KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

ⓘClaude is an AI assistant and model family from Anthropic for chat, research, writing, analysis, coding, and agentic workflows.

Depending on the plan or product, the offering includes web/desktop/mobile chat, Research, Claude Code, Claude Cowork, web search, file/code execution, connectors, as well as APIs and Managed Agents for developers. Anthropic positions Claude for individuals, teams, education, and enterprise environments alike.Claude

Think fast, build faster “Brainstorm in Claude, build in Cowork”

8.3/10 | KIFOX Score – Very good

Free Claude Free includes chat on web, iOS, Android, and desktop, code generation, data visualization, writing/editing texts, content generation, text and image analysis, as well as web search. Projects are also available to Free users, though in a limited number. Subscription Claude Pro: Includes everything in Free plus more usage, Claude Code, Claude Cowork, unlimited projects, Research, access to more Claude models, as well as Claude for Excel, PowerPoint, and Word Beta.

Claude Max: Includes everything in Pro plus significantly higher usage, higher output limits, early access to advanced Claude features, and priority during high demand.

Claude Team: For teams; includes all Claude features, more usage than Pro, Claude Code and Cowork, connectors like Microsoft 365 and Slack, Enterprise Search, centralized billing/administration, SSO, admin controls, and no model training on company content by default.

Claude Enterprise: For large companies; includes Team features plus advanced admin, security, compliance, and governance features such as Spend Controls, Audit Logs, SCIM, role-based access, Compliance API, custom data retention, and additional enterprise options. Other Claude API: Separates developer/platform model with usage-based billing by model, input/output tokens, prompt caching, and other factors. Claude models are also available through third-party platforms such as AWS Bedrock, Google Vertex AI, and Microsoft Foundry.

Additional features: The Claude Platform offers additional usage-based features such as Managed Agents, Web Search, Code Execution, as well as service tiers like Standard, Priority, and Batch.

Claude Design: Available for Pro, Max, Team, and Enterprise; usage runs through the respective subscription limits, with optional Extra Usage.

Special offers: Anthropic offers separate deals or programs for educational institutions, nonprofits, and certain government/public sector contexts.

5.0 ★★★★★★★★★★ (3)

Link

GDPR: Partly Overall assessment: Conditionally GDPR-suitable. Claude AI can be used in a GDPR-compliant manner if the appropriate product variant is chosen and the privacy configuration is carefully reviewed.

Positive is that Anthropic provides a Data Processing Addendum for commercial offerings, includes Standard Contractual Clauses for international data transfers, documents subprocessors, and describes technical and organizational security measures such as encryption, access restrictions, and MFA. For EEA, UK, and Swiss users, Anthropic names Anthropic Ireland Limited as the responsible entity; Anthropic also states that commercial customer data from Claude for Work, API, Claude Gov, etc. is not used for model training by default.

Negative is that for private Claude Free, Pro, and Max accounts, inputs/outputs may be used for model improvement and training according to the Privacy Policy unless users object or disable the relevant setting; in addition, data may be processed for longer in the event of security reviews, feedback, or policy violations.

Server location: For consumers, the Privacy Policy points to transfers to the USA and other countries outside the EEA/UK; for commercial products, Anthropic states default storage in the USA and possible processing/routing in the USA, Europe, Asia, and Australia unless otherwise agreed or controlled. For companies with GDPR requirements, Team/Enterprise/API with DPA, subprocessor review, SCCs, AVV/DPA, deletion/retention concept, and preferably regional data residency is therefore preferable. No verified information is available for blanket GDPR compliance across all Claude usage types without a specific review of contracts and configuration. Sources: Anthropic Privacy Policy, Privacy Center, Data Processing Addendum, server location/retention notices, and Regional Compliance.

Privacy Claude

Link

ⓘ“to empower everyone in the world to design anything and publish anywhere”.

Canva is a browser-based platform for design, publishing, and visual communication. Users can use it to create, among other things, social posts, presentations, documents, websites, videos, and brand materials; in addition, it offers AI features for text, images, translation, code, and data-driven content.

Canva thus positions itself not only as a design tool, but as an integrated Visual Suite for individuals, teams, and companiesCanva

Visual Suite for Everyone

7.3/10 | KIFOX Score – Good

Free Free basic version for designs, templates, and free content; suitable for creating simple social posts, presentations, posters, videos, logos, and designs. Pro content may contain watermarks for Free users or be licensed separately. Subscription Canva Pro For individuals and solo creators; includes premium content, templates, Brand Kit, Background Remover, Magic Resize, and AI-powered design features.

Canva Business For small businesses, solo entrepreneurs, and growing teams; includes everything in Pro plus higher AI access, advanced brand management, marketing/ad insights, collaboration, and shared workspaces.

Canva Enterprise For large organizations with multiple teams; includes enterprise security, SSO, SCIM, audit logs, data residency options, AI governance, advanced admin controls, approval workflows, integrations, and dedicated support. Other Free users can license individual Pro content for one design; in addition, there are print products as well as special offers for education and nonprofits.

5.0 ★★★★★★★★★★ (1)

Link

GDPR: Partly GDPR assessment: Canva is conditionally suitable from a GDPR perspective.

Positive is that Canva offers a Data Processing Addendum for Business and Enterprise customers, in which Canva acts as a processor for personal data within the team for European and UK customers; the DPA includes, among other things, EU Standard Contractual Clauses, the UK Transfer Addendum, technical and organizational measures, and provisions on subprocessors. Canva also cites ISO 27001, SOC 2 Type II, SOC 3, PCI DSS, and the Data Privacy Framework as security/compliance certifications. Another positive point is that, according to the Trust Center, Canva does not use Business, Teams, and Enterprise content to improve AI-powered features and also does not allow third parties to do so.

Negative is that, according to the Trust Center, Canva stores data in the USA by default, and data may be processed by Canva group companies in, among other places, Australia, New Zealand, the Philippines, the UK, Singapore, Europe, and the USA. For EU companies, it is therefore necessary to review the DPA, SCCs, Transfer Impact Assessment, subprocessors, sharing settings, third-party apps, and AI data usage.

Server location: USA by default; for Enterprise, data residency options are mentioned, but not as a general standard for all plans. Further links: Canva Trust Center Privacy, Canva DPA, Canva Security.

Privacy

Link

ⓘ“AI tools built for your WordPress site”

WordPress is a website builder and an open-source CMS, and at the same time, as WordPress.com, a hosted platform.

