# AI21 Labs

## Kurzbeschreibung
**"Trustworthy artificial intelligence that powers humanity towards superproductivity"**


AI21 Labs is an Israeli provider of large language models and AI orchestration systems for enterprises. Its core product in the model space is the Jamba family, a hybrid SSM/Transformer model family for long contexts, RAG, question-answering systems, document processing, and secure enterprise deployments. In addition, with Maestro, AI21 offers a model-agnostic orchestration system for validated RAG agents and complex business tasks.

## Claim
LLM "Trustworthy artificial intelligence that powers humanity towards superproductivity"

## Geeignet für
- API Integration
- Automation / Workflows
- Data Extraction / Document Analysis
- Customer Service & Chatbots
- Programming / Software Development
- Research
- Writing & Editing
- Texts / Content
- Knowledge Management / Internal Search

## Kernfunktionen
- Function calls
- AI agents
- LLM API
- open-source model
- Language model
- Text generation
- Summary

## Preismodell
- **free:** New accounts receive time-limited trial credits for AI21 Platform, APIs, SDK, and Playground. Truly usable for testing, prototyping, and evaluation; billing or a paid plan is required for continuous production use.
- **subscription:** **Pay As You Go:** usage-based access to Foundation Model APIs, SDK, and unlimited seats.


**Custom Plan:** includes pay-as-you-go features plus volume agreements, premium rate limits, private cloud hosting, priority support, a dedicated account manager, and AI consulting. No direct prices listed.
- **other:** **AI21 **uses token-based API billing, custom payment/enterprise plans, and cloud provider billing through partners such as AWS, Microsoft Azure, Google Cloud / Vertex AI Model Garden, or SageMaker/Bedrock. Additionally, self-deployment, fine-tuning, quantization, and custom AI systems are relevant, depending on the contract and infrastructure. No direct prices listed.

## DSGVO und Datenschutz
**Gesamteinschätzung:** Conditional

**On-prem / local hosting: supported**


On the deployment page and in the documentation, on-premises is explicitly mentioned. AI21 states that models can be deployed to your own infrastructure, “whether in your own VPC or on-premises.”


**Private Cloud / Data Center: Supported**


AI21 explicitly mentions private deployments in VPCs. In addition, the deployment page describes AI21-managed private deployment in the customer’s VPC as well as self-managed private deployment.


**EU SaaS / Managed: Partially**


An AI21-proprietary SaaS/managed variant clearly exists. However, the website does not specify an explicit EU/EEA data residency or a specific EU data center for this standard SaaS offering; rather, the Privacy Policy mentions processing outside the EEA, including the U.S.


**Hybrid: Partially**


The website describes various hybrid models such as partner deployments, AI21-managed private deployment, and VPC models. However, an explicit designation as a hybrid operating model for both internal and external processing is not clearly defined either contractually or technically.


**T&C / DPA: Covered**


The Terms of Use state that customers can request and enter into a DPA if necessary; AI21 is considered a “data processor and/or a service provider” in this context.


**No Training: Covered**


The Terms of Use explicitly state: “unless agreed otherwise in writing, AI21 will not train AI21 Models on Customer Content.” This is a clear contractual statement regarding the non-training of AI21 Models on customer data, even though AI21 may use Customer Content for other improvement purposes.


**Open Source / Transparency: Partially**


The website mentions the “Jamba Family of Open Models” and “open-weight models,” as well as private deployments. However, the website does not systematically disclose which open-source components are used overall; therefore, there is a transparency path, but no complete technical disclosure.


**Data Processing**


According to its Privacy Policy, for standard use, AI21 processes personal data on servers outside the EEA, including the U.S., and refers to mechanisms such as SCCs, adequacy decisions, or the Data Privacy Framework for data transfers. At the same time, according to its deployment page and documentation, AI21 offers private operating models with “Single tenant,” “VPC,” and “On-premise”; for AI21-managed private deployments, it also states that the data remains isolated from AI21. The website does not specify a specific EU/EEA data residency or provide a list of subprocessors.


**Conclusion**


For an EU/EEA directory, AI21 is not documented as a clearly fully GDPR-compliant standard SaaS offering. However, the website outlines a plausible **enterprise/private deployment path** with VPC, on-premise, DPA, and a contractual clause stating “no training on customer content,” which appears to enable a more privacy-friendly use. Due to the explicitly stated processing outside the EEA in the standard case and the lack of clear information on EU data residency and subprocessors, the overall rating for the EU/EEA is therefore **conditional**.


