testing before submission.

Note: No direct prices stated, as only model names and functions are documented here. Other Single purchase: One-time license for one tax year with SteuerGPT and filing option.

Optional additional services: ProfiCheck and buhl:Berater are offered separately via Buhl Steuerberatungsgesellschaft mbH; Buhl Data Service itself points out that it is neither obligated nor authorized to provide tax law assistance.
Location: Germany Buhl Data Service GmbH, Am Siebertsweiher 3/5, 57290 Neunkirchen (Siegerland), Germany.
GDPR: Yes Overall assessment: Well suited, with limitations for third-party data and professional use. SteuerGPT is integrated into WISO Steuer and offered by Buhl Data Service GmbH.

Positive is that Buhl, as the responsible entity, is based in Germany and, according to its own privacy policy, complies with the GDPR. For SteuerGPT, Buhl explicitly states that no personal data is used or analyzed and that the applications are operated in German data centers; according to the provider, the data therefore does not leave the European legal area. In addition, WISO Steuer cites Buhl’s own servers in Germany, encrypted transmission and storage, as well as a zero-sharing policy with no sale or disclosure to third parties.

Negative is: A specific, publicly detailed technical privacy description solely for SteuerGPT, including training logic, a list of subprocessors, and complete retention rules for AI interactions, is not reliably available in the sources reviewed. For cases in which Buhl is used as a processor and third-party data is stored on Buhl servers, for example in tax retrieval or tax submission, Buhl offers, according to tax support, a data processing agreement under Art. 28 GDPR.

Server location: according to Buhl, German data centers or Buhl’s own servers in Germany. Conclusion: For private tax returns, SteuerGPT is strongly positioned from a data protection perspective; for business use, third-party data, or particularly sensitive scenarios, the data processing agreement, purpose limitation, deletion process, and specific processing within the application should be reviewed. Sources: Buhl SteuerGPT, WISO Steuer FAQ, Buhl Privacy Policy, and tax support information on data processing agreements.

Privacy Policy
– (0)

Link

Link

“Write effortlessly and efficiently with QuillBot's suite of AI tools.”

QuillBot is an AI writing assistant focused on paraphrasing, grammar/spell checking, summarization, translation, citation, plagiarism checking, and AI detection.

Today, the product is broader than a pure paraphraser and is also positioned by QuillBot as a creative suite and as a platform for students, professionals, and creators.Quillbot

Write effortlessly and efficiently with QuillBot's suite of AI tools

7.1/10 Good

AI detector, Paraphrase, Plagiarism Check, Spell check, Translation, Summary
Free Basic access with limited paraphrasing, few modes, simple grammar functions, limited humanizer, simple summaries, and a restricted AI Detector. Subscription Premium Everything in Free plus unlimited paraphrasing, more modes, advanced grammar suggestions, unlimited Humanizer with tone/score insights, Custom Summaries, unlimited AI Detector, and plagiarism prevention.

Team Plan Multiple Premium subscriptions in one team management system; includes Team Style Guide, Dictionary, Admin Panel, Usage Reports, Writer Management Dashboard, Data Controls, and centralized billing.
Location: USA QuillBot / Learneo, Inc. business 303 East Wacker, Suite 2101, Chicago, Illinois 60601, United States of America.
GDPR: Partly GDPR assessment: From a GDPR perspective, QuillBot is conditionally suitable.

Positive is that QuillBot/Learneo mentions GDPR, CCPA, and security-related references, describes privacy rights for EEA/UK users, and names safeguards for data transfers from the EU such as the EU-US/Swiss-US Data Privacy Framework, UK Extension, and Standard Contractual Clauses. It is also positive that QuillBot states for the Team Plan that text inputs are not used to train the language models; according to QuillBot’s standard policy, third-party providers are not permitted to use user data to train their AI models.

Negative is that QuillBot uses inputs and usage data from regular users to provide, personalize, and also train/improve the services; according to the Help Center, browser extension storage is enabled by default, and opt-outs are required.

Server location: No pure EU data residency guaranteed; QuillBot/Learneo mentions offices in the USA and India, global service providers, and possible transfers from the EU. Further links: QuillBot Premium, QuillBot Data Use, EU Transfer Safeguards.

Privacy Policy
– (0)

Link

Link

Build with the latest DeepSeek models

DeepSeek currently offers two LLM access points via its API: deepseek-chat and deepseek-reasoner. According to the official documentation, both currently correspond to DeepSeek-V3.2 with a 128K context window; deepseek-chat stands for Non-Thinking mode, deepseek-reasoner for Thinking mode. The API is OpenAI-compatible and supports, among other things, JSON Output, Tool Calls, Chat Prefix Completion, and, in the case of deepseek-chat, additionally FIM Completion.DeepSeek API

LLM "Build with the latest DeepSeek models"

4.0/10 Limited

Chatbot, Function calls, AI agents, AI inference, LLM API, open-source model, Programming, Reasoning model, Language model, Text generation
Other Token-based API usage Billing based on input, output, and cache-hit/cache-miss tokens.

deepseek-v4-flash Faster, more efficient model with Thinking and Non-Thinking mode, 1M context, JSON output, tool calls, and chat prefix completion.

deepseek-v4-pro More powerful model for more complex reasoning, coding, agents, and long contexts; also supports 1M context, JSON output, and tool calls.

OpenAI-/Anthropic-compatible API Usage via an OpenAI-compatible base URL or an Anthropic-compatible endpoint; suitable for existing SDKs and agent tools.

Open Weights / Self-hosting path DeepSeek-V4 was released as an open-weights family; self-hosting requires your own infrastructure and should be considered separately from the official API.
Location: China No verified official full address data available on the DeepSeek website/policy
GDPR: No The documentation available on the specified provider’s domain does not demonstrate full compliance with the GDPR for users in the EU/EEA. Although technical information on isolation and caching can be found on the API documentation website, this domain lacks reliable information on EU/EEA server locations, EU data residency, T&Cs/DPA, subprocessors, opt-out from AI training, and relevant certifications. From an EU/EEA perspective, this is not sufficient for a positive GDPR assessment.
Positive
Technical safeguards are clearly documented within the API documentation: There is documented “user_id” isolation for privacy management, a note advising against entering personal data into “user_id,” as well as information on isolated cache entries and the automatic deletion of unused cache entries. In addition, the API documentation references open-source sources and specifies an MIT license for the API documentation.
Negative
A major negative factor for an EU/EEA GDPR assessment is that the website contains no reliable statements regarding EU/EEA data centers, EU data residency, data processing agreements (DPAs), subprocessors, certifications, or a contractually or organizationally documented exclusion of training with customer data. The website also does not specify an on-premises or self-hosting option for the specific API service under consideration.
Server Location
Not specified on the website. Although the API documentation lists the base API address as 'https://api.deepseek.com', the website does not indicate a server or data center location within or outside the EU/EEA.
– (0)

Link

Link

"Health. Powered by Ada."

Ada is an AI-powered symptom checker and digital health assistant for end users, as well as an enterprise platform for symptom intake, care navigation, clinical handovers, and insights. According to the terms, Ada uses a proprietary probabilistic reasoning technology built on a medically curated knowledge base; for partners, additional routing, integration, and handover functions are offered.Ada Health

Health. Powered by Ada

6.9/10 Solid

Chatbot, Medical Checkup, Symptom Check
Free Free symptom checker for users with 24/7 access, AI-powered symptom assessment based on clinical evidence, a personalized assessment report, and the option to share relevant information with doctors. Ada explains that the assessment technology is available free of charge to people with smartphones and is offered without advertising. Other Ada Assess / Enterprise Enterprise solution for healthcare organizations, insurers, clinics, and digital care offerings. Includes intelligent symptom assessments, care navigation, clinical handover, insights, partner integration into websites, apps, or portals, simplified language, patient-friendly reports, SSO, and regular optimizations.

