Find Your Tool in 6 Steps
Result: 155

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 155
Research Images Video Music Agent Business Marketing Website API

“Less structure, more intelligence.”

Manus is an autonomous AI agent that not only responds, but also plans tasks, executes them, and delivers finished work results.

Officially, Manus describes itself as a “virtual colleague with its own computer” with a sandbox, internet access, a persistent file system, and the ability to install software, operate websites, analyze data, create slides, and run workflows. The product covers a web app, website builder, browser automation, email/Slack integration, data sources, and API.Manus

Less structure, more intelligence

3.9/10 Insufficient
Free Free includes, according to the official pricing article, Chat Mode plus Manus 1.6 Lite in Agent Mode, 300 Daily Refresh Credits, 1 Concurrent Task, and 2 Scheduled Tasks.

Additionally, the Help Center states: daily free credits must be claimed, are valid only for that day, and Free users have a monthly Daily Credit usage limit of 1,500 credits. Subscription Pro 20 USD/month: from 4,000 credits/month, Chat Mode, Manus 1.6 Max/1.6/1.6 Lite in Agent Mode, Advanced Research, Professional Website Deployment, Slide Generation, Wide Research, 20 Concurrent Tasks, 20 Scheduled Tasks, beta features; 17% discount with annual billing.

Pro 40 USD/month: from 8,000 credits/month, same feature class, according to the Help Center with a 7-day trial; also 17% annual discount. Team from 20 USD/seat/month: includes Pro features plus SSO, Data Training Opt-Out, Team Usage Analytics, Internal Access Control, Shared Slide Templates. Other Credit add-ons are officially available; according to the docs, they can be purchased additionally and “never expire,” but according to the Help Center they can only be used with an active paid plan and become inactive on a free/expired subscription. WebDev/Website Builder has a separate usage-based pricing model; according to the docs, each Manus account tier includes free monthly allowances of Cloud $10, AI $1, API $1. The API is officially available, but I could not verify a reliable public API pricing sheet in the accessible official sources.
– (0)

Link

GDPR: Unclear For the EU/EEA region, a privacy policy and a security page containing specific compliance and security information can be found on the website. However, the website lacks clear information regarding EU/EEA data residency, specific server/data center locations, a publicly accessible data processing agreement (DPA), and a list of subprocessors. Consequently, it is not possible to make a reliable assessment of GDPR compliance for the entire European region based solely on the website.
Positive
The following can be found: a privacy policy, a security page with information on SOC 2 Type 1, SOC 2 Type 2, ISO 27001:2022, and ISO 27701:2019, as well as a note stating that customer data is deleted upon leaving the service. There is also a statement indicating that only aggregated or anonymized information is used to improve the services.
Negative
On the negative side, the website does not specify any concrete EU/EEA server locations, does not guarantee EU data residency, no publicly available DPA is mentioned, no list of subprocessors can be found, and no on-premises or self-hosting option for Manus itself is described. Furthermore, an explicit contractual opt-out from general AI training is not clearly stated on the website.
Server Location
Not specified on the website. Although cloud infrastructure, cloud browser, and hosting are mentioned, no specific countries, regions, or data centers within the EU/EEA are named.

Link

Turn your ideas into apps

Base44 is an AI-powered app builder that creates functional apps using natural language.

Officially, Base44 lists productivity apps, back-office tools, customer portals, and complete enterprise products among its target use cases. In addition to the builder, the platform also includes authentication, database, storage, email, payments, integrations, backend functions, and hosting.Base44

Build Apps with AI in Minutes

6.4/10 Solid
Free Free Plan – includes core features such as authentication, database functionality, and analytics. Officially, Base44 states 25 Message Credits per month; regarding Integration Credits, there is conflicting information on the official pages, so no confirmed number is given here. Subscription paid subscription plans: Starter, Builder, Pro, Elite. Subscriptions can be taken out monthly or annually. Starter is intended for initial apps/projects; Builder adds, among other things, backend features, domain, GitHub integration, and model selection; Pro expands for more complex applications; Elite offers higher credits and premium support. Other Enterprise / Custom Sales for larger organizations; in addition, Base44 works with Message Credits and Integration Credits, which are reset monthly depending on the plan. There are also Promo Codes/Gift Cards as well as a separately mentioned backend offering, which according to the documentation is free while in beta.
– (0)

Link

GDPR: Partly Base44 documents several data protection and compliance components relevant to the EU/EEA region, including a privacy policy, a DPA/General Terms and Conditions, a list of subprocessors, mechanisms for cross-border transfers from the EEA, and references to ISO 27001, SOC 2 Type II, and the GDPR. At the same time, its own list of subprocessors shows that key services for hosting, servers, analytics, and LLM calls are predominantly located in the U.S., and one service provider is based in Israel. The website does not specify an explicit EU data residency for the Base44 platform itself, an EU data center as a standard option, or an on-premises/self-hosting option. For EU/EEA users, GDPR-compliant use is therefore conceivable only under certain conditions—specifically based on the DPA and the transfer mechanisms outlined therein—but is not documented as a clearly EU-resident standard solution.
Positive
Positively documented are a separate privacy policy, a DPA/SLA, a published list of subprocessors, provisions regarding erasure and data subject requests in the DPA, as well as the statement that transfers from the EEA, Switzerland, and the United Kingdom are safeguarded through permissible mechanisms such as adequacy decisions, the EU-US Data Privacy Framework, and SCCs. Additionally, Base44 mentions ISO 27001, SOC 2 Type II, and the GDPR on its security page.
Negative
A negative factor for a straightforward EU/EEA assessment is that the platform’s own list of subprocessors for data storage/hosting, server services, analytics, media hosting, and LLM calls predominantly lists U.S. locations; furthermore, Wix.com Ltd. is listed as being based in Israel. The website does not specify explicit EU data residency for the platform, EU/EEA hosting for the SaaS version, a dedicated EU data center, a private cloud option, or on-premises/self-hosting. Nor is there a clear statement on the website indicating that user inputs, uploads, or outputs are generally not used to train general models.
Server Location
According to the list of subprocessors: Mongo for “data storage and hosting” in the U.S.; Render for “server services” in the U.S.; GCP for “analytics services” in the U.S.; OpenAI and Anthropic for “API calls to LLM,” both in the U.S.; Supabase for “media hosting” in the U.S.; DataDog in the U.S.; Wix.com Ltd. in Israel. Additionally, Langfuse in Germany and Logfire in the United Kingdom are listed. The website does not specify a dedicated EU/EEA primary server location or EU data residency for Base44.

Link

“Search your company knowledge smarter with AI agents.”

TextCortex is an AI platform for Enterprise AI, Company Knowledge, Workflow Automation, and AI Agents.

Officially, the product is now positioned as a model-agnostic agent infrastructure that enables companies to create AI agents without code, apply them to company data, and integrate them into existing work environments. At the same time, the pricing page still highlights strong classic assistance features such as writing, translation, rewriting, voice features, data analysis, and browser integration.Textcortex

Search your company knowledge smarter with AI agents

7.4/10 Good
Free Free basic use of many core features; suitable for testing and for simple AI writing and chat workflows.

14-day trial period TextCortex mentions a 14-day trial period to try out all features with higher usage. Subscription Extended access to AI writing features, ZenoChat, reasoning/model features, knowledge features, image/text generation, and more usage capacity. Other Enterprise Multiple seats, Enterprise Knowledge Search, dedicated support, secure team/company features, higher storage/usage limits, and custom requirements.
– (0)

Link

GDPR: Partly The website contains several clear statements regarding GDPR/DSGVO, EU data residency, EU-hosted infrastructure, zero-data training, and existing certifications. At the same time, important points for a robust assessment across the entire EU/EEA remain incomplete on the website: a specifically linked AVV/DPA text is not provided on the website, a subprocessor list is not provided on the website, and an exact server location or specific data center countries are not named. In addition, the provider’s own pages show differing statements on data usage depending on the usage context: For general use, an opt-out is mentioned, while for Enterprise and certain functions, strict no-training is promised. Therefore, GDPR-compliant use in the EU/EEA appears plausible primarily in the Enterprise or EU setup, but not without restriction for every standard use.
Positive
Positive are the provider’s own statements regarding 'GDPR-compliant', 'Built for European data sovereignty', 'EU data residency: Guaranteed', 'all inference on EU-based infrastructure', 'Zero data training', as well as the mention of ISO 27001 and SOC 2. In addition, the website mentions private environments for Enterprise customers in preferred regions and explains that knowledge base documents are processed exclusively by TextCortex.
Negative
Negative is that no specifically identifiable AVV/DPA contract text is linked on the website, no subprocessor page is provided, and no specific data center countries or providers are named. In addition, the statement regarding training is not fully consistent: In one data-related article, it is described for the app, browser extension, and API that data may be used to improve the models, with opt-out via form; by contrast, no-training is promised for Enterprise data and other areas. This argues against a universally simple assessment of the entire product usage.
Server location
The website states multiple times that services or inference are hosted in the European Union on EU-based infrastructure and that EU data residency is guaranteed. Specific countries, cities, or individual data centers in the EU/EEA are not provided on the website. For optional services or LLMs outside the EU, the website refers to the EU-U.S. Data Privacy Framework or standard contractual clauses.

Link

"AI-powered research assistant"

NotebookLM is an AI-powered research and knowledge assistant by Google that works with your own sources.

You can upload PDFs, Google Docs, Slides, websites, YouTube transcripts, audio, images, Office files, and text, among other things, and use them to generate questions with source references, summaries, mind maps, flashcards, quizzes, infographics, presentations, as well as audio and video overviews.
For teams and organizations, there are sharing options, analytics, higher limits, and – depending on the plan – enterprise/cloud security features.NotebookLM

KI-Recherche-Tool & DenkpartnerWait, I need to translate FROM German TO English. But the input "AI research tool & thinking partner" is already in English.AI research tool & thinking partner

4.7/10 Limited
Free NotebookLM Standard is free to use. It includes up to 100 notebooks per user, up to 50 sources per notebook, up to 500,000 words per source, chat with sources, Audio Overviews, Video Overviews, Reports, Flashcards, Quizzes, Mind Maps, limited Deep Research as well as limited Data Tables, Infographics and Slide Decks. Subscription NotebookLM in Google AI Plus: more notebooks, more sources per notebook, higher chat/audio/video limits, more reports, flashcards, quizzes, deep research, and additional NotebookLM features.

NotebookLM in Google AI Pro: higher limits than Plus, higher Gemini model access, more audio/video overviews, reports, flashcards, quizzes, deep research, data tables, infographics, and slide decks.

