# Bubble ## Kurzbeschreibung **“Build exactly what you envision with AI + no-code development.”** **Bubble **is a no-code platform for building web and mobile apps with visual logic, a database, workflows, API integrations, and now also AI-powered app generation. The tool is aimed at makers, startups, agencies, and companies that want to build and operate applications without traditional full-stack development. In doing so, Bubble covers development, deployment, hosting, and scaling within its own platform ecosystem. ## Claim Build exactly what you envision with AI + no-code development ## Geeignet für - API Integration - Automation / Workflows - no Code App - Programming / Software Development - Websites / Landing Pages ## Kernfunktionen - App Development - Programming - Website Creation ## Preismodell - **free:** Free entry point for building and testing web/mobile apps; not intended for fully productive use with your own domain. - **subscription:** **Starter **For initial live apps with web app, live website, custom domain, and basic workload. **Growth** For growing apps with more workload, more editor/branching options, and advanced production features. **Team** For scaling teams with sub-apps, multiple app editors, more branches, more workload, and longer server logs. - **other:** **Enterprise** Custom workload, choice of hosting location, customizable server, dedicated support, and individual app/mobile limits. **Add-ons** Workload tiers, additional file storage, and plugin subscriptions. ## DSGVO und Datenschutz **Gesamteinschätzung:** Conditional **On-prem / local hosting: indirect / not available** Bubble describes the platform as a cloud-based deployment in which apps are hosted on Bubble’s cloud infrastructure; the website does not mention an on-premises/local or self-hosted deployment. **Private Cloud / Data Center: Partially** The Enterprise page mentions “Choice of hosting region” and states that the application can be hosted on an isolated server in a specific AWS data center region. This suggests a more isolated environment, but specific EU/EEA regions or details regarding a dedicated private cloud are not provided on the pages found. **EU SaaS / Managed: Partially** Bubble operates the solution itself as SaaS/PaaS on AWS. EU/EEA-compliant use may be possible based on the hosting region selection for Enterprise, but the website does not clearly guarantee general EU data residency for the Managed service. **Hybrid: Indirect / Not Available** A hybrid model involving processing that remains internal/on-premises and external Bubble operations is not described on the website. **DPA: Covered** Bubble publishes a DPA/AVV and states in its Terms that the DPA applies. The DPA specifies that Bubble generally processes customer data only at the customer’s direction or for the purpose of providing services. **No training: indirect / not available** The Terms explicitly state that Bubble may use the input and output of the “Bubble AI Tools” for training, refinement, and further development. A clear opt-out for AI training or a general contractual exclusion is not specified on the pages found. **Open Source / Transparency Path: Indirect / Not Available** Open-source components, open models, or self-hostable parts are not specified on the pages found. A certain level of transparency exists only indirectly through the DPA, the list of subprocessors, and documented security/hosting specifications. **Data Processing** The website confirms that Bubble operates applications in its own cloud infrastructure on AWS. Bubble publishes a DPA/AVV, lists subprocessors, and describes transfer mechanisms for EU/EEA data. For Enterprise, the website describes the option to select a hosting region on an isolated server within a specific AWS data center region. However, the pages found do not document a general standard requiring that data remain exclusively within the EU/EEA. For AI features, it is also documented that input and output data may be used to further develop the Bubble AI tools. **Conclusion** From a hosting and data protection perspective, Bubble is **not** documented **as being unequivocally and fully GDPR-compliant in its standard SaaS offering** for an EU/EEA directory, but it can be used **under certain conditions**: specifically with a DPA/AVV, careful review of the AI features used, and—if available in the subscribed setup—a suitable AWS region for hosting. Because EU data residency is not generally clearly documented and AI training for Bubble AI tools cannot be ruled out, the overall rating is “conditional.” **Sources** - [https://bubble.io/privacy/](https://bubble.io/privacy/) - [https://bubble.io/terms](https://bubble.io/terms) - [https://bubble.io/subprocessors](https://bubble.io/subprocessors) - [https://bubble.io/security](https://bubble.io/security) - [https://bubble.io/for-enterprise](https://bubble.io/for-enterprise) - [https://bubble.io/dpa](https://bubble.io/dpa) Bubble documents several components relevant to GDPR compliance for the EU/EEA region: a privacy policy, a DPA/AVV, subprocessors, data transfer mechanisms for EU/EEA data, and a choice of hosting regions for isolated servers. At the same time, Bubble is a U.S.-based provider; its standard platform is cloud-based on AWS; the website does not specify a clear, general EU data residency standard for all pricing plans; and regarding the AI features, the Terms reserve the right to to use input and output for training and further developing the Bubble AI tools. Therefore, GDPR-compliant use in the EU/EEA appears plausible only *under certain conditions*, particularly with a sound contractual setup, an appropriate hosting region, and cautious or limited use of the AI features. **Positive** Positively noted are the company’s own DPA/AVV, the inclusion of SCCs or Data Privacy Framework mechanisms for EU/EEA-related transfers, a published list of subprocessors with update and opt-out mechanisms, as well as security certifications such as SOC 2 Type II at the Bubble level and AWS as the underlying infrastructure with ISO/IEC 27001 and SOC 2 compliance. For Enterprise, the option to select a specific AWS data center region for isolated servers is also mentioned. **Negative** A negative or limiting factor is that Bubble operates as a U.S. provider, and the website does not provide general evidence that customer data is stored or processed exclusively within the EU/EEA by default. Furthermore, the Terms explicitly state that Bubble may use input and output from the “Bubble AI Tools” for training, refinement, and further development; a clear, product-specific opt-out for AI training is not specified on the website. On-premises/self-hosting is also not described. **Server Location** Bubble lists AWS as its hosting infrastructure on the website. A specific standard server location for all customers is not specified on the website. For Enterprise, it is stated that applications can be hosted on an isolated server in a specific AWS data center region; however, the pages reviewed do not specify whether and which specific EU/EEA regions are available. ## Hosting und Daten - **On-Prem / lokales Hosting:** unknown - **Private Cloud / Rechenzentrum:** teilweise / indirekt - **EU SaaS / Managed:** teilweise / indirekt - **Hybrid:** unknown - **AVV / DPA:** abgedeckt - **Kein Training auf Kundendaten:** unknown - **Open-Source / Transparenz-Pfad:** unknown ## Standort **Land:** USA **Taxonomie:** USA Bubble Group, Inc., 22 W 21st Street, 2nd Floor, New York, NY 10010, USA. ## Vorteile - Very strong no-code/app-building focus - Integrated database, logic, deployment, and hosting - API Connector already included in the free plan - Enterprise features such as dedicated instances, hosting region, and centralized management available - Public DPA and public subprocessor list available ## Nachteile - The Free Plan is intended only for development, not for productive live operation - Hosting location selection is publicly listed only for Enterprise - The cost structure can become less predictable due to Workload Units - For “restricted data” or sensitive data, the DPA provides for restrictions ## Quellen - Offizielle Website: https://bubble.io/ ## Letzter Datenstand 2026-04-27 ## Originalseite https://kifox.ai/en/ki-tools/bubble-en/