Find Your Tool in 6 Steps
Result: 144

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 144
Search Images Video Music API Agent Voice Chatbot Coding Marketing
Provider login

Claude is an AI assistant and model family from Anthropic for chat, research, writing, analysis, coding, and agentic workflows.

Depending on the plan or product, the offering includes web/desktop/mobile chat, Research, Claude Code, Claude Cowork, web search, file/code execution, connectors, as well as APIs and Managed Agents for developers. Anthropic positions Claude for individuals, teams, education, and enterprise environments alike.Claude

Think fast, build faster “Brainstorm in Claude, build in Cowork”

8.5/10 KIFOX Score – Very good
Free Claude Free includes chat on web, iOS, Android, and desktop, code generation, data visualization, writing/editing texts, content generation, text and image analysis, as well as web search. Projects are also available to Free users, though in a limited number. Subscription Claude Pro: Includes everything in Free plus more usage, Claude Code, Claude Cowork, unlimited projects, Research, access to more Claude models, as well as Claude for Excel, PowerPoint, and Word Beta.

Claude Max: Includes everything in Pro plus significantly higher usage, higher output limits, early access to advanced Claude features, and priority during high demand.

Claude Team: For teams; includes all Claude features, more usage than Pro, Claude Code and Cowork, connectors like Microsoft 365 and Slack, Enterprise Search, centralized billing/administration, SSO, admin controls, and no model training on company content by default.

Claude Enterprise: For large companies; includes Team features plus advanced admin, security, compliance, and governance features such as Spend Controls, Audit Logs, SCIM, role-based access, Compliance API, custom data retention, and additional enterprise options. Other Claude API: Separates developer/platform model with usage-based billing by model, input/output tokens, prompt caching, and other factors. Claude models are also available through third-party platforms such as AWS Bedrock, Google Vertex AI, and Microsoft Foundry.

Additional features: The Claude Platform offers additional usage-based features such as Managed Agents, Web Search, Code Execution, as well as service tiers like Standard, Priority, and Batch.

Claude Design: Available for Pro, Max, Team, and Enterprise; usage runs through the respective subscription limits, with optional Extra Usage.

Special offers: Anthropic offers separate deals or programs for educational institutions, nonprofits, and certain government/public sector contexts.
5.0 (3)

Link

GDPR: Partly Overall assessment: Conditionally GDPR-suitable. Claude AI can be used in a GDPR-compliant manner if the appropriate product variant is chosen and the privacy configuration is carefully reviewed.

Positive is that Anthropic provides a Data Processing Addendum for commercial offerings, includes Standard Contractual Clauses for international data transfers, documents subprocessors, and describes technical and organizational security measures such as encryption, access restrictions, and MFA. For EEA, UK, and Swiss users, Anthropic names Anthropic Ireland Limited as the responsible entity; Anthropic also states that commercial customer data from Claude for Work, API, Claude Gov, etc. is not used for model training by default.

Negative is that for private Claude Free, Pro, and Max accounts, inputs/outputs may be used for model improvement and training according to the Privacy Policy unless users object or disable the relevant setting; in addition, data may be processed for longer in the event of security reviews, feedback, or policy violations.

Server location: For consumers, the Privacy Policy points to transfers to the USA and other countries outside the EEA/UK; for commercial products, Anthropic states default storage in the USA and possible processing/routing in the USA, Europe, Asia, and Australia unless otherwise agreed or controlled. For companies with GDPR requirements, Team/Enterprise/API with DPA, subprocessor review, SCCs, AVV/DPA, deletion/retention concept, and preferably regional data residency is therefore preferable. No verified information is available for blanket GDPR compliance across all Claude usage types without a specific review of contracts and configuration. Sources: Anthropic Privacy Policy, Privacy Center, Data Processing Addendum, server location/retention notices, and Regional Compliance.

Privacy Claude

Link

“to empower everyone in the world to design anything and publish anywhere”.

Canva is a browser-based platform for design, publishing, and visual communication. Users can use it to create, among other things, social posts, presentations, documents, websites, videos, and brand materials; in addition, it offers AI features for text, images, translation, code, and data-driven content.

Canva thus positions itself not only as a design tool, but as an integrated Visual Suite for individuals, teams, and companiesCanva

Visual Suite for Everyone

7.8/10 KIFOX Score – Good
Free Free basic version for designs, templates, and free content; suitable for creating simple social posts, presentations, posters, videos, logos, and designs. Pro content may contain watermarks for Free users or be licensed separately. Subscription Canva Pro For individuals and solo creators; includes premium content, templates, Brand Kit, Background Remover, Magic Resize, and AI-powered design features.

Canva Business For small businesses, solo entrepreneurs, and growing teams; includes everything in Pro plus higher AI access, advanced brand management, marketing/ad insights, collaboration, and shared workspaces.

Canva Enterprise For large organizations with multiple teams; includes enterprise security, SSO, SCIM, audit logs, data residency options, AI governance, advanced admin controls, approval workflows, integrations, and dedicated support. Other Free users can license individual Pro content for one design; in addition, there are print products as well as special offers for education and nonprofits.
5.0 (1)

Link

GDPR: Partly GDPR assessment: Canva is conditionally suitable from a GDPR perspective.

Positive is that Canva offers a Data Processing Addendum for Business and Enterprise customers, in which Canva acts as a processor for personal data within the team for European and UK customers; the DPA includes, among other things, EU Standard Contractual Clauses, the UK Transfer Addendum, technical and organizational measures, and provisions on subprocessors. Canva also cites ISO 27001, SOC 2 Type II, SOC 3, PCI DSS, and the Data Privacy Framework as security/compliance certifications. Another positive point is that, according to the Trust Center, Canva does not use Business, Teams, and Enterprise content to improve AI-powered features and also does not allow third parties to do so.

Negative is that, according to the Trust Center, Canva stores data in the USA by default, and data may be processed by Canva group companies in, among other places, Australia, New Zealand, the Philippines, the UK, Singapore, Europe, and the USA. For EU companies, it is therefore necessary to review the DPA, SCCs, Transfer Impact Assessment, subprocessors, sharing settings, third-party apps, and AI data usage.

Server location: USA by default; for Enterprise, data residency options are mentioned, but not as a general standard for all plans. Further links: Canva Trust Center Privacy, Canva DPA, Canva Security.

Privacy

Link

“AI tools built for your WordPress site”

WordPress is a website builder and an open-source CMS, as well as a hosted platform known as WordPress.com.

In the context of AI, WordPress now offers official features for text generation, rephrasing, translation, image generation and editing, design assistance, an AI website builder, and MCP-based agent integrations with tools such as Claude or ChatGPT.

In addition, the official WordPress AI team documents core-level components such as AI Client, the Abilities API, and the AI plugin.WordPress

AI tools built for your WordPress site

7.9/10 KIFOX Score – Good
Free Free to get started for simple websites and blogs; WordPress.com offers a free plan and upgrades for additional features. WordPress itself is free to use if you have your own hosting. Subscription Personal Your own domain for the first year, 6 GB of storage, ad-free visitor view, premium themes, support, statistics, plugin installation, and customization of fonts and colors.

Premium Everything included in the Personal plan plus more storage, all premium themes, fast support, premium statistics, Google Analytics, and video uploads.

Business Managed WordPress hosting with more storage, 24/7 priority support, premium statistics, plugins, Google Analytics, video uploads, and developer features such as SFTP/SSH, WP-CLI, Git commands, and GitHub deployments.

Commerce For online stores with a WooCommerce-optimized environment, store themes, e-commerce tools, plugins, Google Analytics, video uploads, and developer features. Other Enterprise / WordPress VIP An enterprise offering for large organizations, with a focus on scalability, security, and data-driven WordPress experiences.

WordPress.org Self-Hosting Download the WordPress software for free and run it with your own hosting provider; you’ll then have greater responsibility for hosting, domain, security, updates, and data protection.
3.0 (2)

Link

GDPR: Partly GDPR Assessment WordPress.com documents its GDPR compliance, provides a DPA/AVV for all WordPress.com site operators, and refers to standard contractual clauses for data transfers. At the same time, according to WordPress.com, it is not possible to restrict the data associated with the site to a single geographic location, as personal data is stored in both the U.S. and the EU. Regarding AI features, while WordPress.com itself describes ownership of input and output as well as an opt-out option for third-party content sharing, no comprehensive exclusion of the use of prompts, uploads, chat histories, or outputs for model training was found.

Positive Positive aspects include the available DPA/AVV, the explicitly stated GDPR support, standard contractual clauses for transfers, security measures such as SSL, scans, backups, WAF, and activity monitoring, as well as an opt-out option against third-party sharing of public content, including AI platforms.

Negative A notable negative is that no genuine EU data residency is guaranteed; according to WordPress.com, personal data is stored in the U.S. and the EU, and a site’s data cannot be restricted to a single geographic location. On WordPress.com itself, no complete list of subprocessors, no AI-specific “no-training” commitment for prompts/uploads/outputs, and no robust ISO 27001 or SOC 2 certifications for WordPress.com were found.

Server Location WordPress.com states that personal data is stored on servers in the U.S. and the EU and that it is not possible to restrict data to a single geographic location. For Business sites, a primary data center can be selected when hosting features are first activated, including EU West, US West, US Central, and US East; existing activated sites cannot currently be migrated, Commerce sites cannot currently change their primary location, and, according to the FAQ, data is replicated across multiple data centers.

Request a data processing agreement

Link

ChatGPT is OpenAI's multimodal AI application for text, research, data analysis, coding, image generation, voice, and knowledge-based work.