In the AI context, WordPress now offers official features for text creation, rephrasing, translation, image generation/editing, design assistance, an AI Website Builder, as well as MCP-based agent integrations with tools like Claude or ChatGPT.

In addition, the official WordPress AI team documents core-adjacent building blocks such as AI Client, Abilities API, and the AI PluginWordPress

AI tools built for your WordPress site

7.4/10 | KIFOX Score – Good

Free Free entry for simple websites/blogs; WordPress.com offers a free plan and upgrades for additional features. WordPress itself can be used free of charge with your own hosting. Subscription Personal Custom domain for the first year, 6 GB storage, ad-free visitor view, premium themes, support, statistics, plugin installation, as well as font and color customization.

Premium Everything in Personal plus more storage, all premium themes, faster support, premium statistics, Google Analytics, and video uploads.

Business Managed WordPress hosting with more storage, 24/7 priority support, premium statistics, plugins, Google Analytics, video uploads, as well as developer features such as SFTP/SSH, WP-CLI, Git Commands, and GitHub Deployments.

Commerce For online stores with a WooCommerce-optimized environment, store themes, eCommerce tools, plugins, Google Analytics, video uploads, and developer features. Other Enterprise / WordPress VIP Enterprise offering for large organizations with a focus on scalability, security, and data-driven WordPress experiences.

WordPress.org Self-Hosting Download WordPress software for free and run it with your own hosting provider; hosting, domain, security, updates, and data protection are then more your own responsibility.

3.0 ★★★★★★★★★★ (2)

Link

GDPR: Yes GDPR assessment: From a GDPR perspective, WordPress.com is conditionally to well suited, depending on the plan, the activated plugins, tracking services, forms, and integrated third-party providers.

Positive is that Automattic provides a Data Processing Agreement for WordPress.com; according to WordPress.com, this documents the GDPR requirements applicable to Automattic as a processor and includes standard contractual clauses for data transfers to Automattic and its subsidiaries. Another positive aspect is that WordPress.com provides guidance and tools for designing websites in compliance with the GDPR.

Negative is that WordPress websites can quickly generate additional data flows through plugins, themes, embeds, analytics, payment services, or advertising/tracking services, which the website operator must review and document themselves. Automattic also points out that when using the services in the EU/UK, personal information may be processed, stored, or made accessible outside the EEA or UK; according to Automattic, appropriate safeguards such as EU or UK standard contractual clauses are used for this purpose.

Server location: For WordPress.com, there is no generally guaranteed pure EU data residency; WordPress.com is a global managed hosting service from Automattic. For WordPress.org, the server location depends entirely on the self-selected hosting provider. Further links: WordPress.com DPA, Automattic Privacy Policy, WordPress.com GDPR Help.

Request a data processing agreement

Link

ⓘChatGPT is OpenAI's multimodal AI application for text, research, data analysis, coding, image generation, voice, and knowledge-based work.

Its current feature set includes, among other things, Search, Deep Research, Data Analysis, Projects, Custom GPTs, Codex, Images, Voice Mode, and, additionally for Business/Enterprise, Apps and Company Knowledge. This makes ChatGPT today more of a broad work platform than just a chatbot.Chat GPT

ChatGPT is your AI chatbot for everyday use

7.1/10 | KIFOX Score – Good

Free Free offers, according to the official pricing/FAQ documentation, limited access to GPT-5.3, messages/uploads, image generation, Deep Research, Memory, and Codex; in addition, web search, file uploads, data analysis, and GPT usage are generally available, but limited. Subscription Go Expanded individual plan compared to Free; more access to GPT-5.3, more messages, more uploads, more image generation, and a longer memory function. According to OpenAI, it may contain ads.

Plus Individual plan for advanced use; includes, among other things, GPT-5.5 Thinking, expanded messages/uploads, better image generation, enhanced Deep Research and Agent Mode, Projects, Tasks, Custom GPTs, and expanded Codex access.

Pro Powerful individual plan for maximum productivity; includes more usage, GPT-5.5 Pro, maximum Codex tasks, unlimited GPT-5.3 and file uploads, faster image generation, maximum Deep Research and Agent Mode, as well as larger memory/context functions. Other Business Codex Usage-based team model for development-oriented teams; focus on AI-supported software development, code and security reviews, automation, cloud environments, admin controls, SAML/MFA, and no training on customer data.

Business ChatGPT & Codex Team plan for startups and growing companies; includes Plus and Business Codex features, unlimited core chat, apps/connectors such as Slack, Google Drive, SharePoint, GitHub, and Atlassian, data analysis, Record Mode, Canvas, shared projects, workspace GPTs, admin and security features.

Enterprise Custom enterprise model for large organizations; includes an expanded context window, enterprise security features such as SCIM, EKM, role-based controls, domain verification, data residency in multiple regions, 24/7 priority support, SLAs, custom contract terms, and no use of business data for training by default.

ChatGPT Edu / Higher Education Education plan for higher education institutions; offers expanded access to GPT-5, tools for data analysis, web browsing, file integrations, document summarization, and custom GPTs for campus workspaces.

4.0 ★★★★★★★★★★ (1)

Link

GDPR: Partly ChatGPT is not categorically “GDPR-compliant” or “not GDPR-compliant”; the assessment depends heavily on the plan used, the activated settings, and the specific use case.

For private accounts / Free, Plus, Pro: OpenAI may use content to improve the model; according to OpenAI, data sharing is enabled by default for personal workspaces, but can be disabled via “Improve the model for everyone.” For users in the EEA or Switzerland, OpenAI Ireland Ltd. is the responsible entity; OpenAI also processes and stores personal data outside the EEA/UK/Switzerland and relies on adequacy decisions and SCCs, among other things, for transfers.

For ChatGPT Business / Enterprise / Edu: significantly better suited, as OpenAI does not use business data for training by default. OpenAI offers a Data Processing Addendum / DPA for business customers; in the DPA, OpenAI acts as a processor, processes customer data only to provide the service, and regulates data subject rights, security measures, data breaches, subprocessors, and international data transfers.

Positive: DPA available, SCCs regulated, no training by default for Business/Enterprise/Edu data, encryption, SOC 2 Type 2 and ISO certifications for relevant Business/Enterprise services.