NotebookLM in Google AI Ultra: highest limits, highest Gemini model access, very high limits for chats, audio/video overviews, reports, flashcards, quizzes, and deep research; additionally watermark removal for infographics and slide decks. Other NotebookLM upgrades are available not only through Google AI Plans, but also through Google Cloud or qualifying Google Workspace and Workspace for Education plans. For work and school accounts, there are additional access tiers such as Standard, More, Higher, Expanded, and Highest Level Access. When using Workspace/Education, Google notes that uploaded files, chats, and model outputs are not reviewed by human reviewers and are not used to improve generative AI models.
– (0)

Link

GDPR: Unclear On the NotebookLM website, there is information on the handling of training data and the privacy of organizational data. However, for a reliable GDPR assessment for use in the EU/EEA, key details are missing on the NotebookLM domain, such as server locations/data center locations, EU data residency, DPA/AVV, subprocessors, and certifications. Therefore, compliance cannot be reliably demonstrated based on the information found.
Positive
It is positively documented that, according to the website, data from organizations is not used to train NotebookLM. For individual use, the website also states that data is not used for training unless feedback is shared. In addition, it is stated that an organization’s or school’s data remains private and that NotebookLM does not share data with third parties.
Negative
The website does not specify concrete server or data center locations, EU/EEA data residency, a DPA/AVV, a list of subprocessors, on-premise/self-hosting options, or relevant certifications such as ISO 27001 or SOC 2. Without these points, a reliable GDPR assessment for the entire EU/EEA area is not possible.
Server location
Not specified on the website.

Link

“Build something Lovable”

Lovable is an AI-powered app and website builder that enables users to create, iterate on, and publish apps, websites, prototypes, and digital products via chat. The platform combines prompting, visual editing, code mode, GitHub sync, hosting/deployment, as well as backend options via Lovable Cloud or Supabase.Lovable

Create apps and websites by chatting with AI

7.9/10 Good
Free Free entry-level version with daily credits, a monthly credit cap, subdomains, and collaboration capability; suitable for trying out and for simple projects. Subscription Pro Paid individual/creator plan with more monthly credits and more room for serious app projects. Credits are consumed for AI prompts in Plan Mode and Agent Mode.

Business Team-oriented plan with team features, advanced controls, and DPA usage; suitable for professional use in organizations. Other Enterprise Custom Enterprise offering with advanced security, governance, support, and data control requirements.

Credits / Cloud Credits Lovable uses Credits for AI agent prompts; cloud infrastructure such as database, functions, and storage uses separate Cloud Credits.
– (0)

Link

GDPR: Partly For the EU/EEA region, there are several clearly positive indicators on the website: Lovable provides a Terms of Service (TOS) and Privacy Policy (DPA), explicitly references the EU GDPR and UK GDPR, lists Standard Contractual Clauses (SCCs) for transfers to third countries, offers regional data storage within the EU according to its Security page, and documents an opt-out process for AI training. At the same time, GDPR-compliant use is not automatically clear in every standard configuration: The website states that customer data may be used for model improvement by default, as long as no opt-out has been set or requested; furthermore, international transfers and the use of subprocessors remain relevant. Therefore, based on the information on the website, GDPR-compliant use within the EU/EEA is possible, but only under certain conditions and with proper configuration.
Positive
The following have been confirmed: Data Processing Agreements (DPAs) for Business and Enterprise customers; explicit reference to the EU GDPR, UK GDPR, and Standard Contractual Clauses (SCCs); EU data residency in Lovable Cloud with regional data storage in the EU, the U.S., and Australia; documented subprocessor management; certifications or evidence of compliance with ISO 27001:2022 and SOC 2 Type II; and a documented opt-out for training-related data use.
Negative
A limitation is that the website also states that customer data may be used for model training or model improvement unless an opt-out is in effect. The simple, contractually clear process is documented primarily for Business/Enterprise plans; for Free/Pro plans, the documentation states that an opt-out is only available via a support request. Additionally, international data transfers are not excluded but are safeguarded through SCCs and other mechanisms. Fully local operation of the entire Lovable platform on the customer’s own infrastructure is not described on the website as a native product model.
Server Location
The website states that Lovable Cloud offers “regional data hosting in the EU, US, and Australia”; customer data is intended to remain in the selected region. Specific EU country or data center locations are not specified on the pages found.

Link

Automate without limits

n8n is a workflow automation platform for technical teams that combines visual building with code, API connectivity, and AI capabilities.

Workflows, agents, and integrations can be created through a graphical interface, but can also be extended deeply with JavaScript, Python, HTTP requests, custom nodes, and self-hosting when needed. n8n can be run in the cloud or on your own infrastructure.n8n

AI agents and workflows you can see and control

8.1/10 Very good
Free Free version for up to 14 days after sign-up or when self-hosted. As a Community Edition for self-hosting. According to the documentation, every self-hosted installation runs without a license key as a free Community Edition; the website also refers to it as a “standard, self-hosted version.” There is also a free cloud trial period, but no permanently free cloud tier. Important: The Community Edition is licensed under the Sustainable Use License, not under a classic open-source license. Subscription Starter: €20 / month, billed annually; 2.5K workflow executions, 1 shared project, 5 concurrent executions, unlimited users, 50 AI Workflow Builder credits.

Pro: €50 / month, billed annually; custom execution volume, 3 shared projects, 20 concurrent executions, 7 days of insights, 150 AI Workflow Builder credits, admin roles, global variables, workflow history, execution search.

Business: €667 / month, billed annually; self-hosted, 40K executions, 6 shared projects, SSO/SAML/LDAP, 30 days of insights, environments, scaling options, Git source control.

Enterprise: Price on request; cloud or self-hosted, custom execution volume, 200+ concurrent executions, 365 days of insights, external secret store integration, log streaming, extended data retention. According to the pricing page, all paid plans include unlimited users, unlimited workflows, and all integrations; billing is based on workflow executions.

The Help Center article adds that Business is currently only available for self-hosted deployments. Other Community Edition free via self-hosting under the Sustainable Use License. A free trial for Cloud is available and, according to the pricing page, can be started without a credit card. In addition, there is a startup plan with a 50% discount on Business, publicly listed at €333 / month, billed annually, for early-stage startups. In principle, n8n follows an execution-based pricing model, not per task/step.
– (0)

Link

GDPR: Yes According to the information found on the website, n8n can be used in compliance with the GDPR, primarily through the best available method: self-hosting on your own or self-selected infrastructure. For the SaaS version, there are also relevant data protection measures such as DPAs/SCCs and EU hosting. However, according to subprocessors, some AI functions may involve processing in the U.S., which is why the assessment is based on the best overall method of use available.
Positive
Found on the website: DPA/AVV available; for the cloud, EU hosting is specified, specifically Frankfurt, Germany; the security page states that cloud data is hosted in the EU; subprocessors are disclosed; Self-hosting is officially offered and documented; for self-hosting, n8n clarifies that n8n is neither the controller nor the processor because n8n does not manage the data; the Privacy Policy also states that personal data is not used for the development, improvement, or training of AI/ML models.
Negative
Restrictions according to the website: Among the subprocessors, several AI providers with processing in the U.S. are listed; Google Vertex AI is listed as operating in both the EU and the U.S., OpenAI in the U.S., Anthropic in the U.S., and LangChain in the U.S. No general statement was found on the website confirming that all AI processing remains exclusively within the EU. ISO 27001 was not mentioned on the website.
Server Location
For hosted plans: Data is stored within the EU, on servers in Frankfurt, Germany. The security page adds that n8n Cloud uses Microsoft Azure and that the physical hardware and stored data are currently hosted in the EU. The list of subprocessors includes, among others, Microsoft Azure with “EU (Germany, Sweden)” and Hetzner with “Germany” for infrastructure. For self-hosting: “wherever you decide to host n8n” or on your own chosen infrastructure.

Link

Inspiring AGI to Benefit Humanity - free AI chatbot & agent powered by GLM

Zhipu AI is a Chinese large language model provider that operates internationally under the name Z.ai. At its core is the GLM model family for text, reasoning, agents, coding, vision, OCR, image, video, and audio capabilities. The platform offers API access, coding plans, web search, Translation Agent, and Slide/Poster Agent.Zhipu AI / Z.ai – GLM

LLM "Inspiring AGI to Benefit Humanity - free AI chatbot & agent powered by GLM"

3.9/10 Insufficient
Free GLM-4.5-Flash / free quotas
Z.AI describes GLM-4.5-Flash as a free model variant for reasoning, coding, and agents; in addition, free trial quotas may be available depending on the platform status. Subscription GLM Coding Plan
Personally assigned coding subscription for officially supported coding tools; not intended for general API use, resale, or use by third parties. Other API Usage / Usage-Based Billing API access to GLM models, SDKs, OpenAI-compatible usage, streaming, function calling, structured output, context caching, and tool usage; billing is usage-based depending on the model and platform rules.

Enterprise / Individual Agreements Separate written agreements are possible; no confirmed information is available regarding standardized EU enterprise plans or EU hosting.
– (0)

Link

GDPR: No Although the website documents a privacy policy as well as a DPA for API services embedded in the privacy policy, it does not demonstrate fully GDPR-compliant use for the European region. The main factor arguing against this is that, according to the provider’s own statement, it generally provides the services from Singapore and, as a rule, processes customer data in Singapore. An EU/EEA data residency, EU data centers, an EU SaaS offering, on-premise/self-hosting of the actual model, or a European hosting path are not stated on the website.
Positive
Positively documented are a privacy policy, a DPA for API services, the classification of the provider as a processor for customer data in the API context, commitments to process data only on instructions, and the statement that End User Content for API services is not used to develop or improve the services except with explicit consent. In addition, it is stated that content in the API service is not stored but processed in real time.
Negative
The main negative point is that, according to the website, the services are generally provided from Singapore and customer data is, as a rule, processed in Singapore. For international transfers, only general references are made to 'appropriate safeguards' and 'legally recognized transfer mechanisms,' without naming specific EU mechanisms, SCC documents, EU data centers, or EU data residency. Subprocessors, specific server locations, certifications such as ISO 27001 or SOC 2, and an AVA/DPA conclusion process as a separate customer artifact are not stated on the website. A self-hosting or on-premise route for the platform is also not stated.
Server location
The website states that the provider generally provides the services from Singapore, that group companies and commissioned service providers are typically based in Singapore, and that customer data is, as a rule, processed in Singapore. An EU/EEA data center or EU data residency is not stated on the website.

Link

“Open-source orchestration for zero-human companies”

Paperclip is a self-hosted open-source platform for orchestrating teams of AI agents. The tool organizes agents as “employees” with an org chart, roles, budgets, governance, tasks/tickets, heartbeats, and audit trails.