Partnerships / Demo / individual contracts According to the Help Center, Ada is financed through private investments, commercial relationships with healthcare systems, insurers, and life science companies, as well as grants and partnerships. Enterprise use apparently takes place individually via a demo/contact process; no public standard pricing was found.
Location: Germany Ada Health GmbH, Neue Grünstraße 17, 10179 Berlin, Germany.
GDPR: Partly From the perspective of a user in the EU/EEA, there are several strong GDPR indicators on the website: Ada Health GmbH identifies itself as the controller pursuant to Art. 4(7) of the GDPR, describes the rights of data subjects, specifies processing based on Article 28 of the GDPR (data processing by a processor), stores personal data within the EU according to its privacy policy, and states that health data and other sensitive data always remain within the EU. At the same time, the website also lists subprocessors outside the EEA or U.S. providers and refers to third-country mechanisms. The website does not indicate a straightforward, fully documented EU-only operation without such restrictions, an explicitly published customer data processing agreement (DPA) available for download, or a clearly documented on-premises/self-hosting option. Therefore, GDPR-compliant use within the EU/EEA is plausible, but it is documented only under certain conditions and not comprehensively for all use cases.
Positive
The following are positively confirmed: a privacy policy with explicit reference to the GDPR; Ada Health GmbH in Berlin as the data controller; storage of personal data within the EU; a statement that health data and other sensitive data always remain within the EU; listing of data processors and Data Processing Agreements pursuant to Art. 28 GDPR; published list of service providers; ISO 27001 and ISO 13485 certifications on the website; security page with a statement regarding EU servers and “security by design.”
Negative
Negative or limiting aspects include: According to the privacy policy, limited processing by subprocessors outside the EEA may take place; the list of service providers includes several U.S. providers; an explicit customer DPA is not listed on the website as a freely accessible document; an explicit EU data residency commitment for all data flows across all product variants is not fully articulated; On-premises, self-hosting, and private cloud options are not listed on the website; a clear contractual “no training” path for all inputs and outputs is not specified on the website.
Server Location
The website lists the EU as the storage location. The privacy policy states that personal data is stored in the European Union on cloud servers operated by AWS EMEA in Luxembourg and Google Commerce Limited in Ireland. The “How is my data stored by Ada?” help page specifically mentions a Google Cloud location in the EU, “Europe-West1” in Belgium, as well as MongoDB Cloud Services in that data center. Additionally, the privacy policy states that health data and other sensitive data always remain within the EU. However, limited data may be processed by subprocessors outside the EEA.
– (0)

Link

Link

“AI solutions that help you get work done.”

DeepL is a German language AI platform for translation, document translation, writing assistance, real-time speech translation, and API integration.

The platform currently offers DeepL Translator, DeepL Write, DeepL Voice, DeepL API, and DeepL Agent, among other services. DeepL reports millions of individual users and over 200,000 business customers.DeepL

AI solutions that help you get things done

7.4/10 Good

LLM API, Paraphrasing, Spell Check, Translation
Free Free access to translations and DeepL Write, with limitations on character count, document types, features, and data protection. Suitable for personal or occasional use; recommended for professional use only to a limited extent. Subscription Individual: For individuals who want to use DeepL professionally for translations and documents.
Team: For teams with higher usage volumes and shared management.
Business: For businesses with greater needs, advanced business features, and higher usage volumes. Other DeepL API for developers and businesses, offering usage-based integration into their own products, websites, apps, and workflows. Additionally, there are enterprise and business options for larger organizations with advanced security, management, and integration requirements.
Location: Germany DeepL SE, Maarweg 165, 50825 Cologne, Germany.
GDPR: Partly DeepL details several robust GDPR/data protection measures for the EU/EEA region on its website: headquarters in Germany, a privacy policy, a notice regarding the General Terms and Conditions for DeepL Pro, encryption, ISO 27001 and SOC 2 certifications, as well as an EU data residency option for certain Business and Enterprise plans. At the same time, standard usage is not consistently EU-local: DeepL describes a hybrid infrastructure for 2026 with AWS as a subprocessor and notes that, if AWS is accepted, content may generally be processed in global AWS regions; EU-exclusive processing is only guaranteed through data residency or specific contract/plan options. DeepL is therefore capable of GDPR-compliant use within the EU/EEA, but this is subject to specific product, contractual, and configuration requirements.
Positive
The following aspects are confirmed as positive: its own privacy policy, headquarters in Germany, an explicit reference to a data processing agreement (DPA) under Article 28 of the GDPR for DeepL Pro, a sub-processor structure with AWS, technical safeguards such as encryption, as well as certifications and evidence of compliance with ISO 27001 and SOC 2 Type II. For paid subscriptions, it is also stated that data remains private/confidential and is not used to train models outside the customer’s account. According to the website, regional data residency is available for certain plans and is included in the Enterprise plan.
Negative
A negative or limiting factor is that, according to its own documentation, DeepL will no longer process data exclusively within Europe as of 2026 and, when using AWS, reserves the right to process data in global AWS regions. The EU/region-lock assurance is not a general standard for all users but is tied to eligible plans or a paid add-on. A fully local on-premises offering for the actual service is not specified on the website. Furthermore, a publicly accessible detail page containing a complete list of subprocessors or an appendix is not directly displayed on the website among the reviewed pages; instead, the site refers users to the DPA and Trust Center.
Server Location
The website describes a hybrid infrastructure: DeepL-administered servers in data centers in Europe plus AWS infrastructure. For Europe, the white paper names AWS Stockholm as the EU region and also mentions EU-based data centers for key material. At the same time, processing can take place in various or global AWS regions without a data residency feature. For processing exclusively within the EU, DeepL refers to a selectable region/data residency depending on the pricing plan.
– (0)

Link

Link

“Where go-to-market teams go to grow”

HubSpot is an integrated customer platform with Smart CRM, Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub, as well as Breeze as an embedded AI layer.

The platform combines customer, sales, marketing, service, and content processes in one system. AI features support, among other things, content creation, prospecting, data preparation, support automation, and analytics.HubSpot

Where go-to-market teams go to grow

7.7/10 Good

Automation, Data Analysis, Customer Support, Lead generation, Newsletter, SEO, Text generation, Advertisements
Free Free basic features for CRM, contacts, deals, forms, email tools, and getting started with HubSpot. Subscription Starter Customer Platform Starter features across core HubSpot products for small businesses and startups.

Professional Hubs Advanced automation, reporting, campaign, sales, service, or content features by hub.

Enterprise Hubs Advanced scaling, governance, security, reporting, permissions, and enterprise features. Other HubSpot Hubs Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub; scope of features varies by hub and tier.

Add-ons / Breeze AI Additional seats, limits, AI/Breeze features, integrations, and enterprise options depending on the contract.
Location: USA 25 First Street, 2nd Floor, Cambridge, MA 02141, USA l
GDPR: Partly For users in the EU/EEA, GDPR-compliant use is generally documented, but not unconditionally. Positive aspects include a published Terms of Service/Data Protection Agreement (DPA) with GDPR provisions, EU hosting in Germany, regional data residency with the option to migrate for paid accounts, and documented subprocessors. At the same time, HubSpot remains a U.S. provider, and the website also describes international data transfers as well as specific AI and functional subprocessors that process data in the U.S. Consequently, from an EU/EEA perspective, compliance is more conditional than fully straightforward.
Positive
The website includes a GDPR-compliant Data Processing Agreement, information on regional data centers in the EU, a list of subprocessors, details on SCCs and the Data Privacy Framework, an opt-out option for HubSpot’s proprietary machine learning training, and security and compliance information—including SOC 2 documentation—in the Trust Center.
Negative
The website also mentions processing and subprocessors outside the EU or in connection with global transfers. For HubSpot AI, the subprocessors page lists, among others, AI service providers based in the U.S. Furthermore, the website does not specify any on-premises or self-hosting options. According to the hosting FAQ, HubSpot itself is not currently ISO 27001-certified; the certification of the infrastructure provider AWS is mentioned in this regard.
Server Location
According to the website, the product infrastructure is operated on AWS in the U.S., Canada, Australia, and the European Union; Germany is specified for the EU. HubSpot accounts are hosted in one of these regional data centers, and customer data is processed and stored there. According to the website, paid accounts can be migrated to a preferred region.
– (0)

Link

Link

"The most powerful AI platform for enterprises"

Mistral AI is a French provider of generative AI with Le Chat as the user interface, Studio/API for developers, Mistral Vibe for coding workflows, and Mistral Compute as a European-hosted AI cloud.

The platform covers chat, search, document analysis, multimodal models, agents, workflows, API usage, and self-deployment. A key differentiator is the combination of SaaS, API, open-weight models, and local/on-prem deployment.Mistral AI

The most powerful AI platform for enterprises

7.9/10 Good

Image generation, Chatbot, Document analysis, Embeddings, AI agents, LLM API, Multimodal AI, open-source model, Programming, Reasoning model, Research, Language model, Text recognition, Text generation, Translation, Summary
Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; suitable for getting started and everyday use. Subscription Le Chat Pro More messages and web searches, more Extended Thinking and Deep Research, document storage, many projects, Mistral Vibe for coding, chat/email support, and high-quality image generation.

Le Chat Team Secure team workspace with more storage per user, domain verification, data export, and team features. Other Enterprise Private deployments with custom models, UI, and tools; individual enterprise features such as SSO, audit logs, custom limits, and private deployments.

Mistral AI Studio / API Usage-based API for models, agents, OCR, embeddings, coding, multimodal workflows, and developer integration.