Negative / points to review: US/global provider, subprocessors in multiple countries, not all plans have data residency, and personal accounts are only suitable to a limited extent for sensitive corporate or personal data.

Data usage - Europe privacy policy - Enterprise privacy - Security & Privacy

Link

ⓘ“Get everything you need to build a website your way.”

Wix is a no-code website builder that enables individuals and businesses to create websites, blogs, portfolios, online stores, and booking pages. The platform combines a drag-and-drop editor, templates, hosting, SEO, marketing, CRM, and commerce features in one interface.

Since 2026, Wix has also positioned the editor with Wix Harmony as a hybrid AI editor with prompting plus manual fine control.Wix

Get everything you need to build a website your way

6.7/10 | KIFOX Score – Solid

Free Free website creation and publishing; a Premium plan is required for your own domain, ad-free use, or advanced business features. Subscription Light Basic plan with your own domain, hosting, AI creation tools, storage, a light marketing suite, and a few collaborators.

Core For growing websites and initial business features; includes more storage, multi-cloud hosting, basic marketing, payments, basic eCommerce, scheduling/service features, and more collaborators.

Business For businesses with growth; includes more storage, standard marketing suite, payments, standard eCommerce, scheduling/services, and more collaborators.

Business Elite For larger requirements; includes unlimited storage, multi-cloud hosting, Advanced Marketing Suite, payments, Advanced eCommerce, scheduling/services, Advanced Developer Platform, and many collaborators. Other Wix Enterprise Custom enterprise solution for larger organizations with more complex governance, support, developer, and scaling requirements. Wix refers to enterprise solutions as a separate area.

Wix Studio / Velo / Custom Hosting Solutions For agencies, developers, and more complex web projects; Wix states that selected custom hosting solutions may be available with Velo in the enterprise context.

1.0 ★★★★★★★★★★ (1)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, Wix is conditionally suitable.

Positive is that Wix provides a Data Processing Agreement for users, which governs the processing of personal data between Wix and users. Wix also states that website operators can build a GDPR-compliant website with Wix, but makes it clear that website operators themselves remain responsible for what data they collect and how they process it. Also positive are security measures such as hosting on AWS and Google Cloud Platform, Equinix colocation, certifications of the infrastructure providers such as ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and PCI DSS Level 1, as well as access controls and security monitoring.

Negative is that Wix uses servers and cloud providers worldwide, may share data with affiliates, third-party providers, analytics, advertising, and social media partners, and the website operator must configure external apps, tracking, cookies, forms, and payment providers in a privacy-compliant manner themselves.

Server location: Wix has servers in multiple locations worldwide, including Europe and the USA; according to Wix, users currently cannot select or change the host server themselves. Further links: Wix DPA, Wix GDPR Help, Wix Security Measures, Wix Host Server.

Wix's Data Processing Agreement for Wix Users

Link

ⓘFirefly: “Create like never before.”

Adobe Firefly is used to generate and edit images, videos, audio, and designs.

Adobe positions Firefly as a family of generative AI models embedded both in the Firefly web app and in Adobe flagship products such as Photoshop, Illustrator, Lightroom, InDesign, Adobe Express, and Adobe Stock. Creative Cloud provides the app, asset, collaboration, and subscription infrastructure for this.Adobe Firefly / Adobe Creative Cloud.

Creative Cloud for Business: “Create exceptional on-brand content faster.”

7.3/10 | KIFOX Score – Good

Free Free entry with limited access to standard and premium AI features for image, video, audio, and more. Subscription Firefly Standard Creative AI subscription with monthly generative credits, standard image features, and access to premium features via credits.

Firefly Pro More generative credits and expanded access to creative AI features.

Firefly Pro Plus Significantly more credits, broader access to advanced image/video/audio features, and external AI models within Firefly.

Firefly Premium Highest regular Firefly tier with a very high credit amount and content creation on a larger scale.

Creative Cloud Single Apps / All Apps Photoshop, Illustrator, Premiere Pro, After Effects, Express, Acrobat, and other Adobe apps; Firefly and generative credits included depending on the plan. Other Creative Cloud for Teams / Enterprise Company management, Admin Console, DPA, enterprise controls, team/brand workflows, and extended contract options.

Generative Credits / Credit Add-ons Additional credits for Firefly and Creative Cloud generative AI features.

Firefly Custom Models Enterprise feature for training brand-specific Firefly models on your own brand assets.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: Adobe Firefly / Adobe Creative Cloud is conditionally to well suited from a GDPR perspective, especially for Business/Enterprise use with Adobe DPA.

Positive is that Adobe provides a Data Processing Addendum for Cloud Services and refers in the Terms to the EU DPA and Data Protection Terms. Adobe also explicitly states that customer and user data within the applications is not used to train generative AI models from Adobe or partners. For certain Adobe cloud document/generative AI functions, Adobe describes regional storage by geographic region; document content is not stored in Microsoft Azure OpenAI, extracted content is processed in encrypted form, temporarily cached in Adobe Cloud Storage for up to 12 hours, and not used for model training.

Negative is that Adobe is a global US provider with many products, subprocessors, partner AI models, and regionally varying data flows. Firefly Custom Models can also be deliberately trained with customer-owned brand assets, which must be reviewed separately from a contractual and legal perspective.

Server location: Depending on the Adobe product, account type, and region; for certain cloud documents, the geographic region determines the storage location, but there is no blanket EU-only guarantee for all Creative Cloud / Firefly functions. Further link: Adobe Firefly Gen-AI Approach, Adobe Terms/DPA, and Adobe Cloud Storage Data Centers.

privacy

Link

ⓘ“More than Wisdom, Be with You”; in its online store, Unitree describes itself as a robotics company focused on the development, production, and sale of consumer and industrial robots.

Unitree develops and sells humanoid robots such as the G1, H1/H1-2, H2, and R1, as well as quadruped robots, robotic arms, LiDAR/perception products, and components. The humanoid models are primarily positioned for research, development, education, demonstration, embodied AI, teleoperation, motion research, and early industrial/service pilot projects. Unitree itself points out that global humanoid robotics is still in an early exploratory phase and that users should understand the limitations of humanoid robots before purchasing.Unitree

More than Wisdom, Be with You

3.7/10 | KIFOX Score – Insufficient

Other Unitree R1 / R1 Air / R1 EDU Compact humanoid robot available for pre-order; according to the official store page, it features a multimodal speech/vision model, 20 to 26 degrees of freedom, open joint and sensor interfaces, and simulation platform support. According to the store description, the standard version does not support secondary development; the EDU version is recommended for customization.

