Find Your Tool in 6 Steps
Result: 158

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 158
Research Images Video Music Agent Business Marketing Website API

Chat with Grok — the truth-seeking AI chatbot

Grok is a generative AI assistant from xAI, available on grok.com, iOS, Android, and on X.

It supports text and voice chat, coding and reasoning tasks, image/video generation, as well as document analysis. In addition, Grok can search the web and public X content in real time to provide more up-to-date answers.Grok

Chat with Grok — the truth-seeking AI chatbot

3.4/10 Insufficient
Free xAI has officially rolled out Grok 4.1 to all users on grok.com, X, iOS, and Android. The consumer FAQs describe, among other things, text/voice interaction, photo uploads/editing, and document analysis, but exact free limits are not publicly specified numerically. Subscription X Premium: from USD 8/month or USD 84/year on web; according to X, includes increased usage limits on Grok. X Premium+: from USD 40/month or USD 395/year on web; includes higher limits on Grok.

SuperGrok: officially exists; confirmed on grok.com and in xAI/X sources, but no reliably extractable public price figure is verifiable in the official sources accessible here – as of 16.04.2026.

SuperGrok Heavy: officially exists; provides access to Grok Heavy; likewise without a reliably extractable official price figure here.

Grok Business / Grok Enterprise: officially available; team workspace, secure sharing, enterprise privacy, and for Enterprise also custom retention; specific public standard prices could not be reliably verified in the accessible official sources. Other API / token-based: e.g. grok-4.20-reasoning at 2.00 USD / 1 million input tokens and 6.00 USD / 1 million output tokens; grok-4-1-fast-reasoning at 0.20 / 0.50 USD. According to the xAI Docs, server-side tools cost, among other things, Web Search 5 USD / 1,000 calls, X Search 5 USD / 1,000 calls, Code Execution 5 USD / 1,000 calls, Collections Search 2.50 USD / 1,000 calls; in addition, there are storage costs. X Premium Business: Basic 200 USD/month or 2,000 USD/year; Full Access 1,000 USD/month or 10,000 USD/year plus affiliate fees; includes Premium+ benefits and explicitly mentions SuperGrok. X Premium Organizations: Full Access 1,000 USD/month or 10,000 USD/year plus affiliate fees; includes Premium+ benefits including access to SuperGrok.
– (0)

Link

GDPR: Unclear The Grok website includes a link to a privacy policy, but I was unable to find any reliable information on the website regarding key points essential for a sound GDPR assessment within the EU/EEA, such as server location/data centers, EU data residency, data processing agreements (DPAs), subprocessors, certifications, and on-premises/self-hosting, I was unable to find any reliable information on the website. Consequently, based on the website documentation alone, it is not possible to reliably verify that the service is usable in compliance with the GDPR within the European region.
Positive
On the positive side, grok.com provides direct links to a privacy policy and a cookie policy, and the website displays a privacy consent section for cookies.
Negative
On the negative side, no reliable information was found on the website regarding EU/EEA data residency, specific data center locations, the Data Processing Agreement (DPA), subprocessors, the option to opt out of AI training, open-source components, or relevant certifications. The documentation is therefore too incomplete for an EU/EEA assessment.
Server Location
Not specified on the website.

Link

"The most powerful AI platform for enterprises"

Mistral AI is a French provider of generative AI with Le Chat as the user interface, Studio/API for developers, Mistral Vibe for coding workflows, and Mistral Compute as a European-hosted AI cloud.

The platform covers chat, search, document analysis, multimodal models, agents, workflows, API usage, and self-deployment. A key differentiator is the combination of SaaS, API, open-weight models, and local/on-prem deployment.Mistral AI

The most powerful AI platform for enterprises

7.8/10 Good
Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; suitable for getting started and everyday use. Subscription Le Chat Pro More messages and web searches, more Extended Thinking and Deep Research, document storage, many projects, Mistral Vibe for coding, chat/email support, and high-quality image generation.

Le Chat Team Secure team workspace with more storage per user, domain verification, data export, and team features. Other Enterprise Private deployments with custom models, UI, and tools; individual enterprise features such as SSO, audit logs, custom limits, and private deployments.

Mistral AI Studio / API Usage-based API for models, agents, OCR, embeddings, coding, multimodal workflows, and developer integration.

Mistral Vibe / Coding Coding features in Le Chat and additional pay-as-you-go usage beyond the regular limits.
– (0)

Link

GDPR: Yes For the EU/EEA region, a well-established path to GDPR-compliant use is evident because Mistral provides a DPA/AVV that describes its role as a data processor for business customers, documents GDPR rights, and offers multiple deployment models with a high degree of data sovereignty. Of particular relevance is the best available option: self-hosted deployment—that is, use on the customer’s infrastructure with full control over infrastructure and data residency—supplemented by dedicated, Europe-hosted options. The standard SaaS version does not offer the same level of data minimization across all plans, as certain content in the Free plan may be used for model improvement unless the user opts out.
Positive
Positive aspects include the published DPA/AVV, the explicit role as a processor vis-à-vis business customers, documented GDPR rights, an API without model training, self-hosted deployment on customer infrastructure, hybrid and dedicated options, and Mistral Compute as a European-hosted AI cloud with EU Tier 3+ data centers. In addition, the website lists certifications and frameworks such as ISO 27001/27701 and SOC 2 Type II, as well as other security features.
Negative
A negative or limiting aspect is that standard use is not entirely training-free: In the Free Plan, conversations may be used for model improvement unless the user opts out. The DPA also permits international data transfers based on adequacy decisions or SCCs. A specific, complete server location for all products is not consistently specified on the website; likewise, the list of subprocessors is only referenced via the Trust Center and is not explicitly stated on the evaluated pages.
Server Location
For Mistral Compute, the website mentions “EU Tier 3+ data centers” and describes the service as a “European-hosted AI cloud”; a location in Sweden is also mentioned. For Studio/SaaS as a whole, the evaluated pages do not specify a consistent, complete server location for all services.

Link

"AI-powered research assistant"

NotebookLM is an AI-powered research and knowledge assistant by Google that works with your own sources.