Mistral Vibe / Coding Coding features in Le Chat and additional pay-as-you-go usage beyond the regular limits.
Location: France Mistral AI, 15 RUE DES HALLES, 75001 PARIS, FRANCE.
GDPR: Yes For the EU/EEA region, a well-established path to GDPR-compliant use is evident because Mistral provides a DPA/AVV that describes its role as a data processor for business customers, documents GDPR rights, and offers multiple deployment models with a high degree of data sovereignty. Of particular relevance is the best available option: self-hosted deployment—that is, use on the customer’s infrastructure with full control over infrastructure and data residency—supplemented by dedicated, Europe-hosted options. The standard SaaS version does not offer the same level of data minimization across all plans, as certain content in the Free plan may be used for model improvement unless the user opts out.
Positive
Positive aspects include the published DPA/AVV, the explicit role as a processor vis-à-vis business customers, documented GDPR rights, an API without model training, self-hosted deployment on customer infrastructure, hybrid and dedicated options, and Mistral Compute as a European-hosted AI cloud with EU Tier 3+ data centers. In addition, the website lists certifications and frameworks such as ISO 27001/27701 and SOC 2 Type II, as well as other security features.
Negative
A negative or limiting aspect is that standard use is not entirely training-free: In the Free Plan, conversations may be used for model improvement unless the user opts out. The DPA also permits international data transfers based on adequacy decisions or SCCs. A specific, complete server location for all products is not consistently specified on the website; likewise, the list of subprocessors is only referenced via the Trust Center and is not explicitly stated on the evaluated pages.
Server Location
For Mistral Compute, the website mentions “EU Tier 3+ data centers” and describes the service as a “European-hosted AI cloud”; a location in Sweden is also mentioned. For Studio/SaaS as a whole, the evaluated pages do not specify a consistent, complete server location for all services.
– (0)

Link

Link

"co-create intelligence with everyone"

MiniMax is a multimodal foundation model provider with models for text, coding, agents, speech, video, music, image, and multimodal applications. Its products include MiniMax Agent, Hailuo AI, MiniMax Audio, Talkie, and an Open Platform for developers and enterprises.MiniMax

LLM “co-create intelligence with everyone”

5.9/10 Limited

Image generation, Chatbot, AI agents, LLM API, Multimodal AI, Musikgenerierung, open-source model, Programming, Voice output, Language model, Stimmenklonen, Text generation, Video generation
Subscription Token Plan – Starter Subscription access for developers with access to MiniMax models via Token Plan API key; text models with a 5-hour rolling window, plan-dependent limited multimodal quotas.

Token Plan – Plus Expanded Token Plan with a higher M2.7 quota and additional daily multimodal quotas for Speech, Image, and other models.

Token Plan – Max Higher standard Token Plan with a larger request quota and expanded daily quotas for multimodal models.

Plus-Highspeed / Max-Highspeed / Ultra-Highspeed High-speed Token Plans with access to faster M2.7/M2.5 Highspeed models and expanded quotas for coding-related workflows. Other Pay-as-you-go API Standard Open Platform API key for usage-based billing according to actual consumption; supports text, video, speech, image, and additional modalities.

Audio Subscription / Video Packages Separate packages for speech and video generation with product-specific quotas and billing logic.

Local / Private Deployment Open M2 model weights can be run locally or privately via Hugging Face and frameworks such as SGLang, vLLM, Transformers, ModelScope, or NVIDIA NIM.
Location: China Xuhui District in Shanghai.
GDPR: Unclear For the European market, it is unclear whether the website is GDPR-compliant. On the positive side, a privacy policy with EEA/UK/Switzerland-specific information has been published, and there is a documented local deployment path for MiniMax-M2.7. However, for SaaS/API use, the website lacks essential evidence such as EU/EEA data residency, server locations, a readily accessible Data Processing Agreement (DPA), a list of subprocessors, a clear contractual exclusion of model training using customer data, and robust compliance certifications.
Positive
The website features a published privacy policy with a reference to “jurisdiction-specific provisions” for users in the EEA, UK, and Switzerland. In addition, a local deployment path for MiniMax-M2.7 is documented; there, “complete data privacy” is explicitly described for Mac Studio when operating entirely locally. Furthermore, developers can host MCP services themselves.
Negative
The website does not specify an EU/EEA server location, EU data residency, a specific, accessible text of the AVV/DPA, a list of subprocessors, an explicit opt-out from AI training for general models, or ISO 27001, SOC 2, or similar certifications. The Terms of Service name Nanonoble Pte Ltd. as the provider and refer to Singaporean law; this does not replace GDPR compliance documentation for EU/EEA use.
Server location
Not specified on the website. API endpoints are documented under 'api.minimax.io', but there is no information on the location of servers or data centers, nor is there any mention of EU/EEA data residency.
– (0)

Link

Link

Robotics

“The world’s leading robotics company” / Product positioning: “Robots for the Real World”.

Boston Dynamics is a U.S. robotics manufacturer with products including Spot, Stretch, Atlas, and Orbit. Spot is a mobile four-legged inspection robot, Stretch is a mobile warehouse robot for case handling, Atlas is an electric humanoid robot for industrial material handling applications, and Orbit is software for fleet management and data analysis.Boston Dynamics

Robotic "The world’s leading robotics company"

7.5/10 Good

Autonomous Navigation, Data Analysis, Humanoid robots, Industrial robots, Warehouse robot, Robotic Manipulation, Robotic teleoperation, Service robot
Other Atlas Humanoid enterprise robot for industrial work, material handling, workflow integration, autonomous tasks, fleet skill rollout, MES/WMS integration, and early customer deployments. Public pricing not available; contact/qualification required.

Spot Commercially available four-legged mobile robot for inspection, security, digital twin, construction sites, energy, research, and hazardous environments; includes SDK, payloads, arm, tablet, and support options.

Stretch Commercial warehouse robot for trailer unloading, container unloading, and case handling; operates within existing warehouse infrastructure and is designed for continuous package/case handling processes.

Orbit Robotics fleet and data platform for managing robot deployments, inspection data, site maps, metrics, missions, and integrations with enterprise systems.

Spot Care / Stretch Care Support and service offerings for long-term operation, maintenance, training, and reliable use of robot fleets.

Developer Documentation / SDK Development documentation and SDKs, particularly for Spot, for integrating custom applications, payloads, data flows, and robotics workflows.

Early Adopter / Enterprise Deployment Atlas is currently being rolled out through qualified enterprise inquiries and early deployments; there is no standard public purchasing channel for private individuals. (bostondynamics.com) Spot: CE conformity publicly documented.

Stretch: EU conformity officially stated in the brochure.

Atlas: No public record of CE conformity found; verify separately before use in the EU.
Location: USA Boston Dynamics, Inc., 200 Smith Street, Waltham, MA 02451, USA.
GDPR: Partly The website documents certain data protection and security measures for users in the EU/EEA, but does not provide full, clearly documented GDPR compliance for the entire solution. Positive aspects include a general reference in the privacy policy to EEA/GDPR rights, selectable data regions for Orbit data, and on-premises/VM deployment options. At the same time, the website mentions data transfers to the U.S., uses AWS for the hosted Orbit offering, and does not display an explicit AVV/DPA or a list of subprocessors on the website. From an EU/EEA perspective, GDPR-compliant use therefore appears plausible only under certain conditions, particularly with appropriate contract terms and preferably with local or customer-controlled deployment.
Positive
The following are positively documented: a privacy policy with an explicit section for individuals in the EEA, Orbit data storage in the region specified at the time of purchase, on-premises options via “Site Hub” or VM deployment, data encryption, SSO support, and a “SOC2 Type II certified” designation mentioned on the Orbit product page.
Negative
Negative or incomplete: The website does not specify a concrete EU/EEA server location for the cloud offering, but only mentions AWS and a region requested by the customer. The general privacy policy states that personal data may be transferred to other countries. The Spot Privacy Notice also states that service logs and performance metrics transmitted to Boston Dynamics are processed in the U.S. An explicit Data Processing Agreement (DPA), a list of subprocessors, a reliable statement regarding EU data residency as the standard, and a clear commitment that customer data will not be used to train general AI models are not provided on the website.
Server Location
For Orbit Cloud, the website lists AWS as the hosting provider and states that Orbit data is stored in the region selected at the time of purchase. A specific EU/EEA data center location is not specified on the website. For service logs and performance metrics transmitted to Boston Dynamics, the Spot Privacy Notice specifies that processing takes place in the U.S.
– (0)

Link

Link

“Into the unknown …”