Unitree G1 / G1 EDU Humanoid robot for research, development, and robotics experiments; according to the official product page, it features 23 to 43 joint motors, support for imitation and reinforcement learning, a force-controlled dexterous hand in the EDU version and options, and high mobility.

Unitree H1 / H1-2 Full-size humanoid with 3D LiDAR, depth camera, high mobility, replaceable battery, and high joint torque density; intended primarily for research, demonstration, and advanced robotics development.

Unitree H2 / H2 EDU New full-size humanoid with 31 degrees of freedom, powerful chip, bionic head, and optional EDU/development options; H2 EDU is available through sales/contact.

Custom Robots / Professional Service Unitree lists Professional Service and Custom Robots in the shop; specific services, SLAs, privacy policies, and integration packages must be requested individually.

Shipping, Customs, Import In its international shop, Unitree notes that customers are responsible for shipping costs, customs duties, taxes, and import clearance; contact information and, if applicable, a Tax ID are required for customs clearance.

– ★★★★★★★★★★ (0)

Link

GDPR: Unclear Overall assessment: Unclear to critically compliant with the GDPR. Unitree is a Chinese robotics manufacturer based in Hangzhou, China.

On the positive side, Unitree describes protective measures such as encryption, access controls, firewalls, de-identification/anonymization, host isolation, and internal access restrictions in its official privacy policy. The Unitree Go Privacy Policy also lists data subject rights such as access, rectification, erasure, withdrawal of consent, and account deletion. For certain robotics functions, Unitree states that individual control and device information is stored locally within the app or on the device and is not uploaded to servers.

A negative aspect is that no verified information was found regarding a GDPR-compliant DPA, EU representative, EU hosting, standard contractual clauses, a complete list of subprocessors, or specific GDPR corporate documentation for European B2B customers. Depending on app/product usage, Unitree potentially processes device information, IDs, location data, Wi-Fi/Bluetooth/sensor information, camera/video/image data, account data, usage data, and robot control data. The Unitree Go Privacy Policy also lists third-party providers and third-party SDKs, including iFLYTEK for real-time speech recognition.

Server location: For Unitree Go data, Unitree states that storage takes place in the People’s Republic of China. For EU customers, online store orders, support, and robotics telemetry, no reliable EU data residency is guaranteed.

Conclusion: Unitree can be very interesting for research, laboratory work, education, and robotics development. However, for GDPR-critical use in Europe, the robots should only be deployed after technical and legal review: Offline/LAN operation, disabled cloud functions, network analysis, AVV/DPA requests, sub-processor review, telemetry review, a security concept, and clear rules for camera, audio, and location data are required. No verified information is available regarding blanket GDPR compliance for corporate use within the EU.

Unitree Security Response Center

Link

ⓘBuild with the latest DeepSeek models

DeepSeek currently offers two LLM access points via its API: deepseek-chat and deepseek-reasoner. According to the official documentation, both currently correspond to DeepSeek-V3.2 with a 128K context window; deepseek-chat stands for Non-Thinking mode, deepseek-reasoner for Thinking mode. The API is OpenAI-compatible and supports, among other things, JSON Output, Tool Calls, Chat Prefix Completion, and, in the case of deepseek-chat, additionally FIM Completion.DeepSeek API

LLM "Build with the latest DeepSeek models"

4.3/10 | KIFOX Score – Limited

Other Token-based API usage Billing based on input, output, and cache-hit/cache-miss tokens.

deepseek-v4-flash Faster, more efficient model with Thinking and Non-Thinking mode, 1M context, JSON output, tool calls, and chat prefix completion.

deepseek-v4-pro More powerful model for more complex reasoning, coding, agents, and long contexts; also supports 1M context, JSON output, and tool calls.

OpenAI-/Anthropic-compatible API Usage via an OpenAI-compatible base URL or an Anthropic-compatible endpoint; suitable for existing SDKs and agent tools.

Open Weights / Self-hosting path DeepSeek-V4 was released as an open-weights family; self-hosting requires your own infrastructure and should be considered separately from the official API.

– ★★★★★★★★★★ (0)

Link

GDPR: No GDPR assessment: From a GDPR perspective, the DeepSeek API is critical for EU companies or only suitable after careful review.

Positive is that DeepSeek lists rights for EEA, Swiss, and UK users in its Privacy Policy, describes technical and organizational security measures, and states that it does not engage in targeted advertising, the sale of personal data, or automated decision-making that creates profiles with legally significant effects.

Negative is that, according to its Privacy Policy, DeepSeek collects, processes, and stores personal data directly in the People’s Republic of China. In addition, DeepSeek states that its purposes include, among other things, improving and developing the services as well as training and improving ML models and algorithms, including User Input. I was unable to reliably verify a publicly available GDPR DPA/AVV, SCC setup, or EU data residency offering in the official API documentation.

Server location: People’s Republic of China. Further link: DeepSeek Privacy Policy and API Docs.

DeepSeek Privacy Policy

Link

ⓘ"The most powerful AI platform for enterprises"

Mistral AI is a French provider of generative AI with Le Chat as the user interface, Studio/API for developers, Mistral Vibe for coding workflows, and Mistral Compute as a European-hosted AI cloud.

The platform covers chat, search, document analysis, multimodal models, agents, workflows, API usage, and self-deployment. A key differentiator is the combination of SaaS, API, open-weight models, and local/on-prem deployment.Mistral AI

The most powerful AI platform for enterprises

7.9/10 | KIFOX Score – Good

Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; suitable for getting started and everyday use. Subscription Le Chat Pro More messages and web searches, more Extended Thinking and Deep Research, document storage, many projects, Mistral Vibe for coding, chat/email support, and high-quality image generation.

Le Chat Team Secure team workspace with more storage per user, domain verification, data export, and team features. Other Enterprise Private deployments with custom models, UI, and tools; individual enterprise features such as SSO, audit logs, custom limits, and private deployments.

Mistral AI Studio / API Usage-based API for models, agents, OCR, embeddings, coding, multimodal workflows, and developer integration.

Mistral Vibe / Coding Coding features in Le Chat and additional pay-as-you-go usage beyond the regular limits.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: Mistral AI is well suited from a GDPR perspective, especially for European companies and professional use.

