Find Your Tool in 6 Steps
Result: 154

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 154
Research Images Video Music Agent Business Marketing Website API

Claude is an AI assistant and model family from Anthropic for chat, research, writing, analysis, coding, and agentic workflows.

Depending on the plan or product, the offering includes web/desktop/mobile chat, Research, Claude Code, Claude Cowork, web search, file/code execution, connectors, as well as APIs and Managed Agents for developers. Anthropic positions Claude for individuals, teams, education, and enterprise environments alike.Claude

Think fast, build faster “Brainstorm in Claude, build in Cowork”

8.5/10 Very good
Free Claude Free includes chat on web, iOS, Android, and desktop, code generation, data visualization, writing/editing texts, content generation, text and image analysis, as well as web search. Projects are also available to Free users, though in a limited number. Subscription Claude Pro: Includes everything in Free plus more usage, Claude Code, Claude Cowork, unlimited projects, Research, access to more Claude models, as well as Claude for Excel, PowerPoint, and Word Beta.

Claude Max: Includes everything in Pro plus significantly higher usage, higher output limits, early access to advanced Claude features, and priority during high demand.

Claude Team: For teams; includes all Claude features, more usage than Pro, Claude Code and Cowork, connectors like Microsoft 365 and Slack, Enterprise Search, centralized billing/administration, SSO, admin controls, and no model training on company content by default.

Claude Enterprise: For large companies; includes Team features plus advanced admin, security, compliance, and governance features such as Spend Controls, Audit Logs, SCIM, role-based access, Compliance API, custom data retention, and additional enterprise options. Other Claude API: Separates developer/platform model with usage-based billing by model, input/output tokens, prompt caching, and other factors. Claude models are also available through third-party platforms such as AWS Bedrock, Google Vertex AI, and Microsoft Foundry.

Additional features: The Claude Platform offers additional usage-based features such as Managed Agents, Web Search, Code Execution, as well as service tiers like Standard, Priority, and Batch.

Claude Design: Available for Pro, Max, Team, and Enterprise; usage runs through the respective subscription limits, with optional Extra Usage.

Special offers: Anthropic offers separate deals or programs for educational institutions, nonprofits, and certain government/public sector contexts.
5.0 (4)

Link

GDPR: Partly GDPR-compliant use is possible, but subject to prerequisites: For commercial users (Claude for Work, API, Enterprise), a DPA with SCCs is automatically integrated into the Commercial Terms, EU data residency is selectable, and there is no training without explicit opt-in. For consumer plans (Free, Pro, Max), these guarantees are largely absent, and data may be used for training by default. Fully GDPR-compliant use therefore requires at least a commercial plan as well as active configuration of EU data residency.
Positive
DPA with Standard Contractual Clauses (SCCs) automatically included in the Commercial Terms; EU data residency configurable for API and Enterprise customers (EU endpoints, AWS Bedrock EU, GCP Vertex EU); no training on commercial customer data without explicit opt-in; Zero Data Retention option for Enterprise/API available on request; extensive certifications (ISO 27001:2022, ISO 42001:2023, SOC 2 Type I & II, CSA STAR, HIPAA-ready); subprocessors list published; Trust Portal with compliance documentation.
Negative
US-based provider (Anthropic), standard routing may include US servers; EU data residency only on commercial plans and only after active configuration; consumer users have limited control; Zero Data Retention only on request and after review by Sales; no on-premise operation of the model possible; subprocessors include several US cloud providers.
Server location
Multi-cloud infrastructure across multiple providers (according to the subprocessors list). By default, routing in the USA, Europe, Asia, and Australia is possible. For commercial customers, EU data residency (EU/EEA) can be configured via native API endpoints as well as AWS Bedrock EU and GCP Vertex EU. Specific data center locations (e.g. Frankfurt, Dublin) are not named explicitly on the website.

Link

“Where ideas flow into sound and songs become yours.”

Suno is an AI music platform for generating complete songs and beats from prompts as well as from uploaded or recorded audio.

Paying users get advanced features such as commercial usage rights, voice features, stem export, advanced editing, and with Suno Studio, a generative audio workstation.

With v5.5, Voices, Custom Models, and My Taste were also added.Suno

Where ideas flow into sound and songs become yours

6.3/10 Solid
Free Free entry with access to the free model, daily renewed credits, a limited number of songs, standard features, audio upload with a limit, a shared queue, and no commercial use. Subscription Pro Plan Paid entry-level plan with access to advanced models, monthly credits, commercial usage rights for newly created songs, Standard and Pro features, Personas, Advanced Editing, stem splitting, longer audio uploads, new vocals or instrumentals for existing songs, Early Access, add-on credits, Priority Queue, parallel songs, your own voice, and custom versions of the model with your own audio.

Premier Plan Highest regular subscription tier with Suno Studio, access to advanced models, significantly more monthly credits, commercial usage rights, Standard and Pro features, stem splitting, longer audio uploads, vocals/instrumentals for existing songs, Early Access, add-on credits, Priority Queue, parallel songs, your own voice, and custom model versions with your own audio. Other Add-on Credits Pro and Premier users can purchase additional credits; according to Suno, purchased top-up credits do not expire, but require an active subscription to use.

Free Trial Suno may offer a trial period for paid features; the duration is determined by the respective trial confirmation.
5.0 (1)

Link

GDPR: Partly From the perspective of a user in the EU/EEA, GDPR-compliant use is only verifiable to a limited extent. A positive aspect is that Suno explicitly states rights for EEA residents in its privacy policy and explains that, in certain customer scenarios, it acts as a data processor on the basis of written agreements and instructions. A negative aspect, however, is that according to its own website, Suno generally stores personal data on servers in the USA and transfers data of EEA/UK users to the USA for the performance of the contract. In addition, according to Suno's privacy policy and terms of use, Suno uses submitted content to improve or train its services and models. A clearly findable DPA/AVV for standard customers, EU data residency, a list of subprocessors, or a self-hosting/on-premise option were not specified on the website.
Positive
The website contains a privacy policy with specific rights for EEA residents as well as the note that, in certain customer scenarios, Suno acts as a 'data processor' or 'service provider' and then processes data in accordance with written agreements and instructions.
Negative
Suno states that it generally stores information on servers in the USA and transfers data of EEA/UK users to the USA. Suno also explains that it uses certain user activities, inputs, and content to improve the services and to train or improve the models. A publicly findable DPA/AVV, EU data residency, a list of subprocessors, EU data centers, on-premise, or self-hosting were not specified on the website.
Server location
According to the privacy policy, Suno generally stores information on servers in the USA. According to the website, additional storage locations outside the USA may be used, but they are not specifically named. EU/EEA data centers or EU data residency are not specified on the website.

Link

“to empower everyone in the world to design anything and publish anywhere”.

Canva is a browser-based platform for design, publishing, and visual communication. Users can use it to create, among other things, social posts, presentations, documents, websites, videos, and brand materials; in addition, it offers AI features for text, images, translation, code, and data-driven content.

Canva thus positions itself not only as a design tool, but as an integrated Visual Suite for individuals, teams, and companiesCanva

Visual Suite for Everyone

7.7/10 Good
Free Free basic version for designs, templates, and free content; suitable for creating simple social posts, presentations, posters, videos, logos, and designs. Pro content may contain watermarks for Free users or be licensed separately. Subscription Canva Pro For individuals and solo creators; includes premium content, templates, Brand Kit, Background Remover, Magic Resize, and AI-powered design features.

Canva Business For small businesses, solo entrepreneurs, and growing teams; includes everything in Pro plus higher AI access, advanced brand management, marketing/ad insights, collaboration, and shared workspaces.

Canva Enterprise For large organizations with multiple teams; includes enterprise security, SSO, SCIM, audit logs, data residency options, AI governance, advanced admin controls, approval workflows, integrations, and dedicated support. Other Free users can license individual Pro content for one design; in addition, there are print products as well as special offers for education and nonprofits.
5.0 (1)

Link

GDPR: Partly Canva documents a GDPR-compliant legal basis for users in the EU/EEA, names an EEA representative in Ireland, refers to Standard Contractual Clauses and the UK Addendum for international transfers, and provides a Data Processing Agreement (DPA) for Canva Business and Enterprise. At the same time, the website does not guarantee a clear, general EU/EEA server location for standard use; rather, the documentation refers to international data transfers, and the list of subprocessors mentions several processing operations in the U.S. GDPR-compliant use therefore appears realistic only under certain conditions, particularly with a Business/Enterprise contract, a DPA, and careful review of the features used and third-party apps.
Positive
The following are positively documented: a privacy policy with a section for the EEA, Switzerland, and the UK; EEA representation by the EDPO in Dublin; a commitment to provide appropriate safeguards for transfers outside Europe via EU Model Clauses and the UK International Data Transfer Addendum; DPA for Canva Business and Canva Enterprise; published list of subprocessors; privacy settings and the option to disable the use of Business/Enterprise content to improve AI-powered features; security certifications including ISO 27001 and SOC 2 Type II.
Negative
A negative or limiting aspect is that the website does not specify a clear, general server or data center location within the EU/EEA for all customer data. The privacy policy states that Canva Pty Ltd receives and processes data in Australia and that data may be transferred to other countries. The list of subprocessors cites several U.S. entities for key services, including AWS, Google, MongoDB, OpenAI, and Snowflake. The website does not clearly guarantee explicit, full EU data residency for the entire product; for AWS, it only states “United States & Europe (when selected).” On-premises/self-hosting is not specified on the website.
Server Location
The website does not consistently specify a fixed EU/EEA server location. The list of subprocessors lists “United States & Europe (when selected)” for Amazon Web Services; other key subprocessors for hosting/AI are listed as being located in the U.S. From this, EU data residency can only be inferred partially or on a case-by-case basis, not generally for all uses of Canva.

Link

“AI tools built for your WordPress site”

WordPress is a website builder and an open-source CMS, as well as a hosted platform known as WordPress.com.

In the context of AI, WordPress now offers official features for text generation, rephrasing, translation, image generation and editing, design assistance, an AI website builder, and MCP-based agent integrations with tools such as Claude or ChatGPT.

In addition, the official WordPress AI team documents core-level components such as AI Client, the Abilities API, and the AI plugin.WordPress

AI tools built for your WordPress site

7.5/10 Good
Free Free to get started for simple websites and blogs; WordPress.com offers a free plan and upgrades for additional features. WordPress itself is free to use if you have your own hosting. Subscription Personal Your own domain for the first year, 6 GB of storage, ad-free visitor view, premium themes, support, statistics, plugin installation, and customization of fonts and colors.

Premium Everything included in the Personal plan plus more storage, all premium themes, fast support, premium statistics, Google Analytics, and video uploads.

Business Managed WordPress hosting with more storage, 24/7 priority support, premium statistics, plugins, Google Analytics, video uploads, and developer features such as SFTP/SSH, WP-CLI, Git commands, and GitHub deployments.

Commerce For online stores with a WooCommerce-optimized environment, store themes, e-commerce tools, plugins, Google Analytics, video uploads, and developer features. Other Enterprise / WordPress VIP An enterprise offering for large organizations, with a focus on scalability, security, and data-driven WordPress experiences.

