# Bitrix24

## Kurzbeschreibung
**"Bitrix24 is a free online workspace for your company: CRM, tasks, online appointments, and much more."**


Bitrix24 is a cloud-based and optionally self-hosted business platform with CRM, task and project management, team communication, contact center, websites, online store, HR functions, document management, automation, and an AI assistant. The AI assistant CoPilot supports, among other things, writing, summarizing, translating, creating tasks, checklists, CRM call transcription, CRM field population, and website text/image generation.

## Claim
Bitrix24 is a free online workspace for your company: CRM, tasks, online appointments, and much more.

## Geeignet für
- API Integration
- Automation / Workflows
- Data Analysis
- Data Extraction / Document Analysis
- Email / Communication
- Finance / Accounting
- Customer Service & Chatbots
- Marketing & Advertising
- no Code App
- Productivity & Planning
- Project Management
- Texts / Content
- Translations
- Sales / Sales
- Websites / Landing Pages
- Knowledge Management / Internal Search

## Kernfunktionen
- Task Management
- Automation
- Customer Support
- Lead generation
- Project Management
- Scheduling
- Text generation
- Website Development

## Preismodell
- **free:** Free entry with unlimited users, limited storage, as well as core features for collaboration, tasks & projects, CRM, Bitrix24 Sign, Drive, Contact Center, and website builder.
- **subscription:** **Basic** Entry-level plan for smaller teams with more storage, user quota, collaboration, tasks & projects, CRM, Bitrix24 Sign, Drive, Contact Center, website builder, online store, and support.


**Standard** Advanced plan for teams with more users and storage, plus marketing, online documents, administration, and advanced business features.


**Professional** Comprehensive business plan with greater user and storage capacity, X5 CRM, marketing, online documents, electronic HR signature, Sales Intelligence, automation, HR management, support, and administration.


**Enterprise** Scalable enterprise plan for larger organizations with many users, large storage capacity, Enterprise package, multiple branches, centralized management, optimized multiuser infrastructure, complete data isolation, advanced backups, and support features.
- **other:** **Bitrix24 On-Premise Edition **Self-hosted version for your own servers with full access to source code and API; according to Bitrix24, intended for large companies and corporate groups.


**CoPilot / AI Features **AI features for CRM, tasks, chat, feed, websites, email, flows, website images, prompt library, and CoPilot roles; availability depends on the plan and the specific feature.


**Marketplace / Apps / Integrations** Hundreds of apps and integrations via the Bitrix24 Marketplace; third-party apps may involve their own contracts, privacy policies, and data processing.


**MCP Server** Connection of external AI systems with Bitrix24 to perform actions in CRM, tasks, and other tools; disabled by default and controllable by administrators.

## DSGVO und Datenschutz
**Gesamteinschätzung:** Yes

**On-premises / local hosting: supported**


Bitrix24 offers an on-premise/self-hosted edition that, according to the website, is “hosted on your own server”; it also describes full access to the source code as well as installation on Linux, Unix, and Windows servers.


**Private Cloud / Data Center: Partially**


The on-premise page describes self-hosting as your “own private cloud” under full control. However, the provider’s website does not specifically mention a dedicated, managed private cloud or single-tenant EU environment.


**EU SaaS / Managed: Covered**


The infrastructure/subprocessors document specifies storage in Europe for European customers, specifically AWS Frankfurt and Dublin. This confirms that an EU-based SaaS/managed service model is documented on the website.


**Hybrid: Partially**


The website shows separate paths for cloud and on-premises and mentions integrations as well as the ability to connect external AI technologies to CoPilot. However, an explicitly described hybrid operating model with clearly distributed local and external processing is not specifically identified as a product mode.


**DPA: Covered**


A German Data Processing Agreement is linked on the website, and the GDPR page states that Bitrix24 provides EU users with the Data Processing Agreement as well as information on infrastructure and subprocessors.


**No Training: Indirect / Not Available**


No contractual “no-training” protection for the AI features is documented on the website. On the contrary: The AI Tools Terms state that Alaio may use content for the development, improvement, and training of AI/ML models; furthermore, AI providers may use content to further develop their technologies.


**Open Source / Transparency: Partial**


The on-premises version is described as providing access to the source code, and several pages refer to “open source code” for on-premises use. Additionally, the help desk documentation contains references to open-source components, such as the GD library. However, a comprehensive open-source disclosure for the entire platform or the AI models is not provided on the website.


**Data Processing**


The website documents European cloud operations via AWS in Frankfurt and Dublin for EU/EEA customers, as well as a separate infrastructure/subprocessor document. At the same time, this document lists several subprocessors or third-party providers, including providers outside the EU for certain services. Particularly relevant for AI functions is that the AI Tools Terms of Service provide for data transfers to AI providers and specify processing in the U.S. for OpenAI-supported use. Those who require maximum European data control will find the cleanest path on the website via the On-Premise/Self-Hosted Edition.


**Conclusion**


Bitrix24 offers a robust foundation for GDPR-compliant use in the EU/EEA region **when the best available deployment option is chosen**: on-premises on your own infrastructure or a carefully configured EU cloud deployment with an AVV. However, there is a significant reservation regarding AI features, as the website states that content may be used for training and improvement, and data transfer to the U.S. is mentioned in connection with OpenAI features. Therefore, Bitrix24 can be rated positively overall, but sensitive AI usage is not readily documented as data-minimal or training-free.