Its current feature set includes, among other things, Search, Deep Research, Data Analysis, Projects, Custom GPTs, Codex, Images, Voice Mode, and, additionally for Business/Enterprise, Apps and Company Knowledge. This makes ChatGPT today more of a broad work platform than just a chatbot.Chat GPT

ChatGPT is your AI chatbot for everyday use

7.8/10 KIFOX Score – Good
Free Free offers, according to the official pricing/FAQ documentation, limited access to GPT-5.3, messages/uploads, image generation, Deep Research, Memory, and Codex; in addition, web search, file uploads, data analysis, and GPT usage are generally available, but limited. Subscription Go Expanded individual plan compared to Free; more access to GPT-5.3, more messages, more uploads, more image generation, and a longer memory function. According to OpenAI, it may contain ads.

Plus Individual plan for advanced use; includes, among other things, GPT-5.5 Thinking, expanded messages/uploads, better image generation, enhanced Deep Research and Agent Mode, Projects, Tasks, Custom GPTs, and expanded Codex access.

Pro Powerful individual plan for maximum productivity; includes more usage, GPT-5.5 Pro, maximum Codex tasks, unlimited GPT-5.3 and file uploads, faster image generation, maximum Deep Research and Agent Mode, as well as larger memory/context functions. Other Business Codex Usage-based team model for development-oriented teams; focus on AI-supported software development, code and security reviews, automation, cloud environments, admin controls, SAML/MFA, and no training on customer data.

Business ChatGPT & Codex Team plan for startups and growing companies; includes Plus and Business Codex features, unlimited core chat, apps/connectors such as Slack, Google Drive, SharePoint, GitHub, and Atlassian, data analysis, Record Mode, Canvas, shared projects, workspace GPTs, admin and security features.

Enterprise Custom enterprise model for large organizations; includes an expanded context window, enterprise security features such as SCIM, EKM, role-based controls, domain verification, data residency in multiple regions, 24/7 priority support, SLAs, custom contract terms, and no use of business data for training by default.

ChatGPT Edu / Higher Education Education plan for higher education institutions; offers expanded access to GPT-5, tools for data analysis, web browsing, file integrations, document summarization, and custom GPTs for campus workspaces.
4.0 (1)

Link

GDPR: Partly ChatGPT is not categorically “GDPR-compliant” or “not GDPR-compliant”; the assessment depends heavily on the plan used, the activated settings, and the specific use case.

For private accounts / Free, Plus, Pro: OpenAI may use content to improve the model; according to OpenAI, data sharing is enabled by default for personal workspaces, but can be disabled via “Improve the model for everyone.” For users in the EEA or Switzerland, OpenAI Ireland Ltd. is the responsible entity; OpenAI also processes and stores personal data outside the EEA/UK/Switzerland and relies on adequacy decisions and SCCs, among other things, for transfers.

For ChatGPT Business / Enterprise / Edu: significantly better suited, as OpenAI does not use business data for training by default. OpenAI offers a Data Processing Addendum / DPA for business customers; in the DPA, OpenAI acts as a processor, processes customer data only to provide the service, and regulates data subject rights, security measures, data breaches, subprocessors, and international data transfers.

Positive: DPA available, SCCs regulated, no training by default for Business/Enterprise/Edu data, encryption, SOC 2 Type 2 and ISO certifications for relevant Business/Enterprise services.

Negative / points to review: US/global provider, subprocessors in multiple countries, not all plans have data residency, and personal accounts are only suitable to a limited extent for sensitive corporate or personal data.

Data usage - Europe privacy policy - Enterprise privacy - Security & Privacy

Link

“Get everything you need to build a website your way.”

Wix is a no-code website builder that enables individuals and businesses to create websites, blogs, portfolios, online stores, and booking pages. The platform combines a drag-and-drop editor, templates, hosting, SEO, marketing, CRM, and commerce features in one interface.

Since 2026, Wix has also positioned the editor with Wix Harmony as a hybrid AI editor with prompting plus manual fine control.Wix

Get everything you need to build a website your way

7.2/10 KIFOX Score – Good
Free Free website creation and publishing; a Premium plan is required for your own domain, ad-free use, or advanced business features. Subscription Light Basic plan with your own domain, hosting, AI creation tools, storage, a light marketing suite, and a few collaborators.

Core For growing websites and initial business features; includes more storage, multi-cloud hosting, basic marketing, payments, basic eCommerce, scheduling/service features, and more collaborators.

Business For businesses with growth; includes more storage, standard marketing suite, payments, standard eCommerce, scheduling/services, and more collaborators.

Business Elite For larger requirements; includes unlimited storage, multi-cloud hosting, Advanced Marketing Suite, payments, Advanced eCommerce, scheduling/services, Advanced Developer Platform, and many collaborators. Other Wix Enterprise Custom enterprise solution for larger organizations with more complex governance, support, developer, and scaling requirements. Wix refers to enterprise solutions as a separate area.

Wix Studio / Velo / Custom Hosting Solutions For agencies, developers, and more complex web projects; Wix states that selected custom hosting solutions may be available with Velo in the enterprise context.
1.0 (1)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, Wix is conditionally suitable.

Positive is that Wix provides a Data Processing Agreement for users, which governs the processing of personal data between Wix and users. Wix also states that website operators can build a GDPR-compliant website with Wix, but makes it clear that website operators themselves remain responsible for what data they collect and how they process it. Also positive are security measures such as hosting on AWS and Google Cloud Platform, Equinix colocation, certifications of the infrastructure providers such as ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and PCI DSS Level 1, as well as access controls and security monitoring.

Negative is that Wix uses servers and cloud providers worldwide, may share data with affiliates, third-party providers, analytics, advertising, and social media partners, and the website operator must configure external apps, tracking, cookies, forms, and payment providers in a privacy-compliant manner themselves.

Server location: Wix has servers in multiple locations worldwide, including Europe and the USA; according to Wix, users currently cannot select or change the host server themselves. Further links: Wix DPA, Wix GDPR Help, Wix Security Measures, Wix Host Server.

Wix's Data Processing Agreement for Wix Users

Link

"The AI for your tax return"

SteuerGPT is an AI-powered chatbot for tax-related questions within WISO Steuer. Users can ask questions in everyday language while completing their tax return; the AI explains matters, guides them to the appropriate input forms, suggests missing information, and helps them understand their tax assessment notice.TaxGPT

SteuerGPT: Your digital advisor - The AI for your tax return

8.2/10 KIFOX Score – Very good
Subscription Advantage Subscription: According to the official WISO page, includes SteuerGPT as a personal AI advisor, technical hotline, tax coaching, automatic completion, and annual use in a subscription model.

Trial version: Complete testing before submission.

Note: No direct prices stated, as only model names and functions are documented here. Other Single purchase: One-time license for one tax year with SteuerGPT and filing option.

Optional additional services: ProfiCheck and buhl:Berater are offered separately via Buhl Steuerberatungsgesellschaft mbH; Buhl Data Service itself points out that it is neither obligated nor authorized to provide tax law assistance.
– (0)

Link

GDPR: Yes Overall assessment: Well suited, with limitations for third-party data and professional use. SteuerGPT is integrated into WISO Steuer and offered by Buhl Data Service GmbH.

Positive is that Buhl, as the responsible entity, is based in Germany and, according to its own privacy policy, complies with the GDPR. For SteuerGPT, Buhl explicitly states that no personal data is used or analyzed and that the applications are operated in German data centers; according to the provider, the data therefore does not leave the European legal area. In addition, WISO Steuer cites Buhl’s own servers in Germany, encrypted transmission and storage, as well as a zero-sharing policy with no sale or disclosure to third parties.

Negative is: A specific, publicly detailed technical privacy description solely for SteuerGPT, including training logic, a list of subprocessors, and complete retention rules for AI interactions, is not reliably available in the sources reviewed. For cases in which Buhl is used as a processor and third-party data is stored on Buhl servers, for example in tax retrieval or tax submission, Buhl offers, according to tax support, a data processing agreement under Art. 28 GDPR.

Server location: according to Buhl, German data centers or Buhl’s own servers in Germany. Conclusion: For private tax returns, SteuerGPT is strongly positioned from a data protection perspective; for business use, third-party data, or particularly sensitive scenarios, the data processing agreement, purpose limitation, deletion process, and specific processing within the application should be reviewed. Sources: Buhl SteuerGPT, WISO Steuer FAQ, Buhl Privacy Policy, and tax support information on data processing agreements.

Privacy Policy

Link

Robotics

“More than Wisdom, Be with You”; in its online store, Unitree describes itself as a robotics company focused on the development, production, and sale of consumer and industrial robots.

Unitree develops and sells humanoid robots such as the G1, H1/H1-2, H2, and R1, as well as quadruped robots, robotic arms, LiDAR/perception products, and components. The humanoid models are primarily positioned for research, development, education, demonstration, embodied AI, teleoperation, motion research, and early industrial/service pilot projects. Unitree itself points out that global humanoid robotics is still in an early exploratory phase and that users should understand the limitations of humanoid robots before purchasing.Unitree

More than Wisdom, Be with You

3.7/10 KIFOX Score – Insufficient
Other Unitree R1 / R1 Air / R1 EDU Compact humanoid robot available for pre-order; according to the official store page, it features a multimodal speech/vision model, 20 to 26 degrees of freedom, open joint and sensor interfaces, and simulation platform support. According to the store description, the standard version does not support secondary development; the EDU version is recommended for customization.

Unitree G1 / G1 EDU Humanoid robot for research, development, and robotics experiments; according to the official product page, it features 23 to 43 joint motors, support for imitation and reinforcement learning, a force-controlled dexterous hand in the EDU version and options, and high mobility.

Unitree H1 / H1-2 Full-size humanoid with 3D LiDAR, depth camera, high mobility, replaceable battery, and high joint torque density; intended primarily for research, demonstration, and advanced robotics development.

Unitree H2 / H2 EDU New full-size humanoid with 31 degrees of freedom, powerful chip, bionic head, and optional EDU/development options; H2 EDU is available through sales/contact.