DeepSeek is an AI assistant and a model/API platform from Hangzhou DeepSeek Artificial Intelligence Co., Ltd.. Officially, DeepSeek promotes its chat for coding, content creation, file reading, and long-context conversations; the app additionally lists web search, deep-think, file upload, and text extraction. For developers, there is an OpenAI-compatible API with chat/reasoning models as well as features such as function calling, JSON output, and thinking mode.DeepSeek

Into the unknown … Free access to DeepSeek. Experience the intelligent model

4.3/10 Limited

Chatbot, Programming, Reasoning model, Research, Language model, Text generation, Summary
Free According to the official website, DeepSeek offers free access to DeepSeek Chat via web/app. The official app describes features for AI chat, problem-solving, and general assistance; the chat page mentions, among other things, coding, content creation, file reading, and long-context chat. Other DeepSeek API: Separate usage-based model for developers and businesses. The API is billed based on input and output tokens; the API documentation mentions, among other things, OpenAI-/Anthropic-compatible usage, API key, base URLs, and current model access such as deepseek-v4-flash and deepseek-v4-pro. Older models such as deepseek-chat and deepseek-reasoner are, according to the API documentation, intended to be phased out.
Location: China In the accessible official English sources, DeepSeek does mention Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and a registered address in China, but no fully verifiable postal business address.
GDPR: No Although the website does include a privacy policy, key documentation is missing to ensure robust GDPR-compliant use throughout the EU/EEA. In particular, the website does not specify a specific server or data center location, EU data residency, a Data Processing Agreement (DPA) for customers, a list of subprocessors, or relevant certifications. The privacy policy also mentions international data transfers and the use of anonymized call data for training purposes with an opt-out option. Thus, based on the website documentation, fully GDPR-compliant use for EU/EEA users is not substantiated.
Positive
Positively documented are a privacy policy, data subject rights such as access, rectification, deletion, export, and the option to opt out of AI training; security details regarding TLS 1.3 and AES-256; and a reference to safeguards for international data transfers, such as Standard Contractual Clauses (SCCs) and data processing agreements with service providers.
Negative
On the negative side, the website does not specify an EU/EEA server location, does not guarantee EU data residency, no Data Processing Agreement (DPA) is available to customers, no subprocessors are named, no certifications such as ISO 27001 or SOC 2 are listed, and no clearly documented enterprise/private cloud/on-premises solution for straightforward EU-compliant use is described. In addition, the privacy policy provides for training using anonymized conversation data unless users opt out.
Server Location
Not specified on the website. The privacy policy only states that data may be transferred to and processed in other countries; no specific location of servers or data centers in the EU/EEA is mentioned.
– (0)

Link

Link

Through the Claude API, Anthropic offers state-of-the-art LLMs for natural language processing, reasoning, coding, agent-based workflows, tool usage, and document-related tasks. According to the official model overview, all current Claude models support text and image input, text output, multilingual capabilities, and vision. For direct API access, Anthropic recommends the Messages API; additionally, Managed Agents are available for longer-running tasks.Anthrophic Claude API Documentation

LLM: "a highly performant, trustworthy, and intelligent AI platform"

6.9/10 Solid

Document analysis, Function calls, AI agents, LLM API, Multimodal AI, Programming, Reasoning model, Language model, Text generation
Free Anthropic states that new users receive a small amount of free credits to test the API. However, this is not a traditional, permanent free plan in the SaaS sense, but rather a trial credit. Other Token-based Claude API Billing based on model families such as Opus, Sonnet, and Haiku, as well as input, output, cache-write, and cache-read tokens.

Prompt Caching Reuse of large prompts, system instructions, or document contexts to reduce costs and latency. Batch API Asynchronous processing of large volumes of requests with a reduced billing model.

Long Context / 1M Context Available for certain current models; suitable for very large documents, codebases, and analysis contexts.

Data Residency / Third-Party Platforms Claude is also available via AWS Bedrock, Google Vertex AI, and Microsoft Foundry; regional pricing and data management depend on the respective platform.
Location: USA Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA
GDPR: Partly The documentation on platform.claude.com details specific privacy-related components for use in the EU/EEA context, but does not provide comprehensive evidence of GDPR compliance for standard use. Positive aspects include documented data residency controls, zero data retention upon request, and self-hosted sandboxes for parts of the execution. At the same time, the website currently lists only “us” as the workspace geo for the First-Party Claude API; an EU/EEA data center or EU data residency is not specified on the website. Furthermore, the AVV/DPA, subprocessors, and specific certifications cannot be found on the website itself or are only indirectly referenced via a link to an external trust center. For users throughout Europe, GDPR-compliant use is therefore only realistic under certain conditions and following their own contractual and organizational review.
Positive
The website documents data residency controls via 'inference_geo' and 'workspace geo', zero data retention as a special contractual provision available upon request, as well as self-hosted sandboxes, where tool execution and the sandbox file system remain on customer-controlled infrastructure. In addition, the AWS variant explicitly designates Anthropic as the data processor for inference inputs and outputs.
Negative
The website currently documents only “us” as an available option for “workspace geo”; an EU/EEA data residency or an EU data center location is not specified. For the standard API, “global” is also documented as a possible inference route, meaning potentially worldwide Anthropic data centers. The Terms of Service (TOS)/Data Processing Agreement (DPA), subprocessors, specific server locations in the EU/EEA, and relevant certifications are not listed on the website or are not viewable on the domain itself.
Server Location
No EU/EEA server location is listed on the website. For first-party data residency, only “us” is documented as the sole available “workspace geo”; for “inference_geo,” both “us” and “global” are described. For Claude Platform on AWS, it is also stated that, when set to “global,” inference can be routed to any of Anthropic’s data centers worldwide.
– (0)

Link

Link

“Search your company knowledge smarter with AI agents.”

TextCortex is an AI platform for Enterprise AI, Company Knowledge, Workflow Automation, and AI Agents.

Officially, the product is now positioned as a model-agnostic agent infrastructure that enables companies to create AI agents without code, apply them to company data, and integrate them into existing work environments. At the same time, the pricing page still highlights strong classic assistance features such as writing, translation, rewriting, voice features, data analysis, and browser integration.Textcortex

Search your company knowledge smarter with AI agents

7.2/10 Good

Automation, Image generation, Chatbot, Data Analysis, AI agents, Paraphrase, Reasoning model, Text generation, Translation, Knowledge Base
Free Free basic use of many core features; suitable for testing and for simple AI writing and chat workflows.

14-day trial period TextCortex mentions a 14-day trial period to try out all features with higher usage. Subscription Extended access to AI writing features, ZenoChat, reasoning/model features, knowledge features, image/text generation, and more usage capacity. Other Enterprise Multiple seats, Enterprise Knowledge Search, dedicated support, secure team/company features, higher storage/usage limits, and custom requirements.
Location: Germany Text Cortex AI UG (limited liability), c/o WeWork, Kemperplatz 1, 10785 Berlin, Germany
GDPR: Partly GDPR assessment: From a GDPR perspective, TextCortex is well suited to conditionally well suited, especially for European companies.

Positive is that TextCortex is a German company based in Berlin, bases its privacy policy on the GDPR, and according to its own statements hosts services exclusively in the EU on GDPR-compliant servers. TextCortex also states that it does not use customer data for model training or fine-tuning; according to the Help Center, Enterprise data is not used for training.

Negative is that, according to TextCortex, optional services or LLMs outside the EU are safeguarded via the EU-US Data Privacy Framework or Standard Contractual Clauses; these optional third-party data flows must be reviewed on a case-by-case basis.

Server location: According to TextCortex, generally the European Union; optional external LLMs/services may be located outside the EU. Further link: TextCortex Privacy Policy, Imprint, Data Handling, and Enterprise data notices.

Privacy Policy
– (0)

Link

Link

“Your writing assistant”

LanguageTool is primarily an AI editing tool: it improves existing texts with suggestions for grammar, spelling, punctuation, style, tone, and in some cases rephrasing, rather than primarily generating new content like a classic GenAI writer. It is available via web editor, browser, Word, Google Docs, LibreOffice, mail integrations, as well as on Windows/macOS/iOS, and supports more than 30 languages. For developers, there is also an HTTP API and an open-source core technology for self-hosting.Language Tool

More than a Grammar Checker - Your writing assistant

8.3/10 Very good

Paraphrase, Spell check, Text generation
Free Free basic version for spelling, grammar, and style checking; some free services are also accessible without an account. Subscription Premium / Individual Advanced checks, longer texts, style and tone suggestions, as well as additional writing features compared to Free.