You can upload PDFs, Google Docs, Slides, websites, YouTube transcripts, audio, images, Office files, and text, among other things, and use them to generate questions with source references, summaries, mind maps, flashcards, quizzes, infographics, presentations, as well as audio and video overviews.
For teams and organizations, there are sharing options, analytics, higher limits, and – depending on the plan – enterprise/cloud security features.NotebookLM

KI-Recherche-Tool & DenkpartnerWait, I need to translate FROM German TO English. But the input "AI research tool & thinking partner" is already in English.AI research tool & thinking partner

4.7/10 Limited
Free NotebookLM Standard is free to use. It includes up to 100 notebooks per user, up to 50 sources per notebook, up to 500,000 words per source, chat with sources, Audio Overviews, Video Overviews, Reports, Flashcards, Quizzes, Mind Maps, limited Deep Research as well as limited Data Tables, Infographics and Slide Decks. Subscription NotebookLM in Google AI Plus: more notebooks, more sources per notebook, higher chat/audio/video limits, more reports, flashcards, quizzes, deep research, and additional NotebookLM features.

NotebookLM in Google AI Pro: higher limits than Plus, higher Gemini model access, more audio/video overviews, reports, flashcards, quizzes, deep research, data tables, infographics, and slide decks.

NotebookLM in Google AI Ultra: highest limits, highest Gemini model access, very high limits for chats, audio/video overviews, reports, flashcards, quizzes, and deep research; additionally watermark removal for infographics and slide decks. Other NotebookLM upgrades are available not only through Google AI Plans, but also through Google Cloud or qualifying Google Workspace and Workspace for Education plans. For work and school accounts, there are additional access tiers such as Standard, More, Higher, Expanded, and Highest Level Access. When using Workspace/Education, Google notes that uploaded files, chats, and model outputs are not reviewed by human reviewers and are not used to improve generative AI models.
– (0)

Link

GDPR: Unclear On the NotebookLM website, there is information on the handling of training data and the privacy of organizational data. However, for a reliable GDPR assessment for use in the EU/EEA, key details are missing on the NotebookLM domain, such as server locations/data center locations, EU data residency, DPA/AVV, subprocessors, and certifications. Therefore, compliance cannot be reliably demonstrated based on the information found.
Positive
It is positively documented that, according to the website, data from organizations is not used to train NotebookLM. For individual use, the website also states that data is not used for training unless feedback is shared. In addition, it is stated that an organization’s or school’s data remains private and that NotebookLM does not share data with third parties.
Negative
The website does not specify concrete server or data center locations, EU/EEA data residency, a DPA/AVV, a list of subprocessors, on-premise/self-hosting options, or relevant certifications such as ISO 27001 or SOC 2. Without these points, a reliable GDPR assessment for the entire EU/EEA area is not possible.
Server location
Not specified on the website.

Link

"Snowflake powers AI, data engineering, applications, and analytics on a trusted, scalable AI Data Cloud — eliminating silos and accelerating innovation."

Snowflake Cortex Analyst is a text-to-SQL/conversational analytics service for structured data in Snowflake.

Business users can ask questions in natural language; Cortex Analyst generates SQL and provides answers without requiring end users to write SQL themselves. The feature can be integrated via REST API and relies on Semantic Views / Semantic Models, custom instructions, and verified queries for high accuracy.Snowflake Cortex Analyst

Snowflake powers AI, data engineering, applications, and analytics on a trusted, scalable AI Data Cloud — eliminating silos and accelerating innovation

6.6/10 Solid
Subscription Snowflake generally uses a consumption-based model instead of traditional fixed monthly subscriptions. Other Snowflake Consumption / Credits Usage is billed based on Snowflake consumption; Snowflake describes its pricing as consumption-based according to storage and compute.

Cortex Analyst API Usage Cortex Analyst can be used via REST API and is suitable for apps, dashboards, chatbots, or Streamlit applications.

Cortex AI / Cortex Search / Cortex Agents Additional Cortex features for LLM functions, search, agents, and other AI workloads; costs depend on the function, model, region, and usage.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of Snowflake Cortex Analyst is only plausibly documented under certain conditions. Positive aspects include a current AVV/DPA, documented subprocessors, EU/EEA-adjacent regions for hosting, and controllable limits for cross-region inference. At the same time, the website shows that Cortex Analyst partly uses cross-region inference and that Snowflake processes usage data for the analysis, development, and improvement of its products. Comprehensive, simple, standard GDPR compliance for every usage scenario is therefore not clearly demonstrated; it depends on the selected region, the account settings, and the contractual arrangement.
Positive
The website includes a privacy policy, a current Data Processing Addendum dated January 11, 2026, a subprocessor list, a DPIA factsheet, information on EU/EEA-suitable regions, and notes that customers can choose their data region. Snowflake also describes a data residency commitment for stored data in the selected region and mentions certifications such as ISO 27001 and SOC 2 Type II.
Negative
The website does not indicate any straightforward on-premise or self-hosting option for Cortex Analyst. For Cortex AI, cross-region inference is described; depending on the configuration, processing may therefore be routed to other regions. In addition, the privacy policy states that usage data is used for the analysis, development, and improvement of products and services. An explicit, product-specific statement on the website that prompts, uploads, chat histories, or outputs from Cortex Analyst are generally not used for model training is not provided on the website.
Server location
For Snowflake in general and for Cortex Analyst, EU/EEA-relevant regions are listed on the website, including among others AWS EU (Frankfurt) and EU (Ireland) as well as Azure West Europe (Netherlands). Snowflake also documents additional European regions for accounts and inference boundaries, such as Ireland, France, the Netherlands, Sweden, and Zurich. At the same time, it is documented that cross-region inference for Cortex AI is possible and must be separately limited or disabled.

Link

Automate without limits

n8n is a workflow automation platform for technical teams that combines visual building with code, API connectivity, and AI capabilities.

Workflows, agents, and integrations can be created through a graphical interface, but can also be extended deeply with JavaScript, Python, HTTP requests, custom nodes, and self-hosting when needed. n8n can be run in the cloud or on your own infrastructure.n8n

AI agents and workflows you can see and control

8.1/10 Very good
Free Free version for up to 14 days after sign-up or when self-hosted. As a Community Edition for self-hosting. According to the documentation, every self-hosted installation runs without a license key as a free Community Edition; the website also refers to it as a “standard, self-hosted version.” There is also a free cloud trial period, but no permanently free cloud tier. Important: The Community Edition is licensed under the Sustainable Use License, not under a classic open-source license. Subscription Starter: €20 / month, billed annually; 2.5K workflow executions, 1 shared project, 5 concurrent executions, unlimited users, 50 AI Workflow Builder credits.