Custom Robots / Professional Service Unitree lists Professional Service and Custom Robots in the shop; specific services, SLAs, privacy policies, and integration packages must be requested individually.

Shipping, Customs, Import In its international shop, Unitree notes that customers are responsible for shipping costs, customs duties, taxes, and import clearance; contact information and, if applicable, a Tax ID are required for customs clearance.
– (0)

Link

GDPR: Unclear Overall assessment: Unclear to critically compliant with the GDPR. Unitree is a Chinese robotics manufacturer based in Hangzhou, China.

On the positive side, Unitree describes protective measures such as encryption, access controls, firewalls, de-identification/anonymization, host isolation, and internal access restrictions in its official privacy policy. The Unitree Go Privacy Policy also lists data subject rights such as access, rectification, erasure, withdrawal of consent, and account deletion. For certain robotics functions, Unitree states that individual control and device information is stored locally within the app or on the device and is not uploaded to servers.

A negative aspect is that no verified information was found regarding a GDPR-compliant DPA, EU representative, EU hosting, standard contractual clauses, a complete list of subprocessors, or specific GDPR corporate documentation for European B2B customers. Depending on app/product usage, Unitree potentially processes device information, IDs, location data, Wi-Fi/Bluetooth/sensor information, camera/video/image data, account data, usage data, and robot control data. The Unitree Go Privacy Policy also lists third-party providers and third-party SDKs, including iFLYTEK for real-time speech recognition.

Server location: For Unitree Go data, Unitree states that storage takes place in the People’s Republic of China. For EU customers, online store orders, support, and robotics telemetry, no reliable EU data residency is guaranteed.

Conclusion: Unitree can be very interesting for research, laboratory work, education, and robotics development. However, for GDPR-critical use in Europe, the robots should only be deployed after technical and legal review: Offline/LAN operation, disabled cloud functions, network analysis, AVV/DPA requests, sub-processor review, telemetry review, a security concept, and clear rules for camera, audio, and location data are required. No verified information is available regarding blanket GDPR compliance for corporate use within the EU.

Unitree Security Response Center

Link

Firefly: “Create like never before.”

Adobe Firefly is used to generate and edit images, videos, audio, and designs.

Adobe positions Firefly as a family of generative AI models embedded both in the Firefly web app and in Adobe flagship products such as Photoshop, Illustrator, Lightroom, InDesign, Adobe Express, and Adobe Stock. Creative Cloud provides the app, asset, collaboration, and subscription infrastructure for this.Adobe Firefly / Adobe Creative Cloud.

Creative Cloud for Business: “Create exceptional on-brand content faster.”

7.6/10 KIFOX Score – Good
Free Free entry with limited access to standard and premium AI features for image, video, audio, and more. Subscription Firefly Standard Creative AI subscription with monthly generative credits, standard image features, and access to premium features via credits.

Firefly Pro More generative credits and expanded access to creative AI features.

Firefly Pro Plus Significantly more credits, broader access to advanced image/video/audio features, and external AI models within Firefly.

Firefly Premium Highest regular Firefly tier with a very high credit amount and content creation on a larger scale.

Creative Cloud Single Apps / All Apps Photoshop, Illustrator, Premiere Pro, After Effects, Express, Acrobat, and other Adobe apps; Firefly and generative credits included depending on the plan. Other Creative Cloud for Teams / Enterprise Company management, Admin Console, DPA, enterprise controls, team/brand workflows, and extended contract options.

Generative Credits / Credit Add-ons Additional credits for Firefly and Creative Cloud generative AI features.

Firefly Custom Models Enterprise feature for training brand-specific Firefly models on your own brand assets.
– (0)

Link

GDPR: Partly GDPR assessment: Adobe Firefly / Adobe Creative Cloud is conditionally to well suited from a GDPR perspective, especially for Business/Enterprise use with Adobe DPA.

Positive is that Adobe provides a Data Processing Addendum for Cloud Services and refers in the Terms to the EU DPA and Data Protection Terms. Adobe also explicitly states that customer and user data within the applications is not used to train generative AI models from Adobe or partners. For certain Adobe cloud document/generative AI functions, Adobe describes regional storage by geographic region; document content is not stored in Microsoft Azure OpenAI, extracted content is processed in encrypted form, temporarily cached in Adobe Cloud Storage for up to 12 hours, and not used for model training.

Negative is that Adobe is a global US provider with many products, subprocessors, partner AI models, and regionally varying data flows. Firefly Custom Models can also be deliberately trained with customer-owned brand assets, which must be reviewed separately from a contractual and legal perspective.

Server location: Depending on the Adobe product, account type, and region; for certain cloud documents, the geographic region determines the storage location, but there is no blanket EU-only guarantee for all Creative Cloud / Firefly functions. Further link: Adobe Firefly Gen-AI Approach, Adobe Terms/DPA, and Adobe Cloud Storage Data Centers.

privacy

Link

“Write effortlessly and efficiently with QuillBot's suite of AI tools.”

QuillBot is an AI writing assistant focused on paraphrasing, grammar/spell checking, summarization, translation, citation, plagiarism checking, and AI detection.

Today, the product is broader than a pure paraphraser and is also positioned by QuillBot as a creative suite and as a platform for students, professionals, and creators.Quillbot

Write effortlessly and efficiently with QuillBot's suite of AI tools

7.1/10 KIFOX Score – Good
Free Basic access with limited paraphrasing, few modes, simple grammar functions, limited humanizer, simple summaries, and a restricted AI Detector. Subscription Premium Everything in Free plus unlimited paraphrasing, more modes, advanced grammar suggestions, unlimited Humanizer with tone/score insights, Custom Summaries, unlimited AI Detector, and plagiarism prevention.

Team Plan Multiple Premium subscriptions in one team management system; includes Team Style Guide, Dictionary, Admin Panel, Usage Reports, Writer Management Dashboard, Data Controls, and centralized billing.
– (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, QuillBot is conditionally suitable.

Positive is that QuillBot/Learneo mentions GDPR, CCPA, and security-related references, describes privacy rights for EEA/UK users, and names safeguards for data transfers from the EU such as the EU-US/Swiss-US Data Privacy Framework, UK Extension, and Standard Contractual Clauses. It is also positive that QuillBot states for the Team Plan that text inputs are not used to train the language models; according to QuillBot’s standard policy, third-party providers are not permitted to use user data to train their AI models.

Negative is that QuillBot uses inputs and usage data from regular users to provide, personalize, and also train/improve the services; according to the Help Center, browser extension storage is enabled by default, and opt-outs are required.

Server location: No pure EU data residency guaranteed; QuillBot/Learneo mentions offices in the USA and India, global service providers, and possible transfers from the EU. Further links: QuillBot Premium, QuillBot Data Use, EU Transfer Safeguards.

Privacy Policy

Link

Build with the latest DeepSeek models

DeepSeek currently offers two LLM access points via its API: deepseek-chat and deepseek-reasoner. According to the official documentation, both currently correspond to DeepSeek-V3.2 with a 128K context window; deepseek-chat stands for Non-Thinking mode, deepseek-reasoner for Thinking mode. The API is OpenAI-compatible and supports, among other things, JSON Output, Tool Calls, Chat Prefix Completion, and, in the case of deepseek-chat, additionally FIM Completion.DeepSeek API

LLM "Build with the latest DeepSeek models"

4.2/10 KIFOX Score – Limited
Other Token-based API usage Billing based on input, output, and cache-hit/cache-miss tokens.

deepseek-v4-flash Faster, more efficient model with Thinking and Non-Thinking mode, 1M context, JSON output, tool calls, and chat prefix completion.

deepseek-v4-pro More powerful model for more complex reasoning, coding, agents, and long contexts; also supports 1M context, JSON output, and tool calls.

OpenAI-/Anthropic-compatible API Usage via an OpenAI-compatible base URL or an Anthropic-compatible endpoint; suitable for existing SDKs and agent tools.

Open Weights / Self-hosting path DeepSeek-V4 was released as an open-weights family; self-hosting requires your own infrastructure and should be considered separately from the official API.
– (0)

Link

GDPR: No GDPR assessment: From a GDPR perspective, the DeepSeek API is critical for EU companies or only suitable after careful review.

Positive is that DeepSeek lists rights for EEA, Swiss, and UK users in its Privacy Policy, describes technical and organizational security measures, and states that it does not engage in targeted advertising, the sale of personal data, or automated decision-making that creates profiles with legally significant effects.

Negative is that, according to its Privacy Policy, DeepSeek collects, processes, and stores personal data directly in the People’s Republic of China. In addition, DeepSeek states that its purposes include, among other things, improving and developing the services as well as training and improving ML models and algorithms, including User Input. I was unable to reliably verify a publicly available GDPR DPA/AVV, SCC setup, or EU data residency offering in the official API documentation.

Server location: People’s Republic of China. Further link: DeepSeek Privacy Policy and API Docs.

DeepSeek Privacy Policy

Link

“Where go-to-market teams go to grow”

HubSpot is an integrated customer platform with Smart CRM, Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub, as well as Breeze as an embedded AI layer.

The platform combines customer, sales, marketing, service, and content processes in one system. AI features support, among other things, content creation, prospecting, data preparation, support automation, and analytics.HubSpot

Where go-to-market teams go to grow

7.7/10 KIFOX Score – Good
Free Free basic features for CRM, contacts, deals, forms, email tools, and getting started with HubSpot. Subscription Starter Customer Platform Starter features across core HubSpot products for small businesses and startups.

Professional Hubs Advanced automation, reporting, campaign, sales, service, or content features by hub.

Enterprise Hubs Advanced scaling, governance, security, reporting, permissions, and enterprise features. Other HubSpot Hubs Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub; scope of features varies by hub and tier.

Add-ons / Breeze AI Additional seats, limits, AI/Breeze features, integrations, and enterprise options depending on the contract.
– (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, HubSpot is conditionally to well suited, especially with EU data hosting, a DPA, and proper configuration.