Teams All Premium features plus user management, Team Style Guide, Team Dictionary, and higher text lengths for teams. Other Business DPA available; core functionality open source, own server possible locally or in the cloud; public HTTP API or developer options available.
Location: Germany LanguageTooler GmbH, Boschstraße 23a, 22761 Hamburg, Germany. For the service/data protection context relevant today, Learneo officially states: Learneo, Inc., 2261 Market Street #10569, San Francisco, CA 94114, United States of America
GDPR: Yes LanguageTool provides a robust path to GDPR-compliant use within the EU/EEA because it has a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR and, at the same time, offers a clear self-hosting/on-premises option for its core technology. For the standard SaaS offering, the situation is mixed: The website mentions data flows to the U.S., and the DPA explicitly states that Learneo is a recipient of European data in the U.S. The best available option is therefore on-premise or self-hosting use within the organization’s own or controlled EU/EEA infrastructure.
Positive
Positive aspects include the published T&C/DPA, the documented sub-processors, the reference to the EU GDPR in the DPA, the option to object to changes in subprocessors, the statement that user input is not used to train language algorithms or models, and the openly documented open-source core technology with self-hosted servers. In addition, LanguageTool specifies only servers in Germany and an on-premises version for business documents.
Negative
A negative aspect is that the website for using the service also lists processing locations in Germany, Ireland, and the U.S., and the DPA explicitly describes the receipt of European data in the U.S. by Learneo. A general, clearly guaranteed EU data residency for all SaaS usage within the EU/EEA is not explicitly described on the website as a standard commitment. Certifications such as ISO 27001 or SOC 2 are not listed on the website.
Server Location
The website lists several locations for LanguageTool: in the privacy policy for the use of the services, Germany, the U.S., and Ireland; in the DPA, Telekom Germany, Hetzner, AWS Germany, Google Cloud Platform in Dublin, and Cloudflare in the U.S. are listed as subprocessors, among others. A company PDF also states that LanguageTool uses only servers in Germany; however, this statement appears alongside other information on the website that mentions international processing locations.
– (0)

Link

Link

OpenAI offers a broad range of models via the API for text generation, reasoning, coding, tool use, structured outputs, and document-centric workflows.

According to the official model overview, the current models support text and image input, text output, multilingual capabilities, and vision; they are available through the Responses API and client SDKs. For complex tasks, OpenAI recommends gpt-5.4 by default; for lower latency and cost, OpenAI points to gpt-5.4-mini and gpt-5.4-nanoOpen AI

LLM “Access our frontier models and APIs.”

8.0/10 Very good

Image Generation, Embeddings, Function Calling, AI Agents, LLM API, Multimodal AI, Programming, Reasoning Model, Text-to-Speech, Language Model, Text Generation, Transcription, Video Generation
Free There is a free usage tier in the API rate limit system for users in permitted geographies Other Token-based API usage Billing by model, input/output tokens, cached input, audio/image/tool usage, and other usage-dependent factors.

Batch / Flex / Priority / Scale Tier Options for controlling costs and latency for larger or plannable workloads.

Fine-Tuning / Evals / Tools / Agents Additional API features for customization, evaluation, agents, web search, file search, code interpreter, realtime, and structured outputs.

Data Residency / ZDR / EKM Enterprise-grade data controls with regional storage/processing, Zero Data Retention or Modified Abuse Monitoring, and external key management.
Location: USA OpenAI OpCo, LLC, 1455 3rd Street, San Francisco, CA 94158, USA
GDPR: Partly For users in the European area, GDPR-compliant use is generally possible according to the best available option documented on the website, but only under conditions. A positive point is that OpenAI describes on the developer website EU data residency for 'Europe (EEA + Switzerland)' with regional storage and regional processing for supported services, and also documents project-related data controls such as 'Zero Data Retention' and 'Modified Abuse Monitoring'. At the same time, according to the website, restrictions apply: data residency is eligibility-based, subject to additional requirements for non-US regions, does not apply to system data, and does not apply equally to all functions.
Positive
Documented on the website are EU data residency for 'Europe (EEA + Switzerland)' via 'eu.api.openai.com', regional storage and regional processing for many supported API services, as well as data controls under which, according to the table, API content is not used for training. In addition, there is 'Zero Data Retention' or 'Modified Abuse Monitoring' as configurable controls after approval.
Negative
The website does not name a specifically designated EU server location at the country level or a specific data center. Data residency is not freely available by default, but only after review or approval. It explicitly does not apply to 'System Data', and individual functions are restricted or cannot be used in an EU-compliant manner, such as notes on realtime tracing or certain storage-related or third-party-adjacent functions. I could not find a DPA/AVV or a list of subprocessors on the specified domain.
Server location
For data residency, the website names the region 'Europe (EEA + Switzerland)' with the endpoint 'eu.api.openai.com'. A specific country, a specific server location, or a specific data center within the EU/EEA is not specified on the website.
– (0)

Link

Link

Turn your ideas into apps

Base44 is an AI-powered app builder that creates functional apps using natural language.

Officially, Base44 lists productivity apps, back-office tools, customer portals, and complete enterprise products among its target use cases. In addition to the builder, the platform also includes authentication, database, storage, email, payments, integrations, backend functions, and hosting.Base44

Build Apps with AI in Minutes

6.4/10 Solid

App Development, Programming, Website Development
Free Free Plan – includes core features such as authentication, database functionality, and analytics. Officially, Base44 states 25 Message Credits per month; regarding Integration Credits, there is conflicting information on the official pages, so no confirmed number is given here. Subscription paid subscription plans: Starter, Builder, Pro, Elite. Subscriptions can be taken out monthly or annually. Starter is intended for initial apps/projects; Builder adds, among other things, backend features, domain, GitHub integration, and model selection; Pro expands for more complex applications; Elite offers higher credits and premium support. Other Enterprise / Custom Sales for larger organizations; in addition, Base44 works with Message Credits and Integration Credits, which are reset monthly depending on the plan. There are also Promo Codes/Gift Cards as well as a separately mentioned backend offering, which according to the documentation is free while in beta.
Location: Israel Wix.com Ltd., 5 Yunitsman St, Tel Aviv, Israel.
GDPR: Partly Base44 documents several data protection and compliance components relevant to the EU/EEA region, including a privacy policy, a DPA/General Terms and Conditions, a list of subprocessors, mechanisms for cross-border transfers from the EEA, and references to ISO 27001, SOC 2 Type II, and the GDPR. At the same time, its own list of subprocessors shows that key services for hosting, servers, analytics, and LLM calls are predominantly located in the U.S., and one service provider is based in Israel. The website does not specify an explicit EU data residency for the Base44 platform itself, an EU data center as a standard option, or an on-premises/self-hosting option. For EU/EEA users, GDPR-compliant use is therefore conceivable only under certain conditions—specifically based on the DPA and the transfer mechanisms outlined therein—but is not documented as a clearly EU-resident standard solution.
Positive
Positively documented are a separate privacy policy, a DPA/SLA, a published list of subprocessors, provisions regarding erasure and data subject requests in the DPA, as well as the statement that transfers from the EEA, Switzerland, and the United Kingdom are safeguarded through permissible mechanisms such as adequacy decisions, the EU-US Data Privacy Framework, and SCCs. Additionally, Base44 mentions ISO 27001, SOC 2 Type II, and the GDPR on its security page.
Negative
A negative factor for a straightforward EU/EEA assessment is that the platform’s own list of subprocessors for data storage/hosting, server services, analytics, media hosting, and LLM calls predominantly lists U.S. locations; furthermore, Wix.com Ltd. is listed as being based in Israel. The website does not specify explicit EU data residency for the platform, EU/EEA hosting for the SaaS version, a dedicated EU data center, a private cloud option, or on-premises/self-hosting. Nor is there a clear statement on the website indicating that user inputs, uploads, or outputs are generally not used to train general models.
Server Location
According to the list of subprocessors: Mongo for “data storage and hosting” in the U.S.; Render for “server services” in the U.S.; GCP for “analytics services” in the U.S.; OpenAI and Anthropic for “API calls to LLM,” both in the U.S.; Supabase for “media hosting” in the U.S.; DataDog in the U.S.; Wix.com Ltd. in Israel. Additionally, Langfuse in Germany and Logfire in the United Kingdom are listed. The website does not specify a dedicated EU/EEA primary server location or EU data residency for Base44.
– (0)

Link

Link

“Think big. We’ll take care of the details.”

Grammarly is an AI-powered writing assistant for correction, style, tone, rewrites, and text generation.

According to the manufacturer, the tool works in more than 1 million apps and websites and also offers its own editor (“Docs”) with AI agents for drafting, revision, source/citation assistance, AI detection, and plagiarism checking. For businesses, there are team, analytics, security, and API features.Grammarly

The AI writing partner for work

7.6/10 Good

Paraphrase, Plagiarism Check, Spell check, Text generation
Free Free: Includes basic error-free writing, tone detection, and a limited number of generative AI prompts. Suitable for basic personal proofreading, but limited for heavy professional use and team oversight. Subscription Pro: For individuals or teams; additionally includes, among other things, full sentence rewrites, tone adjustment, brand/on-brand features, and more generative AI usage.

