# Base44 ## Kurzbeschreibung **Turn your ideas into apps** **Base44 **is an AI-powered app builder that creates functional apps using natural language. Officially, Base44 lists productivity apps, back-office tools, customer portals, and complete enterprise products among its target use cases. In addition to the builder, the platform also includes authentication, database, storage, email, payments, integrations, backend functions, and hosting. ## Claim Build Apps with AI in Minutes ## Geeignet für - API Integration - Automation / Workflows - Customer Service & Chatbots - no Code App - Productivity & Planning - Knowledge Management / Internal Search ## Kernfunktionen - App Development - Programming - Website Development ## Preismodell - **free:** **Free Plan** – includes core features such as authentication, database functionality, and analytics. Officially, Base44 states 25 Message Credits per month; regarding Integration Credits, there is conflicting information on the official pages, so no confirmed number is given here. - **subscription:** paid subscription plans: Starter, Builder, Pro, Elite. Subscriptions can be taken out monthly or annually. Starter is intended for initial apps/projects; Builder adds, among other things, backend features, domain, GitHub integration, and model selection; Pro expands for more complex applications; Elite offers higher credits and premium support. - **other:** **Enterprise / Custom Sales **for larger organizations; in addition, Base44 works with Message Credits and Integration Credits, which are reset monthly depending on the plan. There are also Promo Codes/Gift Cards as well as a separately mentioned backend offering, which according to the documentation is free while in beta. ## DSGVO und Datenschutz **Gesamteinschätzung:** Conditional **On-prem / local hosting: indirect / not available** No on-prem, local hosting, or self-hosting options for Base44 were found on the website. No matches for 'self-host' or 'on-prem' were found in the Terms; not specified on the website. **Private Cloud / Data Center: Unclear** A dedicated private cloud, single-tenant, or specifically designated EU/EEA data center option is not specifically described on the website. Only general security and compliance information is provided; not specified on the website. **EU SaaS / Managed: Partially** Base44 is clearly documented as a managed SaaS service, but EU data residency or standard EU/EEA hosting is not guaranteed. The list of subprocessors indicates that the central infrastructure is predominantly located in the U.S.; only a few services are located in Germany or the United Kingdom. **Hybrid: unclear** A hybrid operating model combining internal/local components with external SaaS components is not described on the website. Not specified on the website. **AVV / DPA: Covered** A separate DPA is published on the website, and the Terms state that a DPA applies or will be concluded when personal data is processed. The DPA also contains provisions regarding subprocessors, data subject requests, erasure, and international data transfers. **No training: partially** The DPA states that personal data may only be used to provide the services or after complete anonymization or aggregation, and that subprocessors may not use personal data for any purpose other than the services. However, no clear, specific statement was found on the website indicating that prompts, uploads, or outputs are generally not used for training general AI models or that an opt-out option is available for this purpose. **Open Source / Transparency: Partial** The Terms state that the platform may contain or link to third-party software as well as “open source” or “free software” components. However, the website does not provide further details on a genuine transparency/sovereignty path involving open-source disclosure, self-hostable components, documented open-source building blocks, or clear export/migration options. **Data Processing** According to the information available on the website, data processing at Base44 is not carried out as a fully EU-resident solution. The DPA addresses the role as a data processor and international data transfers from the EEA via appropriate transfer mechanisms. However, the published list of subprocessors shows that key processing steps for hosting, server operations, analytics, media hosting, and LLM calls are predominantly handled by providers in the U.S.; another listed provider is based in Israel. Only a few minor components are located in Germany or the United Kingdom. For EU/EEA users, this means that, from a data protection perspective, the DPA framework and the transfer mechanisms specified therein are of primary importance, not a verified EU data residency. **Conclusion** For a German-language tool directory focused on EU/EEA data protection, Base44 is not documented as a platform that is clearly hosted in the EU or fully resident in the EU. Positive aspects include the DPA, the list of subprocessors, the