Pro: €50 / month, billed annually; custom execution volume, 3 shared projects, 20 concurrent executions, 7 days of insights, 150 AI Workflow Builder credits, admin roles, global variables, workflow history, execution search.

Business: €667 / month, billed annually; self-hosted, 40K executions, 6 shared projects, SSO/SAML/LDAP, 30 days of insights, environments, scaling options, Git source control.

Enterprise: Price on request; cloud or self-hosted, custom execution volume, 200+ concurrent executions, 365 days of insights, external secret store integration, log streaming, extended data retention. According to the pricing page, all paid plans include unlimited users, unlimited workflows, and all integrations; billing is based on workflow executions.

The Help Center article adds that Business is currently only available for self-hosted deployments. Other Community Edition free via self-hosting under the Sustainable Use License. A free trial for Cloud is available and, according to the pricing page, can be started without a credit card. In addition, there is a startup plan with a 50% discount on Business, publicly listed at €333 / month, billed annually, for early-stage startups. In principle, n8n follows an execution-based pricing model, not per task/step.
– (0)

Link

GDPR: Yes According to the information found on the website, n8n can be used in compliance with the GDPR, primarily through the best available method: self-hosting on your own or self-selected infrastructure. For the SaaS version, there are also relevant data protection measures such as DPAs/SCCs and EU hosting. However, according to subprocessors, some AI functions may involve processing in the U.S., which is why the assessment is based on the best overall method of use available.
Positive
Found on the website: DPA/AVV available; for the cloud, EU hosting is specified, specifically Frankfurt, Germany; the security page states that cloud data is hosted in the EU; subprocessors are disclosed; Self-hosting is officially offered and documented; for self-hosting, n8n clarifies that n8n is neither the controller nor the processor because n8n does not manage the data; the Privacy Policy also states that personal data is not used for the development, improvement, or training of AI/ML models.
Negative
Restrictions according to the website: Among the subprocessors, several AI providers with processing in the U.S. are listed; Google Vertex AI is listed as operating in both the EU and the U.S., OpenAI in the U.S., Anthropic in the U.S., and LangChain in the U.S. No general statement was found on the website confirming that all AI processing remains exclusively within the EU. ISO 27001 was not mentioned on the website.
Server Location
For hosted plans: Data is stored within the EU, on servers in Frankfurt, Germany. The security page adds that n8n Cloud uses Microsoft Azure and that the physical hardware and stored data are currently hosted in the EU. The list of subprocessors includes, among others, Microsoft Azure with “EU (Germany, Sweden)” and Hetzner with “Germany” for infrastructure. For self-hosting: “wherever you decide to host n8n” or on your own chosen infrastructure.

Link

Turn your ideas into apps

Base44 is an AI-powered app builder that creates functional apps using natural language.

Officially, Base44 lists productivity apps, back-office tools, customer portals, and complete enterprise products among its target use cases. In addition to the builder, the platform also includes authentication, database, storage, email, payments, integrations, backend functions, and hosting.Base44

Build Apps with AI in Minutes

6.4/10 Solid
Free Free Plan – includes core features such as authentication, database functionality, and analytics. Officially, Base44 states 25 Message Credits per month; regarding Integration Credits, there is conflicting information on the official pages, so no confirmed number is given here. Subscription paid subscription plans: Starter, Builder, Pro, Elite. Subscriptions can be taken out monthly or annually. Starter is intended for initial apps/projects; Builder adds, among other things, backend features, domain, GitHub integration, and model selection; Pro expands for more complex applications; Elite offers higher credits and premium support. Other Enterprise / Custom Sales for larger organizations; in addition, Base44 works with Message Credits and Integration Credits, which are reset monthly depending on the plan. There are also Promo Codes/Gift Cards as well as a separately mentioned backend offering, which according to the documentation is free while in beta.
– (0)

Link

GDPR: Partly Base44 documents several data protection and compliance components relevant to the EU/EEA region, including a privacy policy, a DPA/General Terms and Conditions, a list of subprocessors, mechanisms for cross-border transfers from the EEA, and references to ISO 27001, SOC 2 Type II, and the GDPR. At the same time, its own list of subprocessors shows that key services for hosting, servers, analytics, and LLM calls are predominantly located in the U.S., and one service provider is based in Israel. The website does not specify an explicit EU data residency for the Base44 platform itself, an EU data center as a standard option, or an on-premises/self-hosting option. For EU/EEA users, GDPR-compliant use is therefore conceivable only under certain conditions—specifically based on the DPA and the transfer mechanisms outlined therein—but is not documented as a clearly EU-resident standard solution.
Positive
Positively documented are a separate privacy policy, a DPA/SLA, a published list of subprocessors, provisions regarding erasure and data subject requests in the DPA, as well as the statement that transfers from the EEA, Switzerland, and the United Kingdom are safeguarded through permissible mechanisms such as adequacy decisions, the EU-US Data Privacy Framework, and SCCs. Additionally, Base44 mentions ISO 27001, SOC 2 Type II, and the GDPR on its security page.
Negative
A negative factor for a straightforward EU/EEA assessment is that the platform’s own list of subprocessors for data storage/hosting, server services, analytics, media hosting, and LLM calls predominantly lists U.S. locations; furthermore, Wix.com Ltd. is listed as being based in Israel. The website does not specify explicit EU data residency for the platform, EU/EEA hosting for the SaaS version, a dedicated EU data center, a private cloud option, or on-premises/self-hosting. Nor is there a clear statement on the website indicating that user inputs, uploads, or outputs are generally not used to train general models.
Server Location
According to the list of subprocessors: Mongo for “data storage and hosting” in the U.S.; Render for “server services” in the U.S.; GCP for “analytics services” in the U.S.; OpenAI and Anthropic for “API calls to LLM,” both in the U.S.; Supabase for “media hosting” in the U.S.; DataDog in the U.S.; Wix.com Ltd. in Israel. Additionally, Langfuse in Germany and Logfire in the United Kingdom are listed. The website does not specify a dedicated EU/EEA primary server location or EU data residency for Base44.

Link

"Frontier intelligence, customized to you."

The Mistral API is the developer and enterprise interface for Mistral models.