Positive is that HubSpot provides a Data Processing Agreement and that new or migrated customers can host data in an EU data center in Frankfurt. HubSpot states that product infrastructure is operated on AWS in the USA, Canada, Australia, and the EU/Germany, and that customer data is stored and processed in the respective account data center. It is also positive that AI model training settings can be configured at the account level.

Negative is that external integrations, tracking code, marketing/analytics functions, AI functions, and third-party apps can create additional data flows.

Server location: Depending on the account data center: USA, Canada, Australia, or EU/Germany; EU hosting in Frankfurt possible. Further link: HubSpot DPA, Cloud Infrastructure, AI Settings.

Legal Center

Link

“AI solutions that help you get work done.”

DeepL is a German language AI platform for translation, document translation, writing assistance, real-time speech translation, and API integration.

The platform currently offers DeepL Translator, DeepL Write, DeepL Voice, DeepL API, and DeepL Agent, among other services. DeepL reports millions of individual users and over 200,000 business customers.DeepL

AI solutions that help you get things done

7.5/10 KIFOX Score – Good
Free Free access to translations and DeepL Write, with limitations on character count, document types, features, and data protection. Suitable for personal or occasional use; recommended for professional use only to a limited extent. Subscription Individual: For individuals who want to use DeepL professionally for translations and documents.
Team: For teams with higher usage volumes and shared management.
Business: For businesses with greater needs, advanced business features, and higher usage volumes. Other DeepL API for developers and businesses, offering usage-based integration into their own products, websites, apps, and workflows. Additionally, there are enterprise and business options for larger organizations with advanced security, management, and integration requirements.
– (0)

Link

GDPR: Partly Overall assessment: Well-suited to very well-suited, especially for DeepL Pro, Team, Enterprise, and API, because DeepL explicitly highlights GDPR compliance, security standards, and data protection features for business customers. The assessment is more cautious for the free version, as the free plan does not offer the same level of protection as the Pro/Business plans.

Positive: DeepL mentions GDPR compliance, SOC 2 Type II, ISO 27001, encryption, access controls, and protection of business content. According to DeepL, texts are not permanently stored in DeepL Pro and are not used to train the models. Additional security and management features are available for business customers.

Negative: The free version does not offer the same business data protection framework as DeepL Pro, Team, Enterprise, or API. For particularly sensitive data, companies should additionally review: data processing agreement, selected plan, data categories, internal approvals, user management, API logging, and potential third-party providers/subprocessors.

Server location: Strong EU/Germany focus; exact technical server/data center locations cannot be fully verified on a single public page, depending on the service. DeepL is a German company based in Cologne and references European data protection standards. For a binding review, companies should verify the DPA/AVV, subprocessors, and security documents directly with DeepL.

Data Security DeepL Privacy Policy

Link

"The most powerful AI platform for enterprises"

Mistral AI is a French provider of generative AI with Le Chat as the user interface, Studio/API for developers, Mistral Vibe for coding workflows, and Mistral Compute as a European-hosted AI cloud.

The platform covers chat, search, document analysis, multimodal models, agents, workflows, API usage, and self-deployment. A key differentiator is the combination of SaaS, API, open-weight models, and local/on-prem deployment.Mistral AI

The most powerful AI platform for enterprises

7.9/10 KIFOX Score – Good
Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; suitable for getting started and everyday use. Subscription Le Chat Pro More messages and web searches, more Extended Thinking and Deep Research, document storage, many projects, Mistral Vibe for coding, chat/email support, and high-quality image generation.

Le Chat Team Secure team workspace with more storage per user, domain verification, data export, and team features. Other Enterprise Private deployments with custom models, UI, and tools; individual enterprise features such as SSO, audit logs, custom limits, and private deployments.

Mistral AI Studio / API Usage-based API for models, agents, OCR, embeddings, coding, multimodal workflows, and developer integration.

Mistral Vibe / Coding Coding features in Le Chat and additional pay-as-you-go usage beyond the regular limits.
– (0)

Link

GDPR: Yes GDPR assessment: Mistral AI is well suited from a GDPR perspective, especially for European companies and professional use.

Positive is that Mistral AI documents privacy controls for Le Chat and the API: Le Chat Free may use conversations for model improvement, but users can choose to opt out; Le Chat Pro, Team, and Enterprise do not use conversations for model training by default; API data is not used for model training; Connector data and Libraries are not used for training. Also positive are the DPA, GDPR rights, SCCs for international transfers, subprocessor arrangements, and technical/organizational safeguards.

Negative is that, depending on the feature, data may be temporarily transferred outside the EU to subprocessors, and that Free/certain Le Chat uses are weaker from a privacy perspective than Pro/Team/Enterprise or the API.

Server location: By default, Mistral hosts data in the European Union; when the US API endpoint is explicitly used, data is hosted in the USA

Privacy Where do you store my data or my Organization's data? Data Processing Addendum

Link

"Best AI Video & Image Generator" / "Free AI Video Generator"

DeeVid AI is an AI platform for text-to-video, image-to-video, video-to-video, AI effects, AI music, text-to-speech, AI avatars, and AI ads. The provider positions itself as a platform with multiple video/image models such as Veo, Kling, Sora, Runway, Stable Diffusion, Pika, and others.Deevid AI

Best AI Video & Image Generator - Free AI Video Generator

3.7/10 KIFOX Score – Insufficient
Free Free Credits / Starting Credit
New users receive a small credit allowance for testing; free users generate content with watermarks. Subscription Lite For beginners and casual creators; monthly credits, AI video, AI image, text-to-speech, voice cloning/design, AI video ads, AI avatar, AI music, templates, private creation, no watermark, commercial use.

Pro Advanced plan for creators with a higher credit allocation, greater production capacity, 1080p output, AI video/image/audio features, Character Consistency, and commercial use.

Premium For high-volume users with a significantly higher credit allocation, Fast Generation Mode, 1080p output, priority support, and expanded production volumes. Other Credit Packs Additional credits can be purchased separately; credits serve as consumption units for video, image, and audio generation.

Third-Party Models DeeVid integrates and/or routes various video/image models such as Sora, Veo, Kling, Runway, Stable Diffusion, Pika, Luma, Hailuo, and others; specific data flows depend on the selected model.
– (0)

Link

GDPR: Unclear Overall assessment: Unclear to conditionally GDPR-suitable.

Positive is that DeeVid AI explicitly states in its Privacy Policy that it does not use inputs such as prompts, uploaded images/videos, and outputs to train its own AI models. In addition, according to the policy, facial images are used only temporarily for technical processing and are deleted immediately after task completion; DeeVid states that it does not maintain a permanent facial database.

Negative is: According to the Privacy Policy, DeeVid AI primarily stores personal data in data centers in North America; international transfers are possible. DeeVid may use third-party AI services and share information with cloud/hosting, payment, analytics, and support providers. A publicly confirmed AVV/DPA under the GDPR, SCCs, EU data residency, a complete subprocessor list, or external security certifications could not be clearly identified: No confirmed information available.

Server location: primarily North America according to the Privacy Policy.

Conclusion: Usable for non-confidential creative content; for personal images, faces, customer data, or confidential marketing data only with great caution and additional vendor review. Sources: DeeVid AI Privacy Policy, Pricing, Contact/Company.

DeeVid AI Privacy Policy

Link

"co-create intelligence with everyone"

MiniMax is a multimodal foundation model provider with models for text, coding, agents, speech, video, music, image, and multimodal applications. Its products include MiniMax Agent, Hailuo AI, MiniMax Audio, Talkie, and an Open Platform for developers and enterprises.MiniMax

LLM “co-create intelligence with everyone”

5.9/10 KIFOX Score – Limited
Subscription Token Plan – Starter Subscription access for developers with access to MiniMax models via Token Plan API key; text models with a 5-hour rolling window, plan-dependent limited multimodal quotas.

Token Plan – Plus Expanded Token Plan with a higher M2.7 quota and additional daily multimodal quotas for Speech, Image, and other models.

Token Plan – Max Higher standard Token Plan with a larger request quota and expanded daily quotas for multimodal models.

Plus-Highspeed / Max-Highspeed / Ultra-Highspeed High-speed Token Plans with access to faster M2.7/M2.5 Highspeed models and expanded quotas for coding-related workflows. Other Pay-as-you-go API Standard Open Platform API key for usage-based billing according to actual consumption; supports text, video, speech, image, and additional modalities.

Audio Subscription / Video Packages Separate packages for speech and video generation with product-specific quotas and billing logic.

Local / Private Deployment Open M2 model weights can be run locally or privately via Hugging Face and frameworks such as SGLang, vLLM, Transformers, ModelScope, or NVIDIA NIM.
– (0)

Link

GDPR: Partly Overall assessment: Unclear to conditionally GDPR-suitable. MiniMax provides several services, including Open Platform/API, Agent, Audio, and Video; the official central privacy overview refers to product-specific privacy policies, including a separate Platform Privacy Policy for Enterprise API services.

Positive is that MiniMax provides a Privacy Policy for Agent/Web with data subject rights, deletion, correction, data portability, and opt-out rights for certain U.S. states, as well as additional information for Singapore residents.

Negative is that no verified information was found in the reviewed publicly accessible sources regarding an EU DPA/AVV, SCCs, EU hosting, complete subprocessors, or a clear no-training commitment for API customer data.

Server location: No verified server locations were found for the API/Open Platform in the reviewed sources; the Agent/Web Privacy Policy mentions Nanonoble Pte. Ltd. and additional information for Singapore, but this cannot automatically be applied to all API use cases. For GDPR-critical use, MiniMax API should only be used after direct clarification from the provider regarding AVV/DPA, data residency, training on customer data, subprocessors, retention, and deletion; alternatively, openly available M2 models can be evaluated locally or in a private cloud environment. Sources: MiniMax Privacy Overview, Agent/Web Privacy Policy, API Pricing/Docs, and official model/deployment notes.