WordPress.org Self-Hosting Download the WordPress software for free and run it with your own hosting provider; you’ll then have greater responsibility for hosting, domain, security, updates, and data protection.
3.0 (2)

Link

GDPR: Partly For the EU/EEA area, GDPR-compliant use with WordPress is partially demonstrable, but not comprehensively for the standard SaaS variant. Positive aspects include an explicitly offered DPA/AVV for WordPress.com site operators, standard contractual clauses in connection with the DPA, and the option to choose a primary data center in the 'EU West' region for hosting features. At the same time, the website states for WordPress.com a globally distributed infrastructure with replication/fallback across regions; exclusive EU/EEA data processing for the entire platform and specifically for the AI features is not clearly guaranteed on the website. Therefore, a reliable EU/EEA GDPR assessment is only sustainable under certain conditions.
Positive
The website documents a DPA/AVV for all WordPress.com site operators, a reference to GDPR data transfers via standard contractual clauses, EU/UK consent management for tracking, and a selectable primary hosting region 'EU West'. In addition, WordPress is explicitly described on the website as open-source software, and WordPress.com points out that WordPress can also be installed with other hosting providers.
Negative
The website does not document exclusive EU/EEA data residency for WordPress.com as a whole. Instead, distribution across multiple data centers in the USA and worldwide is described, including replication to a second region. Subprocessors were not found on the website. A specific statement that inputs, uploads, or outputs of the AI features are not used to train general models was not found on the website. Relevant certifications such as ISO 27001 or SOC 2 are not specified on the website for WordPress.com.
Server location
According to the website, WordPress.com hosts on thousands of servers in multiple data centers in various parts of the USA and worldwide. For certain hosting features, 'EU West' can be selected as the primary data center, among other options. In addition, the website describes real-time replication to a second data center in another region. Exclusive EU/EEA hosting for WordPress.com as a whole is not specified on the website.

Link

ChatGPT is OpenAI's multimodal AI application for text, research, data analysis, coding, image generation, voice, and knowledge-based work.

Its current feature set includes, among other things, Search, Deep Research, Data Analysis, Projects, Custom GPTs, Codex, Images, Voice Mode, and, additionally for Business/Enterprise, Apps and Company Knowledge. This makes ChatGPT today more of a broad work platform than just a chatbot.Chat GPT

ChatGPT is your AI chatbot for everyday use

7.7/10 Good
Free Free offers, according to the official pricing/FAQ documentation, limited access to GPT-5.3, messages/uploads, image generation, Deep Research, Memory, and Codex; in addition, web search, file uploads, data analysis, and GPT usage are generally available, but limited. Subscription Go Expanded individual plan compared to Free; more access to GPT-5.3, more messages, more uploads, more image generation, and a longer memory function. According to OpenAI, it may contain ads.

Plus Individual plan for advanced use; includes, among other things, GPT-5.5 Thinking, expanded messages/uploads, better image generation, enhanced Deep Research and Agent Mode, Projects, Tasks, Custom GPTs, and expanded Codex access.

Pro Powerful individual plan for maximum productivity; includes more usage, GPT-5.5 Pro, maximum Codex tasks, unlimited GPT-5.3 and file uploads, faster image generation, maximum Deep Research and Agent Mode, as well as larger memory/context functions. Other Business Codex Usage-based team model for development-oriented teams; focus on AI-supported software development, code and security reviews, automation, cloud environments, admin controls, SAML/MFA, and no training on customer data.

Business ChatGPT & Codex Team plan for startups and growing companies; includes Plus and Business Codex features, unlimited core chat, apps/connectors such as Slack, Google Drive, SharePoint, GitHub, and Atlassian, data analysis, Record Mode, Canvas, shared projects, workspace GPTs, admin and security features.

Enterprise Custom enterprise model for large organizations; includes an expanded context window, enterprise security features such as SCIM, EKM, role-based controls, domain verification, data residency in multiple regions, 24/7 priority support, SLAs, custom contract terms, and no use of business data for training by default.

ChatGPT Edu / Higher Education Education plan for higher education institutions; offers expanded access to GPT-5, tools for data analysis, web browsing, file integrations, document summarization, and custom GPTs for campus workspaces.
4.0 (1)

Link

GDPR: Partly The ChatGPT website includes several privacy-related commitments for Business and Enterprise use, including “no training on your business data by default,” references to GDPR support, a linked Data Processing Addendum for Business, and data residency in the EU for Enterprise. For the standard SaaS plans (Free/Go/Plus/Pro), however, the pricing page states that “opt-out is available” for model training and does not specify EU data residency. Therefore, GDPR-compliant use appears realistic only under certain conditions—particularly with the Business and Enterprise plans, and in some cases only with Enterprise features such as EU data residency.
Positive
The following points mentioned on the website are positive: Business and Enterprise specify “no training” for corporate data by default; Business refers to a Data Processing Addendum; Enterprise mentions support for GDPR compliance as well as data residency options, and relevant certifications and standards such as SOC 2 Type 2 and ISO/IEC 27001, 27017, 27018, and 27701 are listed.
Negative
A negative or limiting aspect is that the ChatGPT website explicitly states for the general end-user plans—Free, Go, Plus, and Pro—that content may be used for model training, though with an “opt-out available” option. Furthermore, the website does not specify a specific server location or data center for standard use. EU data residency is listed on the pricing page only for the Enterprise plan; for the Business plan, it is marked as “No.” Subprocessors and detailed server locations are not specified on the ChatGPT domain website evaluated here.
Server Location
No specific server or data center location is listed on the website. On the pricing page, only “Data residency in US, EU, UK, JP, CA, KR, SG, IN, AU, UAE” is listed for the Enterprise plan; for the Business plan and end-user plans, no data residency in the EU is available there.

Link

"A free AI-powered answer engine that provides accurate, trusted, and real-time answers to any question."

Perplexity is an AI-powered search and answer platform that combines real-time web search with summarized answers and source citations.

Today, the product portfolio includes not only Search/Pro Search/Deep Research, but also Internal Knowledge Search, Connectors, asset creation for documents/presentations/spreadsheets/apps, browser/agent capabilities, as well as its own API platform.Perplexity

A free AI-powered answer engine that provides accurate, trusted, and real-time answers to any question.

7.5/10 Good
Free The free Standard plan includes search history, nearly unlimited basic searches, a very limited number of Pro searches, automatic model selection by Perplexity, and limited file uploads. It does not include advanced AI models, image generation, or premium support. Subscription Perplexity Pro: Extended access to Pro Search, limited use of “Create files and apps,” access to advanced AI models, image and video generation, higher limits for file/attachment uploads and analysis, as well as support channels.

Perplexity Max: Includes Pro features plus the highest access to advanced AI models, expanded limits for “Create files and apps,” early access to new products, and prioritized support.

Education Pro: For verified students and educators; includes Pro features plus more citations, file and image uploads, Study Mode, expanded access to Perplexity Research and Perplexity Academic.

Enterprise Pro: Includes Pro features plus strict privacy features, no use of data for training, seat/user management, organizational file storage, internal knowledge search, increased file uploads, admin controls, team spaces, and dedicated support.

Enterprise Max: Includes Enterprise Pro features plus higher limits for Research, file and app creation, video generation, advanced models, larger file repositories, SCIM, audit logs, configurable data retention, and an insights dashboard. Other Sonar API: Separate pay-as-you-go model for developers and businesses that want to integrate Perplexity features into their own products, workflows, or automations. API usage is managed separately via credits or auto top-up; a Perplexity subscription is not required for API access. The API does not offer Pro/Max features within the web app and, according to Perplexity, does not log or store data.

Important: API access is not automatically included in Enterprise plans; Enterprise and API are treated separately.
3.0 (1)

Link

GDPR: Partly Perplexity provides several components relevant for GDPR-compliant use on its own website, including a privacy policy, a DPA, EU representation, SCC/DPF notices, as well as opt-out and no-training statements for certain products. However, for use in the EU/EEA, the situation is not entirely straightforward: the privacy policy identifies the USA as the primary storage and processing location, explicit EU data residency for general SaaS use is not stated on the website, and for Free/Pro/Max, training use is enabled by default until users opt out. A relatively privacy-friendly path is documented for Enterprise as well as for the Sonar API with Zero Data Retention, but this depends on the product or plan and is not equivalent to generally documented EU/EEA data residency.
Positive
Positive aspects include the published privacy policy, an accessible DPA, identified subprocessor/third-party model structures, EU representation in Berlin, notices regarding SCCs and DPF for EU/UK transfers, a documented opt-out for AI training for Free/Pro/Max, the statement that Enterprise data is never used for AI training, and, for the Sonar API, a strict Zero Data Retention policy. In addition, the website mentions a SOC 2 Type II certification.
Negative
Negative aspects are that the privacy policy describes data processing primarily in the USA and does not state explicit EU/EEA data residency for the general service. For Free, Pro, and Max, AI data storage or data collection for training is enabled by default; an opt-out applies only to future data, and according to the Help Center, previously collected training data cannot be deleted or removed. Server/data center locations in the EU or dedicated EU regions are not stated on the website. On-prem or self-hosting options are not stated on the website.
Server location
According to the privacy policy, data may be stored or processed in other countries, 'primarily in the USA, where we have our servers and support teams.' A specific EU/EEA server location or EU data residency is not stated on the website. The DPA identifies Amazon Web Services as the cloud infrastructure provider with location 'worldwide.'

Link

"The AI for your tax return"

SteuerGPT is an AI-powered chatbot for tax-related questions within WISO Steuer. Users can ask questions in everyday language while completing their tax return; the AI explains matters, guides them to the appropriate input forms, suggests missing information, and helps them understand their tax assessment notice.TaxGPT

SteuerGPT: Your digital advisor - The AI for your tax return

7.1/10 Good
Subscription Advantage Subscription: According to the official WISO page, includes SteuerGPT as a personal AI advisor, technical hotline, tax coaching, automatic completion, and annual use in a subscription model.

Trial version: Complete testing before submission.

Note: No direct prices stated, as only model names and functions are documented here. Other Single purchase: One-time license for one tax year with SteuerGPT and filing option.

Optional additional services: ProfiCheck and buhl:Berater are offered separately via Buhl Steuerberatungsgesellschaft mbH; Buhl Data Service itself points out that it is neither obligated nor authorized to provide tax law assistance.
1.0 (1)

Link

GDPR: Partly The website provides several strong data protection and hosting indications for use within the EU/EEA: according to the product page, SteuerGPT is operated in German data centers and does not leave the European legal area; the WISO tax page also mentions the company's own Buhl servers in Germany. At the same time, the privacy policy for AI functions available on the website refers to a transfer to OpenAI Ireland Ltd as a processor, including a DPA and standard contractual clauses. However, for SteuerGPT itself, no separate, fully elaborated section on subprocessors, data flow, training exclusion, or EU data residency at the component level can be found on the located pages. This makes GDPR-compliant use within the EU/EEA plausible, but only on the condition that the documented statements regarding processing by OpenAI Ireland and the European hosting information actually apply to SteuerGPT in this form.
Positive
Positively documented are a privacy policy on the Buhl website, statements about German data centers or the company's own Buhl servers in Germany, as well as a DPA/SCC statement for AI functions with OpenAI Ireland as a processor. In addition, the SteuerGPT page emphasizes that no personal data is used or analyzed and that the applications do not leave the European legal area.
Negative
Negative is that no separate, clearly SteuerGPT-specific section is provided on the located SteuerGPT pages regarding subprocessors, training use of the content, opt-out from AI training, certifications, on-premise/self-hosting, or open-source components. An explicit list of subprocessors named specifically for SteuerGPT was also not provided on the website.
Server location
The website states for SteuerGPT that the applications are operated in German data centers and do not leave the European legal area. The WISO tax page also states that the data remains on the company's own Buhl servers in Germany. Beyond that, no precise naming of individual data center locations or a detailed description of EU data residency at the component level is provided on the website.