Through Mistral AI Studio, companies and developers can use models via API, test prompts, build agents, implement RAG workflows, use fine-tuning, manage workspaces, and bill API usage. Mistral offers both open-weight and commercial/premier models.Mistral API

LLM - build, customize, and deploy AI, your way

7.4/10 Good
Free Le Chat Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; not to be equated with productive API usage. Other API / La Plateforme Usage-based API for Mistral models, chat, embeddings, OCR, agents, coding, multimodal models, and developer workflows.

Self-Deployment / Open-Weight Models Selected models can be operated independently or via cloud/enterprise deployments; the range of features depends on the respective model.

Enterprise Private Deployment Customized private deployment for organizations with increased control, security, and scalability requirements.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of the website is generally possible, but this is not consistently and clearly documented in the standard SaaS version. Positive aspects include a published Data Processing Agreement (DPA), explicitly described GDPR roles and data subject rights, documented sub-processor arrangements, and a clear self-deployment/on-premises path for open models. At the same time, for general API/Studio use on the website, there is no clearly documented EU/EEA server location established as the standard for all data processing; furthermore, the website mentions international data transfers using SCCs. Therefore, usage is considered “conditional” rather than clearly and fully substantiated.
Positive
Mistral publishes a privacy policy and a Data Processing Addendum (DPA). In the DPA, Mistral AI is described as a data processor for business use and commits to processing personal data only in accordance with the customer’s documented instructions. Support is provided for data subject rights, DPIA, audits, and data breach notifications. Regarding the API, the documentation states that data sent via the API is not used for model training. Additionally, there is self-deployment for models on the customer’s own infrastructure, as well as a European-hosted compute offering with EU data centers.
Negative
The website does not clearly specify a concrete, binding EU/EEA server location for general Mistral API/Studio SaaS use, nor does it specify a general EU data residency for all customer data. Instead, Mistral also describes international data transfers and refers to SCCs. A specific, publicly accessible list of subprocessors with individual locations was not directly found on the pages reviewed. For some training and model improvement uses, there are opt-out mechanisms or standard exceptions depending on the product and pricing plan, which require additional review without proper configuration.
Server Location
Not specifically stated on the website for general API/Studio data processing. The following was found: Mistral Compute is described as a European-hosted AI cloud with “EU Tier 3+ data centers”; a location in Sweden is also mentioned. Mistral cites SCCs for data transfers outside the EU.

Link

“Search your company knowledge smarter with AI agents.”

TextCortex is an AI platform for Enterprise AI, Company Knowledge, Workflow Automation, and AI Agents.

Officially, the product is now positioned as a model-agnostic agent infrastructure that enables companies to create AI agents without code, apply them to company data, and integrate them into existing work environments. At the same time, the pricing page still highlights strong classic assistance features such as writing, translation, rewriting, voice features, data analysis, and browser integration.Textcortex

Search your company knowledge smarter with AI agents

7.4/10 Good
Free Free basic use of many core features; suitable for testing and for simple AI writing and chat workflows.

14-day trial period TextCortex mentions a 14-day trial period to try out all features with higher usage. Subscription Extended access to AI writing features, ZenoChat, reasoning/model features, knowledge features, image/text generation, and more usage capacity. Other Enterprise Multiple seats, Enterprise Knowledge Search, dedicated support, secure team/company features, higher storage/usage limits, and custom requirements.
– (0)

Link

GDPR: Partly The website contains several clear statements regarding GDPR/DSGVO, EU data residency, EU-hosted infrastructure, zero-data training, and existing certifications. At the same time, important points for a robust assessment across the entire EU/EEA remain incomplete on the website: a specifically linked AVV/DPA text is not provided on the website, a subprocessor list is not provided on the website, and an exact server location or specific data center countries are not named. In addition, the provider’s own pages show differing statements on data usage depending on the usage context: For general use, an opt-out is mentioned, while for Enterprise and certain functions, strict no-training is promised. Therefore, GDPR-compliant use in the EU/EEA appears plausible primarily in the Enterprise or EU setup, but not without restriction for every standard use.
Positive
Positive are the provider’s own statements regarding 'GDPR-compliant', 'Built for European data sovereignty', 'EU data residency: Guaranteed', 'all inference on EU-based infrastructure', 'Zero data training', as well as the mention of ISO 27001 and SOC 2. In addition, the website mentions private environments for Enterprise customers in preferred regions and explains that knowledge base documents are processed exclusively by TextCortex.
Negative
Negative is that no specifically identifiable AVV/DPA contract text is linked on the website, no subprocessor page is provided, and no specific data center countries or providers are named. In addition, the statement regarding training is not fully consistent: In one data-related article, it is described for the app, browser extension, and API that data may be used to improve the models, with opt-out via form; by contrast, no-training is promised for Enterprise data and other areas. This argues against a universally simple assessment of the entire product usage.
Server location
The website states multiple times that services or inference are hosted in the European Union on EU-based infrastructure and that EU data residency is guaranteed. Specific countries, cities, or individual data centers in the EU/EEA are not provided on the website. For optional services or LLMs outside the EU, the website refers to the EU-U.S. Data Privacy Framework or standard contractual clauses.

Link

“Open-source orchestration for zero-human companies”

Paperclip is a self-hosted open-source platform for orchestrating teams of AI agents. The tool organizes agents as “employees” with an org chart, roles, budgets, governance, tasks/tickets, heartbeats, and audit trails.

Paperclip is explicitly a Control Plane, not an Execution Plane: the agents run externally via adapters such as Claude Code, Codex, Gemini, Cursor, OpenClaw, shell processes, or HTTP webhooks.Paperclip AI

The human control plane for AI labor

6.6/10 Solid
Free According to the official website, Paperclip is MIT-licensed, self-hosted, and usable without a Paperclip account. It includes agent orchestration, org chart, tickets, governance, cost control, and local/remote deployments. Other possible, but unclear The Terms mention services from Paperclip Labs, including a hosted platform, APIs, telemetry backend, and proprietary features; I could not reliably substantiate any specific public pricing models.
– (0)

Link

GDPR: Yes For the EU/EEA area, Paperclip can be considered usable in a GDPR-compliant manner in the best available usage form, because the website describes a clear self-hosting/local deployment path without requiring a Paperclip account. This allows a user to operate the software in their own EU/EEA infrastructure. The services operated by Paperclip Labs are significantly more critical from a GDPR perspective, because the website mentions data transfers to the USA, does not specify EU data residency, and describes the use of data for improvement and training.
Positive
Positive aspects are the explicit self-hosting approach, the MIT license, the statement 'no Paperclip account required', local execution with embedded Postgres or the user's own Postgres, as well as the possibility of local or remote deployment. For EU/EEA users, this opens a practical way to process data exclusively within their own European infrastructure.
Negative
Negative is that, for the services operated by Paperclip Labs, the website specifies neither EU data centers nor EU data residency, DPA/AVV, subprocessors, or certifications. The privacy policy also states that data may be transferred to the USA. In addition, the website describes that data may be used to improve the services and to train or improve machine-learning models and algorithms; this is explicitly mentioned for detailed telemetry.
Server location
For self-hosting, the server location can be freely chosen by the user and may be within the EU/EEA area. For the services operated by the provider, no specific server or data center location is stated on the website; the privacy policy merely states that data may be transferred to and processed in the USA, among other places.