Enterprise: For larger organizations; includes, among other things, Superhuman Go, unlimited members, dedicated support, Confidential Mode, granular roles/permissions, DLP, and unlimited generative AI prompts. Other Enterprise Sales / Custom: Contact Sales for larger organizations, security requirements, and custom administration.

Education: Grammarly offers separate Education or institutional plans for educational institutions; details are not part of the standard Free/Pro/Enterprise plans.

Superhuman Go / Suite context: Grammarly Enterprise is positioned through Superhuman Go; this expands Grammarly with context-aware AI agents in apps and workflows. Grammar, style, tone, AI writing, rewriting, proofreading, plagiarism check, AI detector, citations, Brand Voice, translation, email writing, spell check
Location: USA Superhuman Platform Inc., 2261 Market Street STE 85232, San Francisco, CA 94114, United States.
GDPR: Partly From the perspective of users in the EU/EEA, GDPR-compliant use is documented only under certain conditions. Positive aspects include a privacy policy, a DPA/AVV-style agreement, references to GDPR compliance, the EU-U.S. Data Privacy Framework, and opt-out or default-off rules for product training in certain plans. At the same time, the website lists U.S.-based AWS data centers—specifically the U.S. East region—as the hosting location; an EU data residency or EU/EEA server option is not specified on the website. As a result, its use in Europe is viable only with additional contractual and organizational due diligence, rather than as a standard SaaS solution that is clearly and fully EU-resident.
Positive
The website includes a privacy policy, a Data Privacy Addendum, information on the GDPR and the EU-US Data Privacy Framework, several security certifications, and a documented option to disable the use of content for product improvement and training. According to the website, product training is disabled by default for Enterprise plans, Business/Pro plans purchased through sales, and Education plans.
Negative
The website lists US-based AWS data centers—specifically the US East region—as the storage location. The website does not specify EU data residency, EU/EEA data centers, an on-premises option, or a self-hosting variant. The subprocessor notices also link to a Superhuman subpage rather than to a clearly embedded Grammarly details overview within the Grammarly content being reviewed.
Server Location
According to the website, data is hosted in Amazon Web Services data centers in the US East Region or in US-based data centers. EU/EEA server locations or EU data residency are not specified on the website.
– (0)

Link

Link

"Best AI Video & Image Generator" / "Free AI Video Generator"

DeeVid AI is an AI platform for text-to-video, image-to-video, video-to-video, AI effects, AI music, text-to-speech, AI avatars, and AI ads. The provider positions itself as a platform with multiple video/image models such as Veo, Kling, Sora, Runway, Stable Diffusion, Pika, and others.Deevid AI

Best AI Video & Image Generator - Free AI Video Generator

3.8/10 Insufficient

Avatarerstellung, Image generation, Musikgenerierung, Voice output, Stimmenklonen, Video generation, Advertisements
Free Free Credits / Starting Credit
New users receive a small credit allowance for testing; free users generate content with watermarks. Subscription Lite For beginners and casual creators; monthly credits, AI video, AI image, text-to-speech, voice cloning/design, AI video ads, AI avatar, AI music, templates, private creation, no watermark, commercial use.

Pro Advanced plan for creators with a higher credit allocation, greater production capacity, 1080p output, AI video/image/audio features, Character Consistency, and commercial use.

Premium For high-volume users with a significantly higher credit allocation, Fast Generation Mode, 1080p output, priority support, and expanded production volumes. Other Credit Packs Additional credits can be purchased separately; credits serve as consumption units for video, image, and audio generation.

Third-Party Models DeeVid integrates and/or routes various video/image models such as Sora, Veo, Kling, Runway, Stable Diffusion, Pika, Luma, Hailuo, and others; specific data flows depend on the selected model.
Location: Singapore 1 Raffles Place, #21-01 One Raffles Place, Singapore 048616
GDPR: No From the perspective of a user in the EU/EEA, the website does include a privacy policy and contains statements regarding encryption, data deletion, and the fact that user inputs and outputs are not used to train the company’s own AI models. At the same time, the privacy policy lists data centers in North America as the primary storage location for personal data and refers only generally to “appropriate safeguards” for international data transfers. No data processing agreement (DPA), list of subprocessors, EU data residency, EU data center, private cloud/on-premises option, or reliable certification documentation could be found on the website. Thus, there is no evidence of GDPR-compliant use for the EU/EEA.
Positive
The following are positively documented: a dedicated privacy policy, information on the categories of data collected, SSL/TLS encryption, encrypted storage, access controls, defined retention periods, data subject rights, and the statement that inputs and outputs are not used to train AI models. Furthermore, it states that data used with third-party AI services is intended solely for processing the request and is not to be stored after processing.
Negative
A major negative factor for the EU/EEA assessment is that, according to the website, personal data is primarily stored in North America. No specifically named mechanisms, no Data Processing Agreement (DPA), and no subprocessors are disclosed for international data transfers. The website also lacks information on EU data residency, EU data centers, self-hosting, dedicated private cloud setups, and relevant certifications such as ISO 27001 or SOC 2.
Server Location
According to the privacy policy, personal data is primarily stored in data centers in North America; certain data may be stored locally if required by law. No EU/EEA server location is specified on the website.
– (0)

Link

Link

"Effortless AI design for presentations, websites, and more"

Gamma is an AI tool that transforms ideas, text, files, and prompts into visually polished presentations, documents, websites, and social content.

The focus is on fast creation, smart layouts, branding, and easy publishing or sharing. The most relevant use cases are pitch decks, client presentations, proposal documents, internal reports, microsites/landing pages, teaching materials, and recurring content production via API.gamma

Effortless AI design for presentations, websites, and more

7.6/10 Good

Presentations, Text Generation, Website Creation
Free For simple projects and to get to know it; includes simple presentations, docs, websites, social content, and images, import from PDF/PPTX as well as export to PDF, PPTX, PNG, and Google Slides. Subscription Plus Everything from Free plus more cards per prompt, removal of Gamma branding, and advanced AI image models.

Pro Everything from Plus plus more cards per prompt, premium AI image models, custom branding & fonts, detailed analytics, advanced sharing, custom domains, API access, and workspace templates.

Ultra Everything from Pro plus significantly more AI usage, access to advanced text, image, and video models, more custom domains, and early access to new features.

Team For teams with more collaboration, AI, and branding; includes everything from Pro plus centralized billing, custom company theme, shared folders, admin controls, and advanced data controls.

Business For organizations; includes everything from Team plus SSO, SOC-2 documentation upon request, access to the most advanced AI models, advanced data controls, and more custom domains. Other API keys are available starting with Pro, Ultra, Teams, and Business. Usage is billed via credits; with paid plans, additional credits can be purchased or Auto-Recharge can be used.
Location: USA Gamma Tech, Inc., 2261 Market Street #4544, San Francisco, CA 94114, United States.
GDPR: Partly For users in the EU/EEA, it is not clearly demonstrated that the service complies with the GDPR as a standard SaaS offering in the EU. Positive aspects include a privacy policy that explicitly references the GDPR and names an EU representative, a published Service Level Agreement (SLA)/Data Processing Agreement (DPA) with a European Annex, and a documented list of subprocessors. On the negative side, the website does not guarantee EU data residency or EU data centers; rather, the privacy policy mentions international transfers to the U.S. and other countries, and the list of subprocessors indicates that key hosting and AI service providers are predominantly located in the U.S. Thus, use within the EU/EEA appears to be possible only under certain conditions, subject to additional reviews and contractual measures.
Positive
The website features a privacy policy with a notice for European users and EU representatives, a Data Processing Agreement (DPA) referencing the GDPR and Standard Contractual Clauses (SCCs), and a publicly accessible list of subprocessors with their functions and locations. In addition, Gamma provides a control option to determine whether data can be used to improve AI functions.
Negative
The website does not guarantee EU data residency. An EU/EEA server location for the core service is not specified. The privacy policy mentions transfers to the U.S. or other countries, and the list of subprocessors primarily includes central hosting, logging, data warehouse, and AI providers based in the U.S. On-premises, self-hosting, or dedicated EU private cloud options are not specified on the website.
Server Location
Not guaranteed as an EU/EEA location on the website. The list of subprocessors includes, among others, Amazon Web Services and Google as hosting/storage providers located in the U.S.; other key service providers are also predominantly based in the U.S. A single support service provider is listed as being based in the EU, but this does not pertain to the core hosting services.
– (0)

Link

Link

"A free AI-powered answer engine that provides accurate, trusted, and real-time answers to any question."

Perplexity is an AI-powered search and answer platform that combines real-time web search with summarized answers and source citations.