required transfer mechanisms, and the certifications mentioned. However, for a strict GDPR assessment across the entire EU/EEA region, the documentation is insufficient to warrant a “yes” because EU data residency, the EU data center standard option, private cloud, and on-premises/self-hosting are not substantiated on the website, and key subprocessors are located outside the EU/EEA. Therefore, the overall **assessment is conditional**. **Sources** - [https://base44.com/privacy-policy](https://base44.com/privacy-policy) - [https://base44.com/dpa](https://base44.com/dpa) - [https://base44.com/dpa/exhibitc](https://base44.com/dpa/exhibitc) - [https://base44.com/security](https://base44.com/security) - [https://base44.com/terms-of-service](https://base44.com/terms-of-service) - [https://base44.com/responsible-use](https://base44.com/responsible-use) Base44 documents several data protection and compliance components relevant to the EU/EEA region, including a privacy policy, a DPA/General Terms and Conditions, a list of subprocessors, mechanisms for cross-border transfers from the EEA, and references to ISO 27001, SOC 2 Type II, and the GDPR. At the same time, its own list of subprocessors shows that key services for hosting, servers, analytics, and LLM calls are predominantly located in the U.S., and one service provider is based in Israel. The website does not specify an explicit EU data residency for the Base44 platform itself, an EU data center as a standard option, or an on-premises/self-hosting option. For EU/EEA users, GDPR-compliant use is therefore conceivable only *under certain conditions*—specifically based on the DPA and the transfer mechanisms outlined therein—but is not documented as a clearly EU-resident standard solution. **Positive** Positively documented are a separate privacy policy, a DPA/SLA, a published list of subprocessors, provisions regarding erasure and data subject requests in the DPA, as well as the statement that transfers from the EEA, Switzerland, and the United Kingdom are safeguarded through permissible mechanisms such as adequacy decisions, the EU-US Data Privacy Framework, and SCCs. Additionally, Base44 mentions ISO 27001, SOC 2 Type II, and the GDPR on its security page. **Negative** A negative factor for a straightforward EU/EEA assessment is that the platform’s own list of subprocessors for data storage/hosting, server services, analytics, media hosting, and LLM calls predominantly lists U.S. locations; furthermore, Wix.com Ltd. is listed as being based in Israel. The website does not specify explicit EU data residency for the platform, EU/EEA hosting for the SaaS version, a dedicated EU data center, a private cloud option, or on-premises/self-hosting. Nor is there a clear statement on the website indicating that user inputs, uploads, or outputs are generally not used to train general models. **Server Location** According to the list of subprocessors: Mongo for “data storage and hosting” in the U.S.; Render for “server services” in the U.S.; GCP for “analytics services” in the U.S.; OpenAI and Anthropic for “API calls to LLM,” both in the U.S.; Supabase for “media hosting” in the U.S.; DataDog in the U.S.; Wix.com Ltd. in Israel. Additionally, Langfuse in Germany and Logfire in the United Kingdom are listed. The website does not specify a dedicated EU/EEA primary server location or EU data residency for Base44. ## Hosting und Daten - **On-Prem / lokales Hosting:** unknown - **Private Cloud / Rechenzentrum:** unknown - **EU SaaS / Managed:** teilweise / indirekt - **Hybrid:** unknown - **AVV / DPA:** abgedeckt - **Kein Training auf Kundendaten:** teilweise / indirekt - **Open-Source / Transparenz-Pfad:** teilweise / indirekt ## Standort **Land:** Israel **Taxonomie:** Israel Wix.com Ltd., 5 Yunitsman St, Tel Aviv, Israel. ## Vorteile - Very fast onboarding via natural language, without classic setup. • Full stack from a single source: auth, database, storage, email, payments, hosting. • Good integration layer with connectors, backend functions, and custom OpenAPI integrations. • Immediate publishing, custom domains, app visibility, cloning, and export. • For advanced teams, additionally GitHub, versioning, SSO, audit/monitoring APIs. ## Nachteile - Public Enterprise pricing is missing. ⚠️ No verified information available – as of 16/04/2026. • Relevant features such as Connectors, AI integrations, payment features, and GitHub only start at Builder or higher. • According to support/terms, annual plans are generally non-cancellable and non-refundable, with exceptions only on a case-by-case basis. • According to the documentation, site hosting currently only supports SPAs / Static Export, no SSR and no Server Components. • Base44 helps with security configuration, but explicitly points out that users must verify the security of their apps themselves. ## Quellen - Offizielle Website: https://base44.com/pricing ## Letzter Datenstand 2026-04-16 ## Originalseite https://kifox.ai/en/ki-tools/base44-en/