Link

“Get everything you need to build a website your way.”

Wix is a no-code website builder that enables individuals and businesses to create websites, blogs, portfolios, online stores, and booking pages. The platform combines a drag-and-drop editor, templates, hosting, SEO, marketing, CRM, and commerce features in one interface.

Since 2026, Wix has also positioned the editor with Wix Harmony as a hybrid AI editor with prompting plus manual fine control.Wix

Get everything you need to build a website your way

7.2/10 Good
Free Free website creation and publishing; a Premium plan is required for your own domain, ad-free use, or advanced business features. Subscription Light Basic plan with your own domain, hosting, AI creation tools, storage, a light marketing suite, and a few collaborators.

Core For growing websites and initial business features; includes more storage, multi-cloud hosting, basic marketing, payments, basic eCommerce, scheduling/service features, and more collaborators.

Business For businesses with growth; includes more storage, standard marketing suite, payments, standard eCommerce, scheduling/services, and more collaborators.

Business Elite For larger requirements; includes unlimited storage, multi-cloud hosting, Advanced Marketing Suite, payments, Advanced eCommerce, scheduling/services, Advanced Developer Platform, and many collaborators. Other Wix Enterprise Custom enterprise solution for larger organizations with more complex governance, support, developer, and scaling requirements. Wix refers to enterprise solutions as a separate area.

Wix Studio / Velo / Custom Hosting Solutions For agencies, developers, and more complex web projects; Wix states that selected custom hosting solutions may be available with Velo in the enterprise context.
1.0 (1)

Link

GDPR: Partly For the EU/EEA area, the Wix website provides reliable indications of GDPR-relevant components: Wix explicitly describes itself as a processor for 'User-of-User Data,' refers to a data processing addendum ('DPA')/'NDV'), and states processing within the territory of the European Union, Israel, or in third countries with an adequacy decision or on the basis of approved transfer mechanisms. At the same time, the website states that the platform as a whole uses infrastructure from AWS, GCP, and its own data centers, and therefore does not document a consistently purely European standard operation across the website. For Enterprise, however, Wix mentions an option to store and process data 'within designated geographic boundaries' in its own cloud. From an EU/EEA perspective, GDPR-compliant use therefore appears plausible rather subject to conditions, especially with a DPA and suitable configuration or Enterprise set-up, but is not clearly documented as straightforward and universally applicable for every standard use case.
Positive
Positive aspects include the privacy policy available on the website, the linked data processing addendum for user data, Wix’s explicit role as a processor for 'User-of-User Data,' the mention of the EU as a processing region, the reference to standard contractual clauses or approved transfer mechanisms, as well as the stated Enterprise option for storage and processing within designated geographic boundaries in its own cloud. In addition, Wix lists security certifications such as SOC 2 Type 2, SOC 3, PCI DSS Level 1, and several ISO certifications.
Negative
Negative is that the website does not establish a clear general EU data residency for all customer data for the standard platform and instead mentions a combination of AWS, GCP, and its own data centers, as well as processing in Israel or other suitable third countries. Specific server locations or individual EU data centers are not identified on the pages found. For AI-related content, it is also stated on the website that Wix may use inputs and outputs to 'train our software tools' and to improve the services; a clearly documented opt-out option for this training was not found on the pages reviewed. The subprocessor list is referenced only via a support page, not directly set out on the de.wix.com pages found.
Server location
For 'User-of-User Data,' the website states processing within the territory of the European Union, Israel, or in third countries with an adequacy decision. For the platform, Wix mentions an infrastructure consisting of AWS, GCP, and its own data centers. Specific individual server or data center locations in the EU/EEA area are not provided on the pages found.

Link

Robotics

“More than Wisdom, Be with You”; in its online store, Unitree describes itself as a robotics company focused on the development, production, and sale of consumer and industrial robots.

Unitree develops and sells humanoid robots such as the G1, H1/H1-2, H2, and R1, as well as quadruped robots, robotic arms, LiDAR/perception products, and components. The humanoid models are primarily positioned for research, development, education, demonstration, embodied AI, teleoperation, motion research, and early industrial/service pilot projects. Unitree itself points out that global humanoid robotics is still in an early exploratory phase and that users should understand the limitations of humanoid robots before purchasing.Unitree

More than Wisdom, Be with You

3.5/10 Insufficient
Other Unitree R1 / R1 Air / R1 EDU Compact humanoid robot available for pre-order; according to the official store page, it features a multimodal speech/vision model, 20 to 26 degrees of freedom, open joint and sensor interfaces, and simulation platform support. According to the store description, the standard version does not support secondary development; the EDU version is recommended for customization.

Unitree G1 / G1 EDU Humanoid robot for research, development, and robotics experiments; according to the official product page, it features 23 to 43 joint motors, support for imitation and reinforcement learning, a force-controlled dexterous hand in the EDU version and options, and high mobility.

Unitree H1 / H1-2 Full-size humanoid with 3D LiDAR, depth camera, high mobility, replaceable battery, and high joint torque density; intended primarily for research, demonstration, and advanced robotics development.

Unitree H2 / H2 EDU New full-size humanoid with 31 degrees of freedom, powerful chip, bionic head, and optional EDU/development options; H2 EDU is available through sales/contact.

Custom Robots / Professional Service Unitree lists Professional Service and Custom Robots in the shop; specific services, SLAs, privacy policies, and integration packages must be requested individually.

Shipping, Customs, Import In its international shop, Unitree notes that customers are responsible for shipping costs, customs duties, taxes, and import clearance; contact information and, if applicable, a Tax ID are required for customs clearance.
– (0)

Link

GDPR: No The website does contain a privacy policy, and it names rights for persons in the EEA as well as initial processing in Ireland. However, for reliable GDPR-compliant use throughout the EU/EEA, the provider’s website lacks the decisive documentation: no AVV/DPA can be found, no separate subprocessor list, no guaranteed EU data residency, and no reliable information on certifications. In addition, the website states that personal data is transferred outside Europe after the initial processing in Ireland for storage and processing, including to Canada and the USA.
Positive
Positively documented are a published privacy policy, an explicit reference to the GDPR for persons in the EEA, the naming of data subject rights, and the statement that personal data is initially processed in Ireland. In addition, Shopify is named as a processing service and an opt-out is mentioned for Google Analytics.
Negative
Negative is that the website itself does not guarantee EU/EEA-exclusive data residency, but instead states onward transfer outside Europe for storage and further processing. An AVV/DPA is not provided on the website. A subprocessor list is not provided on the website. On-premise, self-hosting, or private cloud options are not provided on the website. An opt-out from AI training is not provided on the website. Relevant certifications such as ISO 27001 or SOC 2 are not provided on the website. The privacy policy also appears partially generic or incomplete, for example with placeholders such as '[INSERT AGE]' and without a completed email address in the contact section.
Server location
Stated on the website: personal data is initially processed in Ireland and then transferred outside Europe for storage and further processing, including Canada and the USA. Further specific server/data center locations of the provider are not provided on the website.

Link

“Write effortlessly and efficiently with QuillBot's suite of AI tools.”

QuillBot is an AI writing assistant focused on paraphrasing, grammar/spell checking, summarization, translation, citation, plagiarism checking, and AI detection.

Today, the product is broader than a pure paraphraser and is also positioned by QuillBot as a creative suite and as a platform for students, professionals, and creators.Quillbot

Write effortlessly and efficiently with QuillBot's suite of AI tools

7.1/10 Good
Free Basic access with limited paraphrasing, few modes, simple grammar functions, limited humanizer, simple summaries, and a restricted AI Detector. Subscription Premium Everything in Free plus unlimited paraphrasing, more modes, advanced grammar suggestions, unlimited Humanizer with tone/score insights, Custom Summaries, unlimited AI Detector, and plagiarism prevention.

Team Plan Multiple Premium subscriptions in one team management system; includes Team Style Guide, Dictionary, Admin Panel, Usage Reports, Writer Management Dashboard, Data Controls, and centralized billing.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use can only be inferred to a limited extent. The website contains references to GDPR efforts, the EU-US Data Privacy Framework, and standard contractual clauses for transfers outside the EU. At the same time, Quillbot states that personal data from the EU may, where necessary, be transferred to the USA and India as well as to service providers worldwide. Explicit EU data residency, a clearly designated EU/EEA server location, or an on-premise/self-hosting option are not specified on the website. A positive point is that there is an opt-out for training for extension users and that, according to the website, no training takes place on Team Plan inputs; nevertheless, standard use is not clearly limited to EU/EEA data storage.
Positive
The website mentions GDPR efforts. Quillbot refers to certification under the EU-US Data Privacy Framework, safeguards for data transfers with standard contractual clauses, and contractual restrictions for service providers. It also states that third parties may not use data to train their AI models. For extensions, there is an opt-out for training; for the Team Plan, it states that text inputs are not used for training.
Negative
No specific EU/EEA server location is stated on the website. It explicitly says that Quillbot has offices in the USA and India and works with service providers worldwide, so data from the EU may be transferred outside the EU. Explicit EU data residency, a publicly available DPA/AVV link, a subprocessors list, and on-premise/self-hosting options are not specified on the website.
Server location
Not specified on the website. It only states that Quillbot has offices in the USA and India and works with service providers worldwide; this does not imply confirmed EU/EEA data storage.

Link

“Your writing assistant”

LanguageTool is primarily an AI editing tool: it improves existing texts with suggestions for grammar, spelling, punctuation, style, tone, and in some cases rephrasing, rather than primarily generating new content like a classic GenAI writer. It is available via web editor, browser, Word, Google Docs, LibreOffice, mail integrations, as well as on Windows/macOS/iOS, and supports more than 30 languages. For developers, there is also an HTTP API and an open-source core technology for self-hosting.Language Tool

More than a Grammar Checker - Your writing assistant

8.2/10 Very good
Free Free basic version for spelling, grammar, and style checking; some free services are also accessible without an account. Subscription Premium / Individual Advanced checks, longer texts, style and tone suggestions, as well as additional writing features compared to Free.