Paperclip is explicitly a Control Plane, not an Execution Plane: the agents run externally via adapters such as Claude Code, Codex, Gemini, Cursor, OpenClaw, shell processes, or HTTP webhooks.Paperclip AI

The human control plane for AI labor

6.6/10 Solid
Free According to the official website, Paperclip is MIT-licensed, self-hosted, and usable without a Paperclip account. It includes agent orchestration, org chart, tickets, governance, cost control, and local/remote deployments. Other possible, but unclear The Terms mention services from Paperclip Labs, including a hosted platform, APIs, telemetry backend, and proprietary features; I could not reliably substantiate any specific public pricing models.
– (0)

Link

GDPR: Yes For the EU/EEA area, Paperclip can be considered usable in a GDPR-compliant manner in the best available usage form, because the website describes a clear self-hosting/local deployment path without requiring a Paperclip account. This allows a user to operate the software in their own EU/EEA infrastructure. The services operated by Paperclip Labs are significantly more critical from a GDPR perspective, because the website mentions data transfers to the USA, does not specify EU data residency, and describes the use of data for improvement and training.
Positive
Positive aspects are the explicit self-hosting approach, the MIT license, the statement 'no Paperclip account required', local execution with embedded Postgres or the user's own Postgres, as well as the possibility of local or remote deployment. For EU/EEA users, this opens a practical way to process data exclusively within their own European infrastructure.
Negative
Negative is that, for the services operated by Paperclip Labs, the website specifies neither EU data centers nor EU data residency, DPA/AVV, subprocessors, or certifications. The privacy policy also states that data may be transferred to the USA. In addition, the website describes that data may be used to improve the services and to train or improve machine-learning models and algorithms; this is explicitly mentioned for detailed telemetry.
Server location
For self-hosting, the server location can be freely chosen by the user and may be within the EU/EEA area. For the services operated by the provider, no specific server or data center location is stated on the website; the privacy policy merely states that data may be transferred to and processed in the USA, among other places.

Link

Gemini is a broad-based AI product from Google for end users, teams, and developers.

In the Gemini apps, it supports, among other things, writing, planning, brainstorming, Deep Research, Canvas for Docs/Apps/Slides/Code, image and video generation, as well as file analysis.
In Workspace, Gemini is built directly into Gmail, Docs, Sheets, Drive, and more. For developers, there is also an API with Function Calling, Structured Outputs, Grounding, Code Execution, and additional tools.Gemini

Meet Gemini, Google's AI assistant

4.3/10 Limited
Free The Gemini app can be used for free for general AI tasks, such as writing, planning, brainstorming, learning, summarizing, image/camera input, voice interaction, and in some cases app integrations like Gmail, Drive, Maps, or Flights. The free version is functional, but limited in terms of models, usage limits, and advanced features. Subscription Google AI Plus: More access to Gemini, more access to Gemini 3.1 Pro, limited access to Veo 3.1 Lite, Flow, NotebookLM, Gemini in Gmail and other Google products, as well as cloud storage.

Google AI Pro: Includes the Plus features with higher limits; additionally, higher access to Gemini 3.1 Pro, Veo 3.1 Lite, Flow, NotebookLM, Gemini in Gmail/Docs/Slides/Sheets/Meet, and Google AI features.

Google AI Ultra: Highest private subscription tier with the highest limits, access to Gemini 3.1 Pro, Veo 3.1, Deep Think, and Gemini Agent; some features are regionally restricted.

Google Workspace with Gemini: Integrated for businesses in Google Workspace or available depending on the Workspace plan; includes Gemini in Gmail, Docs, Sheets, Slides, Drive, Meet, Chat, Vids, as well as the Gemini app with Basic or Expanded Access.

AI Expanded Access: Workspace add-on for higher limits on advanced AI features such as image generation, video generation, Deep Reasoning, NotebookLM, Workspace Studio, and real-time speech translation.

AI Ultra Access: Workspace add-on with the highest access to advanced AI features, including image/video generation, Deep Reasoning, NotebookLM, Workspace Studio, Whisk, and Project Mariner. Other Gemini API: In addition, there is a Gemini Developer API with a Free Tier and a Paid Tier. Billing is usage-based by model and usage, e.g. via input/output tokens, audio/video/image usage, context caching, grounding, and in some cases batch/standard/priority options.

AI Studio / Developer access: Google AI Studio is the entry point for developers; separate Gemini API terms apply when using the API.

Workspace note: According to Google, private Google AI plans apply to personal Google accounts; Workspace customers should use Workspace add-ons or Workspace plans instead.

Regional restrictions: Individual features such as Gemini Agent, Project Mariner, Flow, or Whisk may be restricted depending on country, language, account type, and age.

Usage limits: Features and limits vary significantly across Free, Plus, Pro, Ultra, Workspace, and API.
– (0)

Link

GDPR: Unclear The Gemini website provides specific information on data protection and control options, particularly regarding the deactivation of “Gemini Apps Activity” for future chats, as well as export and deletion controls. However, for a reliable assessment of GDPR compliance throughout the EU/EEA, the specified domain lacks crucial information regarding EU data residency, specific server locations, data processing agreements (DPAs), subprocessors, and certifications. Therefore, compliance based solely on the website documentation remains unclear.
Positive
User controls for reviewing, managing, exporting, and deleting Gemini data are clearly documented. Additionally, the website states that future Gemini chats will not be used to improve Google’s machine learning technologies if “Gemini Apps Activity” is disabled. The website also mentions broad availability in many countries and refers to business and enterprise options via Google Workspace and Google Cloud, respectively.
Negative
On the negative side, no specific information regarding server or data center locations within the EU/EEA was found on the website. Similarly, the website does not provide clear information on the AVV/DPA, subprocessors, EU data residency, on-premises/self-hosting, open-source components, or relevant certifications such as ISO 27001 or SOC 2. Furthermore, according to the website, the opt-out from training is described only for future chats via the “Gemini Apps Activity” setting; a comprehensive contractual exclusion for all content is not specified on the website.
Server Location
Not specified on the website. No specific server locations or EU/EEA data centers were found on the gemini.google domain.

Link

Intelligent Automation & AI Agents Platform

Mazaal AI combines AI agents with workflow automation. Users can train agents using their own documents, websites, Q&A pairs, and data sources, deploy them as a website widget, in messaging channels, or via API, and connect them to automations that perform actions in third-party systems.

The current website also highlights a browser-based assistant that executes commands directly in any tab.Mazaal

Your Browser, Now on Autopilot

3.6/10 Insufficient
Free Includes monthly AI credits and task credits; according to the homepage, no credit card required. Suitable for testing initial agents, workflows, and integrations. Subscription Basic For individuals who want to automate everyday work; includes AI Credits, Task Credits, all integrations, email support, unlimited workflows, and unlimited AI agents.

Team / Pro The official pages are inconsistent here: the homepage calls it Team, the pricing page calls it Pro. In terms of content, the middle plan is intended for teams that want to scale workflows across multiple tools; it mentions more AI Credits, more Task Credits, all integrations, Priority Support, unlimited workflows, and unlimited AI agents.

Business For organizations with Custom AI and admin control; includes more AI Credits and Task Credits, all integrations plus Custom Integrations, Dedicated Support, unlimited workflows, and unlimited AI agents. Other Enterprise Custom offer for larger requirements; according to the pricing page with unlimited messages/credits, Dedicated Account Manager, and Premium Support.

Additional credits / API / AppSumo special models Mazaal uses AI Credits for model calls and Task Credits for integration runs. According to the documentation, additional credits can be purchased in the dashboard, but only on paid plans. AppSumo-specific plans and special conditions are also mentioned.
– (0)

Link

GDPR: Unclear The website includes a privacy policy, but it explicitly refers to Australian data protection law and does not demonstrate sufficient GDPR compliance for users in the EU/EEA. No reliable information could be found on the website regarding key requirements such as EU data residency, server location, data processing agreements (DPAs), subprocessors, and EU-specific commitments regarding data processing.
Positive
General security measures such as encryption during transmission and storage, access controls, and regular security audits are clearly documented. Additionally, the website explicitly states that Google Workspace API data is not used to train or improve AI/ML models.
Negative
A negative point is that the privacy policy refers to the Australian Privacy Principles rather than the GDPR. The website does not specify a Data Processing Agreement (DPA), a list of subprocessors, a specific EU/EEA server location, EU data residency, Standard Contractual Clauses, or other explicitly EU-related guarantees. The Terms of Service also state that Mazaal may use, store, and process user data to provide and improve the solution; a general contractual prohibition on using any data for training purposes is not clearly documented on the website.
Server Location
Not specified on the website. No specific location of servers or data centers within the EU/EEA was found.

Link

"Where AI agents share, discuss, and upvote. Humans welcome to observe."

Moltbook is a public social platform where AI agents can post, comment, vote, and organize themselves into communities ("Submolts").

Humans are primarily intended as observers. In addition, Moltbook positions itself as an identity layer for agents: developers can build apps in which bots authenticate with their Moltbook identity and bring their reputation with them.Moltbook

A Social Network for AI Agents

3.1/10 Insufficient
Free The website is publicly accessible; people can observe agent activity. For active use, X/Twitter login or developer access is currently relevant. Other Developer Early Access
Early Access for developers who want to build apps for AI agents; mentioned are agent authentication, identity verification, agent marketplace, customer support bots, AI assistant platform, developer tools, and social platform for agents.
– (0)

Link

GDPR: Unclear Although the website includes a privacy policy with a section for UK/EEA data subjects, legal bases, and information on international data transfers, However, the website lacks key information necessary for a robust assessment of GDPR compliance throughout the EU/EEA, particularly regarding specific server and data center locations, EU data residency, data processing agreements, subprocessors, and certifications. Therefore, compliance from an EU/EEA perspective is unclear overall.
Positive
Positive aspects include a published privacy policy, an explicit reference to the rights of UK/EEA data subjects under the GDPR, specified legal bases for certain processing activities, and contact information for data protection inquiries at [email protected]. Furthermore, the policy states that applicable legal requirements will be complied with when transferring data to third countries.
Negative
A negative aspect is that the website does not specify any concrete EU/EEA server locations and explicitly provides for transfers and storage in countries outside the EEA/UK, including the U.S. and Canada. A Data Processing Agreement (DPA), a list of subprocessors, a commitment to EU data residency, an on-premises/self-hosting option, a documented opt-out from AI training, and relevant certifications are not provided on the website.
Server Location
Not specified on the website. The privacy policy only states that data may be transferred to and stored in countries other than the country of origin, including the United States, Canada, or other jurisdictions outside the EEA and the UK. No specific EU/EEA data center location is mentioned.

Link

“Create and edit detailed images”

Nano Banana is Google’s native image AI within Gemini.

The system can generate images from text, edit existing images via prompt, combine multiple reference images, and carry out follow-up changes conversationally.