Privacy Policy

Link

“Search your company knowledge smarter with AI agents.”

TextCortex is an AI platform for Enterprise AI, Company Knowledge, Workflow Automation, and AI Agents.

Officially, the product is now positioned as a model-agnostic agent infrastructure that enables companies to create AI agents without code, apply them to company data, and integrate them into existing work environments. At the same time, the pricing page still highlights strong classic assistance features such as writing, translation, rewriting, voice features, data analysis, and browser integration.Textcortex

Search your company knowledge smarter with AI agents

7.2/10 KIFOX Score – Good
Free Free basic use of many core features; suitable for testing and for simple AI writing and chat workflows.

14-day trial period TextCortex mentions a 14-day trial period to try out all features with higher usage. Subscription Extended access to AI writing features, ZenoChat, reasoning/model features, knowledge features, image/text generation, and more usage capacity. Other Enterprise Multiple seats, Enterprise Knowledge Search, dedicated support, secure team/company features, higher storage/usage limits, and custom requirements.
– (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, TextCortex is well suited to conditionally well suited, especially for European companies.

Positive is that TextCortex is a German company based in Berlin, bases its privacy policy on the GDPR, and according to its own statements hosts services exclusively in the EU on GDPR-compliant servers. TextCortex also states that it does not use customer data for model training or fine-tuning; according to the Help Center, Enterprise data is not used for training.

Negative is that, according to TextCortex, optional services or LLMs outside the EU are safeguarded via the EU-US Data Privacy Framework or Standard Contractual Clauses; these optional third-party data flows must be reviewed on a case-by-case basis.

Server location: According to TextCortex, generally the European Union; optional external LLMs/services may be located outside the EU. Further link: TextCortex Privacy Policy, Imprint, Data Handling, and Enterprise data notices.

Privacy Policy

Link

“Into the unknown …”

DeepSeek is an AI assistant and a model/API platform from Hangzhou DeepSeek Artificial Intelligence Co., Ltd.. Officially, DeepSeek promotes its chat for coding, content creation, file reading, and long-context conversations; the app additionally lists web search, deep-think, file upload, and text extraction. For developers, there is an OpenAI-compatible API with chat/reasoning models as well as features such as function calling, JSON output, and thinking mode.DeepSeek

Into the unknown … Free access to DeepSeek. Experience the intelligent model

4.5/10 KIFOX Score – Limited
Free According to the official website, DeepSeek offers free access to DeepSeek Chat via web/app. The official app describes features for AI chat, problem-solving, and general assistance; the chat page mentions, among other things, coding, content creation, file reading, and long-context chat. Other DeepSeek API: Separate usage-based model for developers and businesses. The API is billed based on input and output tokens; the API documentation mentions, among other things, OpenAI-/Anthropic-compatible usage, API key, base URLs, and current model access such as deepseek-v4-flash and deepseek-v4-pro. Older models such as deepseek-chat and deepseek-reasoner are, according to the API documentation, intended to be phased out.
– (0)

Link

GDPR: No Direct DeepSeek web/app/API use: No, or at most severely restricted / unclear. According to its own privacy policy, DeepSeek processes, among other things, account data, prompts, uploaded files, photos, chat histories, IP address, device information, usage logs, and approximate location data. DeepSeek also explicitly states that the services are not intended for sensitive personal data and that users should not enter such data. Data location / third-country transfer: DeepSeek states that personal data may be stored outside the country of residence and may be collected, processed, and stored directly in the People's Republic of China to provide the services. Training / model improvement: According to the Terms, DeepSeek may use inputs and outputs in de-identified form to provide, maintain, develop, or improve the services or the underlying technologies; users can disable this via “Improve the model for everyone.” EU/UK representation: In the current privacy policy, DeepSeek names Prighter as the data protection representative for the EU and UK. DPA / DPA: No publicly verifiable data processing agreement / DPA found for DeepSeek web, app, or Open Platform. While DeepSeek does mention appropriate safeguards for international transfers in the privacy policy, there are no reliably verifiable SCCs, no EU-only processing, and no clear enterprise DPA structure. Official assessment: The Berlin Commissioner for Data Protection has reported DeepSeek to Apple and Google due to what it considers an unlawful transfer of personal data to China; it points out that China does not have an EU adequacy decision and that DeepSeek has not provided convincing evidence of a level of data protection equivalent to that of the EU. The Italian data protection authority also lists DeepSeek as a blocked AI service, and Luxembourg’s CNPD warns of unclear safeguards, possible storage/analysis of prompts, and recommends not entering any personal or confidential data.

Positive: Open-source models can be self-hosted outside the DeepSeek cloud; in that case, the GDPR assessment depends primarily on one’s own hosting, logging, access protection, and model operation.

Negative: direct use of the DeepSeek cloud leads, according to official statements, to processing/storage in China; no reliable AVV/DPA evidence; no guaranteed EU data residency; regulatory criticism in the EU.

DeepSeek Privat Policy

Link

“Your writing assistant”

LanguageTool is primarily an AI editing tool: it improves existing texts with suggestions for grammar, spelling, punctuation, style, tone, and in some cases rephrasing, rather than primarily generating new content like a classic GenAI writer. It is available via web editor, browser, Word, Google Docs, LibreOffice, mail integrations, as well as on Windows/macOS/iOS, and supports more than 30 languages. For developers, there is also an HTTP API and an open-source core technology for self-hosting.Language Tool

More than a Grammar Checker - Your writing assistant

8.3/10 KIFOX Score – Very good
Free Free basic version for spelling, grammar, and style checking; some free services are also accessible without an account. Subscription Premium / Individual Advanced checks, longer texts, style and tone suggestions, as well as additional writing features compared to Free.

Teams All Premium features plus user management, Team Style Guide, Team Dictionary, and higher text lengths for teams. Other Business DPA available; core functionality open source, own server possible locally or in the cloud; public HTTP API or developer options available.
– (0)

Link

GDPR: Yes Compared to many GenAI tools, LanguageTool is well documented, but not entirely frictionless.

Positive: DPA pursuant to Art. 28 GDPR, SCCs, reference to the EU-U.S. DPF, no use of user inputs to train the LanguageTool models, editor storage on AWS Germany, API servers according to the API page in Germany and no storage of the transmitted texts there, plus there is an on-premise option without external data transfer.

Limiting: Since 19/12/2024, the responsible data controller for the service has been Learneo, Inc., USA, and the Privacy Policy provides for international transfers. In apps/extensions, certain telemetry/short-term data is also processed; ignored suggestions may contain text fragments, and for acceleration reasons, checks are kept in main memory for up to 15 minutes.

Overall: from a data protection perspective, well defensible for Business/API/On-Prem, but overall only “conditional” because of the US controller/transfers.

LanguageTool Business Data Processing Agreement

Link

Through the Claude API, Anthropic offers state-of-the-art LLMs for natural language processing, reasoning, coding, agent-based workflows, tool usage, and document-related tasks. According to the official model overview, all current Claude models support text and image input, text output, multilingual capabilities, and vision. For direct API access, Anthropic recommends the Messages API; additionally, Managed Agents are available for longer-running tasks.Anthrophic Claude API Documentation

LLM: "a highly performant, trustworthy, and intelligent AI platform"

7.4/10 KIFOX Score – Good
Free Anthropic states that new users receive a small amount of free credits to test the API. However, this is not a traditional, permanent free plan in the SaaS sense, but rather a trial credit. Other Token-based Claude API Billing based on model families such as Opus, Sonnet, and Haiku, as well as input, output, cache-write, and cache-read tokens.

Prompt Caching Reuse of large prompts, system instructions, or document contexts to reduce costs and latency. Batch API Asynchronous processing of large volumes of requests with a reduced billing model.

Long Context / 1M Context Available for certain current models; suitable for very large documents, codebases, and analysis contexts.

Data Residency / Third-Party Platforms Claude is also available via AWS Bedrock, Google Vertex AI, and Microsoft Foundry; regional pricing and data management depend on the respective platform.
– (0)

Link

GDPR: Partly Anthropic provides a DPA with SCCs for commercial/API customers; according to the Privacy Center, this is automatically incorporated into the Commercial Terms.

For commercial services, Anthropic generally acts as a processor on behalf of the customer, according to the Privacy Center, and according to the Commercial Terms, Anthropic may not use Customer Content from the services for model training. Additionally, according to the Privacy Center, inputs/outputs from commercial products such as the Anthropic API are not used for training by default, except, for example, in cases of explicit feedback or opt-in.

Another positive aspect is the documented standard retention policy: According to the Privacy Center, inputs/outputs for API users are deleted within 30 days, unless, for example, the Files API, a different agreement, or ZDR applies. At the same time, the Privacy Policy mentions transfers to the U.S. or outside the EEA/UK for controller-side processing and refers to Adequacy Decisions or Standard Contractual Clauses.

For the direct Claude API, ZDR-capable features are also documented; the API documentation mentions data residency and inference geocontrol, though publicly, in the context of the Direct API, these are primarily global or US-only. Broader regional routing/residency options are described primarily for AWS Bedrock, Vertex AI, and Microsoft Foundry. There is also a public list of subprocessors as well as Trust Center artifacts regarding SOC 2 and ISO 27001, among others.

This means Claude is well-documented for GDPR scenarios, but not automatically fully “out of the box” in every setup; the specific use case should be reviewed, particularly regarding data localization, tool usage, retention, and platform selection.

Privacy Policy Usage Policy

Link

Turn your ideas into apps

Base44 is an AI-powered app builder that creates functional apps using natural language.