Teams All Premium features plus user management, Team Style Guide, Team Dictionary, and higher text lengths for teams. Other Business DPA available; core functionality open source, own server possible locally or in the cloud; public HTTP API or developer options available.
– (0)

Link

GDPR: Yes LanguageTool provides a robust path to GDPR-compliant use within the EU/EEA because it has a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR and, at the same time, offers a clear self-hosting/on-premises option for its core technology. For the standard SaaS offering, the situation is mixed: The website mentions data flows to the U.S., and the DPA explicitly states that Learneo is a recipient of European data in the U.S. The best available option is therefore on-premise or self-hosting use within the organization’s own or controlled EU/EEA infrastructure.
Positive
Positive aspects include the published T&C/DPA, the documented sub-processors, the reference to the EU GDPR in the DPA, the option to object to changes in subprocessors, the statement that user input is not used to train language algorithms or models, and the openly documented open-source core technology with self-hosted servers. In addition, LanguageTool specifies only servers in Germany and an on-premises version for business documents.
Negative
A negative aspect is that the website for using the service also lists processing locations in Germany, Ireland, and the U.S., and the DPA explicitly describes the receipt of European data in the U.S. by Learneo. A general, clearly guaranteed EU data residency for all SaaS usage within the EU/EEA is not explicitly described on the website as a standard commitment. Certifications such as ISO 27001 or SOC 2 are not listed on the website.
Server Location
The website lists several locations for LanguageTool: in the privacy policy for the use of the services, Germany, the U.S., and Ireland; in the DPA, Telekom Germany, Hetzner, AWS Germany, Google Cloud Platform in Dublin, and Cloudflare in the U.S. are listed as subprocessors, among others. A company PDF also states that LanguageTool uses only servers in Germany; however, this statement appears alongside other information on the website that mentions international processing locations.

Link

Firefly: “Create like never before.”

Adobe Firefly is used to generate and edit images, videos, audio, and designs.

Adobe positions Firefly as a family of generative AI models embedded both in the Firefly web app and in Adobe flagship products such as Photoshop, Illustrator, Lightroom, InDesign, Adobe Express, and Adobe Stock. Creative Cloud provides the app, asset, collaboration, and subscription infrastructure for this.Adobe Firefly / Adobe Creative Cloud.

Creative Cloud for Business: “Create exceptional on-brand content faster.”

7.4/10 Good
Free Free entry with limited access to standard and premium AI features for image, video, audio, and more. Subscription Firefly Standard Creative AI subscription with monthly generative credits, standard image features, and access to premium features via credits.

Firefly Pro More generative credits and expanded access to creative AI features.

Firefly Pro Plus Significantly more credits, broader access to advanced image/video/audio features, and external AI models within Firefly.

Firefly Premium Highest regular Firefly tier with a very high credit amount and content creation on a larger scale.

Creative Cloud Single Apps / All Apps Photoshop, Illustrator, Premiere Pro, After Effects, Express, Acrobat, and other Adobe apps; Firefly and generative credits included depending on the plan. Other Creative Cloud for Teams / Enterprise Company management, Admin Console, DPA, enterprise controls, team/brand workflows, and extended contract options.

Generative Credits / Credit Add-ons Additional credits for Firefly and Creative Cloud generative AI features.

Firefly Custom Models Enterprise feature for training brand-specific Firefly models on your own brand assets.
– (0)

Link

GDPR: Partly Adobe documents several components relevant to the EU/EEA region for Creative Cloud for Enterprise, including Adobe Firefly: a privacy policy, a published Data Processing Agreement (DPA), a list of subprocessors, documented hosting regions in Europe, and certifications for Adobe Creative Cloud for Enterprise. At the same time, it cannot be conclusively demonstrated that the service is fully GDPR-compliant across the board, because Adobe also lists U.S. components and international subprocessors for the overall service, hosts the Adobe Admin Console in the U.S., and stores certain identity data in the U.S.; Additionally, according to the security document, certain Firefly inputs for Firefly Custom Models are processed in the AWS US East and US West regions, regardless of location. This means that use in compliance with the GDPR is possible from an EU/EEA perspective, but only under certain conditions and with a thorough review of the subscribed plan, data flows, and contractual settings.
Positive
Positive aspects include the published Data Processing Addendum, the documented involvement of Adobe Systems Software Ireland Limited as the initial recipient for European data transfers, the published list of subprocessors, the European hosting regions for Creative Cloud for Enterprise, including Adobe Firefly, the statement that content will not be used to train generative AI models, and published compliance certifications such as SOC 2 Type 2 and ISO 27001:2022 for Adobe Creative Cloud for Enterprise.
Negative
A negative or limiting factor is that Adobe does not consistently document exclusive EU/EEA processing for the entire service. The Adobe Admin Console is hosted in US-East; user licensing and identity data are stored in the U.S.; Adobe lists global subprocessors and processing locations outside the EEA. For Firefly Custom Models, Adobe also documents that certain additional Firefly inputs are currently processed, cached, and stored in AWS data centers in US-East and US-West, regardless of the user’s location. On-premises or self-hosting for Firefly/Creative Cloud is not specified on the website.
Server Location
Creative Cloud for Enterprise, including Adobe Firefly, uses Adobe Cloud Storage on AWS in multiple regions, including Europe. Content is stored in the regional storage region assigned at the time of deployment. For identity and license data, however, Adobe specifies the U.S. (Virginia and Oregon); additional edge servers are located in Ireland and France, among other places. For Firefly Custom Models, Adobe lists Ireland, Virginia, Oregon, and Japan as storage locations; in addition, certain additional Firefly inputs are currently processed in US East and US West.

Link

Build with the latest DeepSeek models

DeepSeek currently offers two LLM access points via its API: deepseek-chat and deepseek-reasoner. According to the official documentation, both currently correspond to DeepSeek-V3.2 with a 128K context window; deepseek-chat stands for Non-Thinking mode, deepseek-reasoner for Thinking mode. The API is OpenAI-compatible and supports, among other things, JSON Output, Tool Calls, Chat Prefix Completion, and, in the case of deepseek-chat, additionally FIM Completion.DeepSeek API

LLM "Build with the latest DeepSeek models"

4.0/10 Limited
Other Token-based API usage Billing based on input, output, and cache-hit/cache-miss tokens.

deepseek-v4-flash Faster, more efficient model with Thinking and Non-Thinking mode, 1M context, JSON output, tool calls, and chat prefix completion.

deepseek-v4-pro More powerful model for more complex reasoning, coding, agents, and long contexts; also supports 1M context, JSON output, and tool calls.

OpenAI-/Anthropic-compatible API Usage via an OpenAI-compatible base URL or an Anthropic-compatible endpoint; suitable for existing SDKs and agent tools.

Open Weights / Self-hosting path DeepSeek-V4 was released as an open-weights family; self-hosting requires your own infrastructure and should be considered separately from the official API.
– (0)

Link

GDPR: No The documentation available on the specified provider’s domain does not demonstrate full compliance with the GDPR for users in the EU/EEA. Although technical information on isolation and caching can be found on the API documentation website, this domain lacks reliable information on EU/EEA server locations, EU data residency, T&Cs/DPA, subprocessors, opt-out from AI training, and relevant certifications. From an EU/EEA perspective, this is not sufficient for a positive GDPR assessment.
Positive
Technical safeguards are clearly documented within the API documentation: There is documented “user_id” isolation for privacy management, a note advising against entering personal data into “user_id,” as well as information on isolated cache entries and the automatic deletion of unused cache entries. In addition, the API documentation references open-source sources and specifies an MIT license for the API documentation.
Negative
A major negative factor for an EU/EEA GDPR assessment is that the website contains no reliable statements regarding EU/EEA data centers, EU data residency, data processing agreements (DPAs), subprocessors, certifications, or a contractually or organizationally documented exclusion of training with customer data. The website also does not specify an on-premises or self-hosting option for the specific API service under consideration.
Server Location
Not specified on the website. Although the API documentation lists the base API address as 'https://api.deepseek.com', the website does not indicate a server or data center location within or outside the EU/EEA.

Link

“Search your company knowledge smarter with AI agents.”

TextCortex is an AI platform for Enterprise AI, Company Knowledge, Workflow Automation, and AI Agents.

Officially, the product is now positioned as a model-agnostic agent infrastructure that enables companies to create AI agents without code, apply them to company data, and integrate them into existing work environments. At the same time, the pricing page still highlights strong classic assistance features such as writing, translation, rewriting, voice features, data analysis, and browser integration.Textcortex

Search your company knowledge smarter with AI agents

7.4/10 Good
Free Free basic use of many core features; suitable for testing and for simple AI writing and chat workflows.

14-day trial period TextCortex mentions a 14-day trial period to try out all features with higher usage. Subscription Extended access to AI writing features, ZenoChat, reasoning/model features, knowledge features, image/text generation, and more usage capacity. Other Enterprise Multiple seats, Enterprise Knowledge Search, dedicated support, secure team/company features, higher storage/usage limits, and custom requirements.
– (0)

Link

GDPR: Partly The website contains several clear statements regarding GDPR/DSGVO, EU data residency, EU-hosted infrastructure, zero-data training, and existing certifications. At the same time, important points for a robust assessment across the entire EU/EEA remain incomplete on the website: a specifically linked AVV/DPA text is not provided on the website, a subprocessor list is not provided on the website, and an exact server location or specific data center countries are not named. In addition, the provider’s own pages show differing statements on data usage depending on the usage context: For general use, an opt-out is mentioned, while for Enterprise and certain functions, strict no-training is promised. Therefore, GDPR-compliant use in the EU/EEA appears plausible primarily in the Enterprise or EU setup, but not without restriction for every standard use.
Positive
Positive are the provider’s own statements regarding 'GDPR-compliant', 'Built for European data sovereignty', 'EU data residency: Guaranteed', 'all inference on EU-based infrastructure', 'Zero data training', as well as the mention of ISO 27001 and SOC 2. In addition, the website mentions private environments for Enterprise customers in preferred regions and explains that knowledge base documents are processed exclusively by TextCortex.
Negative
Negative is that no specifically identifiable AVV/DPA contract text is linked on the website, no subprocessor page is provided, and no specific data center countries or providers are named. In addition, the statement regarding training is not fully consistent: In one data-related article, it is described for the app, browser extension, and API that data may be used to improve the models, with opt-out via form; by contrast, no-training is promised for Enterprise data and other areas. This argues against a universally simple assessment of the entire product usage.
Server location
The website states multiple times that services or inference are hosted in the European Union on EU-based infrastructure and that EU data residency is guaranteed. Specific countries, cities, or individual data centers in the EU/EEA are not provided on the website. For optional services or LLMs outside the EU, the website refers to the EU-U.S. Data Privacy Framework or standard contractual clauses.

Link

"The most powerful AI platform for enterprises"

Mistral AI is a French provider of generative AI with Le Chat as the user interface, Studio/API for developers, Mistral Vibe for coding workflows, and Mistral Compute as a European-hosted AI cloud.

The platform covers chat, search, document analysis, multimodal models, agents, workflows, API usage, and self-deployment. A key differentiator is the combination of SaaS, API, open-weight models, and local/on-prem deployment.Mistral AI

The most powerful AI platform for enterprises

7.8/10 Good
Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; suitable for getting started and everyday use. Subscription Le Chat Pro More messages and web searches, more Extended Thinking and Deep Research, document storage, many projects, Mistral Vibe for coding, chat/email support, and high-quality image generation.

Le Chat Team Secure team workspace with more storage per user, domain verification, data export, and team features. Other Enterprise Private deployments with custom models, UI, and tools; individual enterprise features such as SSO, audit logs, custom limits, and private deployments.

Mistral AI Studio / API Usage-based API for models, agents, OCR, embeddings, coding, multimodal workflows, and developer integration.