Officially highlighted features include multimodal understanding, conversational inputs, real-world knowledge, rapid iteration, and, in the Pro variant, clearer text renderings, infographics, localization, and higher resolution.Nano Banana

Imagine almost anything – then create it

4.3/10 Limited
Free Free use with limited access; AI Studio remains free as long as no paid API key is used for paid features. With the API Free Tier, usage may be used for product improvement according to the pricing page. Subscription Google AI Plus More access to Google AI, including the Gemini app, Flow, and NotebookLM; available depending on the region.

Google AI Pro More access to Gemini, Deep Research, Nano Banana Pro, and video/Flow features; Google describes Pro as expanded access for advanced AI use.

Google AI Ultra Highest access tier for advanced Google AI features, higher limits, and expanded creative/productive use. Other Gemini API Paid Tier Usage-based API billing for developers; in the Paid Tier, usage is not used for product improvement according to the pricing page.

Google Workspace / Slides / Vids Add-ons Nano Banana Pro is also relevant in Workspace contexts such as Slides/Vids via Google AI add-ons or limits; specific limits depend on the Workspace/AI plan.
– (0)

Link

GDPR: Unclear For the EU/EEA area, GDPR compliance cannot be reliably verified based on the website. There is a privacy policy and information on data transfers as well as deletion options, but key evidence for data protection-compliant business use in the EU/EEA is missing from the website: no specific server location, no EU data residency, no AVV/DPA, no subprocessor list, no reliable statement excluding model training, and no on-premise/self-hosting option.
Positive
There is a privacy policy on the website. It describes the purposes of data processing, disclosure to 'Service Providers', storage principles, international transfers, and a right to deletion or account management. For EU users, the terms of use state that mandatory consumer protection provisions of the country of residence remain unaffected.
Negative
The website does not specify a specific EU/EEA server location, EU data residency, an AVV/DPA, a subprocessor list, a documented opt-out from AI training, specific certifications such as ISO 27001 or SOC 2, or on-premise/self-hosting. The privacy policy also lists Hong Kong SAR China as the 'Country' and states that data may also be processed and stored outside the user's jurisdiction, without detailing EU/EEA-specific safeguards.
Server location
Not specifically stated on the website. The privacy policy lists Hong Kong SAR China as the 'Country'. At the same time, it states that data is processed at the company's operating facilities and at other locations where parties involved in the processing are located; specific data centers or EU/EEA locations are not mentioned.

Link

Google offers a family of models with the Gemini API for text generation, reasoning, coding, agent workflows, tool use, multimodal prompts, and document-centric processing.

For current API LLMs, Gemini 3.1 Pro Preview, Gemini 3 Flash Preview, Gemini 3.1 Flash-Lite Preview, Gemini 2.5 Pro, Gemini 2.5 Flash, and Gemini 2.5 Flash-Lite are particularly relevant. Older Gemini 2.0 Flash variants are still available, but are already marked as deprecated.Google Gemini API

LLM “AI for every developer”

7.4/10 Good
Free Free or unpaid use with limits; content may be used for product improvement and should not contain sensitive or confidential data. Other Gemini API Paid Tier For production applications with higher limits, context caching, Batch API, access to advanced models, and without using content for product improvement.

Batch / Context Caching / Priority / Flex Additional billing and operational options for controlling cost, latency, and throughput.

Vertex AI / Google Cloud Enterprise-oriented operation with Cloud DPA, IAM, regional endpoints, data residency, monitoring, and zero-data-retention configurations.

Grounding / Tuning / Embeddings / Live API Advanced features for search, context enrichment, model customization, vector search, real-time audio, and multimodal applications.
– (0)

Link

GDPR: Partly For the EU/EEA region, a more privacy-friendly use of the Gemini API based on the provider’s documentation appears to be possible only under certain conditions. On the positive side, according to the additional terms, a DPA applies to “Paid Services,” and prompts and responses are not used for product improvement. On the negative side, Google nevertheless logs prompts and responses for Paid Services for a limited time for security and compliance purposes and may store this data temporarily or in cache “in any country” where Google or its agents operate facilities. The website does not specify an explicit EU data residency or an EU/EEA server location for the Gemini API.
Positive
The website lists three key points for “Paid Services”: processing in accordance with a DPA, no training on prompts or responses for product improvement, and specific notes for EEA users. Additionally, the “Zero Data Retention” page explains that, for certain projects and upon approval, user-identifying content and metadata can be removed before logging, and that individual storage options can be disabled for stateful features.
Negative
The website does not specify a guaranteed EU data residency for the Gemini API or a specific EU/EEA data center location. Rather, the additional terms state that log data for Paid Services may be stored transiently or in cache in any country where Google or its agents operate facilities. Furthermore, data-minimizing configurations such as “Zero Data Retention” and the disabling of certain storage functions require additional prerequisites; according to the website, it is not possible to disable the storage described there for specific functions such as “Grounding with Google Search” or “Grounding with Google Maps.”
Server Location
Not specifically listed on the website as an EU/EEA location. For paid services, it states that log data may be stored temporarily or in cache in any country where Google or its agents operate facilities.

Link

xAI offers Grok models via its API for text generation, reasoning, coding, tool use, document-centric workflows, and agentic research. The current docs focus primarily on Grok 4.20 as the new flagship, as well as on server-side tools such as Web Search, X Search, Code Execution, and Collections Search.

Additionally, xAI documents classic model-listing endpoints such as /v1/models and /v1/language-models.xAI API – Grok

LLM “Build with Grok, the AI model designed to deliver truthful, insightful answers.”

7.1/10 Good
Other Token-based API usage Billing based on input, reasoning, completion, image, and cached prompt tokens per model.

Server-side Tools Additional billing for tool invocations; costs may increase with the complexity of agentic requests.

Credits / API Key API usage takes place via an xAI account, API key, and purchased credits.

Enterprise / ZDR Enterprise customers can use Zero Data Retention so that API requests and responses are not stored.

Voice / Imagine / Batch / Tools Additional product areas for real-time conversations, TTS/STT, image/video generation, batch processing, web search, and structured outputs.
– (0)

Link

GDPR: Partly The website documents several privacy-relevant components for use in the EU/EEA region, but no consistently clear, demonstrable full GDPR compliance for standard use of the xAI API. Positive aspects include statements such as "no training without explicit permission," an Enterprise option for Zero Data Retention, references to a "Data Processing Addendum," as well as to "EU data residency options." At the same time, essential points remain unclear on the provider's website or are only indirectly evidenced: a specific server location or specific EU/EEA data centers are not named, subprocessors are not listed on the website, and a DPA/AVV is mentioned but could not be found in detail on the domain reviewed here. For GDPR-compliant use in the European region, the tool therefore appears realistic only under certain conditions, in particular with an Enterprise setup, DPA/AVV, and ideally Zero Data Retention or explicitly agreed EU data residency.
Positive
Several positive privacy signals can be found on the website: xAI states that API inputs and outputs are not used for training without explicit permission. For Enterprise accounts, there is "Zero Data Retention," meaning API requests and responses are not stored. For the Voice APIs, the website also mentions "GDPR Compliant," "Data processing agreements and EU data residency options," as well as "Regional processing for compliance requirements." SOC 2 Type 2 is also mentioned.
Negative
From an EU/EEA perspective, crucial details are missing from the website or remain vague: specific EU/EEA server locations or named data centers are not provided; subprocessors are not listed on the website; a DPA/AVV is mentioned, but its contents could not be found on the reviewed domain; according to the Security FAQ, the standard API generally stores requests and responses for 30 days unless Zero Data Retention is activated as an Enterprise feature. As a result, a simple blanket GDPR approval for all types of use is not substantiated.
Server location
Not specified on the website. There are references to "EU data residency options" and "Regional processing for compliance requirements," but no specifically named server locations or data centers in the EU/EEA.

Link

“Build production-ready apps through conversation.”

Emergent is an agent-based no-code—or “vibe-coding”—app builder. Natural-language requirements are transformed into complete web and mobile applications, complete with user interface, backend logic, database, authentication, integrations, and hosting. Users can export the generated code via GitHub and continue developing or deploying it outside the platform.Emergent

Build production-ready apps through conversation.

6.0/10 Solid
Free Monthly free credit allowance, access to core platform features, web and mobile experiences, advanced models, and one-click LLM integration. Subscription Standard Free features plus private projects, a larger monthly credit allowance, the ability to purchase additional credits, GitHub integration, and task forking.

Pro Standard features plus a large context window, advanced reasoning, system prompt editing, custom AI agents, high-performance computing, a higher credit allowance, and prioritized support.

Enterprise Custom enterprise plan with higher usage limits, SSO, domain capture, shared workspaces, role-based access control, audit logs, managed hosting, onboarding, and enterprise support. Other Credits Consumption units for AI agents, development steps, and platform usage; the standard plan allows you to purchase additional credits.

GitHub Code Export Full synchronization and transfer of the generated code to your own GitHub repository.

Managed Hosting Hosting, monitoring, authentication, database, and deployment can be provided within the platform.

Enterprise Cloud Deployment Custom deployment within the company’s cloud and governance environment; technical and regional details available upon request.

Integrations and MCP More than 100 integrations, payment providers, APIs, and MCP connections for external systems and workflows.
– (0)

Link

GDPR: Partly The website documents several security-related aspects, such as ISO 27001, SOC 2 Type II, code export, hosting outside the platform, and even self-hosting or on-premises deployments. However, this alone is not sufficient for GDPR-compliant use within the EU/EEA. I was unable to find any reliable information on the website regarding EU/EEA server locations, EU data residency, subprocessors, or a data processing agreement (DPA). On the positive side, however, Emergent describes a way to run generated applications on your own servers, in your own cloud, or on-premises. Therefore, its use is conditional from a GDPR perspective: a more privacy-friendly approach is conceivable through self-hosting or hosting the generated application on one’s own servers, whereas the standard SaaS documentation is too incomplete for the EU/EEA region.
Positive
The website describes full code ownership rights, GitHub sync/export, and deployments to your own servers, your own cloud environments, or on-premises. Additionally, the website lists ISO 27001 and SOC 2 Type II as certifications.
Negative
The website does not specify a concrete EU/EEA server location for the SaaS platform, a guaranteed EU data residency, a list of subprocessors, a locatable AVV/DPA, or a clear statement that prompts, uploads, or outputs are not used for general model training or that an opt-out option is available for this purpose.
Server Location
Not specified on the website. There are references to hosting, managed hosting, and the option to deploy applications on one’s own servers, in one’s own cloud, or on-premises; however, a specific location for the Emergent SaaS servers or data centers within the EU/EEA was not found on the website.

Link

“Projects that practically manage themselves.”

Jira is a cloud and data center platform for project, task, and work management.