Link

Leading AI models on a secure platform operated in Germany.

DeutschlandGPT provides models such as GPT, Claude, Gemini, Llama, and Mistral through a single interface. Users can chat, analyze documents and images, perform real-time web searches, configure their own assistants or specialized applications, and integrate external business systems. The platform is designed for individual users, teams, companies, and public or data-sensitive organizations.GermanyGPT

Leading AI models on a secure platform operated in Germany.

7.6/10 Good
Free Try it for free: A permanently free plan with a limited number of daily messages, custom prompts, and limited file and image analysis. Subscription Pro All leading AI models, projects, integrations, specialized applications, and higher usage limits.

5x Pro Pro features with significantly higher usage limits for more intensive individual use.

Business Pro features plus centralized user management, white labeling, prioritized support, and configurable retention periods; for SMBs and teams.

Enterprise Business features plus custom domain, SAML SSO, SCIM provisioning, Customer Success Manager, dedicated onboarding, invoice billing, and AI training. Other Enterprise Trial Access Time-limited trial access for larger organizations, available by arrangement.

Germany GPT API Usage-based access to various AI models; billing depends on the model and token consumption.

Fair Use Model Paid platform plans have higher limits but are subject to rules against automated bulk usage and resale.
– (0)

Link

GDPR: Yes The website outlines a concrete, actionable GDPR compliance path for the entire EU/EEA region. DeutschlandGPT describes data processing in EU data centers, persistent storage in Germany, a published data processing agreement (DPA) in accordance with Article 28 of the GDPR, designated subprocessors, and a documented “no training” approach. In addition, the website highlights a particularly privacy-strong operational approach using the self-hosted open-source model Llama 3.3 70B on dedicated, isolated servers in Germany. From an EU/EEA perspective, this documents a clearly substantiated path to GDPR-compliant use.
Positive
The following are positively documented: EU/Germany hosting, AVV, a list of subprocessors, no training using user data, ISO 27001, BSI C5-related hosting information, and a self-hosted open-source path for Llama 3.3 70B on dedicated infrastructure in Germany.
Negative
A limitation is that while the website describes EU processing and storage in Germany, it does not explain a separate data residency or transfer logic for every single service in a fully granular manner for all processing activities. Furthermore, the AVV list includes Sentry, a service based in the U.S.; while the website lists the “EU” as the place of processing, it does not provide further details regarding any international access or transfer mechanisms.
Server Location
The website lists several server/processing locations: persistent core data on the Open Telekom Cloud in Germany, specifically in Magdeburg and Biere; general AI processing exclusively within the EU, for example in Frankfurt, Ireland, or Sweden; for individual model paths, the website lists Microsoft Azure in the EU, AWS in Germany, Google Vertex in the EU, IONOS in the EU, and self-hosted Llama on dedicated Open Telekom Cloud servers in Germany.

Link

“Your AI note-taker is now also your Conversational Knowledge Engine”

Otter.ai is an AI meeting assistant that provides automatic transcription, meeting notes, summaries, action items, AI chat, and cross-meeting knowledge search. The tool integrates with Zoom, Microsoft Teams, Google Meet, and other platforms, turning conversations into searchable meeting data.Otter.ai

Your AI notetaker is now also your Conversational Knowledge Engine

7.5/10 Good
Free Free basic plan with integration with Zoom, Microsoft Teams, and Google Meet; AI chat; AI meeting workflows; limited audio/video import; live transcription; speaker recognition; audio playback; multilingual support; mobile apps; and a limited monthly transcription quota. Subscription Pro For individuals and small teams; includes more recording minutes, advanced AI workflows, monthly audio/video imports, longer meetings, advanced meeting templates, unlimited storage, Team Vocabulary, taggable speakers, advanced search, export, and playback.

Business For medium-sized teams; includes unlimited meetings and in-app recordings, custom AI workflows, unlimited audio/video imports, longer meeting durations, admin features, activity logs, usage analytics, multiple simultaneous meeting joins, and prioritized support.

Enterprise For large teams and enterprises; includes Business features plus unlimited custom AI workflows, Otter Sales Notetaker, custom integrations, SSO, SCIM, domain capture, enterprise security controls, HIPAA add-on, API, webhooks, video replay, and the Customer Success Program. Other API / Webhooks Enterprise-grade integration options for connecting Otter to CRM, dialer, project, and enterprise systems.

MCP Server Otter provides an MCP Server for connecting external AI workflows; access and governance depend on the plan and admin settings.
– (0)

Link

GDPR: Partly The website demonstrates that Otter.ai provides GDPR-relevant contractual documentation and explicitly addresses the GDPR in the DPA. For the EU/EEA region, however, use can only be assessed as conditionally GDPR-compliant, because the website identifies AWS in the US as core infrastructure and data storage, and several US subprocessors are also used. EU data residency, EU data centers, or an on-premise/self-hosting option are not specified on the website. A positive point is that a DPA is available and, for the listed AI service providers, it is explicitly stated that customer data is not used to train or improve their models and is not stored; at the same time, according to the Terms, Otter allows the use of aggregated and/or de-identified data for machine learning and training, so the overall situation for EU/EEA users appears viable only under additional reviews and conditions.
Positive
The website includes a DPA as an appendix to the Terms of Service, which explicitly mentions the GDPR and its national implementations in the EEA. There is a subprocessor list. For Anthropic and OpenAI, the website states that no customer data is used to train or improve their AI models and is not stored. In addition, Otter cites a SOC 2 Type 2 attestation and security policies based on the ISO 27001/2 framework.
Negative
The website identifies AWS as the cloud and customer data storage platform in the US; the Help Center also mentions AWS Region West, United States. The subprocessor list contains predominantly US providers. EU data residency, an EU/EEA data center, a dedicated EU environment, or self-hosting/on-premise operation are not specified on the website. In addition, the Terms permit the use of aggregated and/or de-identified data for business purposes including machine learning and training.
Server location
The website names Amazon Web Services located in the USA as the core infrastructure. The Help Center also states that Otter uses AWS services for data storage in the AWS Region West, United States. EU/EEA server locations or EU data residency are not specified on the website.