Mistral Vibe / Coding Coding features in Le Chat and additional pay-as-you-go usage beyond the regular limits.
– (0)

Link

GDPR: Yes For the EU/EEA region, a well-established path to GDPR-compliant use is evident because Mistral provides a DPA/AVV that describes its role as a data processor for business customers, documents GDPR rights, and offers multiple deployment models with a high degree of data sovereignty. Of particular relevance is the best available option: self-hosted deployment—that is, use on the customer’s infrastructure with full control over infrastructure and data residency—supplemented by dedicated, Europe-hosted options. The standard SaaS version does not offer the same level of data minimization across all plans, as certain content in the Free plan may be used for model improvement unless the user opts out.
Positive
Positive aspects include the published DPA/AVV, the explicit role as a processor vis-à-vis business customers, documented GDPR rights, an API without model training, self-hosted deployment on customer infrastructure, hybrid and dedicated options, and Mistral Compute as a European-hosted AI cloud with EU Tier 3+ data centers. In addition, the website lists certifications and frameworks such as ISO 27001/27701 and SOC 2 Type II, as well as other security features.
Negative
A negative or limiting aspect is that standard use is not entirely training-free: In the Free Plan, conversations may be used for model improvement unless the user opts out. The DPA also permits international data transfers based on adequacy decisions or SCCs. A specific, complete server location for all products is not consistently specified on the website; likewise, the list of subprocessors is only referenced via the Trust Center and is not explicitly stated on the evaluated pages.
Server Location
For Mistral Compute, the website mentions “EU Tier 3+ data centers” and describes the service as a “European-hosted AI cloud”; a location in Sweden is also mentioned. For Studio/SaaS as a whole, the evaluated pages do not specify a consistent, complete server location for all services.

Link

"Health. Powered by Ada."

Ada is an AI-powered symptom checker and digital health assistant for end users, as well as an enterprise platform for symptom intake, care navigation, clinical handovers, and insights. According to the terms, Ada uses a proprietary probabilistic reasoning technology built on a medically curated knowledge base; for partners, additional routing, integration, and handover functions are offered.Ada Health

Health. Powered by Ada

6.8/10 Solid
Free Free symptom checker for users with 24/7 access, AI-powered symptom assessment based on clinical evidence, a personalized assessment report, and the option to share relevant information with doctors. Ada explains that the assessment technology is available free of charge to people with smartphones and is offered without advertising. Other Ada Assess / Enterprise Enterprise solution for healthcare organizations, insurers, clinics, and digital care offerings. Includes intelligent symptom assessments, care navigation, clinical handover, insights, partner integration into websites, apps, or portals, simplified language, patient-friendly reports, SSO, and regular optimizations.

Partnerships / Demo / individual contracts According to the Help Center, Ada is financed through private investments, commercial relationships with healthcare systems, insurers, and life science companies, as well as grants and partnerships. Enterprise use apparently takes place individually via a demo/contact process; no public standard pricing was found.
– (0)

Link

GDPR: Partly From the perspective of a user in the EU/EEA, there are several strong GDPR indicators on the website: Ada Health GmbH identifies itself as the controller pursuant to Art. 4(7) of the GDPR, describes the rights of data subjects, specifies processing based on Article 28 of the GDPR (data processing by a processor), stores personal data within the EU according to its privacy policy, and states that health data and other sensitive data always remain within the EU. At the same time, the website also lists subprocessors outside the EEA or U.S. providers and refers to third-country mechanisms. The website does not indicate a straightforward, fully documented EU-only operation without such restrictions, an explicitly published customer data processing agreement (DPA) available for download, or a clearly documented on-premises/self-hosting option. Therefore, GDPR-compliant use within the EU/EEA is plausible, but it is documented only under certain conditions and not comprehensively for all use cases.
Positive
The following are positively confirmed: a privacy policy with explicit reference to the GDPR; Ada Health GmbH in Berlin as the data controller; storage of personal data within the EU; a statement that health data and other sensitive data always remain within the EU; listing of data processors and Data Processing Agreements pursuant to Art. 28 GDPR; published list of service providers; ISO 27001 and ISO 13485 certifications on the website; security page with a statement regarding EU servers and “security by design.”
Negative
Negative or limiting aspects include: According to the privacy policy, limited processing by subprocessors outside the EEA may take place; the list of service providers includes several U.S. providers; an explicit customer DPA is not listed on the website as a freely accessible document; an explicit EU data residency commitment for all data flows across all product variants is not fully articulated; On-premises, self-hosting, and private cloud options are not listed on the website; a clear contractual “no training” path for all inputs and outputs is not specified on the website.
Server Location
The website lists the EU as the storage location. The privacy policy states that personal data is stored in the European Union on cloud servers operated by AWS EMEA in Luxembourg and Google Commerce Limited in Ireland. The “How is my data stored by Ada?” help page specifically mentions a Google Cloud location in the EU, “Europe-West1” in Belgium, as well as MongoDB Cloud Services in that data center. Additionally, the privacy policy states that health data and other sensitive data always remain within the EU. However, limited data may be processed by subprocessors outside the EEA.

Link

“AI solutions that help you get work done.”

DeepL is a German language AI platform for translation, document translation, writing assistance, real-time speech translation, and API integration.

The platform currently offers DeepL Translator, DeepL Write, DeepL Voice, DeepL API, and DeepL Agent, among other services. DeepL reports millions of individual users and over 200,000 business customers.DeepL

AI solutions that help you get things done

7.4/10 Good
Free Free access to translations and DeepL Write, with limitations on character count, document types, features, and data protection. Suitable for personal or occasional use; recommended for professional use only to a limited extent. Subscription Individual: For individuals who want to use DeepL professionally for translations and documents.
Team: For teams with higher usage volumes and shared management.
Business: For businesses with greater needs, advanced business features, and higher usage volumes. Other DeepL API for developers and businesses, offering usage-based integration into their own products, websites, apps, and workflows. Additionally, there are enterprise and business options for larger organizations with advanced security, management, and integration requirements.
– (0)

Link

GDPR: Partly DeepL details several robust GDPR/data protection measures for the EU/EEA region on its website: headquarters in Germany, a privacy policy, a notice regarding the General Terms and Conditions for DeepL Pro, encryption, ISO 27001 and SOC 2 certifications, as well as an EU data residency option for certain Business and Enterprise plans. At the same time, standard usage is not consistently EU-local: DeepL describes a hybrid infrastructure for 2026 with AWS as a subprocessor and notes that, if AWS is accepted, content may generally be processed in global AWS regions; EU-exclusive processing is only guaranteed through data residency or specific contract/plan options. DeepL is therefore capable of GDPR-compliant use within the EU/EEA, but this is subject to specific product, contractual, and configuration requirements.
Positive
The following aspects are confirmed as positive: its own privacy policy, headquarters in Germany, an explicit reference to a data processing agreement (DPA) under Article 28 of the GDPR for DeepL Pro, a sub-processor structure with AWS, technical safeguards such as encryption, as well as certifications and evidence of compliance with ISO 27001 and SOC 2 Type II. For paid subscriptions, it is also stated that data remains private/confidential and is not used to train models outside the customer’s account. According to the website, regional data residency is available for certain plans and is included in the Enterprise plan.
Negative
A negative or limiting factor is that, according to its own documentation, DeepL will no longer process data exclusively within Europe as of 2026 and, when using AWS, reserves the right to process data in global AWS regions. The EU/region-lock assurance is not a general standard for all users but is tied to eligible plans or a paid add-on. A fully local on-premises offering for the actual service is not specified on the website. Furthermore, a publicly accessible detail page containing a complete list of subprocessors or an appendix is not directly displayed on the website among the reviewed pages; instead, the site refers users to the DPA and Trust Center.
Server Location
The website describes a hybrid infrastructure: DeepL-administered servers in data centers in Europe plus AWS infrastructure. For Europe, the white paper names AWS Stockholm as the EU region and also mentions EU-based data centers for key material. At the same time, processing can take place in various or global AWS regions without a data residency feature. For processing exclusively within the EU, DeepL refers to a selectable region/data residency depending on the pricing plan.

Link

Through the Claude API, Anthropic offers state-of-the-art LLMs for natural language processing, reasoning, coding, agent-based workflows, tool usage, and document-related tasks. According to the official model overview, all current Claude models support text and image input, text output, multilingual capabilities, and vision. For direct API access, Anthropic recommends the Messages API; additionally, Managed Agents are available for longer-running tasks.Anthrophic Claude API Documentation

LLM: "a highly performant, trustworthy, and intelligent AI platform"

6.9/10 Solid
Free Anthropic states that new users receive a small amount of free credits to test the API. However, this is not a traditional, permanent free plan in the SaaS sense, but rather a trial credit. Other Token-based Claude API Billing based on model families such as Opus, Sonnet, and Haiku, as well as input, output, cache-write, and cache-read tokens.

Prompt Caching Reuse of large prompts, system instructions, or document contexts to reduce costs and latency. Batch API Asynchronous processing of large volumes of requests with a reduced billing model.

Long Context / 1M Context Available for certain current models; suitable for very large documents, codebases, and analysis contexts.

Data Residency / Third-Party Platforms Claude is also available via AWS Bedrock, Google Vertex AI, and Microsoft Foundry; regional pricing and data management depend on the respective platform.
– (0)

Link

GDPR: Partly The documentation on platform.claude.com details specific privacy-related components for use in the EU/EEA context, but does not provide comprehensive evidence of GDPR compliance for standard use. Positive aspects include documented data residency controls, zero data retention upon request, and self-hosted sandboxes for parts of the execution. At the same time, the website currently lists only “us” as the workspace geo for the First-Party Claude API; an EU/EEA data center or EU data residency is not specified on the website. Furthermore, the AVV/DPA, subprocessors, and specific certifications cannot be found on the website itself or are only indirectly referenced via a link to an external trust center. For users throughout Europe, GDPR-compliant use is therefore only realistic under certain conditions and following their own contractual and organizational review.
Positive
The website documents data residency controls via 'inference_geo' and 'workspace geo', zero data retention as a special contractual provision available upon request, as well as self-hosted sandboxes, where tool execution and the sandbox file system remain on customer-controlled infrastructure. In addition, the AWS variant explicitly designates Anthropic as the data processor for inference inputs and outputs.
Negative
The website currently documents only “us” as an available option for “workspace geo”; an EU/EEA data residency or an EU data center location is not specified. For the standard API, “global” is also documented as a possible inference route, meaning potentially worldwide Anthropic data centers. The Terms of Service (TOS)/Data Processing Agreement (DPA), subprocessors, specific server locations in the EU/EEA, and relevant certifications are not listed on the website or are not viewable on the domain itself.
Server Location
No EU/EEA server location is listed on the website. For first-party data residency, only “us” is documented as the sole available “workspace geo”; for “inference_geo,” both “us” and “global” are described. For Claude Platform on AWS, it is also stated that, when set to “global,” inference can be routed to any of Anthropic’s data centers worldwide.

Link

“Where go-to-market teams go to grow”

HubSpot is an integrated customer platform with Smart CRM, Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub, as well as Breeze as an embedded AI layer.

The platform combines customer, sales, marketing, service, and content processes in one system. AI features support, among other things, content creation, prospecting, data preparation, support automation, and analytics.HubSpot

Where go-to-market teams go to grow

7.6/10 Good
Free Free basic features for CRM, contacts, deals, forms, email tools, and getting started with HubSpot. Subscription Starter Customer Platform Starter features across core HubSpot products for small businesses and startups.