In its AI-enabled form, Jira combines classic planning, tracking, and workflows with Rovo AI, for example to create work items from Slack/Teams, summarize content, break down complex work into tasks, and provide agentic assistance and search across the Teamwork Graph.Jira / Atlassian Intelligence

Projects that practically manage themselves

6.9/10 Solid
Free For small teams; unlimited goals, projects, tasks, and forms, limited number of users and limited automations. Subscription Standard More user/team capability, Standard Support, more automations, data residency, and basic scaling.

Premium Everything in Standard plus unlimited storage, 99.9% SLA, 24/7 Premium Support, Project Archiving, Admin Insights, IP Allowlisting, Sandbox, Release Tracks, more automation, and Atlassian Intelligence. Other Enterprise Enterprise scaling, centralized administration, advanced security/compliance features, Enterprise support, and stronger data/AI control.

Marketplace / Rovo / Atlassian Intelligence Additional apps, AI features, agents, search, and automations depending on product and license scope.
– (0)

Link

GDPR: Partly For users throughout the EU/EEA, using Jira with Atlassian Intelligence in compliance with the GDPR is generally possible, but only under certain conditions. Positive aspects include the documented privacy policy, a DPA/AVV, a list of subprocessors, the explicit GDPR commitment, EU data residency for Rovo, and self-managed hosting for Jira Data Center. At the same time, the website indicates that processing for Atlassian Intelligence/Rovo features may also take place outside the EU/EEA—particularly in the U.S.—and that not all components are equally EU-resident. Therefore, to ensure compliant GDPR usage within the EU/EEA, the appropriate deployment model, data residency configuration, and a review of international data transfers are required.
Positive
Atlassian refers to its privacy policy, DPA/AVV, security measures, and list of subprocessors. For Rovo, EU data residency is documented, and Jira can also be operated as a self-managed variant via Jira Data Center on the customer’s own hardware or with IaaS providers. Rovo also mentions SOC 2 and ISO 27001, as well as the statement that LLM providers do not use inputs and outputs to improve their own services.
Negative
The website documents subprocessors and processing locations for Atlassian Intelligence and Rovo that are outside the EU/EEA, including the U.S. Furthermore, data residency is not equally available for all related components; according to the website, it is not available for Forge apps built in Studio. The website does not consistently demonstrate that AI functions operate exclusively within the EU.
Server Location
For cloud data residency, Atlassian lists the regions Europe (Frankfurt) and Europe (Dublin) for the EU. Data residency is available for Rovo. However, the list of subprocessors also includes the U.S. and, in some cases, EEA locations such as Belgium, the Netherlands, and Finland for AI-related processing, depending on the provider. For Jira Data Center, customers can choose the hosting environment themselves.

Link

"AI editing for every kind of video."

Descript is an AI-powered audio and video editor that lets you record, transcribe, edit, and publish content.

A key feature is text-based editing: video and audio editing works similarly to editing a document. Added to that are features like Underlord as an AI co-editor, screen recording, remote recording, AI voices, automatic clips, subtitles, and translation/dubbing.Description

AI editing for every kind of video

7.1/10 Good
Free Free entry for recording, transcription, text-based editing, and limited AI/media usage. Subscription Hobbyist For individuals; watermark-free projects, more media time, and basic AI features.

Creator For active creators and small teams; more media time, more AI credits, and advanced creative AI features.

Business For teams; more media time, more AI credits, Brand Studio, team features, translation/dubbing, and collaboration. Other Enterprise Custom offer with SSO, SCIM, centralized administration, dedicated Customer Success, security documentation, and Enterprise support.

AI Credits / Media Hours Usage is based on media time and AI credits depending on the plan; additional Enterprise and Team quotas are possible.
– (0)

Link

GDPR: Partly Descript provides several pieces of data protection and security information relevant to the EU/EEA region on its website, including a privacy policy outlining EEA rights, a list of subprocessors, information on data encryption, a DPO contact, and statements regarding AI training and opt-out options. At the same time, the website does not specify EU/EEA data residency or EU servers as mandatory options for standard SaaS use; rather, it states that Descript is based in the United States and processes and stores information in the United States. Thus, GDPR-compliant use from an EU/EEA perspective is not generally guaranteed, but is subject to conditions such as careful contract review, third-country transfer assessments, and internal risk assessments.
Positive
Positive aspects include the existing privacy policy, the explicit address to users in the EEA, the designated contact address of the Data Protection Officer, the published list of subprocessors, the statement regarding SOC 2 Type II compliance, the reference to DPAs with third-party providers, and an opt-out option for data sharing for internal AI training purposes. Additionally, Descript describes encryption at rest and in transit.
Negative
From an EU/EEA perspective, it is a negative that the website does not list any EU data residency, any EU/EEA data center, or any on-premises/self-hosting option. The privacy policy states that Descript is based in the U.S. and processes and stores information in the U.S. The subprocessors page lists locations primarily in the U.S. For AI Speakers, the privacy policy also reserves the right to use associated training data for research and development purposes; a general contractual exclusion for any form of training is not comprehensively documented on the website.
Server Location
The website does not specify an EU/EEA server location for customer data in a binding manner. The Security page lists Amazon S3 or Google Cloud as storage locations without guaranteeing an EU region. The privacy policy explicitly states that Descript is based in the U.S. and processes and stores information in the U.S.

Link

“A suite of free AI-powered features …”

Shopify Magic is Shopify’s integrated AI suite for e-commerce workflows.

It supports, among other things, writing product descriptions, blog posts, emails, theme content, suggested replies in customer support, customer segment descriptions, as well as AI-powered image editing in the file editor. The features are generally available for free within Shopify, but the specific availability of individual features may vary depending on the functional area.Shopify Magic

A suite of free AI-powered features …

7.2/10 Good
Subscription Shopify offers testing options; Shopify Magic can be used in the Shopify admin as an integrated AI feature as soon as a suitable Shopify store is being used. Other Basic For small shops; online store, product management, checkout, payment processing, basic commerce features, and access to relevant Shopify features including AI features where available.

Grow For growing merchants; more features, better scalability, and enhanced commerce/reporting options compared to Basic.

Advanced For larger teams and shops; advanced reports, higher scalability, stronger commerce features, and more operational control. Other Shopify Plus Enterprise commerce with individual contracts, greater scalability, enhanced customization, automation, and support features.

Retail / Starter / Agentic / Enterprise / Apps Additional Shopify offerings for POS/retail, simple sales channels, agentic commerce features, enterprise scenarios, and app extensions.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, GDPR-compliant use of Shopify Magic can only be substantiated to a limited extent. Positively documented are a privacy policy for merchants, a DPA, a subprocessors list, a European primary contracting party in Ireland, as well as European storage of certain merchant and customer data at rest for new merchants in Europe. At the same time, Shopify itself documents that despite storage in Europe, international data transfers still take place for processing and that the infrastructure geographically balances data between multiple Google Cloud regions. For Shopify Magic itself, there is also no indication of fully comprehensive, feature-specific EU-only operation, no on-premise/self-hosting, and no explicit opt-out for AI training at the feature level.
Positive
The website documents a DPA, a subprocessors list, information on GDPR-compliant transfer mechanisms, the primary EMEA contracting party Shopify International Limited in Ireland, as well as European data storage of certain data for new merchants in Europe. For Shopify Magic, it is also stated that Shopify does not use a merchant’s store-level data to operate Shopify Magic for other merchants.
Negative
The website does not indicate exclusive EU/EEA processing for Shopify Magic. Shopify explicitly states that even with storage in Europe, international data transfers take place for processing. An explicit opt-out from AI training for Shopify Magic, an on-premise/self-hosting option, and disclosed open-source components of Shopify Magic are not indicated on the website.
Server location
The website states that certain merchant and customer personal data for new merchants in Europe is stored at rest in Europe by default. At the same time, it states that Shopify dynamically balances storage between multiple Google Cloud Platform regions and that even with European storage, international data transfers take place for processing. The subprocessors list includes, among others, AWS headquartered in the USA, Google Cloud Canada Corporation in Canada, and Adyen in the Netherlands. No separate, specific server location is indicated for Shopify Magic itself.

Link

“Leading partner for AI assistants for Swiss network operators and fiduciary firms”

Connect AI develops and operates tailor-made AI assistants for companies, primarily for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services. The core product, Employee GPT, is marketed as a secure alternative to ChatGPT/Copilot for companies that can be operated in Switzerland or the EU. The offering is complemented by AI rollout programs for executives, teams, and companies.Connect AI

AI assistants for businesses, especially for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services

6.5/10 Solid
Subscription Employee GPT / Employee GPT Secure private ChatGPT alternative for companies; according to the provider, with internal knowledge sources, Swiss hosting, no training on customer data, role-based permissions, private container environments, and customer ownership of data, knowledge bases, and chat logs. The pricing logic is described in a blog post as a monthly fee per employee plus a one-time onboarding fee.

AI Customer Support AI agents, help center, personalized responses, knowledge library, analytics and reports, service quality, and multilingual 24/7 support.

Sales Agent Personal sales agent for customers, lead qualification, product recommendations, upselling/cross-selling, audience insights, analytics, and reduction of cart abandonment.

Event Agent / TreuhandGPT / AI Strategy Listed on the website as additional solutions; specific public details on plans and features are not fully verifiably available. Other Customer-specific implementation & operation The Terms and Conditions describe Connect-AI Services as the customer-specific implementation and operation of the Connect-AI platform; fees, packages, usage volume, and term are defined in the respective Agreement.

Onboarding / Consulting / Integrations According to the Employee-GPT blog, the pricing framework includes not only the platform and secure hosting but also training and personal support; specific terms are clarified on a project-by-project basis.
– (0)

Link

GDPR: Partly The website contains several positive statements regarding the privacy-friendly use of Employee GPT in the European context, particularly regarding data storage in Switzerland or the EU, self-hosted open-source models, “cloud or on-premises,” and “no use of customer data for model training.” However, for an assessment covering the entire EU/EEA area, the documentation is not sufficient to warrant an unqualified “yes,” because the general privacy policy also mentions data processing outside the EU/EEA, and there is no clear, detailed evidence—freely accessible on the website—regarding EU/EEA data residency, a list of subprocessors, or certifications. The best available approach appears to be a controlled deployment close to the EU/Switzerland via Swiss/EU hosting or “on-premises,” but this is only partially documented.
Positive
Positive aspects include the product-related statements regarding Employee GPT: “Your data is anonymized and remains in Switzerland or the EU,” “No use of customer data for model training,” “role-based access rights and private container environments,” “Hosting with FINMA-certified partners,” as well as the statement that self-hosted open-source models and hosting preferences—“cloud or on-premises”—are supported.
Negative
A negative or limiting aspect is that the general privacy policy also mentions transfers to third countries and lists Google Cloud and HubSpot; furthermore, it states that recipients may be located outside Switzerland/the EU/the EEA. A publicly accessible, specific list of subprocessors, reliable details on EU data center locations, a clearly described EU data residency model for all variants, and relevant certifications such as ISO 27001 or SOC 2 are not provided on the website.
Server Location
Employee GPT product page: Data remains “in Switzerland or the EU”; it also mentions “Swiss infrastructure” and, for the Swiss models, “no data transfer abroad.” General Privacy Policy: physical data is stored in “Switzerland & Europe,” while electronic data from customers and users is stored on Google Cloud; HubSpot stores data in the U.S., among other locations. Specific individual EU/EEA data center countries are not listed on the website.