Link

Gemini is a broad-based AI product from Google for end users, teams, and developers.

In the Gemini apps, it supports, among other things, writing, planning, brainstorming, Deep Research, Canvas for Docs/Apps/Slides/Code, image and video generation, as well as file analysis.
In Workspace, Gemini is built directly into Gmail, Docs, Sheets, Drive, and more. For developers, there is also an API with Function Calling, Structured Outputs, Grounding, Code Execution, and additional tools.Gemini

Meet Gemini, Google's AI assistant

4.3/10 Limited
Free The Gemini app can be used for free for general AI tasks, such as writing, planning, brainstorming, learning, summarizing, image/camera input, voice interaction, and in some cases app integrations like Gmail, Drive, Maps, or Flights. The free version is functional, but limited in terms of models, usage limits, and advanced features. Subscription Google AI Plus: More access to Gemini, more access to Gemini 3.1 Pro, limited access to Veo 3.1 Lite, Flow, NotebookLM, Gemini in Gmail and other Google products, as well as cloud storage.

Google AI Pro: Includes the Plus features with higher limits; additionally, higher access to Gemini 3.1 Pro, Veo 3.1 Lite, Flow, NotebookLM, Gemini in Gmail/Docs/Slides/Sheets/Meet, and Google AI features.

Google AI Ultra: Highest private subscription tier with the highest limits, access to Gemini 3.1 Pro, Veo 3.1, Deep Think, and Gemini Agent; some features are regionally restricted.

Google Workspace with Gemini: Integrated for businesses in Google Workspace or available depending on the Workspace plan; includes Gemini in Gmail, Docs, Sheets, Slides, Drive, Meet, Chat, Vids, as well as the Gemini app with Basic or Expanded Access.

AI Expanded Access: Workspace add-on for higher limits on advanced AI features such as image generation, video generation, Deep Reasoning, NotebookLM, Workspace Studio, and real-time speech translation.

AI Ultra Access: Workspace add-on with the highest access to advanced AI features, including image/video generation, Deep Reasoning, NotebookLM, Workspace Studio, Whisk, and Project Mariner. Other Gemini API: In addition, there is a Gemini Developer API with a Free Tier and a Paid Tier. Billing is usage-based by model and usage, e.g. via input/output tokens, audio/video/image usage, context caching, grounding, and in some cases batch/standard/priority options.

AI Studio / Developer access: Google AI Studio is the entry point for developers; separate Gemini API terms apply when using the API.

Workspace note: According to Google, private Google AI plans apply to personal Google accounts; Workspace customers should use Workspace add-ons or Workspace plans instead.

Regional restrictions: Individual features such as Gemini Agent, Project Mariner, Flow, or Whisk may be restricted depending on country, language, account type, and age.

Usage limits: Features and limits vary significantly across Free, Plus, Pro, Ultra, Workspace, and API.
– (0)

Link

GDPR: Unclear The Gemini website provides specific information on data protection and control options, particularly regarding the deactivation of “Gemini Apps Activity” for future chats, as well as export and deletion controls. However, for a reliable assessment of GDPR compliance throughout the EU/EEA, the specified domain lacks crucial information regarding EU data residency, specific server locations, data processing agreements (DPAs), subprocessors, and certifications. Therefore, compliance based solely on the website documentation remains unclear.
Positive
User controls for reviewing, managing, exporting, and deleting Gemini data are clearly documented. Additionally, the website states that future Gemini chats will not be used to improve Google’s machine learning technologies if “Gemini Apps Activity” is disabled. The website also mentions broad availability in many countries and refers to business and enterprise options via Google Workspace and Google Cloud, respectively.
Negative
On the negative side, no specific information regarding server or data center locations within the EU/EEA was found on the website. Similarly, the website does not provide clear information on the AVV/DPA, subprocessors, EU data residency, on-premises/self-hosting, open-source components, or relevant certifications such as ISO 27001 or SOC 2. Furthermore, according to the website, the opt-out from training is described only for future chats via the “Gemini Apps Activity” setting; a comprehensive contractual exclusion for all content is not specified on the website.
Server Location
Not specified on the website. No specific server locations or EU/EEA data centers were found on the gemini.google domain.

Link

“Build something Lovable”

Lovable is an AI-powered app and website builder that enables users to create, iterate on, and publish apps, websites, prototypes, and digital products via chat. The platform combines prompting, visual editing, code mode, GitHub sync, hosting/deployment, as well as backend options via Lovable Cloud or Supabase.Lovable

Create apps and websites by chatting with AI

7.9/10 Good
Free Free entry-level version with daily credits, a monthly credit cap, subdomains, and collaboration capability; suitable for trying out and for simple projects. Subscription Pro Paid individual/creator plan with more monthly credits and more room for serious app projects. Credits are consumed for AI prompts in Plan Mode and Agent Mode.

Business Team-oriented plan with team features, advanced controls, and DPA usage; suitable for professional use in organizations. Other Enterprise Custom Enterprise offering with advanced security, governance, support, and data control requirements.

Credits / Cloud Credits Lovable uses Credits for AI agent prompts; cloud infrastructure such as database, functions, and storage uses separate Cloud Credits.
– (0)