Professional Hubs Advanced automation, reporting, campaign, sales, service, or content features by hub.

Enterprise Hubs Advanced scaling, governance, security, reporting, permissions, and enterprise features. Other HubSpot Hubs Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub; scope of features varies by hub and tier.

Add-ons / Breeze AI Additional seats, limits, AI/Breeze features, integrations, and enterprise options depending on the contract.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is generally documented, but not unconditionally. Positive aspects include a published Terms of Service/Data Protection Agreement (DPA) with GDPR provisions, EU hosting in Germany, regional data residency with the option to migrate for paid accounts, and documented subprocessors. At the same time, HubSpot remains a U.S. provider, and the website also describes international data transfers as well as specific AI and functional subprocessors that process data in the U.S. Consequently, from an EU/EEA perspective, compliance is more conditional than fully straightforward.
Positive
The website includes a GDPR-compliant Data Processing Agreement, information on regional data centers in the EU, a list of subprocessors, details on SCCs and the Data Privacy Framework, an opt-out option for HubSpot’s proprietary machine learning training, and security and compliance information—including SOC 2 documentation—in the Trust Center.
Negative
The website also mentions processing and subprocessors outside the EU or in connection with global transfers. For HubSpot AI, the subprocessors page lists, among others, AI service providers based in the U.S. Furthermore, the website does not specify any on-premises or self-hosting options. According to the hosting FAQ, HubSpot itself is not currently ISO 27001-certified; the certification of the infrastructure provider AWS is mentioned in this regard.
Server Location
According to the website, the product infrastructure is operated on AWS in the U.S., Canada, Australia, and the European Union; Germany is specified for the EU. HubSpot accounts are hosted in one of these regional data centers, and customer data is processed and stored there. According to the website, paid accounts can be migrated to a preferred region.

Link

OpenAI offers a broad range of models via the API for text generation, reasoning, coding, tool use, structured outputs, and document-centric workflows.

According to the official model overview, the current models support text and image input, text output, multilingual capabilities, and vision; they are available through the Responses API and client SDKs. For complex tasks, OpenAI recommends gpt-5.4 by default; for lower latency and cost, OpenAI points to gpt-5.4-mini and gpt-5.4-nanoOpen AI

LLM “Access our frontier models and APIs.”

7.4/10 Good
Free There is a free usage tier in the API rate limit system for users in permitted geographies Other Token-based API usage Billing by model, input/output tokens, cached input, audio/image/tool usage, and other usage-dependent factors.

Batch / Flex / Priority / Scale Tier Options for controlling costs and latency for larger or plannable workloads.

Fine-Tuning / Evals / Tools / Agents Additional API features for customization, evaluation, agents, web search, file search, code interpreter, realtime, and structured outputs.

Data Residency / ZDR / EKM Enterprise-grade data controls with regional storage/processing, Zero Data Retention or Modified Abuse Monitoring, and external key management.
– (0)

Link

GDPR: Partly For users in the European area, GDPR-compliant use is generally possible according to the best available option documented on the website, but only under conditions. A positive point is that OpenAI describes on the developer website EU data residency for 'Europe (EEA + Switzerland)' with regional storage and regional processing for supported services, and also documents project-related data controls such as 'Zero Data Retention' and 'Modified Abuse Monitoring'. At the same time, according to the website, restrictions apply: data residency is eligibility-based, subject to additional requirements for non-US regions, does not apply to system data, and does not apply equally to all functions.
Positive
Documented on the website are EU data residency for 'Europe (EEA + Switzerland)' via 'eu.api.openai.com', regional storage and regional processing for many supported API services, as well as data controls under which, according to the table, API content is not used for training. In addition, there is 'Zero Data Retention' or 'Modified Abuse Monitoring' as configurable controls after approval.
Negative
The website does not name a specifically designated EU server location at the country level or a specific data center. Data residency is not freely available by default, but only after review or approval. It explicitly does not apply to 'System Data', and individual functions are restricted or cannot be used in an EU-compliant manner, such as notes on realtime tracing or certain storage-related or third-party-adjacent functions. I could not find a DPA/AVV or a list of subprocessors on the specified domain.
Server location
For data residency, the website names the region 'Europe (EEA + Switzerland)' with the endpoint 'eu.api.openai.com'. A specific country, a specific server location, or a specific data center within the EU/EEA is not specified on the website.

Link

Chat with Grok — the truth-seeking AI chatbot

Grok is a generative AI assistant from xAI, available on grok.com, iOS, Android, and on X.

It supports text and voice chat, coding and reasoning tasks, image/video generation, as well as document analysis. In addition, Grok can search the web and public X content in real time to provide more up-to-date answers.Grok

Chat with Grok — the truth-seeking AI chatbot

3.4/10 Insufficient
Free xAI has officially rolled out Grok 4.1 to all users on grok.com, X, iOS, and Android. The consumer FAQs describe, among other things, text/voice interaction, photo uploads/editing, and document analysis, but exact free limits are not publicly specified numerically. Subscription X Premium: from USD 8/month or USD 84/year on web; according to X, includes increased usage limits on Grok. X Premium+: from USD 40/month or USD 395/year on web; includes higher limits on Grok.

SuperGrok: officially exists; confirmed on grok.com and in xAI/X sources, but no reliably extractable public price figure is verifiable in the official sources accessible here – as of 16.04.2026.

SuperGrok Heavy: officially exists; provides access to Grok Heavy; likewise without a reliably extractable official price figure here.

Grok Business / Grok Enterprise: officially available; team workspace, secure sharing, enterprise privacy, and for Enterprise also custom retention; specific public standard prices could not be reliably verified in the accessible official sources. Other API / token-based: e.g. grok-4.20-reasoning at 2.00 USD / 1 million input tokens and 6.00 USD / 1 million output tokens; grok-4-1-fast-reasoning at 0.20 / 0.50 USD. According to the xAI Docs, server-side tools cost, among other things, Web Search 5 USD / 1,000 calls, X Search 5 USD / 1,000 calls, Code Execution 5 USD / 1,000 calls, Collections Search 2.50 USD / 1,000 calls; in addition, there are storage costs. X Premium Business: Basic 200 USD/month or 2,000 USD/year; Full Access 1,000 USD/month or 10,000 USD/year plus affiliate fees; includes Premium+ benefits and explicitly mentions SuperGrok. X Premium Organizations: Full Access 1,000 USD/month or 10,000 USD/year plus affiliate fees; includes Premium+ benefits including access to SuperGrok.
– (0)

Link

GDPR: Unclear The Grok website includes a link to a privacy policy, but I was unable to find any reliable information on the website regarding key points essential for a sound GDPR assessment within the EU/EEA, such as server location/data centers, EU data residency, data processing agreements (DPAs), subprocessors, certifications, and on-premises/self-hosting, I was unable to find any reliable information on the website. Consequently, based on the website documentation alone, it is not possible to reliably verify that the service is usable in compliance with the GDPR within the European region.
Positive
On the positive side, grok.com provides direct links to a privacy policy and a cookie policy, and the website displays a privacy consent section for cookies.
Negative
On the negative side, no reliable information was found on the website regarding EU/EEA data residency, specific data center locations, the Data Processing Agreement (DPA), subprocessors, the option to opt out of AI training, open-source components, or relevant certifications. The documentation is therefore too incomplete for an EU/EEA assessment.
Server Location
Not specified on the website.

Link

"co-create intelligence with everyone"

MiniMax is a multimodal foundation model provider with models for text, coding, agents, speech, video, music, image, and multimodal applications. Its products include MiniMax Agent, Hailuo AI, MiniMax Audio, Talkie, and an Open Platform for developers and enterprises.MiniMax

LLM “co-create intelligence with everyone”

3.9/10 Insufficient
Subscription Token Plan – Starter Subscription access for developers with access to MiniMax models via Token Plan API key; text models with a 5-hour rolling window, plan-dependent limited multimodal quotas.

Token Plan – Plus Expanded Token Plan with a higher M2.7 quota and additional daily multimodal quotas for Speech, Image, and other models.

Token Plan – Max Higher standard Token Plan with a larger request quota and expanded daily quotas for multimodal models.

Plus-Highspeed / Max-Highspeed / Ultra-Highspeed High-speed Token Plans with access to faster M2.7/M2.5 Highspeed models and expanded quotas for coding-related workflows. Other Pay-as-you-go API Standard Open Platform API key for usage-based billing according to actual consumption; supports text, video, speech, image, and additional modalities.

Audio Subscription / Video Packages Separate packages for speech and video generation with product-specific quotas and billing logic.

Local / Private Deployment Open M2 model weights can be run locally or privately via Hugging Face and frameworks such as SGLang, vLLM, Transformers, ModelScope, or NVIDIA NIM.
– (0)

Link

GDPR: Unclear For the European market, it is unclear whether the website is GDPR-compliant. On the positive side, a privacy policy with EEA/UK/Switzerland-specific information has been published, and there is a documented local deployment path for MiniMax-M2.7. However, for SaaS/API use, the website lacks essential evidence such as EU/EEA data residency, server locations, a readily accessible Data Processing Agreement (DPA), a list of subprocessors, a clear contractual exclusion of model training using customer data, and robust compliance certifications.
Positive
The website features a published privacy policy with a reference to “jurisdiction-specific provisions” for users in the EEA, UK, and Switzerland. In addition, a local deployment path for MiniMax-M2.7 is documented; there, “complete data privacy” is explicitly described for Mac Studio when operating entirely locally. Furthermore, developers can host MCP services themselves.
Negative
The website does not specify an EU/EEA server location, EU data residency, a specific, accessible text of the AVV/DPA, a list of subprocessors, an explicit opt-out from AI training for general models, or ISO 27001, SOC 2, or similar certifications. The Terms of Service name Nanonoble Pte Ltd. as the provider and refer to Singaporean law; this does not replace GDPR compliance documentation for EU/EEA use.
Server location
Not specified on the website. API endpoints are documented under 'api.minimax.io', but there is no information on the location of servers or data centers, nor is there any mention of EU/EEA data residency.