Link

"Frontier intelligence, customized to you."

The Mistral API is the developer and enterprise interface for Mistral models.

Through Mistral AI Studio, companies and developers can use models via API, test prompts, build agents, implement RAG workflows, use fine-tuning, manage workspaces, and bill API usage. Mistral offers both open-weight and commercial/premier models.Mistral API

LLM - build, customize, and deploy AI, your way

7.4/10 Good
Free Le Chat Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; not to be equated with productive API usage. Other API / La Plateforme Usage-based API for Mistral models, chat, embeddings, OCR, agents, coding, multimodal models, and developer workflows.

Self-Deployment / Open-Weight Models Selected models can be operated independently or via cloud/enterprise deployments; the range of features depends on the respective model.

Enterprise Private Deployment Customized private deployment for organizations with increased control, security, and scalability requirements.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of the website is generally possible, but this is not consistently and clearly documented in the standard SaaS version. Positive aspects include a published Data Processing Agreement (DPA), explicitly described GDPR roles and data subject rights, documented sub-processor arrangements, and a clear self-deployment/on-premises path for open models. At the same time, for general API/Studio use on the website, there is no clearly documented EU/EEA server location established as the standard for all data processing; furthermore, the website mentions international data transfers using SCCs. Therefore, usage is considered “conditional” rather than clearly and fully substantiated.
Positive
Mistral publishes a privacy policy and a Data Processing Addendum (DPA). In the DPA, Mistral AI is described as a data processor for business use and commits to processing personal data only in accordance with the customer’s documented instructions. Support is provided for data subject rights, DPIA, audits, and data breach notifications. Regarding the API, the documentation states that data sent via the API is not used for model training. Additionally, there is self-deployment for models on the customer’s own infrastructure, as well as a European-hosted compute offering with EU data centers.
Negative
The website does not clearly specify a concrete, binding EU/EEA server location for general Mistral API/Studio SaaS use, nor does it specify a general EU data residency for all customer data. Instead, Mistral also describes international data transfers and refers to SCCs. A specific, publicly accessible list of subprocessors with individual locations was not directly found on the pages reviewed. For some training and model improvement uses, there are opt-out mechanisms or standard exceptions depending on the product and pricing plan, which require additional review without proper configuration.
Server Location
Not specifically stated on the website for general API/Studio data processing. The following was found: Mistral Compute is described as a European-hosted AI cloud with “EU Tier 3+ data centers”; a location in Sweden is also mentioned. Mistral cites SCCs for data transfers outside the EU.

Link

"Specialized language models for a sovereign Europe"

Aleph Alpha offers PhariaAI, a sovereign, customizable end-to-end AI suite for enterprises and public authorities.

The suite includes, among other things, PhariaAssistant for chat, summarization, document analysis, and translation, PhariaStudio for developing and evaluating custom AI applications, as well as PhariaOS for operation and administration. The platform is designed for sensitive, regulated, and business-critical environments and can be operated on-premises, in the cloud, or in a hybrid setup.Aleph Alpha

Trust. Responsibility. Sovereignty

6.8/10 Solid
Other Enterprise / Project Business Customized solutions for companies, authorities, and regulated environments with PhariaAI, specialized language models, APIs, data integration, and compliance architecture.

PhariaAI / PhariaInference API Programmatic access to Aleph Alpha functions via APIs such as PhariaInference, PhariaData, PhariaSearch, and PhariaStudio.

Government / Sovereign Deployments Sovereign deployments such as Pharia Government Assistant with EU hosting, data isolation, and specific compliance commitments.
– (0)

Link

GDPR: Yes From an EU/EEA perspective, GDPR-compliant use in accordance with the best practice documented on the website is plausible because Aleph Alpha explicitly positions its AI suite on European infrastructure, offers flexible deployment options—including its own data centers and infrastructure—and provides installable PhariaAI documentation for customer-side deployments. This provides a straightforward path to data-sovereign use within the EU/EEA, even though the website does not publicly disclose all detailed evidence for individual compliance points regarding the managed/SaaS variant.
Positive
Positive aspects include the clear focus on “European infrastructure,” the statement that every model runs on European infrastructure, the documented installability of PhariaAI, the explicit option for infrastructure “in the cloud and in the customer’s own data center,” the documented hybrid deployment, and the privacy policy, which references data processing agreements for website service providers.
Negative
Negative or incomplete aspects include the fact that the website does not provide a dedicated DPA for product customers, does not publish a list of subprocessors for the actual product, no explicit opt-out or contractual exclusion of model training using customer data, no clearly specified EU data residency for a standard SaaS product instance, and no certifications such as ISO 27001 or SOC 2 listed on the website.
Server Location
The website repeatedly mentions “European infrastructure.” In addition, Aleph Alpha describes its own AI data center, “alpha ONE,” in Germany and mentions a PhariaAI-as-a-Service partnership on European infrastructure with STACKIT. However, a specific, universally applicable server location for all product variants is not conclusively specified.

Link

AI-powered video platform for avatar-based business videos.

Synthesia is an AI video platform that enables companies to create professional videos without a camera, studio, or actors.

Content can be transformed from a prompt, script, document, PDF, or URL into multi-scene videos and then refined with avatars, voices, branding, and translations. The clear focus is on training, sales enablement, marketing, and internal communication.Synthesia

The #1 AI video platform for business

7.7/10 Good
Free Free entry with AI video creation, limited credits, limited video minutes, and a small selection of AI avatars. Subscription Starter Everything in Basic plus video downloads, AI Video Assistant, AI Dubbing, removal of the Synthesia logo, your own Personal Avatars, more avatars, support, and credits.

Creator Everything in Starter plus more Personal Avatars, API access, branded video pages, multiple avatars per scene, interactive videos, more AI avatars, priority support, and more credits. Other Enterprise Custom Enterprise plan with unlimited video minutes, translation, many stock avatars, unlimited Personal Avatars, SAML/SSO, live collaboration, Brand Kits, SCORM export, onboarding, dedicated CSM, and custom credits.

Credits / API / Custom Avatar Synthesia uses credits as a shared currency for AI usage features; custom Personal Avatars are included depending on the plan or expanded on the Enterprise side.
– (0)

Link

GDPR: Partly The website documents several key building blocks for GDPR-compliant use in the EU/EEA region: privacy policy, DPA/AVV, named subprocessors, EU storage in Ireland as well as backups in Frankfurt, and international transfer mechanisms via SCCs. At the same time, the website lists numerous subprocessors outside the EU/EEA, and the published DPA version even describes the inclusion of data in an AI training dataset. Therefore, GDPR-compliant use in the EU/EEA appears possible only under certain conditions, in particular after reviewing the specific contractual situation, the activated features, and the third-country transfers.
Positive
Positive aspects include the DPA/AVV documented on the website, the subprocessor list, EU data storage in Ireland with secondary backups in Frankfurt, an EU GDPR representative in Denmark, as well as stated certifications such as ISO 27001, ISO 42001, and SOC 2 Type II.
Negative
A negative aspect is that, according to the website, transfers outside the UK and EEA may take place and numerous subprocessors are located in the USA or other third countries. In addition, the published DPA version contains a passage on the use of data for an AI training dataset. No explicit general opt-out statement for AI training was found on the website. On-premise or self-hosting options are not indicated on the website.
Server location
According to the website, customer data is currently stored in the EU in data centers in Ireland; operational backups are also located in Ireland, with secondary backups in the AWS Frankfurt region. In addition, the website describes data transfers to the USA within AWS services using SCCs. According to the subprocessor list, further processing also partly takes place via providers outside the EU/EEA.

Link

“Your OpenClaw Ready for You” / “The #1 OpenClaw Hosting Platform”

MyClaw.ai is a managed hosting service for OpenClaw, an open-source personal AI assistant. According to its own description, MyClaw provides a private, dedicated OpenClaw instance and handles servers, updates, maintenance, backups, and operations so that users can use OpenClaw without having to install it themselves. OpenClaw itself is an agent that can be contacted via chat channels such as WhatsApp, Telegram, Slack, Discord, Signal, iMessage, or Microsoft Teams and can perform tasks through apps, files, browsers, calendars, email, and APIs.OpenClaw

A Personal AI Assistant … works 24/7, no setup needed.

6.1/10 Solid
Free OpenClaw Self-Hosting / local installation OpenClaw itself is described as free open-source software and can be operated locally or on your own infrastructure; users must handle setup, updates, security, model access, and maintenance themselves.

MyClaw Free Version No confirmed permanently free MyClaw free version found on the official pricing page. The pricing page lists paid managed hosting plans; a free trial is not clearly substantiated in the visible pricing content. Subscription Lite Managed OpenClaw hosting for personal projects and getting started; includes zero setup, instant access, personal AI assistant, 24/7 operation, automatic updates, private encrypted instance, daily backups, and smaller guaranteed resources.

Pro Advanced managed hosting plan for power users with more resources than Lite, priority support, automatic maintenance, encrypted isolated instance, daily backups, as well as custom skills and integrations.

Max Plan for more intensive workloads with even higher resources, 24/7 operation, automatic updates, private encrypted instance, daily backups, and priority support.

Ultra Highest officially listed managed hosting plan for demanding workloads with scalable high-performance resources, isolated instance, encrypted access, backups, custom skills, integrations, and priority support. Other AI Balance & Credits MyClaw mentions AI Balance & Credits in the Refund Policy; used credits are non-refundable, unused balance may be refunded upon request. The specific functional logic or model costs are not fully confirmed in the reviewed official sources.