Link

GDPR: Partly For the EU/EEA region, there are several clearly positive indicators on the website: Lovable provides a Terms of Service (TOS) and Privacy Policy (DPA), explicitly references the EU GDPR and UK GDPR, lists Standard Contractual Clauses (SCCs) for transfers to third countries, offers regional data storage within the EU according to its Security page, and documents an opt-out process for AI training. At the same time, GDPR-compliant use is not automatically clear in every standard configuration: The website states that customer data may be used for model improvement by default, as long as no opt-out has been set or requested; furthermore, international transfers and the use of subprocessors remain relevant. Therefore, based on the information on the website, GDPR-compliant use within the EU/EEA is possible, but only under certain conditions and with proper configuration.
Positive
The following have been confirmed: Data Processing Agreements (DPAs) for Business and Enterprise customers; explicit reference to the EU GDPR, UK GDPR, and Standard Contractual Clauses (SCCs); EU data residency in Lovable Cloud with regional data storage in the EU, the U.S., and Australia; documented subprocessor management; certifications or evidence of compliance with ISO 27001:2022 and SOC 2 Type II; and a documented opt-out for training-related data use.
Negative
A limitation is that the website also states that customer data may be used for model training or model improvement unless an opt-out is in effect. The simple, contractually clear process is documented primarily for Business/Enterprise plans; for Free/Pro plans, the documentation states that an opt-out is only available via a support request. Additionally, international data transfers are not excluded but are safeguarded through SCCs and other mechanisms. Fully local operation of the entire Lovable platform on the customer’s own infrastructure is not described on the website as a native product model.
Server Location
The website states that Lovable Cloud offers “regional data hosting in the EU, US, and Australia”; customer data is intended to remain in the selected region. Specific EU country or data center locations are not specified on the pages found.

Link

Record it. Upload it. Ask it anything.

LiteScribe is an AI transcription and meeting notes tool for meetings, interviews, voice recordings, videos, and files. According to the provider, it transcribes in over 100 languages, creates AI summaries, action items, and topic tags, and allows questions across your own transcript library. A standout feature is the bot-free meeting mode, in which no bot appears as a participant in the call.LiteScripe

Transcribe Meetings With No Bot In The Call

6.2/10 Solid
Free Basic Monthly free quota for transcription, file upload, URL import, cloud storage import, meeting platforms, automatic speech recognition, speaker recognition, TXT/SRT export, and Chrome extension. (litescribe.ai) Free Pro For individuals and small teams; more monthly transcription minutes, advanced exports, translation, AI summaries, topics, sentiment, action items, and Desktop Local Mode. (litescribe.ai)

Business For mid-sized teams; higher minute allowance, team collaboration, advanced AI features, Local Mode, and professional export/workflow features. Other Desktop Local Mode Local transcription and local AI notes on Windows, macOS, and Linux; available in Pro and Business. (litescribe.ai)

BYOK / BYOLLM Use your own API keys for AI models; data is then processed through your own model provider account. (litescribe.ai)

Enterprise / Volume Plans Volume plans, procurement, security reviews, and enterprise inquiries via sales; specific enterprise features are only publicly listed to a limited extent. (litescribe.ai)
– (0)

Link

GDPR: Partly For the EU/EEA area, GDPR-compliant use appears conditionally plausible, but not as a standard SaaS path. It is positive that LiteScribe documents a local/offline mode for desktop in which transcription and AI processing run on the user's own device and, according to the provider, no content data is transferred to third parties when transcript synchronization is disabled. At the same time, the website describes US-based transcription or cloud AI for web, mobile, and cloud use, as well as further processing outside Europe for certain supporting services and some AI functions. A DPA/AVV, a formal subprocessor list with locations, or reliable certifications are not specified on the website. Therefore, GDPR-compliant use seems more feasible via the local best-case path than via standard cloud use.
Positive
The website mentions European storage and European endpoints for recordings, uploads, and transcripts in the Privacy Policy. In addition, there is a documented desktop 'Local Mode' for Windows, macOS, and Linux in which audio and AI processing remain on the user's own device. For strict EU/EEA data residency, LiteScribe itself refers to this local mode and to the fact that, when transcript synchronization is disabled, the material remains on the user's own device.
Negative
The website also clearly states that some supporting services and some AI functions run outside Europe and that web, mobile, and cloud paths use US-based transcription and cloud AI. A DPA/AVV is not specified on the website. Likewise, there is no explicit subprocessor page with legal bases, locations, and a detailed role description. Certifications such as ISO 27001 or SOC 2 are not specified on the website.
Server location
According to the Privacy Policy, recordings, uploaded media, and transcripts are stored in Europe, and live as well as file transcription are processed via European endpoints. At the same time, the website mentions processing outside Europe for payments and some AI functions. For strict EU/EEA data residency, the website refers to the desktop 'Local Mode'; the web, mobile, and cloud paths are described there as US-based.

Link

Google offers a family of models with the Gemini API for text generation, reasoning, coding, agent workflows, tool use, multimodal prompts, and document-centric processing.

For current API LLMs, Gemini 3.1 Pro Preview, Gemini 3 Flash Preview, Gemini 3.1 Flash-Lite Preview, Gemini 2.5 Pro, Gemini 2.5 Flash, and Gemini 2.5 Flash-Lite are particularly relevant. Older Gemini 2.0 Flash variants are still available, but are already marked as deprecated.Google Gemini API

LLM “AI for every developer”

7.4/10 Good
Free Free or unpaid use with limits; content may be used for product improvement and should not contain sensitive or confidential data. Other Gemini API Paid Tier For production applications with higher limits, context caching, Batch API, access to advanced models, and without using content for product improvement.

Batch / Context Caching / Priority / Flex Additional billing and operational options for controlling cost, latency, and throughput.

Vertex AI / Google Cloud Enterprise-oriented operation with Cloud DPA, IAM, regional endpoints, data residency, monitoring, and zero-data-retention configurations.

Grounding / Tuning / Embeddings / Live API Advanced features for search, context enrichment, model customization, vector search, real-time audio, and multimodal applications.
– (0)

Link

GDPR: Partly For the EU/EEA region, a more privacy-friendly use of the Gemini API based on the provider’s documentation appears to be possible only under certain conditions. On the positive side, according to the additional terms, a DPA applies to “Paid Services,” and prompts and responses are not used for product improvement. On the negative side, Google nevertheless logs prompts and responses for Paid Services for a limited time for security and compliance purposes and may store this data temporarily or in cache “in any country” where Google or its agents operate facilities. The website does not specify an explicit EU data residency or an EU/EEA server location for the Gemini API.
Positive
The website lists three key points for “Paid Services”: processing in accordance with a DPA, no training on prompts or responses for product improvement, and specific notes for EEA users. Additionally, the “Zero Data Retention” page explains that, for certain projects and upon approval, user-identifying content and metadata can be removed before logging, and that individual storage options can be disabled for stateful features.
Negative
The website does not specify a guaranteed EU data residency for the Gemini API or a specific EU/EEA data center location. Rather, the additional terms state that log data for Paid Services may be stored transiently or in cache in any country where Google or its agents operate facilities. Furthermore, data-minimizing configurations such as “Zero Data Retention” and the disabling of certain storage functions require additional prerequisites; according to the website, it is not possible to disable the storage described there for specific functions such as “Grounding with Google Search” or “Grounding with Google Maps.”
Server Location
Not specifically listed on the website as an EU/EEA location. For paid services, it states that log data may be stored temporarily or in cache in any country where Google or its agents operate facilities.