Positive is that Mistral AI documents privacy controls for Le Chat and the API: Le Chat Free may use conversations for model improvement, but users can choose to opt out; Le Chat Pro, Team, and Enterprise do not use conversations for model training by default; API data is not used for model training; Connector data and Libraries are not used for training. Also positive are the DPA, GDPR rights, SCCs for international transfers, subprocessor arrangements, and technical/organizational safeguards.

Negative is that, depending on the feature, data may be temporarily transferred outside the EU to subprocessors, and that Free/certain Le Chat uses are weaker from a privacy perspective than Pro/Team/Enterprise or the API.

Server location: By default, Mistral hosts data in the European Union; when the US API endpoint is explicitly used, data is hosted in the USA

Privacy Where do you store my data or my Organization's data? Data Processing Addendum

Link

ⓘ“Write effortlessly and efficiently with QuillBot's suite of AI tools.”

QuillBot is an AI writing assistant focused on paraphrasing, grammar/spell checking, summarization, translation, citation, plagiarism checking, and AI detection.

Today, the product is broader than a pure paraphraser and is also positioned by QuillBot as a creative suite and as a platform for students, professionals, and creators.Quillbot

Write effortlessly and efficiently with QuillBot's suite of AI tools

6.5/10 | KIFOX Score – Solid

Free Basic access with limited paraphrasing, few modes, simple grammar functions, limited humanizer, simple summaries, and a restricted AI Detector. Subscription Premium Everything in Free plus unlimited paraphrasing, more modes, advanced grammar suggestions, unlimited Humanizer with tone/score insights, Custom Summaries, unlimited AI Detector, and plagiarism prevention.

Team Plan Multiple Premium subscriptions in one team management system; includes Team Style Guide, Dictionary, Admin Panel, Usage Reports, Writer Management Dashboard, Data Controls, and centralized billing.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, QuillBot is conditionally suitable.

Positive is that QuillBot/Learneo mentions GDPR, CCPA, and security-related references, describes privacy rights for EEA/UK users, and names safeguards for data transfers from the EU such as the EU-US/Swiss-US Data Privacy Framework, UK Extension, and Standard Contractual Clauses. It is also positive that QuillBot states for the Team Plan that text inputs are not used to train the language models; according to QuillBot’s standard policy, third-party providers are not permitted to use user data to train their AI models.

Negative is that QuillBot uses inputs and usage data from regular users to provide, personalize, and also train/improve the services; according to the Help Center, browser extension storage is enabled by default, and opt-outs are required.

Server location: No pure EU data residency guaranteed; QuillBot/Learneo mentions offices in the USA and India, global service providers, and possible transfers from the EU. Further links: QuillBot Premium, QuillBot Data Use, EU Transfer Safeguards.

Privacy Policy

Link

ⓘ“Leading partner for AI assistants for Swiss network operators and fiduciary firms”

Connect AI develops and operates tailor-made AI assistants for companies, primarily for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services. The core product, Employee GPT, is marketed as a secure alternative to ChatGPT/Copilot for companies that can be operated in Switzerland or the EU. The offering is complemented by AI rollout programs for executives, teams, and companies.Connect AI

AI assistants for businesses, especially for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services

7.1/10 | KIFOX Score – Good

Subscription Employee GPT / Employee GPT Secure private ChatGPT alternative for companies; according to the provider, with internal knowledge sources, Swiss hosting, no training on customer data, role-based permissions, private container environments, and customer ownership of data, knowledge bases, and chat logs. The pricing logic is described in a blog post as a monthly fee per employee plus a one-time onboarding fee.

AI Customer Support AI agents, help center, personalized responses, knowledge library, analytics and reports, service quality, and multilingual 24/7 support.

Sales Agent Personal sales agent for customers, lead qualification, product recommendations, upselling/cross-selling, audience insights, analytics, and reduction of cart abandonment.

Event Agent / TreuhandGPT / AI Strategy Listed on the website as additional solutions; specific public details on plans and features are not fully verifiably available. Other Customer-specific implementation & operation The Terms and Conditions describe Connect-AI Services as the customer-specific implementation and operation of the Connect-AI platform; fees, packages, usage volume, and term are defined in the respective Agreement.

Onboarding / Consulting / Integrations According to the Employee-GPT blog, the pricing framework includes not only the platform and secure hosting but also training and personal support; specific terms are clarified on a project-by-project basis.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: From a data protection perspective, Connect AI is well suited to very well suited, especially for Swiss and European companies with high requirements for data sovereignty.

Positive is that Connect AI Group GmbH is based in Zurich, Switzerland, and in its privacy policy describes processing in accordance with applicable Swiss and European data protection requirements, including reference to GDPR/DSGVO. For Employee GPT, Connect AI highlights particularly strong data protection features: models hosted in Switzerland, no data transfer abroad, no sharing of data with third parties, no use of customer data for model training, role-based access rights, private container environments, and hosting with FINMA-certified partners such as Swisscom. In addition, according to the Employee GPT page, customers retain ownership of data, knowledge bases, and chat logs.

Negative is that the general privacy policy also mentions Google Cloud and HubSpot; electronic customer data is described there as being stored with Google Cloud, and HubSpot may store data, among other places, in the USA. In addition, the terms and conditions state that Connect AI may use third parties/subcontractors and that, unless otherwise agreed, the agents are operated using OpenAI technology via Microsoft Azure. For a robust GDPR/FADP assessment, the AVV/DPA, subprocessors, specifically selected hosting, model providers, deletion periods, and data flows should therefore be contractually reviewed for each project.

Server location: For Employee GPT, according to the provider, Switzerland; in general, the privacy policy mentions physical data in Switzerland & Europe as well as electronic data with Google Cloud.

Privacy Policy

Link

ⓘ“Where go-to-market teams go to grow”

HubSpot is an integrated customer platform with Smart CRM, Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub, as well as Breeze as an embedded AI layer.

The platform combines customer, sales, marketing, service, and content processes in one system. AI features support, among other things, content creation, prospecting, data preparation, support automation, and analytics.HubSpot

Where go-to-market teams go to grow

7.3/10 | KIFOX Score – Good

Free Free basic features for CRM, contacts, deals, forms, email tools, and getting started with HubSpot. Subscription Starter Customer Platform Starter features across core HubSpot products for small businesses and startups.

Professional Hubs Advanced automation, reporting, campaign, sales, service, or content features by hub.