External AI Model Providers MyClaw Terms indicate that the service may be integrated with third parties such as AI model providers and that their own terms apply; the specific supported providers and privacy policies must be reviewed for each configuration.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, the website does provide a privacy policy and a separate GDPR notice with legal bases, data subject rights, and information on international data transfers. At the same time, the website does not specify a concrete EU/EEA server location, no EU data residency, no AVV/DPA, no subprocessors list, and no certifications. In addition, the privacy policy mentions possible processing and transfers outside the jurisdiction, including the USA. On the positive side, according to the website OpenClaw is open source and, according to comparison and learning pages, can also be operated locally or on one's own server; this route would be the most privacy-friendly for EU/EEA users, but it is not offered by MyClaw itself as a simple, documented managed EU compliance path. Therefore, GDPR-compliant use from an EU/EEA perspective is only possible under certain conditions and with independent review.
Positive
The website includes a privacy policy as well as a separate GDPR notice for the EEA/UK. MyClaw describes isolated private instances, encrypted access, backups, and states that data is not used for general AI training. For connected Google services, it is also additionally explained that Google Workspace API data is not used to develop, improve, or train generalized AI/ML models. In addition, OpenClaw is presented as open source, and local installation as well as self-hosting on your own VPS are explicitly mentioned as usage options.
Negative
The website does not specify a concrete server/data center location, EU data residency, an AVV/DPA, a subprocessors list, explicit EU/EEA hosting evidence for the managed version, or relevant certifications such as ISO 27001 or SOC 2. The privacy policy is also itself described as a draft that is still to be legally reviewed before publication. In addition, the website mentions possible international data transfers, including to the USA.
Server location
Not specified on the website. There are references to managed cloud hosting, dedicated or isolated instances, and private containers, but no specifically named server location, no named data center, and no confirmed EU/EEA data residency.

Link

“Turn text into video with AI”

HeyGen is an AI video platform that enables the creation, localization, and personalization of avatar-based videos from text, images, audio, presentations, or templates.

The product includes, among other things, AI Studio, Video Translation, Digital Twins, Voice Cloning, Video Agent, as well as API, CLI, and MCP access. Officially, HeyGen states that it has 100,000+ teams on the web platform and 1,000,000+ developers on the developer platform.HeyGen

Turn text into video with AI

7.2/10 Good
Free Limited number of short videos, custom digital twin, standard processing, stock avatars, 720p export, sharing/download, as well as trial access to premium features. Subscription Creator For solo creators; longer videos, Custom Digital Twin, unlimited Photo Avatars, many Stock Video Avatars, Voice Cloning, many languages, faster processing, 1080p, Brand Kit, and watermark removal.

Pro For advanced individuals; everything in Creator plus significantly more premium usage, faster processing, translation script editing, and 4K export.

Business For teams/businesses; everything in Creator plus more generative usage, multiple Custom Digital Twins, centralized billing, Auto-Reload Credits, team members, Workspace Collaboration, comments, interactive videos, Screen Recorder, SCORM export, LMS and automation integrations. Other Enterprise Custom offer with unlimited videos, no maximum video duration, 4K, fastest processing, multi-workspace control, role management, SCIM, MFA, commercial contract terms, priority support, dedicated CSM, and onboarding.

API Pricing Separate API access for developers and product teams; HeyGen refers to a separate API pricing overview.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of HeyGen is only plausible under certain conditions that are properly documented; it is not considered standard use that is entirely unproblematic. Positive aspects include an available DPA, SCCs, the EU-US Data Privacy Framework, a European DPO, and documented sub-processor arrangements. However, a negative aspect is that, according to the website, all customer data is stored on AWS in the U.S., and the website does not specify any EU/EEA data residency, any EU data center, or any on-premises/self-hosting option. For standard SaaS in the EU/EEA, a third-country transfer to the U.S. therefore remains an inherent part of the service.
Positive
The website documents a privacy policy, a Data Processing Addendum, SCC information for EU/UK/Switzerland transfers, EU-US DPF certification, a DPO based in Europe, SOC 2 Type II, and an opt-out from AI training. For Enterprise customers, data use for AI training is excluded by default.
Negative
The website states that all HeyGen customer data is stored in the U.S. on AWS. The website does not specify EU data residency, EU/EEA data centers, a private cloud option in the EU/EEA, a hybrid model, or on-premises/self-hosting. Furthermore, according to the privacy policy, HeyGen reserves the right to process data for its own purposes, including service improvement and AI model training; for non-enterprise customers, the only option mentioned is to opt out by contacting the company.
Server Location
According to the website, the services are hosted on AWS in the U.S.; all customer data is stored in the U.S. EU/EEA server locations are not specified on the website.

Link

"AI-Powered Professional Document Translation Tool"

Doclingo is an AI tool for translating PDF, Office, and scanned documents, with a focus on preserving layout, OCR, bilingual output, and post-editing.

Supported formats include PDF, Word, PPT, Excel, images, and others; there are also features such as a glossary, online editing, document chat, highlight-to-translate, and API integration.Doclingo

AI-Powered Professional Document Translation Tool

3.5/10 Insufficient
Free On the pricing page, visitors and registered users are listed as usage tiers; included are document-related translation features with restrictions. Specific limits are not always displayed cleanly on the rendered page. Subscription Premium Includes extended premium benefits such as more download/translation usage, batch upload, history, engine selection, online editing, document conversation, glossary, image translation, OCR, premium customer service, watermark removal, PDF tool usage, and AI proofreading.

Premium+ Extended premium tier with higher limits/additional benefits compared to Premium; the page mentions Premium+ and additional booster/discount benefits, but some limit values are publicly displayed as “undefined.” Other Booster Package / Character Pack as a one-time, non-auto-renewing model; according to the Help Center, usable with the same premium benefits and no time limit. For API usage, character-based quotas apply; if the quota is exhausted, you can buy Booster Packages or upgrade to higher memberships. For larger volumes, a Bulk Purchase / Discount Quote is offered via Sales contact. According to the official help, payments are processed via PayPal and Stripe; invoices are issued through Stripe.
– (0)

Link

GDPR: No The documentation available on the website does not demonstrate GDPR-compliant use for the EU/EEA region. On a positive note, according to the privacy policy, uploaded translation content is to be used solely for the translation function and, once the process is complete, should be deleted or anonymized whenever possible. However, several factors indicate that the service is not robustly compliant with the GDPR: According to the website, data is generally stored in China; EU/EEA data residency is not specified; a Data Processing Agreement (DPA) is not listed on the website; subprocessors are not transparently documented in a complete list; and the governing law and jurisdiction in the privacy policy refer to the People’s Republic of China.
Positive
A privacy policy is available on the website. It states that translation content is processed solely for the purpose of providing the translation feature and should be deleted or anonymized as soon as possible after the translation is complete. Additionally, the website lists SOC II compliance as a positive aspect.
Negative
The website does not mention EU/EEA hosting. Instead, it states that personal data is generally stored within the People’s Republic of China. A Data Processing Agreement (DPA) is not provided on the website. A complete list of subprocessors is not provided on the website. EU data residency, on-premises hosting, self-hosting, and an explicit opt-out from AI training are not mentioned on the website. The privacy policy is governed by the laws of the People’s Republic of China and designates Wuhan as the competent jurisdiction.
Server Location
According to the privacy policy, personal data is generally stored within the People’s Republic of China. If cross-border transfers occur—for example, in the case of international cloud services—the provider states that it will implement protective measures. No specific server or data center location in the EU/EEA is listed on the website.

Link

“Design PCBs with AI” and “If you can type, you can build”

Flux is a browser-based electronics and PCB design tool with an AI assistant for schematic creation, component research, BoM generation, simulation, placement, routing, design rule checks, and manufacturing export. The platform combines ECAD capabilities with live component data, collaborative editing, and AI-powered hardware development.Flux AI

Design PCBs with AI and If you can type, you can build

6.2/10 Solid
Free Two-week trial period Time-limited access to premium features with limited AI usage and access to all core features.

Free account after the trial period Access to public projects and the community; private project editing, exports, AI usage, and other professional features require a paid plan. Subscription Explore Entry point for learning and experimentation; includes AI Hardware Engineer, guidance, project planning, design, simulation, placement, routing, unlimited manual editor use, and the full electronics design suite.

Build For your first custom boards; includes Explore features plus a significantly higher monthly AI allowance and optional usage-based AI expansion.

Pro For complete product development; includes Build features plus a significantly higher AI allowance, discounted usage-based AI expansion, and hands-on support from electrical engineers.

Teams Organization plan with AI Chat, AI Task Completion, a shared ACU pool, Pro features, a team workspace, and centralized billing.

Enterprise Customized enterprise offering with Team features plus private workspaces, enhanced privacy & security, expanded export formats, SOC2, SLA, security audits, vendor onboarding, and invoicing. Other ACUs / Agent Compute Units Usage units for AI chat and AI workflows; monthly included quotas depend on the plan and can be expanded depending on the plan.

Pay-as-you-go AI usage Optional additional AI usage beyond the monthly quota; available depending on the plan.

Enterprise Security & Support Security audits, SOC reports, SLA, prioritized support, onboarding, and enterprise administration upon request.
– (0)

Link

GDPR: Partly From an EU/EEA perspective, GDPR-compliant use is not clearly established as standard SaaS. Positive aspects include a published privacy policy with explicit GDPR reference, a subprocessor list, and the indication that a 'Data Protection Agreement' applies for certain services. At the same time, the website states the USA as the storage and processing location; according to the website, the listed subprocessors also process data in the USA. EU data residency, EU data centers, on-premise, or self-hosting options are not specified on the website. Therefore, use in the EU/EEA is only justifiable under additional contractual and organizational conditions, not as a clearly unproblematic standard solution.
Positive
The website includes a privacy policy with information on legal bases under GDPR, data subject rights, and deletion options. In addition, there is a separate subprocessor list that explicitly refers to a 'Flux Data Protection Agreement'. For Enterprise, 'Enhanced privacy & security' and 'SOC2' are also mentioned.
Negative
The privacy policy states that Flux stores and processes data in the USA. The subprocessor list consistently identifies 'United States' as the processing location for infrastructure, communication, payments, instrumentation, and AI services. EU data residency, EU/EEA data centers, a published AVV/DPA text, SCC references, on-premise, self-hosting, or a clear contractual exclusion of AI training with customer data are not specified on the website.
Server location
According to the privacy policy, Flux stores and processes the collected information in the USA. According to the subprocessor list, the processing locations of the listed subprocessors are also in the USA. An EU/EEA server location or EU data residency is not specified on the website.

Link

"Boost your team with AI Agents" / "Automatically record, transcribe, and summarize meetings with AI notetaker…"

Noota is a European SaaS platform for Conversation Intelligence, AI Meeting Notes, transcription, meeting summaries, email agents, telephony, knowledge search, and recruiting/sales workflows. The tool records meetings or calls, transcribes conversations, creates structured summaries, follow-up emails, reports, and makes meeting, call, and email knowledge searchable.Noota

Boost your team with AI Agents” / “Automatically record, transcribe, and summarize meetings with AI notetaker…

7.5/10 Good
Free Free entry for individuals; includes unlimited recording & transcription, monthly AI notes minutes, limited storage, email automation, Chrome extension, as well as iOS/Android app. Subscription Pro For individuals and small teams; includes everything in Free plus more AI Notes minutes, Team Workspace up to a limited team size, unlimited integrations, and AI Agents.