Link

“Into the unknown …”

DeepSeek is an AI assistant and a model/API platform from Hangzhou DeepSeek Artificial Intelligence Co., Ltd.. Officially, DeepSeek promotes its chat for coding, content creation, file reading, and long-context conversations; the app additionally lists web search, deep-think, file upload, and text extraction. For developers, there is an OpenAI-compatible API with chat/reasoning models as well as features such as function calling, JSON output, and thinking mode.DeepSeek

Into the unknown … Free access to DeepSeek. Experience the intelligent model

4.3/10 Limited
Free According to the official website, DeepSeek offers free access to DeepSeek Chat via web/app. The official app describes features for AI chat, problem-solving, and general assistance; the chat page mentions, among other things, coding, content creation, file reading, and long-context chat. Other DeepSeek API: Separate usage-based model for developers and businesses. The API is billed based on input and output tokens; the API documentation mentions, among other things, OpenAI-/Anthropic-compatible usage, API key, base URLs, and current model access such as deepseek-v4-flash and deepseek-v4-pro. Older models such as deepseek-chat and deepseek-reasoner are, according to the API documentation, intended to be phased out.
– (0)

Link

GDPR: No Although the website does include a privacy policy, key documentation is missing to ensure robust GDPR-compliant use throughout the EU/EEA. In particular, the website does not specify a specific server or data center location, EU data residency, a Data Processing Agreement (DPA) for customers, a list of subprocessors, or relevant certifications. The privacy policy also mentions international data transfers and the use of anonymized call data for training purposes with an opt-out option. Thus, based on the website documentation, fully GDPR-compliant use for EU/EEA users is not substantiated.
Positive
Positively documented are a privacy policy, data subject rights such as access, rectification, deletion, export, and the option to opt out of AI training; security details regarding TLS 1.3 and AES-256; and a reference to safeguards for international data transfers, such as Standard Contractual Clauses (SCCs) and data processing agreements with service providers.
Negative
On the negative side, the website does not specify an EU/EEA server location, does not guarantee EU data residency, no Data Processing Agreement (DPA) is available to customers, no subprocessors are named, no certifications such as ISO 27001 or SOC 2 are listed, and no clearly documented enterprise/private cloud/on-premises solution for straightforward EU-compliant use is described. In addition, the privacy policy provides for training using anonymized conversation data unless users opt out.
Server Location
Not specified on the website. The privacy policy only states that data may be transferred to and processed in other countries; no specific location of servers or data centers in the EU/EEA is mentioned.

Link

"Effortless AI design for presentations, websites, and more"

Gamma is an AI tool that transforms ideas, text, files, and prompts into visually polished presentations, documents, websites, and social content.

The focus is on fast creation, smart layouts, branding, and easy publishing or sharing. The most relevant use cases are pitch decks, client presentations, proposal documents, internal reports, microsites/landing pages, teaching materials, and recurring content production via API.gamma

Effortless AI design for presentations, websites, and more

7.5/10 Good
Free For simple projects and to get to know it; includes simple presentations, docs, websites, social content, and images, import from PDF/PPTX as well as export to PDF, PPTX, PNG, and Google Slides. Subscription Plus Everything from Free plus more cards per prompt, removal of Gamma branding, and advanced AI image models.

Pro Everything from Plus plus more cards per prompt, premium AI image models, custom branding & fonts, detailed analytics, advanced sharing, custom domains, API access, and workspace templates.

Ultra Everything from Pro plus significantly more AI usage, access to advanced text, image, and video models, more custom domains, and early access to new features.

Team For teams with more collaboration, AI, and branding; includes everything from Pro plus centralized billing, custom company theme, shared folders, admin controls, and advanced data controls.

Business For organizations; includes everything from Team plus SSO, SOC-2 documentation upon request, access to the most advanced AI models, advanced data controls, and more custom domains. Other API keys are available starting with Pro, Ultra, Teams, and Business. Usage is billed via credits; with paid plans, additional credits can be purchased or Auto-Recharge can be used.
– (0)

Link

GDPR: Partly For users in the EU/EEA, it is not clearly demonstrated that the service complies with the GDPR as a standard SaaS offering in the EU. Positive aspects include a privacy policy that explicitly references the GDPR and names an EU representative, a published Service Level Agreement (SLA)/Data Processing Agreement (DPA) with a European Annex, and a documented list of subprocessors. On the negative side, the website does not guarantee EU data residency or EU data centers; rather, the privacy policy mentions international transfers to the U.S. and other countries, and the list of subprocessors indicates that key hosting and AI service providers are predominantly located in the U.S. Thus, use within the EU/EEA appears to be possible only under certain conditions, subject to additional reviews and contractual measures.
Positive
The website features a privacy policy with a notice for European users and EU representatives, a Data Processing Agreement (DPA) referencing the GDPR and Standard Contractual Clauses (SCCs), and a publicly accessible list of subprocessors with their functions and locations. In addition, Gamma provides a control option to determine whether data can be used to improve AI functions.
Negative
The website does not guarantee EU data residency. An EU/EEA server location for the core service is not specified. The privacy policy mentions transfers to the U.S. or other countries, and the list of subprocessors primarily includes central hosting, logging, data warehouse, and AI providers based in the U.S. On-premises, self-hosting, or dedicated EU private cloud options are not specified on the website.
Server Location
Not guaranteed as an EU/EEA location on the website. The list of subprocessors includes, among others, Amazon Web Services and Google as hosting/storage providers located in the U.S.; other key service providers are also predominantly based in the U.S. A single support service provider is listed as being based in the EU, but this does not pertain to the core hosting services.

Link

“Think big. We’ll take care of the details.”

Grammarly is an AI-powered writing assistant for correction, style, tone, rewrites, and text generation.

According to the manufacturer, the tool works in more than 1 million apps and websites and also offers its own editor (“Docs”) with AI agents for drafting, revision, source/citation assistance, AI detection, and plagiarism checking. For businesses, there are team, analytics, security, and API features.Grammarly

The AI writing partner for work

7.6/10 Good
Free Free: Includes basic error-free writing, tone detection, and a limited number of generative AI prompts. Suitable for basic personal proofreading, but limited for heavy professional use and team oversight. Subscription Pro: For individuals or teams; additionally includes, among other things, full sentence rewrites, tone adjustment, brand/on-brand features, and more generative AI usage.

Enterprise: For larger organizations; includes, among other things, Superhuman Go, unlimited members, dedicated support, Confidential Mode, granular roles/permissions, DLP, and unlimited generative AI prompts. Other Enterprise Sales / Custom: Contact Sales for larger organizations, security requirements, and custom administration.

Education: Grammarly offers separate Education or institutional plans for educational institutions; details are not part of the standard Free/Pro/Enterprise plans.

Superhuman Go / Suite context: Grammarly Enterprise is positioned through Superhuman Go; this expands Grammarly with context-aware AI agents in apps and workflows. Grammar, style, tone, AI writing, rewriting, proofreading, plagiarism check, AI detector, citations, Brand Voice, translation, email writing, spell check
– (0)

Link

GDPR: Partly From the perspective of users in the EU/EEA, GDPR-compliant use is documented only under certain conditions. Positive aspects include a privacy policy, a DPA/AVV-style agreement, references to GDPR compliance, the EU-U.S. Data Privacy Framework, and opt-out or default-off rules for product training in certain plans. At the same time, the website lists U.S.-based AWS data centers—specifically the U.S. East region—as the hosting location; an EU data residency or EU/EEA server option is not specified on the website. As a result, its use in Europe is viable only with additional contractual and organizational due diligence, rather than as a standard SaaS solution that is clearly and fully EU-resident.
Positive
The website includes a privacy policy, a Data Privacy Addendum, information on the GDPR and the EU-US Data Privacy Framework, several security certifications, and a documented option to disable the use of content for product improvement and training. According to the website, product training is disabled by default for Enterprise plans, Business/Pro plans purchased through sales, and Education plans.
Negative
The website lists US-based AWS data centers—specifically the US East region—as the storage location. The website does not specify EU data residency, EU/EEA data centers, an on-premises option, or a self-hosting variant. The subprocessor notices also link to a Superhuman subpage rather than to a clearly embedded Grammarly details overview within the Grammarly content being reviewed.
Server Location
According to the website, data is hosted in Amazon Web Services data centers in the US East Region or in US-based data centers. EU/EEA server locations or EU data residency are not specified on the website.

Link

Robotics

“The world’s leading robotics company” / Product positioning: “Robots for the Real World”.

Boston Dynamics is a U.S. robotics manufacturer with products including Spot, Stretch, Atlas, and Orbit. Spot is a mobile four-legged inspection robot, Stretch is a mobile warehouse robot for case handling, Atlas is an electric humanoid robot for industrial material handling applications, and Orbit is software for fleet management and data analysis.Boston Dynamics

Robotic "The world’s leading robotics company"

7.5/10 Good
Other Atlas Humanoid enterprise robot for industrial work, material handling, workflow integration, autonomous tasks, fleet skill rollout, MES/WMS integration, and early customer deployments. Public pricing not available; contact/qualification required.

Spot Commercially available four-legged mobile robot for inspection, security, digital twin, construction sites, energy, research, and hazardous environments; includes SDK, payloads, arm, tablet, and support options.

Stretch Commercial warehouse robot for trailer unloading, container unloading, and case handling; operates within existing warehouse infrastructure and is designed for continuous package/case handling processes.

Orbit Robotics fleet and data platform for managing robot deployments, inspection data, site maps, metrics, missions, and integrations with enterprise systems.

Spot Care / Stretch Care Support and service offerings for long-term operation, maintenance, training, and reliable use of robot fleets.

Developer Documentation / SDK Development documentation and SDKs, particularly for Spot, for integrating custom applications, payloads, data flows, and robotics workflows.

Early Adopter / Enterprise Deployment Atlas is currently being rolled out through qualified enterprise inquiries and early deployments; there is no standard public purchasing channel for private individuals. (bostondynamics.com) Spot: CE conformity publicly documented.

Stretch: EU conformity officially stated in the brochure.

Atlas: No public record of CE conformity found; verify separately before use in the EU.
– (0)

Link

GDPR: Partly The website documents certain data protection and security measures for users in the EU/EEA, but does not provide full, clearly documented GDPR compliance for the entire solution. Positive aspects include a general reference in the privacy policy to EEA/GDPR rights, selectable data regions for Orbit data, and on-premises/VM deployment options. At the same time, the website mentions data transfers to the U.S., uses AWS for the hosted Orbit offering, and does not display an explicit AVV/DPA or a list of subprocessors on the website. From an EU/EEA perspective, GDPR-compliant use therefore appears plausible only under certain conditions, particularly with appropriate contract terms and preferably with local or customer-controlled deployment.
Positive
The following are positively documented: a privacy policy with an explicit section for individuals in the EEA, Orbit data storage in the region specified at the time of purchase, on-premises options via “Site Hub” or VM deployment, data encryption, SSO support, and a “SOC2 Type II certified” designation mentioned on the Orbit product page.
Negative
Negative or incomplete: The website does not specify a concrete EU/EEA server location for the cloud offering, but only mentions AWS and a region requested by the customer. The general privacy policy states that personal data may be transferred to other countries. The Spot Privacy Notice also states that service logs and performance metrics transmitted to Boston Dynamics are processed in the U.S. An explicit Data Processing Agreement (DPA), a list of subprocessors, a reliable statement regarding EU data residency as the standard, and a clear commitment that customer data will not be used to train general AI models are not provided on the website.
Server Location
For Orbit Cloud, the website lists AWS as the hosting provider and states that Orbit data is stored in the region selected at the time of purchase. A specific EU/EEA data center location is not specified on the website. For service logs and performance metrics transmitted to Boston Dynamics, the Spot Privacy Notice specifies that processing takes place in the U.S.

Link

Turn your ideas into apps

Base44 is an AI-powered app builder that creates functional apps using natural language.