Enterprise Hubs Advanced scaling, governance, security, reporting, permissions, and enterprise features. Other HubSpot Hubs Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub; scope of features varies by hub and tier.

Add-ons / Breeze AI Additional seats, limits, AI/Breeze features, integrations, and enterprise options depending on the contract.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, HubSpot is conditionally to well suited, especially with EU data hosting, a DPA, and proper configuration.

Positive is that HubSpot provides a Data Processing Agreement and that new or migrated customers can host data in an EU data center in Frankfurt. HubSpot states that product infrastructure is operated on AWS in the USA, Canada, Australia, and the EU/Germany, and that customer data is stored and processed in the respective account data center. It is also positive that AI model training settings can be configured at the account level.

Negative is that external integrations, tracking code, marketing/analytics functions, AI functions, and third-party apps can create additional data flows.

Server location: Depending on the account data center: USA, Canada, Australia, or EU/Germany; EU hosting in Frankfurt possible. Further link: HubSpot DPA, Cloud Infrastructure, AI Settings.

Legal Center

Link

ⓘ"The AI for your tax return"

SteuerGPT is an AI-powered chatbot for tax-related questions within WISO Steuer. Users can ask questions in everyday language while completing their tax return; the AI explains matters, guides them to the appropriate input forms, suggests missing information, and helps them understand their tax assessment notice.TaxGPT

SteuerGPT: Your digital advisor - The AI for your tax return

7.7/10 | KIFOX Score – Good

Subscription Advantage Subscription: According to the official WISO page, includes SteuerGPT as a personal AI advisor, technical hotline, tax coaching, automatic completion, and annual use in a subscription model.

Trial version: Complete testing before submission.

Note: No direct prices stated, as only model names and functions are documented here. Other Single purchase: One-time license for one tax year with SteuerGPT and filing option.

Optional additional services: ProfiCheck and buhl:Berater are offered separately via Buhl Steuerberatungsgesellschaft mbH; Buhl Data Service itself points out that it is neither obligated nor authorized to provide tax law assistance.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes Overall assessment: Well suited, with limitations for third-party data and professional use. SteuerGPT is integrated into WISO Steuer and offered by Buhl Data Service GmbH.

Positive is that Buhl, as the responsible entity, is based in Germany and, according to its own privacy policy, complies with the GDPR. For SteuerGPT, Buhl explicitly states that no personal data is used or analyzed and that the applications are operated in German data centers; according to the provider, the data therefore does not leave the European legal area. In addition, WISO Steuer cites Buhl’s own servers in Germany, encrypted transmission and storage, as well as a zero-sharing policy with no sale or disclosure to third parties.

Negative is: A specific, publicly detailed technical privacy description solely for SteuerGPT, including training logic, a list of subprocessors, and complete retention rules for AI interactions, is not reliably available in the sources reviewed. For cases in which Buhl is used as a processor and third-party data is stored on Buhl servers, for example in tax retrieval or tax submission, Buhl offers, according to tax support, a data processing agreement under Art. 28 GDPR.

Server location: according to Buhl, German data centers or Buhl’s own servers in Germany. Conclusion: For private tax returns, SteuerGPT is strongly positioned from a data protection perspective; for business use, third-party data, or particularly sensitive scenarios, the data processing agreement, purpose limitation, deletion process, and specific processing within the application should be reviewed. Sources: Buhl SteuerGPT, WISO Steuer FAQ, Buhl Privacy Policy, and tax support information on data processing agreements.

Privacy Policy

Link

ⓘ“AI solutions that help you get work done.”

DeepL is a German language AI platform for translation, document translation, writing assistance, real-time speech translation, and API integration.

The platform currently offers DeepL Translator, DeepL Write, DeepL Voice, DeepL API, and DeepL Agent, among other services. DeepL reports millions of individual users and over 200,000 business customers.DeepL

AI solutions that help you get things done

7.3/10 | KIFOX Score – Good

Free Free access to translations and DeepL Write, with limitations on character count, document types, features, and data protection. Suitable for personal or occasional use; recommended for professional use only to a limited extent. Subscription Individual: For individuals who want to use DeepL professionally for translations and documents.
Team: For teams with higher usage volumes and shared management.
Business: For businesses with greater needs, advanced business features, and higher usage volumes. Other DeepL API for developers and businesses, offering usage-based integration into their own products, websites, apps, and workflows. Additionally, there are enterprise and business options for larger organizations with advanced security, management, and integration requirements.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment: Well-suited to very well-suited, especially for DeepL Pro, Team, Enterprise, and API, because DeepL explicitly highlights GDPR compliance, security standards, and data protection features for business customers. The assessment is more cautious for the free version, as the free plan does not offer the same level of protection as the Pro/Business plans.

Positive: DeepL mentions GDPR compliance, SOC 2 Type II, ISO 27001, encryption, access controls, and protection of business content. According to DeepL, texts are not permanently stored in DeepL Pro and are not used to train the models. Additional security and management features are available for business customers.

Negative: The free version does not offer the same business data protection framework as DeepL Pro, Team, Enterprise, or API. For particularly sensitive data, companies should additionally review: data processing agreement, selected plan, data categories, internal approvals, user management, API logging, and potential third-party providers/subprocessors.

Server location: Strong EU/Germany focus; exact technical server/data center locations cannot be fully verified on a single public page, depending on the service. DeepL is a German company based in Cologne and references European data protection standards. For a binding review, companies should verify the DPA/AVV, subprocessors, and security documents directly with DeepL.

Data Security DeepL Privacy Policy

Link

ⓘ"AI Meeting Assistant with #1 Noise Cancellation"

Krisp is an AI-powered voice and meeting product platform with three publicly visible product lines: AI Meeting Assistant for individuals and teams, Call Center AI for contact center environments, and AI Voice SDK for developers.

In the meeting space, Krisp offers, among other things, transcription, recording, AI notes, summaries, noise cancellation, accent adjustment, integrations, and webhooks. For call centers, additional features include Accent Conversion, Voice Translation, Agent Assist, and analytics functions.Krisp

AI Meeting Assistant with #1 Noise Cancellation

7.5/10 | KIFOX Score – Good

Free Test access to premium features without a credit card; includes, among other things, transcription, noise cancellation, audio/video recording, AI notes, and action items. Subscription Core For individuals and small teams; unlimited AI note-taker, bot-free transcription, audio/video recording, AI notes, action items, in-person meeting notes, noise cancellation, as well as integrations/webhooks.