Officially, Base44 lists productivity apps, back-office tools, customer portals, and complete enterprise products among its target use cases. In addition to the builder, the platform also includes authentication, database, storage, email, payments, integrations, backend functions, and hosting.Base44

Build Apps with AI in Minutes

6.3/10 KIFOX Score – Solid
Free Free Plan – includes core features such as authentication, database functionality, and analytics. Officially, Base44 states 25 Message Credits per month; regarding Integration Credits, there is conflicting information on the official pages, so no confirmed number is given here. Subscription paid subscription plans: Starter, Builder, Pro, Elite. Subscriptions can be taken out monthly or annually. Starter is intended for initial apps/projects; Builder adds, among other things, backend features, domain, GitHub integration, and model selection; Pro expands for more complex applications; Elite offers higher credits and premium support. Other Enterprise / Custom Sales for larger organizations; in addition, Base44 works with Message Credits and Integration Credits, which are reset monthly depending on the plan. There are also Promo Codes/Gift Cards as well as a separately mentioned backend offering, which according to the documentation is free while in beta.
– (0)

Link

GDPR: Partly Base44 provides a DPA/AVV, references GDPR, SCCs/DPF mechanisms, and security measures. However, a critical point remains: by default, data is stored in the USA; EU/UK data residency is only available for Elite/Enterprise, only for newly created apps as of April 16, 2026, apparently rolled out gradually, and applies only to stored app data, not necessarily to processing.

Positive DPA/AVV available; Base44 states GDPR compliance, SOC 2 Type II, and ISO 27001; subprocessors are said to be contractually bound; international transfers are safeguarded through adequacy decisions, SCCs, or the Data Privacy Framework; data deletion and data subject rights are addressed.

Negative The default region is the USA; many subprocessors are based in the USA, including Mongo, SendGrid, Render, Google Cloud, OpenAI, Anthropic, Supabase, and Datadog. Base44 uses third-party AI providers; I could not find a clear, blanket statement in the official Base44 documents saying “customer data is never used for training” as an unambiguous sentence.

Server location: USA. Since April 16, 2026, Elite or Enterprise customers can, according to Base44, choose EU or UK clusters for app data. Limitation: the feature is being rolled out gradually, applies only to newly created apps, account and billing data remain in the USA, and according to Base44, data residency governs storage, not necessarily processing.

Privacy and security

Link

OpenAI offers a broad range of models via the API for text generation, reasoning, coding, tool use, structured outputs, and document-centric workflows.

According to the official model overview, the current models support text and image input, text output, multilingual capabilities, and vision; they are available through the Responses API and client SDKs. For complex tasks, OpenAI recommends gpt-5.4 by default; for lower latency and cost, OpenAI points to gpt-5.4-mini and gpt-5.4-nanoOpen AI

LLM “Access our frontier models and APIs.”

8.0/10 KIFOX Score – Very good
Free There is a free usage tier in the API rate limit system for users in permitted geographies Other Token-based API usage Billing by model, input/output tokens, cached input, audio/image/tool usage, and other usage-dependent factors.

Batch / Flex / Priority / Scale Tier Options for controlling costs and latency for larger or plannable workloads.

Fine-Tuning / Evals / Tools / Agents Additional API features for customization, evaluation, agents, web search, file search, code interpreter, realtime, and structured outputs.

Data Residency / ZDR / EKM Enterprise-grade data controls with regional storage/processing, Zero Data Retention or Modified Abuse Monitoring, and external key management.
– (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, the OpenAI API is conditionally to well suited if it is used with Business/API contracts, a DPA, appropriate project settings, and clear data policies.

Positive is that, according to the API documentation, OpenAI has not used API data to train or improve its models since March 1, 2023, unless customers explicitly opt in. In addition, there is a Data Processing Addendum, abuse-monitoring retention of up to 30 days, Zero Data Retention or Modified Abuse Monitoring for eligible customers, Data Residency for multiple regions, and Enterprise Key Management.

Negative is that not all features are automatically ZDR-compatible, system data may be excluded from Data Residency, and for non-US regions additional approvals or ZDR/abuse-monitoring requirements apply.

Server location: By default, not automatically EU-only; Data Residency can be enabled on a per-project basis, including for Europe / EEA + Switzerland, whereby customer data can be stored regionally for supported endpoints and, in Europe, can also be processed regionally. Further link: OpenAI Data Controls / Your Data and OpenAI DPA.

Data controls in the OpenAI platform

Link

“Think big. We’ll take care of the details.”

Grammarly is an AI-powered writing assistant for correction, style, tone, rewrites, and text generation.

According to the manufacturer, the tool works in more than 1 million apps and websites and also offers its own editor (“Docs”) with AI agents for drafting, revision, source/citation assistance, AI detection, and plagiarism checking. For businesses, there are team, analytics, security, and API features.Grammarly

The AI writing partner for work

7.5/10 KIFOX Score – Good
Free Free: Includes basic error-free writing, tone detection, and a limited number of generative AI prompts. Suitable for basic personal proofreading, but limited for heavy professional use and team oversight. Subscription Pro: For individuals or teams; additionally includes, among other things, full sentence rewrites, tone adjustment, brand/on-brand features, and more generative AI usage.

Enterprise: For larger organizations; includes, among other things, Superhuman Go, unlimited members, dedicated support, Confidential Mode, granular roles/permissions, DLP, and unlimited generative AI prompts. Other Enterprise Sales / Custom: Contact Sales for larger organizations, security requirements, and custom administration.

Education: Grammarly offers separate Education or institutional plans for educational institutions; details are not part of the standard Free/Pro/Enterprise plans.

Superhuman Go / Suite context: Grammarly Enterprise is positioned through Superhuman Go; this expands Grammarly with context-aware AI agents in apps and workflows. Grammar, style, tone, AI writing, rewriting, proofreading, plagiarism check, AI detector, citations, Brand Voice, translation, email writing, spell check
– (0)

Link

GDPR: Partly Grammarly can be usable for EU companies, but not without a data protection review. Positive aspects include the DPA, SCCs, DPF reference, encryption, admin controls, and enterprise security features. Critical aspects include US hosting, international transfers, and the training/product improvement settings depending on the account type.

Positive:
• Data Privacy Addendum available.
• Standard Contractual Clauses are provided for EU/UK transfers where required.
• Grammarly states GDPR/CCPA compliance, AES-256 encryption for data at rest, and SSL/TLS for data transmission.
• Enterprise/Sales Team accounts: Product Improvement & Training is disabled by default; according to Grammarly, organizational content is then not used for training or product improvement for other customers.
• According to Grammarly, third-party LLM providers are not allowed to use user content to train their models.
• Grammarly states that it does not sell or monetize content.

Negative:
• According to the DPA and Security page, Grammarly hosts server-side infrastructure in AWS data centers in the USA, specifically US East; there is no publicly documented EU-only hosting.
• Individual Free, Premium, and Single-User Pro accounts have Product Improvement & Training enabled by default; users can disable it.
• According to Grammarly, Multi-User Pro accounts purchased directly via the website also start with the training/product improvement setting enabled; admins can disable this.
• Grammarly may process data outside the country of residence and relies on appropriate safeguards, among other things, for transfers.

Server location: USA, AWS US East. Grammarly states that it uses Amazon Web Services in the United States, or AWS data centers in the US East region, for its server-side infrastructure.

Privacy Policy

Link

"Free Online AI Photo Editor, Image Generator & Design Tool"

Pixlr is a browser-based photo editor, design, and AI image editing service. The platform offers Pixlr Editor, Pixlr Express, Pixlr Designer, Remove Background, Batch Editor, AI Image Generator, Super Scale, Templates, and mobile apps.Pixlr

Free Online AI Photo Editor, Image Generator & Design Tool

6.0/10 KIFOX Score – Solid
Free Free access to Pixlr’s basic features; usable for many simple edits, but with limitations on premium and AI features. Subscription Plus Ad-free use, unlimited saving, and monthly AI credits for basic usage.

Premium Full access to premium features across platforms, significantly more AI credits, Private Mode for AI generations, as well as a larger library of fonts, templates, elements, animations, and other assets.

Team The team plan is listed in the pricing data structure; the specific included features must currently be checked on the pricing page or with the provider. Other AI Credit Pack Additional AI credits for generative tools; according to the Pricing FAQ, Credit Packs do not expire and are counted separately from subscription credits.

Enterprise Custom solution for more seats or custom API solutions; details available upon request.

Pixlr for Education Free PixlrEdu upgrades for schools and universities worldwide.
– (0)

Link

GDPR: Partly Overall assessment: Conditionally GDPR-suitable.

Positive is that Pixlr provides a Privacy Policy with GDPR legal bases, data subject rights, an EU representative in Hamburg, a UK representative, and a privacy contact. For FaceFlip/AI Face Swap, according to the Privacy Policy, Pixlr processes images with facial geometry only to create the output and states that it does not store, collect, or use facial data for other purposes. For Google Workspace APIs, Pixlr confirms that it does not use data obtained from them to develop, improve, or train general AI/ML models.

Negative is: Pixlr Pte. Ltd. is based in Singapore; personal data may be transferred outside the EEA to Pixlr group companies or third-party processors, whereby Pixlr refers to appropriate safeguards such as Binding Corporate Rules or EU Standard Contractual Clauses. In addition, the AI Generator Terms contain a very broad license: users grant Pixlr a worldwide, perpetual, irrevocable, royalty-free, and sublicensable license to use input and output.

Server location: no specific hosting region publicly confirmed. A public AVV/DPA or complete subprocessor list could not be clearly found: No verified information available.

Conclusion: Well suited for general image editing; for confidential company images, personal photos, and biometric-adjacent AI functions, only after a data protection review and with a clear internal usage policy. Sources: Pixlr Privacy Policy, AI Generator License, Pricing.