Officially, Base44 lists productivity apps, back-office tools, customer portals, and complete enterprise products among its target use cases. In addition to the builder, the platform also includes authentication, database, storage, email, payments, integrations, backend functions, and hosting.Base44

Build Apps with AI in Minutes

6.4/10 Solid
Free Free Plan – includes core features such as authentication, database functionality, and analytics. Officially, Base44 states 25 Message Credits per month; regarding Integration Credits, there is conflicting information on the official pages, so no confirmed number is given here. Subscription paid subscription plans: Starter, Builder, Pro, Elite. Subscriptions can be taken out monthly or annually. Starter is intended for initial apps/projects; Builder adds, among other things, backend features, domain, GitHub integration, and model selection; Pro expands for more complex applications; Elite offers higher credits and premium support. Other Enterprise / Custom Sales for larger organizations; in addition, Base44 works with Message Credits and Integration Credits, which are reset monthly depending on the plan. There are also Promo Codes/Gift Cards as well as a separately mentioned backend offering, which according to the documentation is free while in beta.
– (0)

Link

GDPR: Partly Base44 documents several data protection and compliance components relevant to the EU/EEA region, including a privacy policy, a DPA/General Terms and Conditions, a list of subprocessors, mechanisms for cross-border transfers from the EEA, and references to ISO 27001, SOC 2 Type II, and the GDPR. At the same time, its own list of subprocessors shows that key services for hosting, servers, analytics, and LLM calls are predominantly located in the U.S., and one service provider is based in Israel. The website does not specify an explicit EU data residency for the Base44 platform itself, an EU data center as a standard option, or an on-premises/self-hosting option. For EU/EEA users, GDPR-compliant use is therefore conceivable only under certain conditions—specifically based on the DPA and the transfer mechanisms outlined therein—but is not documented as a clearly EU-resident standard solution.
Positive
Positively documented are a separate privacy policy, a DPA/SLA, a published list of subprocessors, provisions regarding erasure and data subject requests in the DPA, as well as the statement that transfers from the EEA, Switzerland, and the United Kingdom are safeguarded through permissible mechanisms such as adequacy decisions, the EU-US Data Privacy Framework, and SCCs. Additionally, Base44 mentions ISO 27001, SOC 2 Type II, and the GDPR on its security page.
Negative
A negative factor for a straightforward EU/EEA assessment is that the platform’s own list of subprocessors for data storage/hosting, server services, analytics, media hosting, and LLM calls predominantly lists U.S. locations; furthermore, Wix.com Ltd. is listed as being based in Israel. The website does not specify explicit EU data residency for the platform, EU/EEA hosting for the SaaS version, a dedicated EU data center, a private cloud option, or on-premises/self-hosting. Nor is there a clear statement on the website indicating that user inputs, uploads, or outputs are generally not used to train general models.
Server Location
According to the list of subprocessors: Mongo for “data storage and hosting” in the U.S.; Render for “server services” in the U.S.; GCP for “analytics services” in the U.S.; OpenAI and Anthropic for “API calls to LLM,” both in the U.S.; Supabase for “media hosting” in the U.S.; DataDog in the U.S.; Wix.com Ltd. in Israel. Additionally, Langfuse in Germany and Logfire in the United Kingdom are listed. The website does not specify a dedicated EU/EEA primary server location or EU data residency for Base44.

Link

“Open-source orchestration for zero-human companies”

Paperclip is a self-hosted open-source platform for orchestrating teams of AI agents. The tool organizes agents as “employees” with an org chart, roles, budgets, governance, tasks/tickets, heartbeats, and audit trails.

Paperclip is explicitly a Control Plane, not an Execution Plane: the agents run externally via adapters such as Claude Code, Codex, Gemini, Cursor, OpenClaw, shell processes, or HTTP webhooks.Paperclip AI

The human control plane for AI labor

6.6/10 Solid
Free According to the official website, Paperclip is MIT-licensed, self-hosted, and usable without a Paperclip account. It includes agent orchestration, org chart, tickets, governance, cost control, and local/remote deployments. Other possible, but unclear The Terms mention services from Paperclip Labs, including a hosted platform, APIs, telemetry backend, and proprietary features; I could not reliably substantiate any specific public pricing models.
– (0)

Link

GDPR: Yes For the EU/EEA area, Paperclip can be considered usable in a GDPR-compliant manner in the best available usage form, because the website describes a clear self-hosting/local deployment path without requiring a Paperclip account. This allows a user to operate the software in their own EU/EEA infrastructure. The services operated by Paperclip Labs are significantly more critical from a GDPR perspective, because the website mentions data transfers to the USA, does not specify EU data residency, and describes the use of data for improvement and training.
Positive
Positive aspects are the explicit self-hosting approach, the MIT license, the statement 'no Paperclip account required', local execution with embedded Postgres or the user's own Postgres, as well as the possibility of local or remote deployment. For EU/EEA users, this opens a practical way to process data exclusively within their own European infrastructure.
Negative
Negative is that, for the services operated by Paperclip Labs, the website specifies neither EU data centers nor EU data residency, DPA/AVV, subprocessors, or certifications. The privacy policy also states that data may be transferred to the USA. In addition, the website describes that data may be used to improve the services and to train or improve machine-learning models and algorithms; this is explicitly mentioned for detailed telemetry.
Server location
For self-hosting, the server location can be freely chosen by the user and may be within the EU/EEA area. For the services operated by the provider, no specific server or data center location is stated on the website; the privacy policy merely states that data may be transferred to and processed in the USA, among other places.

Link

Robotics

Humanoid robots, AI educational robots, commercial service robots, and intelligent automation systems.

UBTECH is a Chinese robotics manufacturer that produces humanoid robots such as the Walker S2, Walker S1, Walker S, Walker C, and Walker X, as well as other service, educational, logistics, and consumer robots. According to the company, it focuses on industrial manufacturing, commercial services, and household applications. UBTECH describes the Walker as China’s first commercialized life-size bipedal humanoid robot and cites more than 2,790 robotics and AI patents as of June 2025.UBTECH ROBOTICS CORP LTD

humanoid robots, AI educational robots, commercial service robots and intelligent automation systems

3.3/10 Insufficient
Other Walker S2 Industrial humanoid robot with autonomous battery replacement, 24/7 operation, 15-kg payload, binocular stereo vision, co-agent, BrainNet 2.0, and a focus on production lines.

Walker S1 Industrial humanoid robot with an Advanced Planning Model for general tasks, intent understanding, task planning, and semantic VSLAM navigation.

Walker S / Walker S Lite Industrial humanoid robots with a multimodal perception system, LLM-based decision-making capabilities, 3D semantic navigation, object grasping, and real-time integration into production systems.

Walker C / Walker X Commercial and service-oriented humanoid robot lines; specific availability, pricing, service packages, and regional terms must be requested directly from UBTECH.

AI Education / Developer Products Complementary robotics and AI educational products such as the AI Education Platform, Yanshee, uKit AI, UGOT, and AI Lab solutions for education and research.

Professional / Partner / Custom Projects For industrial projects, production line integration, and partnerships, UBTECH recommends contacting them directly; specific SLAs, maintenance, data protection, and integration services must be reviewed on a case-by-case basis.
– (0)

Link

GDPR: Unclear For an assessment from the perspective of users in the EU/EEA area, the documentation on the website is too incomplete. It is positive that a privacy policy is available, data subject rights are described, and UBTECH refers to Privacy Impact Assessments, Privacy by Design, and a designated data protection officer. However, what speaks against clearly GDPR-compliant usability is that, according to the privacy policy, website data is stored on servers in Hong Kong, China, and transfers to other third countries such as China, the USA, and Singapore may also take place. An EU/EEA data center, EU data residency, an AVV/DPA, a subprocessor list, as well as reliable information on certifications or a training opt-out are not specified on the website.
Positive
Available privacy policy; description of data subject rights such as access, rectification, erasure, restriction, and data portability; references to Privacy by Design, Privacy Impact Assessments, DPO, and emergency mechanisms for data protection incidents.
Negative
The website names Hong Kong, China as the storage location and additionally refers to servers in China, the USA, Singapore, and Hong Kong; third-country processing is therefore expressly intended. An EU/EEA server location, EU data residency, AVV/DPA, subprocessor list, contractual exclusion of model training, or reliable evidence regarding ISO 27001, SOC 2, or similar certifications are not specified on the website. In addition, the general privacy policy found expressly applies only to the website and not to products or other services.
Server location
For the website, UBTECH states servers in Hong Kong, China as the storage location. In addition, the privacy policy mentions servers in China, the USA, Singapore, and Hong Kong. A server location in the EU/EEA area is not specified on the website.

Link

“Less structure, more intelligence.”

Manus is an autonomous AI agent that not only responds, but also plans tasks, executes them, and delivers finished work results.

Officially, Manus describes itself as a “virtual colleague with its own computer” with a sandbox, internet access, a persistent file system, and the ability to install software, operate websites, analyze data, create slides, and run workflows. The product covers a web app, website builder, browser automation, email/Slack integration, data sources, and API.Manus

Less structure, more intelligence

3.9/10 Insufficient
Free Free includes, according to the official pricing article, Chat Mode plus Manus 1.6 Lite in Agent Mode, 300 Daily Refresh Credits, 1 Concurrent Task, and 2 Scheduled Tasks.

Additionally, the Help Center states: daily free credits must be claimed, are valid only for that day, and Free users have a monthly Daily Credit usage limit of 1,500 credits. Subscription Pro 20 USD/month: from 4,000 credits/month, Chat Mode, Manus 1.6 Max/1.6/1.6 Lite in Agent Mode, Advanced Research, Professional Website Deployment, Slide Generation, Wide Research, 20 Concurrent Tasks, 20 Scheduled Tasks, beta features; 17% discount with annual billing.

Pro 40 USD/month: from 8,000 credits/month, same feature class, according to the Help Center with a 7-day trial; also 17% annual discount. Team from 20 USD/seat/month: includes Pro features plus SSO, Data Training Opt-Out, Team Usage Analytics, Internal Access Control, Shared Slide Templates. Other Credit add-ons are officially available; according to the docs, they can be purchased additionally and “never expire,” but according to the Help Center they can only be used with an active paid plan and become inactive on a free/expired subscription. WebDev/Website Builder has a separate usage-based pricing model; according to the docs, each Manus account tier includes free monthly allowances of Cloud $10, AI $1, API $1. The API is officially available, but I could not verify a reliable public API pricing sheet in the accessible official sources.
– (0)

Link

GDPR: Unclear For the EU/EEA region, a privacy policy and a security page containing specific compliance and security information can be found on the website. However, the website lacks clear information regarding EU/EEA data residency, specific server/data center locations, a publicly accessible data processing agreement (DPA), and a list of subprocessors. Consequently, it is not possible to make a reliable assessment of GDPR compliance for the entire European region based solely on the website.
Positive
The following can be found: a privacy policy, a security page with information on SOC 2 Type 1, SOC 2 Type 2, ISO 27001:2022, and ISO 27701:2019, as well as a note stating that customer data is deleted upon leaving the service. There is also a statement indicating that only aggregated or anonymized information is used to improve the services.
Negative
On the negative side, the website does not specify any concrete EU/EEA server locations, does not guarantee EU data residency, no publicly available DPA is mentioned, no list of subprocessors can be found, and no on-premises or self-hosting option for Manus itself is described. Furthermore, an explicit contractual opt-out from general AI training is not clearly stated on the website.
Server Location
Not specified on the website. Although cloud infrastructure, cloud browser, and hosting are mentioned, no specific countries, regions, or data centers within the EU/EEA are named.

Link