Advanced For advanced teams with enhanced meeting, integration, and voice AI features. Other Enterprise / Call Center AI Custom enterprise/call center options with security, integration, compliance, and support requirements.

AI Voice SDK Developer SDK for integrating Krisp Noise Cancellation/Voice AI into your own products; processing can take place on the customer side.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, Krisp is conditionally to well suited, depending on whether only Noise Cancellation or also the AI Meeting Assistant is used.

Positive is that Krisp provides a DPA, operates a Trust Center, publishes SOC/security information, and according to its FAQ does not use personal data to train its AI models. Particularly positive: With pure Noise Cancellation, audio is processed locally on the device and is not sent to cloud servers or stored there.

Negative is that Krisp AI Meeting Assistant stores more data in the Krisp Cloud, such as transcripts and recordings; for call center/enterprise data, Krisp also states hosting on secure servers in the USA and currently no regional data residency outside the USA.

Server location: For cloud/enterprise data, USA; Noise Cancellation processes audio locally on the device. Further links: Krisp Privacy, Security, Trust FAQ, Cloud/Data Location.

Privacy Policy Privacy for humans

Link

ⓘ“Search your company knowledge smarter with AI agents.”

TextCortex is an AI platform for Enterprise AI, Company Knowledge, Workflow Automation, and AI Agents.

Officially, the product is now positioned as a model-agnostic agent infrastructure that enables companies to create AI agents without code, apply them to company data, and integrate them into existing work environments. At the same time, the pricing page still highlights strong classic assistance features such as writing, translation, rewriting, voice features, data analysis, and browser integration.Textcortex

Search your company knowledge smarter with AI agents

7.0/10 | KIFOX Score – Good

Free Free basic use of many core features; suitable for testing and for simple AI writing and chat workflows.

14-day trial period TextCortex mentions a 14-day trial period to try out all features with higher usage. Subscription Extended access to AI writing features, ZenoChat, reasoning/model features, knowledge features, image/text generation, and more usage capacity. Other Enterprise Multiple seats, Enterprise Knowledge Search, dedicated support, secure team/company features, higher storage/usage limits, and custom requirements.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, TextCortex is well suited to conditionally well suited, especially for European companies.

Positive is that TextCortex is a German company based in Berlin, bases its privacy policy on the GDPR, and according to its own statements hosts services exclusively in the EU on GDPR-compliant servers. TextCortex also states that it does not use customer data for model training or fine-tuning; according to the Help Center, Enterprise data is not used for training.

Negative is that, according to TextCortex, optional services or LLMs outside the EU are safeguarded via the EU-US Data Privacy Framework or Standard Contractual Clauses; these optional third-party data flows must be reviewed on a case-by-case basis.

Server location: According to TextCortex, generally the European Union; optional external LLMs/services may be located outside the EU. Further link: TextCortex Privacy Policy, Imprint, Data Handling, and Enterprise data notices.

Privacy Policy

Link

ⓘ"co-create intelligence with everyone"

MiniMax is a multimodal foundation model provider with models for text, coding, agents, speech, video, music, image, and multimodal applications. Its products include MiniMax Agent, Hailuo AI, MiniMax Audio, Talkie, and an Open Platform for developers and enterprises.MiniMax

LLM “co-create intelligence with everyone”

5.9/10 | KIFOX Score – Limited

Subscription Token Plan – Starter Subscription access for developers with access to MiniMax models via Token Plan API key; text models with a 5-hour rolling window, plan-dependent limited multimodal quotas.

Token Plan – Plus Expanded Token Plan with a higher M2.7 quota and additional daily multimodal quotas for Speech, Image, and other models.

Token Plan – Max Higher standard Token Plan with a larger request quota and expanded daily quotas for multimodal models.

Plus-Highspeed / Max-Highspeed / Ultra-Highspeed High-speed Token Plans with access to faster M2.7/M2.5 Highspeed models and expanded quotas for coding-related workflows. Other Pay-as-you-go API Standard Open Platform API key for usage-based billing according to actual consumption; supports text, video, speech, image, and additional modalities.

Audio Subscription / Video Packages Separate packages for speech and video generation with product-specific quotas and billing logic.

Local / Private Deployment Open M2 model weights can be run locally or privately via Hugging Face and frameworks such as SGLang, vLLM, Transformers, ModelScope, or NVIDIA NIM.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment: Unclear to conditionally GDPR-suitable. MiniMax provides several services, including Open Platform/API, Agent, Audio, and Video; the official central privacy overview refers to product-specific privacy policies, including a separate Platform Privacy Policy for Enterprise API services.

Positive is that MiniMax provides a Privacy Policy for Agent/Web with data subject rights, deletion, correction, data portability, and opt-out rights for certain U.S. states, as well as additional information for Singapore residents.

Negative is that no verified information was found in the reviewed publicly accessible sources regarding an EU DPA/AVV, SCCs, EU hosting, complete subprocessors, or a clear no-training commitment for API customer data.

Server location: No verified server locations were found for the API/Open Platform in the reviewed sources; the Agent/Web Privacy Policy mentions Nanonoble Pte. Ltd. and additional information for Singapore, but this cannot automatically be applied to all API use cases. For GDPR-critical use, MiniMax API should only be used after direct clarification from the provider regarding AVV/DPA, data residency, training on customer data, subprocessors, retention, and deletion; alternatively, openly available M2 models can be evaluated locally or in a private cloud environment. Sources: MiniMax Privacy Overview, Agent/Web Privacy Policy, API Pricing/Docs, and official model/deployment notes.

Privacy Policy

Link

ⓘ"Best AI Video & Image Generator" / "Free AI Video Generator"

DeeVid AI is an AI platform for text-to-video, image-to-video, video-to-video, AI effects, AI music, text-to-speech, AI avatars, and AI ads. The provider positions itself as a platform with multiple video/image models such as Veo, Kling, Sora, Runway, Stable Diffusion, Pika, and others.Deevid AI

Best AI Video & Image Generator - Free AI Video Generator

3.4/10 | KIFOX Score – Insufficient

Free Free Credits / Starting Credit
New users receive a small credit allowance for testing; free users generate content with watermarks. Subscription Lite For beginners and casual creators; monthly credits, AI video, AI image, text-to-speech, voice cloning/design, AI video ads, AI avatar, AI music, templates, private creation, no watermark, commercial use.