**Sources**


- [https://www.bitrix24.de/gdpr/](https://www.bitrix24.de/gdpr/)
- [https://www.bitrix24.de/privacy/](https://www.bitrix24.de/privacy/)
- [https://www.bitrix24.de/legal.php](https://www.bitrix24.de/legal.php)
- [https://www.bitrix24.de/upload/DPA/BitrixDPA_DE.pdf](https://www.bitrix24.de/upload/DPA/BitrixDPA_DE.pdf)
- [https://www.bitrix24.de/upload/DPA/BitrixDPA.pdf](https://www.bitrix24.de/upload/DPA/BitrixDPA.pdf)
- [https://www.bitrix24.de/upload/DPA/Bitrix24_Infrastructure_and_Sub.pdf](https://www.bitrix24.de/upload/DPA/Bitrix24_Infrastructure_and_Sub.pdf)
- [https://www.bitrix24.de/self-hosted/](https://www.bitrix24.de/self-hosted/)
- [https://www.bitrix24.de/self-hosted/installation.php](https://www.bitrix24.de/self-hosted/installation.php)
- [https://www.bitrix24.de/terms/bitrix24copilot-rules.php](https://www.bitrix24.de/terms/bitrix24copilot-rules.php)
- [https://helpdesk.bitrix24.de/open/9096293/](https://helpdesk.bitrix24.de/open/9096293/)
- [https://www.bitrix24.de/uses/kostenloses-webbasiertes-projektmanagement.php](https://www.bitrix24.de/uses/kostenloses-webbasiertes-projektmanagement.php)
- [https://www.bitrix24.de/amp/uses/intranet-software-open-source.html](https://www.bitrix24.de/amp/uses/intranet-software-open-source.html)

For the EU/EEA region, there is a clearly documented, GDPR-compliant usage path: Bitrix24 offers an on-premises/self-hosted option on the customer’s own server with full data control, as well as a Data Processing Agreement (DPA). In addition, the website documents for European customers that data is stored in Europe in AWS data centers. However, the standard use of AI features is restricted under data protection law because the AI tools’ terms and conditions provide for the use of content for training and improvement and specify a transfer to the U.S. for OpenAI-powered features. Therefore, the “yes” rating is based on the **best available approach**—namely, self-hosting or controlled use without AI features—and not on every standard SaaS/AI configuration.


**Positive**


The website provides links to a privacy policy, a GDPR page, a German General Terms and Conditions document, and a document on infrastructure and subprocessors. For European customers, Bitrix24 specifies data centers in Europe—specifically AWS in Frankfurt and Dublin—and the on-premises edition can be run on the customer’s own server; full access to the source code is also described.


**Negative**


The website explicitly states that, for AI tools, Alaio may use content to develop, improve, and train AI/ML models. Furthermore, it mentions that requests are transferred to the U.S. when using OpenAI technologies. Certifications such as ISO 27001 or SOC 2 are not listed on the reviewed pages of the website.


**Server Location**


For European customers, the infrastructure/subprocessor document specifies data storage in Europe: AWS eu-central-1 in Frankfurt, Germany, and for data storage, among others, AWS eu-west-1 in Dublin, Ireland; other European infrastructure components are listed in Frankfurt, Dublin, and Amsterdam, among other locations. The on-premises version can be run on the customer’s own server.

## Hosting und Daten
- **On-Prem / lokales Hosting:** abgedeckt
- **Private Cloud / Rechenzentrum:** teilweise / indirekt
- **EU SaaS / Managed:** abgedeckt
- **Hybrid:** teilweise / indirekt
- **AVV / DPA:** abgedeckt
- **Kein Training auf Kundendaten:** unknown
- **Open-Source / Transparenz-Pfad:** teilweise / indirekt

## Standort
**Land:** Cyprus

**Taxonomie:** Cyprus

Europe: Alaio Cloud Limited, Frema House, office 102, No. 9 Constantinou Paparigopoulou Str., 3106 Limassol, Cyprus. 

USA: Alaio Inc., 700 North Fairfax St., Suite 614-B, Alexandria, VA 22314, USA.

## Vorteile
- Very broad range of functions: CRM, projects, communication, HR, websites, shop, signature, automation
- Free version with unlimited users
- Available in cloud and on-premise
- AI features integrated directly into CRM, tasks, feed, chat, mail, calendar, and websites
- According to the DPA, EU/DE accounts are hosted in Frankfurt at AWS
- AVV/DPA publicly available
- Suitable for small teams up to enterprise structures

## Nachteile
- Very feature-rich and therefore complex in setup, permissions concept, and administration
- CoPilot uses third-party AI such as OpenAI; according to the AI Terms, requests may be transferred to OpenAI in the USA
- According to the current wording, the AI Terms allow the use of content for AI development by Alaio and AI Providers; this must be critically reviewed for confidential data
- Some compliance statements on older security pages contain outdated terms such as Safe Harbor; the current DPA/AI Terms should be reviewed as authoritative
- For companies with strict data protection requirements, CoPilot is not automatically unproblematic

## Quellen
- Offizielle Website: https://www.bitrix24.de/

## Letzter Datenstand
2026-05-10

## Originalseite
https://kifox.ai/en/ki-tools/bitrix24-en/