Today, the product portfolio includes not only Search/Pro Search/Deep Research, but also Internal Knowledge Search, Connectors, asset creation for documents/presentations/spreadsheets/apps, browser/agent capabilities, as well as its own API platform.Perplexity

A free AI-powered answer engine that provides accurate, trusted, and real-time answers to any question.

7.6/10 Good

Chatbot, Literature Research, Research, Text Generation, Summarization
Free The free Standard plan includes search history, nearly unlimited basic searches, a very limited number of Pro searches, automatic model selection by Perplexity, and limited file uploads. It does not include advanced AI models, image generation, or premium support. Subscription Perplexity Pro: Extended access to Pro Search, limited use of “Create files and apps,” access to advanced AI models, image and video generation, higher limits for file/attachment uploads and analysis, as well as support channels.

Perplexity Max: Includes Pro features plus the highest access to advanced AI models, expanded limits for “Create files and apps,” early access to new products, and prioritized support.

Education Pro: For verified students and educators; includes Pro features plus more citations, file and image uploads, Study Mode, expanded access to Perplexity Research and Perplexity Academic.

Enterprise Pro: Includes Pro features plus strict privacy features, no use of data for training, seat/user management, organizational file storage, internal knowledge search, increased file uploads, admin controls, team spaces, and dedicated support.

Enterprise Max: Includes Enterprise Pro features plus higher limits for Research, file and app creation, video generation, advanced models, larger file repositories, SCIM, audit logs, configurable data retention, and an insights dashboard. Other Sonar API: Separate pay-as-you-go model for developers and businesses that want to integrate Perplexity features into their own products, workflows, or automations. API usage is managed separately via credits or auto top-up; a Perplexity subscription is not required for API access. The API does not offer Pro/Max features within the web app and, according to Perplexity, does not log or store data.

Important: API access is not automatically included in Enterprise plans; Enterprise and API are treated separately.
Location: USA San Francisco, California
GDPR: Partly Perplexity must be assessed based on the usage context: Free / Pro / Max, Enterprise Pro / Enterprise Max, and Perplexity API / Sonar API differ significantly. Consumer use: According to the privacy policy, Perplexity AI, Inc. is the data controller for standard services; the privacy policy explicitly does not apply to Perplexity API or Enterprise Pro, where Perplexity acts as a data processor. Perplexity processes, among other things, account, payment, usage, prompt/output, device, location, and tracking data; service interaction information may contain personal data. Free / Pro / Max: According to the Help Center, AI Data Retention is enabled by default; users can opt out via a toggle, but opt-outs apply only to data collected in the future, and according to Perplexity, training data that has already been used cannot be deleted. Enterprise: significantly better suited: according to Perplexity, Enterprise data is not used for training or fine-tuning; according to Perplexity, third-party AI providers such as OpenAI and Anthropic are contractually bound so that Perplexity data is not used for model training. Uploaded files are deleted by default after seven days in Enterprise; larger Enterprise configurations include additional retention controls. API / Sonar API: Perplexity states a strict zero-data-retention policy: content sent to the Sonar API is not stored and is not used for model training; only billing/operational metadata such as token count, model, timestamp, duration, and API key identifier are stored, without prompt or response content. DPA / Data Processing Agreement: Yes, for business/enterprise/API contexts. The Perplexity DPA is incorporated into the Enterprise and API terms; in it, the customer is the controller or processor and Perplexity is the processor or service provider. The DPA includes EU/UK data protection references, SCCs, subprocessor provisions, data subject rights, data breach notification, audit/documentation obligations, and deletion within 30 days after the end of service provision.

Positive: DPA/Data Processing Agreement available, SCCs, EU-U.S. Data Privacy Framework, SOC 2 Type II, Enterprise no-training, API zero data retention, Enterprise file retention, and admin controls.

Negative / Points to review: U.S. provider, servers according to the privacy policy in the U.S., API compute according to the FAQ via AWS in North America, subprocessors and model providers according to the DPA worldwide, no confirmed EU-only data residency found. For Free/Pro/Max, Perplexity is only of limited suitability for personal, confidential, or sensitive data because AI Data Retention is enabled by default.

Privacy Policy
– (0)

Link

Link

"AI that creates content. And proves that it works."

neuroflash is a German audience intelligence and AI content platform for marketing, branding, and target group validation. The tool combines generative AI, ChatFlash, content creation, Brand Hub, PerformanceFlash, Digital Twins, image generation, web research, SEO features, API, and MCP. (neuroflash.com )Neuroflash

AI that creates content. And proves that it works

7.6/10 Good

Image generation, Product Description, Spell check, SEO, Social media content, Advertising copy
Subscription Essential For teams that want to create AI content efficiently; includes Editor & ChatFlash, AI Images, PerformanceFlash, ResearchFlash, text models, image models, document editor, content templates, prompt templates, Flash Actions, Web Search, audience chat, SEO Research Mode, workflows, Brand Voice, Digital Twins, and Knowledge Assets to a limited extent.

Pro Advanced plan with more capacity, advanced models, a larger context window, more Digital Twins/audiences, advanced validation features, team features, as well as API and MCP access.

Enterprise Custom enterprise plan for organizations with unlimited or customized audiences, premium models, SSO, a dedicated Customer Success Manager, custom integrations, custom workflows, training, and consulting services. Other API / MCP neuroflash offers API and MCP access to integrate neuroflash into platforms and tools such as Claude, Cursor, and other work environments.

Custom Enterprise Services Customized agreements depending on the number of users, the scope of the Digital Twins, desired integrations, custom workflows, and consulting services.
Location: Germany neuroflash GmbH, Wulfsdorfer Weg 100, 22359 Hamburg, Germany. Managing Director: Dr. Jonathan Taddäus Mall. Register court: Hamburg District Court, HRB 117450
GDPR: Partly The website lists several data protection and hosting features relevant for the EU/EEA area: neuroflash mentions servers in Germany or in the EU, refers to GDPR-compliant processing, states an ISO/IEC 27001:2022 certification, and explains that content is not used for training external models. At the same time, the privacy policy states that AI requests are processed in the EU and in the USA on servers of external providers. A publicly available AVV/DPA or a list of subprocessors could not be clearly found on the website. This makes GDPR-compliant use for EU/EEA users plausible, but based on the publicly accessible documentation, it can only be assessed with reservations.
Positive
Positive aspects include the information about servers in Germany or in the EU, the explicit GDPR focus, the ISO/IEC 27001:2022 certification, the note about encryption, and the statement that content is not used for training external models.
Negative
Negative or limiting is the fact that the privacy policy also mentions the processing of AI requests in the USA via external providers. In addition, no clearly linked public AVV/DPA was found on the website, nor a separate list of subprocessors, nor a clearly documented on-premise or self-hosting option.
Server location
According to the privacy policy, personal data is processed and/or stored in the EU on servers of Google Cloud Platform and at Raidboxes in Germany. For AI requests in the neuroflash app, the website states processing in the EU and in the USA on servers of external providers. Further specific data center locations or a complete list of providers are not provided on the website.
– (0)

Link

Link

“Your OpenClaw Ready for You” / “The #1 OpenClaw Hosting Platform”

MyClaw.ai is a managed hosting service for OpenClaw, an open-source personal AI assistant. According to its own description, MyClaw provides a private, dedicated OpenClaw instance and handles servers, updates, maintenance, backups, and operations so that users can use OpenClaw without having to install it themselves. OpenClaw itself is an agent that can be contacted via chat channels such as WhatsApp, Telegram, Slack, Discord, Signal, iMessage, or Microsoft Teams and can perform tasks through apps, files, browsers, calendars, email, and APIs.OpenClaw

A Personal AI Assistant … works 24/7, no setup needed.

6.3/10 Solid

Automation, Function calls, AI agents, Programming, Web-Scraping
Free OpenClaw Self-Hosting / local installation OpenClaw itself is described as free open-source software and can be operated locally or on your own infrastructure; users must handle setup, updates, security, model access, and maintenance themselves.

MyClaw Free Version No confirmed permanently free MyClaw free version found on the official pricing page. The pricing page lists paid managed hosting plans; a free trial is not clearly substantiated in the visible pricing content. Subscription Lite Managed OpenClaw hosting for personal projects and getting started; includes zero setup, instant access, personal AI assistant, 24/7 operation, automatic updates, private encrypted instance, daily backups, and smaller guaranteed resources.

Pro Advanced managed hosting plan for power users with more resources than Lite, priority support, automatic maintenance, encrypted isolated instance, daily backups, as well as custom skills and integrations.

Max Plan for more intensive workloads with even higher resources, 24/7 operation, automatic updates, private encrypted instance, daily backups, and priority support.

