# Leonardo.AI ## Kurzbeschreibung **“The Creator-First Generative AI Platform”** **Leonardo.AI** is a generative AI platform for image, video, design, and motion workflows. Officially, the product is positioned for creating high-quality visuals from prompts or reference images, for precise editing, upscaling, as well as for API-powered production workflows. The platform also offers team collaboration and developer access via API. ## Claim The Creator-First Generative AI Platform ## Geeignet für - API Integration - Images - Design / Graphics - Marketing & Advertising - Social Media - Video - Websites / Landing Pages ## Kernfunktionen - Image editing - Image generation - Character Design - Illustrations - Video generation ## Preismodell - **free:** Free entry with daily renewed Fast Tokens, image generation, video generation, Flow State, limited Blueprints, limited Realtime Canvas, Realtime Generation, Presets, Elements, platform models, and third-party models. - **subscription:** **Essential** For daily hobby use and enthusiasts; includes monthly Fast Tokens, Token Bank, private generations, presets, Enhanced Quality, unlimited personal collections, personal AI models, simultaneous generations, and top-up tokens. **Subscription** Premium For semi-professionals and active creators; includes more monthly Fast Tokens, a larger Token Bank, private generations, Enhanced Quality, unlimited collections, more personal AI models, higher parallelization, queue, top-up tokens, and unlimited Relaxed Image Generation for selected models. **Subscription** Ultimate For professional creators, small businesses, and content producers; includes significantly more monthly Fast Tokens, a larger Token Bank, private generations, Enhanced Quality, many personal AI models, higher parallelization, a larger queue, top-up tokens, as well as unlimited Relaxed Image and Video Generation for selected models. **Subscription / Team** Starter Team plan with Shared Tokens, Bank Capacity, Fast Tokens per seat, private team generations, team token usage for model training, unlimited collections, unlimited Realtime Canvas and Realtime Generation actions, Enhanced Quality, and team workflow features. **Subscription / Team** Growth Advanced team plan with more Shared Tokens, higher Bank Capacity, more Fast Tokens per seat, private team generations, model training with Team Tokens, unlimited collections, unlimited Realtime actions, and Enhanced Quality. - **other:** **Custom Plan** Individually tailored plan for larger workflows; includes custom Fast Tokens per seat, all Starter and Growth features, as well as bespoke requirements. **Pay as you go / API** Usage-based API option with no long-term commitment, automatic top-ups, access to the latest models, and parallel generations. **API Custom** For higher production volumes and long-term scaling; includes custom limits for parallel generations, model-based discounts, and dedicated support for production deployments. ## DSGVO und Datenschutz **Gesamteinschätzung:** Conditional **On-prem / local hosting: indirect / not available** The website describes Leonardo.Ai as a cloud-based platform. The website does not mention an on-premises, local, or self-hostable product variant. **Private cloud / data center: unclear** There are references to AWS hosting and a processing role for certain customer scenarios, but no clear statement regarding dedicated private cloud environments, isolated EU environments, or customer-specific data center options. **EU SaaS / Managed: Partially** This is a managed SaaS service. For Europe, there are data protection notices and an EEA representative, but no guaranteed EU/EEA data residency. Instead, the website mentions storage in the U.S. and processing in Australia as well as other countries. **Hybrid: unclear** The website does not specify a hybrid deployment with partial internal/on-premises processing and partial external processing. **T&Cs / DPA: Covered** A Data Processing Addendum is published on the website. It governs processing as a data processor, documented client instructions, SCCs, subprocessors, erasure/return, and support for data subject rights. **No training: indirect / not available** The privacy policy explicitly states that content and associated account data may be used to improve the service and to train algorithms, models, and AI products. A general opt-out option for this training is not specified on the website. Although paid users can mark content as private, there is no evidence on the website of a contractual general exclusion of training for all user-generated content. **Open Source / Transparency Path: Indirect / Not Available** The website does not specify an open-source, self-hosting, or transparency-oriented sovereignty path for Leonardo.Ai itself. Only individual subprocessors and contractual data protection documents are documented. **Data Processing** The website describes Leonardo.Ai as a cloud-based platform. The DPA names AWS as the hosting and infrastructure provider; according