PRIVACY POLICY

Link

"AI that creates content. And proves that it works."

neuroflash is a German audience intelligence and AI content platform for marketing, branding, and target group validation. The tool combines generative AI, ChatFlash, content creation, Brand Hub, PerformanceFlash, Digital Twins, image generation, web research, SEO features, API, and MCP. (neuroflash.com )Neuroflash

AI that creates content. And proves that it works

7.6/10 KIFOX Score – Good
Subscription Essential For teams that want to create AI content efficiently; includes Editor & ChatFlash, AI Images, PerformanceFlash, ResearchFlash, text models, image models, document editor, content templates, prompt templates, Flash Actions, Web Search, audience chat, SEO Research Mode, workflows, Brand Voice, Digital Twins, and Knowledge Assets to a limited extent.

Pro Advanced plan with more capacity, advanced models, a larger context window, more Digital Twins/audiences, advanced validation features, team features, as well as API and MCP access.

Enterprise Custom enterprise plan for organizations with unlimited or customized audiences, premium models, SSO, a dedicated Customer Success Manager, custom integrations, custom workflows, training, and consulting services. Other API / MCP neuroflash offers API and MCP access to integrate neuroflash into platforms and tools such as Claude, Cursor, and other work environments.

Custom Enterprise Services Customized agreements depending on the number of users, the scope of the Digital Twins, desired integrations, custom workflows, and consulting services.
– (0)

Link

GDPR: Partly Overall assessment: Good to conditionally GDPR-suitable. neuroflash explicitly positions itself as a GDPR-compliant German AI marketing tool and states that its servers are in Germany, or that personal data is processed and stored in the EU on Google Cloud Platform as well as at Raidboxes in Germany.

Positive: neuroflash GmbH is based in Hamburg, is subject to German and European data protection law, names a data protection officer, states data subject rights, indicates that it processes content exclusively to provide the service, and states that customer data is not used to train its own models. In addition, the pricing page mentions ISO/IEC 27001:2022 certification as well as “Servers in Germany” and “GDPR-compliant.”

Negative: The privacy policy explicitly states that AI requests within the neuroflash app are processed on servers of external providers in the EU and the USA; US AI providers are said to have submitted to the EU-US Data Privacy Framework. In addition, payment data is processed via Stripe in the USA.

Server location: personal data in the EU / Google Cloud Platform as well as Raidboxes in Germany; AI requests additionally in the EU and USA via external providers. A publicly easily accessible AVV/DPA or a complete list of subprocessors could not be clearly found in the reviewed official sources: No verified information available. For companies, neuroflash is interesting from a data protection perspective, but should be reviewed before productive use with an AVV/DPA, list of subprocessors, US transfer assessment, and internal AI policy. Sources: neuroflash Privacy, Help Center, Pricing, and company page.

Privacy

Link

“Your OpenClaw Ready for You” / “The #1 OpenClaw Hosting Platform”

MyClaw.ai is a managed hosting service for OpenClaw, an open-source personal AI assistant. According to its own description, MyClaw provides a private, dedicated OpenClaw instance and handles servers, updates, maintenance, backups, and operations so that users can use OpenClaw without having to install it themselves. OpenClaw itself is an agent that can be contacted via chat channels such as WhatsApp, Telegram, Slack, Discord, Signal, iMessage, or Microsoft Teams and can perform tasks through apps, files, browsers, calendars, email, and APIs.OpenClaw

A Personal AI Assistant … works 24/7, no setup needed.

6.3/10 KIFOX Score – Solid
Free OpenClaw Self-Hosting / local installation OpenClaw itself is described as free open-source software and can be operated locally or on your own infrastructure; users must handle setup, updates, security, model access, and maintenance themselves.

MyClaw Free Version No confirmed permanently free MyClaw free version found on the official pricing page. The pricing page lists paid managed hosting plans; a free trial is not clearly substantiated in the visible pricing content. Subscription Lite Managed OpenClaw hosting for personal projects and getting started; includes zero setup, instant access, personal AI assistant, 24/7 operation, automatic updates, private encrypted instance, daily backups, and smaller guaranteed resources.

Pro Advanced managed hosting plan for power users with more resources than Lite, priority support, automatic maintenance, encrypted isolated instance, daily backups, as well as custom skills and integrations.

Max Plan for more intensive workloads with even higher resources, 24/7 operation, automatic updates, private encrypted instance, daily backups, and priority support.

Ultra Highest officially listed managed hosting plan for demanding workloads with scalable high-performance resources, isolated instance, encrypted access, backups, custom skills, integrations, and priority support. Other AI Balance & Credits MyClaw mentions AI Balance & Credits in the Refund Policy; used credits are non-refundable, unused balance may be refunded upon request. The specific functional logic or model costs are not fully confirmed in the reviewed official sources.

External AI Model Providers MyClaw Terms indicate that the service may be integrated with third parties such as AI model providers and that their own terms apply; the specific supported providers and privacy policies must be reviewed for each configuration.
– (0)

Link

GDPR: Partly Overall assessment: Unclear to conditionally GDPR-suitable. OpenClaw itself can be operated locally or self-hosted as open-source software and is therefore generally more controllable than a pure cloud service. MyClaw.ai, on the other hand, is a managed hosting offering for OpenClaw.

Positive is that, according to its own statements, MyClaw guarantees isolated private instances, encrypted connections, no data sharing, no access to conversations, and no training on user data. In addition, there is a dedicated GDPR Privacy Notice for EEA and UK users with information on legal bases, data subject rights, data categories, and international transfers.

Negative is that, at the time of review, the MyClaw Privacy Policy itself contained wording such as “Consolidated Website Draft” and a note stating that it should be reviewed by legal counsel before publication; this significantly weakens the reliability of the privacy documentation. In addition, MyClaw names Stripe, Amazon Web Services, and Supabase as subprocessors and points to international transfers, including to the USA. A publicly available AVV/DPA under Art. 28 GDPR, a complete list of subprocessors with locations, specific AWS/Supabase regions, SCC documents, or certifications were not reliably found in the reviewed official sources: No verified information available.

Server location: For MyClaw Managed Hosting, AWS is named as the infrastructure subprocessor; the specific hosting location or EU data residency is not officially and clearly documented. For GDPR-critical use, local installation or self-controlled VPS/private cloud hosting is therefore preferable to MyClaw Managed Hosting. Sources: MyClaw Privacy Policy, GDPR Notice, Terms, About, and Pricing.

MyClaw Privacy Policy GDPR Privacy Notice

Link

"Stable Diffusion is a deep learning model used for converting text to images" / "Use Stable Diffusion online for free"

stablediffusionweb.com is a web interface for using Stable Diffusion models, especially Stable Diffusion XL. It offers text-to-image, a prompt database, upscaling, partly video/advanced models, and a credit-based pricing model.Stable Diffusion

Stable Diffusion is a deep learning model used for converting text to images

3.5/10 KIFOX Score – Insufficient
Free Free use with a daily credit quota, a limited number of images per generation, without ads/watermarks according to the pricing page; commercial license and private images/videos are not included. Subscription Pro Monthly credit allowance, more images per generation, no ads, no watermark, upscaling, advanced image and video models, commercial license, and private images/videos.

Max Higher monthly credit allowance, Pro features, advanced models, commercial license, and private images/videos. Other Credit/Usage Logic Usage is based on credits; specific consumption values depend on the function.

Contradictory Contract Presentation Pricing describes monthly/annual plans, while the Terms simultaneously refer to a software license without recurring fees; the pricing/contract logic should be reviewed before purchase.
– (0)

Link

GDPR: Unclear Overall assessment: Unclear to critical in terms of GDPR suitability.

Positive is that stablediffusionweb.com states on its homepage that it does not collect personal information and does not store text or image data; the Privacy Policy also states that personal data is only collected when necessary and only stored for as long as required for the service.

Negative is: The privacy notices are very general, not specifically formulated for GDPR compliance, and do not mention a clear EU representative, a data protection officer, a list of subprocessors, a DPA/AVV, SCCs, or a specific server location. In addition, the information appears contradictory: the homepage claims not to store personal data or texts/images, while the Privacy Policy mentions Google login data and necessary personal data.

Server location: No verified information available.

Conclusion: Acceptable for private experiments with non-sensitive prompts; not recommended for personal images, customer data, confidential content, or GDPR-relevant business use as long as no reliable data protection and contractual documentation is available. Sources: Stable Diffusion Web homepage, Privacy Policy, Terms, Pricing.

Private Policy

Link

“Create and edit detailed images”

Nano Banana is Google’s native image AI within Gemini.

The system can generate images from text, edit existing images via prompt, combine multiple reference images, and carry out follow-up changes conversationally.

Officially highlighted features include multimodal understanding, conversational inputs, real-world knowledge, rapid iteration, and, in the Pro variant, clearer text renderings, infographics, localization, and higher resolution.Nano Banana

Imagine almost anything – then create it

7.6/10 KIFOX Score – Good
Free Free use with limited access; AI Studio remains free as long as no paid API key is used for paid features. With the API Free Tier, usage may be used for product improvement according to the pricing page. Subscription Google AI Plus More access to Google AI, including the Gemini app, Flow, and NotebookLM; available depending on the region.

Google AI Pro More access to Gemini, Deep Research, Nano Banana Pro, and video/Flow features; Google describes Pro as expanded access for advanced AI use.

Google AI Ultra Highest access tier for advanced Google AI features, higher limits, and expanded creative/productive use. Other Gemini API Paid Tier Usage-based API billing for developers; in the Paid Tier, usage is not used for product improvement according to the pricing page.

Google Workspace / Slides / Vids Add-ons Nano Banana Pro is also relevant in Workspace contexts such as Slides/Vids via Google AI add-ons or limits; specific limits depend on the Workspace/AI plan.
– (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, Nano Banana depends on the usage context: Gemini app for private users, Google AI Studio/Gemini API, or Google Workspace/Cloud.