Ultra Highest officially listed managed hosting plan for demanding workloads with scalable high-performance resources, isolated instance, encrypted access, backups, custom skills, integrations, and priority support. Other AI Balance & Credits MyClaw mentions AI Balance & Credits in the Refund Policy; used credits are non-refundable, unused balance may be refunded upon request. The specific functional logic or model costs are not fully confirmed in the reviewed official sources.

External AI Model Providers MyClaw Terms indicate that the service may be integrated with third parties such as AI model providers and that their own terms apply; the specific supported providers and privacy policies must be reviewed for each configuration.
Location: Austria OpenClaw does not have a physical address as a traditional company. It is a decentralized open-source project that is primarily hosted on the GitHub platform and is licensed under the MIT License.
GDPR: Partly For users in the EU/EEA region, the website does provide a privacy policy and a separate GDPR notice with legal bases, data subject rights, and information on international data transfers. At the same time, the website does not specify a concrete EU/EEA server location, no EU data residency, no AVV/DPA, no subprocessors list, and no certifications. In addition, the privacy policy mentions possible processing and transfers outside the jurisdiction, including the USA. On the positive side, according to the website OpenClaw is open source and, according to comparison and learning pages, can also be operated locally or on one's own server; this route would be the most privacy-friendly for EU/EEA users, but it is not offered by MyClaw itself as a simple, documented managed EU compliance path. Therefore, GDPR-compliant use from an EU/EEA perspective is only possible under certain conditions and with independent review.
Positive
The website includes a privacy policy as well as a separate GDPR notice for the EEA/UK. MyClaw describes isolated private instances, encrypted access, backups, and states that data is not used for general AI training. For connected Google services, it is also additionally explained that Google Workspace API data is not used to develop, improve, or train generalized AI/ML models. In addition, OpenClaw is presented as open source, and local installation as well as self-hosting on your own VPS are explicitly mentioned as usage options.
Negative
The website does not specify a concrete server/data center location, EU data residency, an AVV/DPA, a subprocessors list, explicit EU/EEA hosting evidence for the managed version, or relevant certifications such as ISO 27001 or SOC 2. The privacy policy is also itself described as a draft that is still to be legally reviewed before publication. In addition, the website mentions possible international data transfers, including to the USA.
Server location
Not specified on the website. There are references to managed cloud hosting, dedicated or isolated instances, and private containers, but no specifically named server location, no named data center, and no confirmed EU/EEA data residency.
– (0)

Link

Link

Robotics

Humanoid robots, AI educational robots, commercial service robots, and intelligent automation systems.

UBTECH is a Chinese robotics manufacturer that produces humanoid robots such as the Walker S2, Walker S1, Walker S, Walker C, and Walker X, as well as other service, educational, logistics, and consumer robots. According to the company, it focuses on industrial manufacturing, commercial services, and household applications. UBTECH describes the Walker as China’s first commercialized life-size bipedal humanoid robot and cites more than 2,790 robotics and AI patents as of June 2025.UBTECH ROBOTICS CORP LTD

humanoid robots, AI educational robots, commercial service robots and intelligent automation systems

3.5/10 Insufficient

Autonomous Navigation, Embodied AI, Home robots, Humanoid robots, Industrial robots, Robotic Manipulation, Service robot
Other Walker S2 Industrial humanoid robot with autonomous battery replacement, 24/7 operation, 15-kg payload, binocular stereo vision, co-agent, BrainNet 2.0, and a focus on production lines.

Walker S1 Industrial humanoid robot with an Advanced Planning Model for general tasks, intent understanding, task planning, and semantic VSLAM navigation.

Walker S / Walker S Lite Industrial humanoid robots with a multimodal perception system, LLM-based decision-making capabilities, 3D semantic navigation, object grasping, and real-time integration into production systems.

Walker C / Walker X Commercial and service-oriented humanoid robot lines; specific availability, pricing, service packages, and regional terms must be requested directly from UBTECH.

AI Education / Developer Products Complementary robotics and AI educational products such as the AI Education Platform, Yanshee, uKit AI, UGOT, and AI Lab solutions for education and research.

Professional / Partner / Custom Projects For industrial projects, production line integration, and partnerships, UBTECH recommends contacting them directly; specific SLAs, maintenance, data protection, and integration services must be reviewed on a case-by-case basis.
Location: China UBTECH ROBOTICS CORP LTD, 22/F, Building C1, Nanshan Smart Park, No.1001 Xueyuan Avenue, Nanshan District, Shenzhen, China. A UBTECH privacy page also mentions 24th Floor, Building C1, Nanshan Smart Park, No. 1001 Xueyuan Avenue, Nanshan District, Shenzhen.
GDPR: Unclear Overall assessment: Unclear to critically compliant with the GDPR. UBTECH is a Chinese robotics manufacturer headquartered in Shenzhen, China.

On the positive side, UBTECH describes data subjects’ rights—such as the right to access, rectification, erasure, withdrawal of consent, restriction of processing, data portability, and the right to lodge a complaint—in its website privacy policy. In addition, UBTECH lists technical and organizational safeguards such as access controls, de-identification, encrypted storage, isolated storage, internal data protection officers, employee training, and emergency procedures for security incidents.

A negative aspect is that the official Privacy Policy explicitly applies only to the website and not automatically to UBTECH products or other services. For the website, UBTECH lists servers in Hong Kong and additional servers in China, the U.S., Singapore, and Hong Kong; personal data may be transferred globally. A publicly verified GDPR DPA structure, EU data residency, EU representative, standard contractual clauses, complete list of sub-processors, or humanoid-specific data protection documentation for walking robots was not found in the reviewed official sources: No verified information available.

Server location: For the website: Hong Kong, with additional servers in China, the US, Singapore, and Hong Kong. For specific humanoid robots, apps, telemetry, support data, or production integrations: No verified information available. Conclusion: For EU companies, UBTECH should only be used after technical and legal review, particularly with regard to camera/audio/sensor data, production data, location data, remote maintenance, cloud connectivity, third-party SDKs, export/import laws, and the availability of a Data Processing Agreement (DPA).

Privacy Policy
– (0)

Link

Link

“Create and edit detailed images”

Nano Banana is Google’s native image AI within Gemini.

The system can generate images from text, edit existing images via prompt, combine multiple reference images, and carry out follow-up changes conversationally.

Officially highlighted features include multimodal understanding, conversational inputs, real-world knowledge, rapid iteration, and, in the Pro variant, clearer text renderings, infographics, localization, and higher resolution.Nano Banana

Imagine almost anything – then create it

7.6/10 Good

Image Editing, Image Generation, Illustrations
Free Free use with limited access; AI Studio remains free as long as no paid API key is used for paid features. With the API Free Tier, usage may be used for product improvement according to the pricing page. Subscription Google AI Plus More access to Google AI, including the Gemini app, Flow, and NotebookLM; available depending on the region.

Google AI Pro More access to Gemini, Deep Research, Nano Banana Pro, and video/Flow features; Google describes Pro as expanded access for advanced AI use.

Google AI Ultra Highest access tier for advanced Google AI features, higher limits, and expanded creative/productive use. Other Gemini API Paid Tier Usage-based API billing for developers; in the Paid Tier, usage is not used for product improvement according to the pricing page.

Google Workspace / Slides / Vids Add-ons Nano Banana Pro is also relevant in Workspace contexts such as Slides/Vids via Google AI add-ons or limits; specific limits depend on the Workspace/AI plan.
Location: USA Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA
GDPR: Unclear For the EU/EEA area, GDPR compliance cannot be reliably verified based on the website. There is a privacy policy and information on data transfers as well as deletion options, but key evidence for data protection-compliant business use in the EU/EEA is missing from the website: no specific server location, no EU data residency, no AVV/DPA, no subprocessor list, no reliable statement excluding model training, and no on-premise/self-hosting option.
Positive
There is a privacy policy on the website. It describes the purposes of data processing, disclosure to 'Service Providers', storage principles, international transfers, and a right to deletion or account management. For EU users, the terms of use state that mandatory consumer protection provisions of the country of residence remain unaffected.
Negative
The website does not specify a specific EU/EEA server location, EU data residency, an AVV/DPA, a subprocessor list, a documented opt-out from AI training, specific certifications such as ISO 27001 or SOC 2, or on-premise/self-hosting. The privacy policy also lists Hong Kong SAR China as the 'Country' and states that data may also be processed and stored outside the user's jurisdiction, without detailing EU/EEA-specific safeguards.
Server location
Not specifically stated on the website. The privacy policy lists Hong Kong SAR China as the 'Country'. At the same time, it states that data is processed at the company's operating facilities and at other locations where parties involved in the processing are located; specific data centers or EU/EEA locations are not mentioned.
– (0)

Link

Link