**Sources**


- [https://www.ai21.com/terms-policies/privacy-policy/](https://www.ai21.com/terms-policies/privacy-policy/)
- [https://www.ai21.com/terms-policies/terms-of-use/](https://www.ai21.com/terms-policies/terms-of-use/)
- [https://www.ai21.com/deployment/](https://www.ai21.com/deployment/)
- [https://docs.ai21.com/docs/overview](https://docs.ai21.com/docs/overview)
- [https://www.ai21.com/private-ai/](https://www.ai21.com/private-ai/)
- [https://www.ai21.com/blog/annual-soc-2-report/](https://www.ai21.com/blog/annual-soc-2-report/)
- [https://www.ai21.com/blog/iso-42001-ai-development/](https://www.ai21.com/blog/iso-42001-ai-development/)
- [https://www.ai21.com/blog/soc-2-report/](https://www.ai21.com/blog/soc-2-report/)

From the perspective of a user in the EU/EEA, it is *not* clearly demonstrated that AI21’s standard SaaS offering complies with the GDPR, because the website explicitly states that personal data is processed on servers **outside** the EEA, Switzerland, and the UK, including in the U.S. At the same time, however, AI21 describes private deployment options such as VPC and on-premises, as well as a DPA available upon request. Thus, GDPR-compliant use in the EU/EEA is conceivable only under certain conditions—specifically, with private deployment, appropriate contract terms, and the user’s own verification of the actual data residency in the specific setup.


**Positive**


The following aspects are confirmed: a published privacy policy; explicit GDPR-related transfer mechanisms such as SCCs, an adequacy decision, or a DPF in the privacy policy; a DPA/AVV template available upon request; private deployment options, including VPC and on-premises; statements that AI21 does not train models on customer content unless otherwise agreed in writing; and certifications or information regarding ISO 27001, ISO 27017, ISO 27018, SOC 2, and ISO 42001.


**Negative**


A major negative for standard EU/EEA operations is that AI21’s Privacy Policy mentions the processing of personal data on servers outside the EEA, including in the U.S. A specific EU/EEA server location for AI21’s own standard SaaS service is not specified on the website. No list of subprocessors was found on the website. An explicit, generally worded EU data residency commitment for the standard service was also not found on the website.


**Server Location**


The Privacy Policy states that personal data is processed on servers outside the EEA, Switzerland, and the UK, including in the U.S. Specific EU/EEA data center locations for standard SaaS usage are not specified on the website. The Deployment page merely lists data residency options such as “Single tenant,” “VPC,” and “On-premise,” but does not specify any specific countries or data centers within the EU/EEA.

## Hosting und Daten
- **On-Prem / lokales Hosting:** abgedeckt
- **Private Cloud / Rechenzentrum:** abgedeckt
- **EU SaaS / Managed:** teilweise / indirekt
- **Hybrid:** teilweise / indirekt
- **AVV / DPA:** abgedeckt
- **Kein Training auf Kundendaten:** abgedeckt
- **Open-Source / Transparenz-Pfad:** teilweise / indirekt

## Standort
**Land:** Israel

**Taxonomie:** Israel

Headquarters Tel Aviv, Israel

## Vorteile
- Strongly focused on long-context RAG, grounded QA, and document processing.
- Depending on the variant, models can be used via AI21 SaaS, Hugging Face, cloud partners, or self-deployment.
- Private cloud, VPC, and on-prem/self-hosting paths are officially documented.
- According to AI21 model terms, a DPA is available upon request.
- Jamba2 and Jamba Reasoning 3B are available under the Apache-2.0 license.

## Nachteile
- According to the documentation, AI21’s proprietary foundation models are text-in/text-out; native image, audio, or video processing is not documented as a core capability of the Jamba models.
- For large models, self-hosting is hardware-intensive; AI21 states that Jamba Large has a very large model size and high GPU memory requirements.
- GDPR use requires careful review of contracts and deployment, because Customer Content may by default be processed in Israel, the USA, the EEA, the UK, and other regions.
- Sensitive data is only permitted under the model terms if the solution explicitly requires it or the use case has been approved.

## Quellen
- Offizielle Website: https://www.ai21.com/

## Letzter Datenstand
2026-05-05

## Originalseite
https://kifox.ai/en/ki-tools/ai21-labs-en/