Business For fast-growing companies; includes everything in Pro plus unlimited recording, paid unlimited seats, unlimited AI features, Custom Templates, Zapier & API, Analytics, and AI Infrastructure. Other Enterprise Custom offer for larger teams; includes everything from Business plus unlimited usage, payment by invoice, custom integration, SSO, dedicated support, and business telephony.

Business Telephony / Phone Add-on module for VoIP telephony, domestic calls, local numbers from multiple countries, iOS/Android calling, click-to-call in the browser, and a bring-your-phone option depending on country regulations.

API / Zapier / AI Agents Advanced automation for workflows, integrations, CRM/ATS synchronization, follow-ups, analytics, and knowledge base queries.
– (0)

Link

GDPR: Partly Noota's website documents several building blocks relevant for the EU/EEA region: explicit GDPR references, EU data centers, a data processing agreement included in the contractual framework, as well as statements that customer data is not used to train general models. At the same time, important points remain incompletely or inconsistently documented: the exact server location is described partly as EU data centers in France, Belgium, and the Netherlands, and partly as exclusively in France; a specific list of subprocessors is not provided on the website; relevant certifications are presented partly as being in preparation and partly as already existing. From the perspective of a user in the European region, GDPR-compliant use is therefore only reliably supportable under certain conditions and after conducting one's own contractual review.
Positive
Positive are the statements regarding EU data residency, isolated environments in European data centers, encryption, customizable retention periods, an organization-wide 'text-only' option, a DPA included in the contractual framework, and the statement that data is not used to train generalized AI models. An on-premise configuration is also mentioned for companies.
Negative
Negative is that several key points are not clearly and consistently documented on the website: a specific list of subprocessors is not provided, the server locations are described inconsistently, an explicit and easily findable separate DPA download is not provided, and there are contradictory statements regarding ISO 27001 and SOC 2 between 'ongoing/in preparation' and 'certified'. This leaves documentation risk for a reliable EU/EEA assessment.
Server location
The website mentions EU/European locations. The security page refers to European data centers in France, Belgium, and the Netherlands, as well as Google Cloud Platform with Google KMS. Other subpages, however, state that all data is hosted on servers in France. This confirms EU data residency, but the exact production location is described inconsistently on the website.

Link

"Create Videos Without Limits" / "Turn any idea into videos. Ads, explainers, stories, anything you can imagine."

invideo AI is an AI video platform for prompt-to-video, AI Video Generator, AI Avatars, image-to-video, UGC Ads, AI Animation, AI Ad Generator, Video Translator, Voice Cloning, subtitles, image generation, and classic video editing via invideo Studio.invideo AI

Turn any idea into videos. Ads, explainers, stories, anything you can imagine.

4.1/10 Limited
Free Free use without a credit card; limited access to AI models, weekly reset quota, exports with the InVideo logo and stock media watermark. Subscription Plus Paid entry-level plan for exploratory use; access to paid AI/video features, credits, stock providers, and watermark removal compared to Free.

Max Expanded plan for occasional or more intensive use with a larger credit allowance than Plus and access to the paid-plan features.

Generative Plan for daily use of generative models; according to the Help Center, particularly relevant when Plus/Max credits are quickly used up through regular video generation.

Enterprise Customized enterprise offering with private/secure workflows, SOC 2/ISO alignment, GDPR compliance, Context Engine, Custom Agents, Eval & Quality, Parallel Generation, Data Isolation, Audit Trails, Access Controls, IP protection, and a no-training commitment. Other Credits Credits are the internal currency for media clips, videos, generative models, and AI features; downloads/exports do not consume credits, and according to the Help Center, unused credits do not roll over to the next month.

redit Add-ons If credits are used up, users can, according to the Help Center, purchase one-time credit add-ons or switch to a higher plan.

Third-party models Paid Plans include access to many image, video, audio, and music models; model and agent pricing may change and is partly based on provider pricing.

invideo Studio Separate classic video editor with a timeline/template workflow; not identical to invideo AI.
– (0)

Link

GDPR: No For the European region, the website does not document a reliable basis for use that is fully GDPR-compliant. Although invideo states “GDPR Compliant” on its homepage and refers to “SOC 2 & ISO Aligned,” the website lacks verifiable information regarding EU data residency, specific server or data center locations within the EU/EEA, an accessible Data Processing Agreement (DPA), and a list of subprocessors. Additionally, the privacy policy permits global data transfers to third parties and to countries outside the user’s country of residence. Consequently, the website’s documentation does not demonstrate compliance for EU/EEA users.
Positive
The website includes a privacy policy, information on data subject rights, options to delete account data and certain biometric data, as well as a marketing statement indicating “GDPR Compliant” and “SOC 2 & ISO Aligned.” The website also describes the use of TLS/SSL for data transmission and encrypted backups.
Negative
The website does not specify a specific Data Processing Agreement (DPA), a list of subprocessors, an EU/EEA server location, EU data residency, on-premises or self-hosting options, or an opt-out from general AI training. The Terms of Service also state that users grant invideo the right to use AI-based output to improve AI security measures, technologies, products, and services. The Privacy Policy further provides for global transfers to third parties and to countries outside the user’s country of residence.
Server Location
Not specified on the website. The Privacy Policy mentions global transfers and processing worldwide, but does not specify a specific server or data center location in the EU/EEA.

Link

Leading AI models on a secure platform operated in Germany.

DeutschlandGPT provides models such as GPT, Claude, Gemini, Llama, and Mistral through a single interface. Users can chat, analyze documents and images, perform real-time web searches, configure their own assistants or specialized applications, and integrate external business systems. The platform is designed for individual users, teams, companies, and public or data-sensitive organizations.GermanyGPT

Leading AI models on a secure platform operated in Germany.

7.6/10 Good
Free Try it for free: A permanently free plan with a limited number of daily messages, custom prompts, and limited file and image analysis. Subscription Pro All leading AI models, projects, integrations, specialized applications, and higher usage limits.

5x Pro Pro features with significantly higher usage limits for more intensive individual use.

Business Pro features plus centralized user management, white labeling, prioritized support, and configurable retention periods; for SMBs and teams.

Enterprise Business features plus custom domain, SAML SSO, SCIM provisioning, Customer Success Manager, dedicated onboarding, invoice billing, and AI training. Other Enterprise Trial Access Time-limited trial access for larger organizations, available by arrangement.

Germany GPT API Usage-based access to various AI models; billing depends on the model and token consumption.

Fair Use Model Paid platform plans have higher limits but are subject to rules against automated bulk usage and resale.
– (0)

Link

GDPR: Yes The website outlines a concrete, actionable GDPR compliance path for the entire EU/EEA region. DeutschlandGPT describes data processing in EU data centers, persistent storage in Germany, a published data processing agreement (DPA) in accordance with Article 28 of the GDPR, designated subprocessors, and a documented “no training” approach. In addition, the website highlights a particularly privacy-strong operational approach using the self-hosted open-source model Llama 3.3 70B on dedicated, isolated servers in Germany. From an EU/EEA perspective, this documents a clearly substantiated path to GDPR-compliant use.
Positive
The following are positively documented: EU/Germany hosting, AVV, a list of subprocessors, no training using user data, ISO 27001, BSI C5-related hosting information, and a self-hosted open-source path for Llama 3.3 70B on dedicated infrastructure in Germany.
Negative
A limitation is that while the website describes EU processing and storage in Germany, it does not explain a separate data residency or transfer logic for every single service in a fully granular manner for all processing activities. Furthermore, the AVV list includes Sentry, a service based in the U.S.; while the website lists the “EU” as the place of processing, it does not provide further details regarding any international access or transfer mechanisms.
Server Location
The website lists several server/processing locations: persistent core data on the Open Telekom Cloud in Germany, specifically in Magdeburg and Biere; general AI processing exclusively within the EU, for example in Frankfurt, Ireland, or Sweden; for individual model paths, the website lists Microsoft Azure in the EU, AWS in Germany, Google Vertex in the EU, IONOS in the EU, and self-hosted Llama on dedicated Open Telekom Cloud servers in Germany.

Link

"The essential AI stack for your company. Simple for business users. Ready for advanced use cases."

Langdock is an enterprise-focused AI platform with chat, agents, workflows, integrations, knowledge search, and API access.

Companies can use it to centrally roll out generative AI, search internal knowledge bases, build automations, and run their own AI applications on a shared platform. Langdock officially positions itself as a model-agnostic platform for secure AI adoption in the enterprise.Langdock

The essential AI stack for your company. Simple for business users. Ready for advanced use cases

7.2/10 Good
Free Free trial period without a credit card to test the platform. Subscription Chat & Agents Basic subscription for model-agnostic AI chat and custom AI agents; usage limits included per user.

Business / Business Max Business offers standard limits; according to the docs, Business Max offers multiple times the usage limits for power users. Other Workflows Add-on Add-on for automations; Starter is included, Business offers higher execution volumes, Custom individual limits.

API Unified API for multiple models; Langdock charges a markup on model provider prices when using the API.

Enterprise Deployment Single-tenant SaaS, bring-your-own-cloud, or on-premise depending on company size and security requirements.
– (0)

Link

GDPR: Yes On its website, Langdock provides several clear building blocks for GDPR-compliant use throughout the EU/EEA: T&Cs/Privacy Policy, processing predominantly within the EU or EEA, EU hosting for multi-tenant SaaS, dedicated deployment options, self-hosting or on-premises, and statements regarding “no model training.” Since hosting on the customer’s own infrastructure and “bring your own cloud” are also explicitly offered, a straightforward path to GDPR-compliant use within the EU/EEA context is documented. One limitation is that, according to the AVV, data transfers to third countries are possible if the customer actively activates an LLM with a server location outside the EU.
Positive
Positive aspects include the available AVV/DPA, the statement that the processing of customer data generally takes place within the EU or an EEA member state, EU hosting of the multi-tenant SaaS, self-hosting and “bring your own cloud,” the documented list of subprocessors, “no model training” for customer data, and the mentioned ISO 27001 and SOC 2 Type II certifications.
Negative
A negative or limiting aspect is that the website does not guarantee that all processing will exclusively take place within the EU/EEA for every conceivable model configuration. The General Terms and Conditions of Service explicitly state that transfers to a third country are possible at the direction of the controller, for example, if an LLM with a server location outside the EU is activated. Furthermore, no clear, detailed evidence regarding open-source components was found on the website.
Server Location
The website states that the multi-tenant SaaS is hosted on servers within the EU via Microsoft Azure. It also states that the processing of customer data generally takes place within the European Union or a member state of the EEA. The list of subprocessors in the General Terms and Conditions (AVV) includes Microsoft Ireland Operations Limited, which processes data within the EU for hosting and Azure LLMs, as well as Amazon Web Services EMEA SARL, which processes data within the EU for AWS LLMs.

Link