Positive is that Google provides privacy and activity controls for Gemini, and users in Gemini Apps can manage, export, delete their prompts, responses, and feedback, as well as exclude future chats from improving Google’s ML technologies. For the Gemini API, the official pricing page clearly shows that Free Tier usage may be used for product improvement, whereas Paid Tier usage is not.

Negative is that in free/consumer contexts, depending on the settings and product context, data may be used to improve Google services; with image tools, uploaded faces, product images, customer data, and copyrights are also particularly sensitive.

Server location: No blanket Nano Banana EU data residency is guaranteed for all usage contexts; for Google Cloud/Workspace, separate data processing and admin/region settings apply, while for consumer Gemini, the Gemini app privacy notices apply. Further links: Gemini Image Generation, Gemini Privacy Hub, Gemini API Pricing.

Privacy Policy

Link

“Turn lazy prompts into great ones”

Prompt Cowboy is a web-based AI tool for optimizing prompts for ChatGPT, Claude, Gemini, and other LLMs.

According to the provider, it transforms rough ideas into clearer, more powerful prompts and, depending on the input, adds follow-up questions so the prompt can be improved with more context. The platform is aimed at individual users and teams who want to create, save, reuse, and organize prompts for team collaboration.Prompt Cowboy

Turn lazy prompts into great ones

6.0/10 KIFOX Score – Solid
Free Unlimited prompts with standard AI; limited access to the most powerful model; use of the results with ChatGPT, Claude, Gemini, and other tools. Subscription Individual For individuals with unlimited access to the most powerful model, Advanced Memories, reusable templates, and early access.

Team For teams with shared workflows, team usage, and access to powerful prompt optimization.
– (0)

Link

GDPR: Partly GDPR assessment: From a GDPR perspective, Prompt Cowboy is conditionally suitable.

Positive is that Prompt Cowboy publishes a transparent Privacy Policy, mentions EU/UK-GDPR as the applicable legal framework, does not sell data, and explicitly states that user data is not used to train large language models. Also positive are TLS/HTTPS, encryption of stored data, additional encryption of sensitive items, Supabase Row-Level Security, the option to delete the account, and purging within 30 days.

Negative is that Prompt Cowboy is operated by Fourday AI Pty Ltd in Australia, uses providers such as Supabase, Google Cloud, Stripe, and PostHog, and does not publicly provide clear evidence of a standard DPA/AVV or EU-only hosting.

Server location: No verified EU-only information; the operator is based in Sydney, Australia, and hosting runs via service providers such as Supabase. Further links: Prompt Cowboy Privacy, Security, Pricing.

Privacy Policy

Link

"A free AI-powered answer engine that provides accurate, trusted, and real-time answers to any question."

Perplexity is an AI-powered search and answer platform that combines real-time web search with summarized answers and source citations.

Today, the product portfolio includes not only Search/Pro Search/Deep Research, but also Internal Knowledge Search, Connectors, asset creation for documents/presentations/spreadsheets/apps, browser/agent capabilities, as well as its own API platform.Perplexity

A free AI-powered answer engine that provides accurate, trusted, and real-time answers to any question.

7.6/10 KIFOX Score – Good
Free The free Standard plan includes search history, nearly unlimited basic searches, a very limited number of Pro searches, automatic model selection by Perplexity, and limited file uploads. It does not include advanced AI models, image generation, or premium support. Subscription Perplexity Pro: Extended access to Pro Search, limited use of “Create files and apps,” access to advanced AI models, image and video generation, higher limits for file/attachment uploads and analysis, as well as support channels.

Perplexity Max: Includes Pro features plus the highest access to advanced AI models, expanded limits for “Create files and apps,” early access to new products, and prioritized support.

Education Pro: For verified students and educators; includes Pro features plus more citations, file and image uploads, Study Mode, expanded access to Perplexity Research and Perplexity Academic.

Enterprise Pro: Includes Pro features plus strict privacy features, no use of data for training, seat/user management, organizational file storage, internal knowledge search, increased file uploads, admin controls, team spaces, and dedicated support.

Enterprise Max: Includes Enterprise Pro features plus higher limits for Research, file and app creation, video generation, advanced models, larger file repositories, SCIM, audit logs, configurable data retention, and an insights dashboard. Other Sonar API: Separate pay-as-you-go model for developers and businesses that want to integrate Perplexity features into their own products, workflows, or automations. API usage is managed separately via credits or auto top-up; a Perplexity subscription is not required for API access. The API does not offer Pro/Max features within the web app and, according to Perplexity, does not log or store data.

Important: API access is not automatically included in Enterprise plans; Enterprise and API are treated separately.
– (0)

Link

GDPR: Partly Perplexity must be assessed based on the usage context: Free / Pro / Max, Enterprise Pro / Enterprise Max, and Perplexity API / Sonar API differ significantly. Consumer use: According to the privacy policy, Perplexity AI, Inc. is the data controller for standard services; the privacy policy explicitly does not apply to Perplexity API or Enterprise Pro, where Perplexity acts as a data processor. Perplexity processes, among other things, account, payment, usage, prompt/output, device, location, and tracking data; service interaction information may contain personal data. Free / Pro / Max: According to the Help Center, AI Data Retention is enabled by default; users can opt out via a toggle, but opt-outs apply only to data collected in the future, and according to Perplexity, training data that has already been used cannot be deleted. Enterprise: significantly better suited: according to Perplexity, Enterprise data is not used for training or fine-tuning; according to Perplexity, third-party AI providers such as OpenAI and Anthropic are contractually bound so that Perplexity data is not used for model training. Uploaded files are deleted by default after seven days in Enterprise; larger Enterprise configurations include additional retention controls. API / Sonar API: Perplexity states a strict zero-data-retention policy: content sent to the Sonar API is not stored and is not used for model training; only billing/operational metadata such as token count, model, timestamp, duration, and API key identifier are stored, without prompt or response content. DPA / Data Processing Agreement: Yes, for business/enterprise/API contexts. The Perplexity DPA is incorporated into the Enterprise and API terms; in it, the customer is the controller or processor and Perplexity is the processor or service provider. The DPA includes EU/UK data protection references, SCCs, subprocessor provisions, data subject rights, data breach notification, audit/documentation obligations, and deletion within 30 days after the end of service provision.

Positive: DPA/Data Processing Agreement available, SCCs, EU-U.S. Data Privacy Framework, SOC 2 Type II, Enterprise no-training, API zero data retention, Enterprise file retention, and admin controls.

Negative / Points to review: U.S. provider, servers according to the privacy policy in the U.S., API compute according to the FAQ via AWS in North America, subprocessors and model providers according to the DPA worldwide, no confirmed EU-only data residency found. For Free/Pro/Max, Perplexity is only of limited suitability for personal, confidential, or sensitive data because AI Data Retention is enabled by default.

Privacy Policy

Link

Robotics

Humanoid robots, AI educational robots, commercial service robots, and intelligent automation systems.

UBTECH is a Chinese robotics manufacturer that produces humanoid robots such as the Walker S2, Walker S1, Walker S, Walker C, and Walker X, as well as other service, educational, logistics, and consumer robots. According to the company, it focuses on industrial manufacturing, commercial services, and household applications. UBTECH describes the Walker as China’s first commercialized life-size bipedal humanoid robot and cites more than 2,790 robotics and AI patents as of June 2025.UBTECH ROBOTICS CORP LTD

humanoid robots, AI educational robots, commercial service robots and intelligent automation systems

3.5/10 KIFOX Score – Insufficient
Other Walker S2 Industrial humanoid robot with autonomous battery replacement, 24/7 operation, 15-kg payload, binocular stereo vision, co-agent, BrainNet 2.0, and a focus on production lines.

Walker S1 Industrial humanoid robot with an Advanced Planning Model for general tasks, intent understanding, task planning, and semantic VSLAM navigation.

Walker S / Walker S Lite Industrial humanoid robots with a multimodal perception system, LLM-based decision-making capabilities, 3D semantic navigation, object grasping, and real-time integration into production systems.

Walker C / Walker X Commercial and service-oriented humanoid robot lines; specific availability, pricing, service packages, and regional terms must be requested directly from UBTECH.

AI Education / Developer Products Complementary robotics and AI educational products such as the AI Education Platform, Yanshee, uKit AI, UGOT, and AI Lab solutions for education and research.

Professional / Partner / Custom Projects For industrial projects, production line integration, and partnerships, UBTECH recommends contacting them directly; specific SLAs, maintenance, data protection, and integration services must be reviewed on a case-by-case basis.
– (0)

Link

GDPR: Unclear Overall assessment: Unclear to critically compliant with the GDPR. UBTECH is a Chinese robotics manufacturer headquartered in Shenzhen, China.

On the positive side, UBTECH describes data subjects’ rights—such as the right to access, rectification, erasure, withdrawal of consent, restriction of processing, data portability, and the right to lodge a complaint—in its website privacy policy. In addition, UBTECH lists technical and organizational safeguards such as access controls, de-identification, encrypted storage, isolated storage, internal data protection officers, employee training, and emergency procedures for security incidents.

A negative aspect is that the official Privacy Policy explicitly applies only to the website and not automatically to UBTECH products or other services. For the website, UBTECH lists servers in Hong Kong and additional servers in China, the U.S., Singapore, and Hong Kong; personal data may be transferred globally. A publicly verified GDPR DPA structure, EU data residency, EU representative, standard contractual clauses, complete list of sub-processors, or humanoid-specific data protection documentation for walking robots was not found in the reviewed official sources: No verified information available.

Server location: For the website: Hong Kong, with additional servers in China, the US, Singapore, and Hong Kong. For specific humanoid robots, apps, telemetry, support data, or production integrations: No verified information available. Conclusion: For EU companies, UBTECH should only be used after technical and legal review, particularly with regard to camera/audio/sensor data, production data, location data, remote maintenance, cloud connectivity, third-party SDKs, export/import laws, and the availability of a Data Processing Agreement (DPA).

Privacy Policy

Link