to the privacy policy, data is stored in the U.S. and processed in Australia and other countries. The DPA contains a list of subprocessors with providers in the U.S., Singapore, and Germany. For restricted transfers to third countries, SCCs and, additionally, the UK Addendum are cited. A mandatory EU/EEA data residency requirement or exclusively European hosting is not specified on the website. **Conclusion** From a data protection perspective, Leonardo.Ai can only be classified as an EU/EEA tool directory **to a limited extent**. Positive aspects include the DPA, SCCs, list of subprocessors, EEA representative, and SOC 2 references. However, the lack of EU data residency, documented processing in the U.S. and Australia, and the use of content for service improvement and AI training—as described on the website—all argue against clear EU/EEA-compliant standard use. Anyone wishing to use the tool in the EU/EEA in a data-protection-sensitive manner would need to examine the specific use, data types, and contractual terms very carefully. **Sources** - [https://leonardo.ai/privacy-policy](https://leonardo.ai/privacy-policy) - [https://leonardo.ai/terms-of-service](https://leonardo.ai/terms-of-service) - [https://leonardo.ai/data-processing-addendum](https://leonardo.ai/data-processing-addendum) - [https://leonardo.ai/faq](https://leonardo.ai/faq) For the EU/EEA region, GDPR-compliant use is *partially* documented but not fully guaranteed. Positive aspects include a published privacy policy with a European focus, a Data Processing Addendum with SCCs, an EEA representative in Ireland, and a list of subprocessors. However, a negative aspect is that the website itself mentions data storage in the U.S. and processing in Australia and other countries, lists AWS as its hosting provider in the U.S., and does not guarantee EU data residency. Additionally, according to the privacy policy, Leonardo.Ai reserves the right to use content and account data to improve the service and to train algorithms and AI products. Thus, GDPR-compliant use within the EU/EEA appears possible only under certain conditions and following a detailed case-by-case review, rather than as a clearly established standard practice. **Positive** The website includes a privacy policy, a Data Processing Addendum with standard contractual clauses for limited third-country transfers, information on data subject rights, an EEA representative in Ireland, and a published list of subprocessors. For multi-user/team setups, the DPA describes processing as a data processor in accordance with documented customer instructions. **Negative** The website lists the U.S. as the standard storage location and Australia and other countries as processing locations. The list of subprocessors includes several providers in the U.S. and Singapore; a binding EU/EEA data residency is not specified. In addition, the privacy policy states that content and associated account data may be used to improve the service and to train algorithms, models, and AI products. A clear, general opt-out option for AI training is not provided on the website. **Server Location** According to the privacy policy, information is stored in the United States and processed in Australia and other countries. The DPA names AWS as the hosting and infrastructure provider and lists AWS, headquartered in the United States, in the list of subprocessors. The website does not specify a specific EU/EEA server location or EU data residency. ## Hosting und Daten - **On-Prem / lokales Hosting:** unknown - **Private Cloud / Rechenzentrum:** unknown - **EU SaaS / Managed:** teilweise / indirekt - **Hybrid:** unknown - **AVV / DPA:** abgedeckt - **Kein Training auf Kundendaten:** unknown - **Open-Source / Transparenz-Pfad:** unknown ## Standort **Land:** Australia **Taxonomie:** Australia Suite 1007, 120 High St, North Sydney, NSW 2060, Australia ## Vorteile - Very broad visual stack: images, videos, editing, upscaling, real-time tools, API. - Good options for style consistency through Elements / Custom Models. - Low barrier to entry thanks to the free plan. - Team and API offerings for scalable workflows. - Publicly documented security and data protection measures including SOC 2, TLS 1.2+, AES-256, DPA, and SCCs. ## Nachteile - Free use is less attractive from a data protection and IP perspective: content is public by default and can be indexed. - According to the Privacy Policy, content may be used for service improvement and model training unless work is done in the paid Private Mode. - Storage in the USA and processing also in Australia as well as other countries; in addition, several subprocessors outside the EU. - Token-based usage creates a consumption logic instead of a true flat rate; top-ups are only available for paying users. - Custom/Enterprise/API Custom prices are not published transparently. ## Quellen - Offizielle Website: https://leonardo.ai/ ## Letzter Datenstand 2026-04-16 ## Originalseite https://kifox.ai/en/ki-tools/leonardo-ai-en/