Pro Advanced plan for creators with a higher credit allocation, greater production capacity, 1080p output, AI video/image/audio features, Character Consistency, and commercial use.

Premium For high-volume users with a significantly higher credit allocation, Fast Generation Mode, 1080p output, priority support, and expanded production volumes. Other Credit Packs Additional credits can be purchased separately; credits serve as consumption units for video, image, and audio generation.

Third-Party Models DeeVid integrates and/or routes various video/image models such as Sora, Veo, Kling, Runway, Stable Diffusion, Pika, Luma, Hailuo, and others; specific data flows depend on the selected model.

– ★★★★★★★★★★ (0)

Link

GDPR: Unclear Overall assessment: Unclear to conditionally GDPR-suitable.

Positive is that DeeVid AI explicitly states in its Privacy Policy that it does not use inputs such as prompts, uploaded images/videos, and outputs to train its own AI models. In addition, according to the policy, facial images are used only temporarily for technical processing and are deleted immediately after task completion; DeeVid states that it does not maintain a permanent facial database.

Negative is: According to the Privacy Policy, DeeVid AI primarily stores personal data in data centers in North America; international transfers are possible. DeeVid may use third-party AI services and share information with cloud/hosting, payment, analytics, and support providers. A publicly confirmed AVV/DPA under the GDPR, SCCs, EU data residency, a complete subprocessor list, or external security certifications could not be clearly identified: No confirmed information available.

Server location: primarily North America according to the Privacy Policy.

Conclusion: Usable for non-confidential creative content; for personal images, faces, customer data, or confidential marketing data only with great caution and additional vendor review. Sources: DeeVid AI Privacy Policy, Pricing, Contact/Company.

DeeVid AI Privacy Policy

Link

ⓘ“Launch your dream site in seconds”

Hostinger Website Builder is a no-code website builder with integrated hosting, a domain/SSL bundle, templates, marketing features, and several AI tools.

Users can create websites via drag-and-drop or with an AI prompt and then customize them for portfolios, company websites, blogs, or small to medium-sized online stores. Particularly relevant are the integrated AI features for text, images, logos, blog posts, product descriptions, and SEO.Hostinger

Build anything with AI from a personal site to an advanced web app – no coding needed

7.7/10 | KIFOX Score – Good

Subscription Premium For small businesses, appointment pages, and professional presentations; includes AI Website Builder, Hostinger Horizons Credits, a free domain in the first year, email inboxes, hosting, and security features.

Business Website Builder For websites and online stores; includes AI tools, e-commerce features, domain, SSL, email, multiple websites, Vibe-Coding/Horizons Credits, SEO, marketing, and email campaign features.

Web Hosting / WordPress / Cloud / VPS Alternative hosting plans for users who need WordPress, their own code, cloud resources, or VPS control. Other Hostinger Horizons AI-powered prompt-based web app/website builder with credits, depending on the plan.

Domains, Email, CDN, Agency Hosting, API Additional products and extensions related to hosting, domain management, email, performance, and developer access.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: From a GDPR perspective, Hostinger is conditionally to well suited, depending on the selected product, data center, and website setup.

Positive is that Hostinger provides a Data Processing Addendum and addresses EU GDPR, UK GDPR, SCCs, subprocessors, and technical/organizational measures. The Privacy Policy also refers to processing in accordance with the GDPR. Another positive aspect is that, for AI Agents, Hostinger states that it does not use conversations for training or fine-tuning AI models and does not use them for advertising profiles.

Negative is that Hostinger is a global provider with many products; data center, CDN, email, domains, third-party tools, tracking, WordPress plugins, and website builder features must be reviewed individually.

Server location: For web/cloud hosting, European locations such as France, Germany, Lithuania, the Netherlands, and the UK are available; website builder files are stored in a fixed location, assets are delivered worldwide via the Cloudflare CDN. Further link: Hostinger DPA, Privacy Policy, Server Locations, and AI Agents Data Handling.

Data processing addendum Privacy policy

Link

ⓘ"Your Visual Studio"

Fotor is a web-based creative and image editing tool with AI features for photo enhancement, background removal, retouching, text-to-image, image-to-video, design templates, and AI agent workflows.

The tool runs in the browser as well as on Windows, Mac, iOS, and Android and is aimed at beginners, content teams, marketers, freelancers, and smaller businesses that want to create visual content without complex professional software.Fotor

Your Visual Studio

6.6/10 | KIFOX Score – Solid

Free Free forever; limited credits, one simultaneous generation, few chats and tasks with AI Agent Sisi, basic editing, basic templates, limited effects/fonts, limited creation storage duration, small cloud storage, and exports with watermarks. Subscription Fotor Pro More credits, multiple simultaneous generations, significantly more AI Agent Sisi chats, AI Agent tasks, 100+ editing tools, AI portrait retouch, many templates/assets, premium effects/fonts, exclusive AI models, unlimited creation storage duration, more cloud storage, and watermark-free HD/transparent PNG exports.

Fotor Pro+ Everything in Pro plus more credits, more parallel generations, more AI Agent Sisi usage, AI batch edit for Background Remover/Replacement, multiple brand kits, AI slides generation, significantly more cloud storage, and advanced project/asset features. Other Fotor Max / Credits Higher usage and storage limits; Fotor uses credits for AI models and mentions rollover of unused credits with an active subscription for up to a certain period.

AI Headshot Plans One-time headshot packages for individual and team use with AI Headshots, Redo, fast processing, and HD quality.

API Plans API plans are listed as a separate section on the pricing page; specific usage should be checked separately.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, Fotor is unclear to conditionally suitable.

Positive is that Fotor publishes a Privacy Policy, mentions data protection rights under local privacy laws such as GDPR or CCPA, and asks users to assert their rights via email. Also positive is that Fotor offers a clearly documented product and pricing structure with Free, Pro, and Pro+ features.

Negative is that I could not publicly find a reliable AVV/DPA, no list of subprocessors, no SCC documentation, and no clear EU data residency. The Privacy Policy describes the collection, use, disclosure, transfer, and storage of information without transparently clarifying data residency or data processing on behalf of EU companies.

Server location: No verified information available. Further link: Fotor Privacy Policy, Terms, and Pricing.

Privacy Policy

Link