Link

Intelligent Automation & AI Agents Platform

Mazaal AI combines AI agents with workflow automation. Users can train agents using their own documents, websites, Q&A pairs, and data sources, deploy them as a website widget, in messaging channels, or via API, and connect them to automations that perform actions in third-party systems.

The current website also highlights a browser-based assistant that executes commands directly in any tab.Mazaal

Your Browser, Now on Autopilot

3.6/10 Insufficient
Free Includes monthly AI credits and task credits; according to the homepage, no credit card required. Suitable for testing initial agents, workflows, and integrations. Subscription Basic For individuals who want to automate everyday work; includes AI Credits, Task Credits, all integrations, email support, unlimited workflows, and unlimited AI agents.

Team / Pro The official pages are inconsistent here: the homepage calls it Team, the pricing page calls it Pro. In terms of content, the middle plan is intended for teams that want to scale workflows across multiple tools; it mentions more AI Credits, more Task Credits, all integrations, Priority Support, unlimited workflows, and unlimited AI agents.

Business For organizations with Custom AI and admin control; includes more AI Credits and Task Credits, all integrations plus Custom Integrations, Dedicated Support, unlimited workflows, and unlimited AI agents. Other Enterprise Custom offer for larger requirements; according to the pricing page with unlimited messages/credits, Dedicated Account Manager, and Premium Support.

Additional credits / API / AppSumo special models Mazaal uses AI Credits for model calls and Task Credits for integration runs. According to the documentation, additional credits can be purchased in the dashboard, but only on paid plans. AppSumo-specific plans and special conditions are also mentioned.
– (0)

Link

GDPR: Unclear The website includes a privacy policy, but it explicitly refers to Australian data protection law and does not demonstrate sufficient GDPR compliance for users in the EU/EEA. No reliable information could be found on the website regarding key requirements such as EU data residency, server location, data processing agreements (DPAs), subprocessors, and EU-specific commitments regarding data processing.
Positive
General security measures such as encryption during transmission and storage, access controls, and regular security audits are clearly documented. Additionally, the website explicitly states that Google Workspace API data is not used to train or improve AI/ML models.
Negative
A negative point is that the privacy policy refers to the Australian Privacy Principles rather than the GDPR. The website does not specify a Data Processing Agreement (DPA), a list of subprocessors, a specific EU/EEA server location, EU data residency, Standard Contractual Clauses, or other explicitly EU-related guarantees. The Terms of Service also state that Mazaal may use, store, and process user data to provide and improve the solution; a general contractual prohibition on using any data for training purposes is not clearly documented on the website.
Server Location
Not specified on the website. No specific location of servers or data centers within the EU/EEA was found.

Link

“Create and edit detailed images”

Nano Banana is Google’s native image AI within Gemini.

The system can generate images from text, edit existing images via prompt, combine multiple reference images, and carry out follow-up changes conversationally.

Officially highlighted features include multimodal understanding, conversational inputs, real-world knowledge, rapid iteration, and, in the Pro variant, clearer text renderings, infographics, localization, and higher resolution.Nano Banana

Imagine almost anything – then create it

4.3/10 Limited
Free Free use with limited access; AI Studio remains free as long as no paid API key is used for paid features. With the API Free Tier, usage may be used for product improvement according to the pricing page. Subscription Google AI Plus More access to Google AI, including the Gemini app, Flow, and NotebookLM; available depending on the region.

Google AI Pro More access to Gemini, Deep Research, Nano Banana Pro, and video/Flow features; Google describes Pro as expanded access for advanced AI use.

Google AI Ultra Highest access tier for advanced Google AI features, higher limits, and expanded creative/productive use. Other Gemini API Paid Tier Usage-based API billing for developers; in the Paid Tier, usage is not used for product improvement according to the pricing page.

Google Workspace / Slides / Vids Add-ons Nano Banana Pro is also relevant in Workspace contexts such as Slides/Vids via Google AI add-ons or limits; specific limits depend on the Workspace/AI plan.
– (0)

Link

GDPR: Unclear For the EU/EEA area, GDPR compliance cannot be reliably verified based on the website. There is a privacy policy and information on data transfers as well as deletion options, but key evidence for data protection-compliant business use in the EU/EEA is missing from the website: no specific server location, no EU data residency, no AVV/DPA, no subprocessor list, no reliable statement excluding model training, and no on-premise/self-hosting option.
Positive
There is a privacy policy on the website. It describes the purposes of data processing, disclosure to 'Service Providers', storage principles, international transfers, and a right to deletion or account management. For EU users, the terms of use state that mandatory consumer protection provisions of the country of residence remain unaffected.
Negative
The website does not specify a specific EU/EEA server location, EU data residency, an AVV/DPA, a subprocessor list, a documented opt-out from AI training, specific certifications such as ISO 27001 or SOC 2, or on-premise/self-hosting. The privacy policy also lists Hong Kong SAR China as the 'Country' and states that data may also be processed and stored outside the user's jurisdiction, without detailing EU/EEA-specific safeguards.
Server location
Not specifically stated on the website. The privacy policy lists Hong Kong SAR China as the 'Country'. At the same time, it states that data is processed at the company's operating facilities and at other locations where parties involved in the processing are located; specific data centers or EU/EEA locations are not mentioned.

Link

“Bringing technology to life”

ElevenLabs is an AI platform for speech synthesis, voice cloning, speech-to-text, dubbing, sound effects, music, conversational agents, and audio APIs.

The company no longer positions itself solely as a voice tool, but as a platform with ElevenCreative, ElevenAgents, and ElevenAPI for creators, businesses, and developers.ElevenLabs

Bringing technology to life

7.7/10 Good
Free Includes text-to-speech, speech-to-text, sound effects, voice design, music, productions, image & video, as well as limited studio projects and monthly credits. Subscription Starter Everything in Free plus a commercial license, Instant Voice Cloning, more Studio projects, commercial music use, and Dubbing Studio.

Creator Everything in Starter plus professional Voice Cloning and additional credits; suitable for creators with regular audio/voiceover needs.

Pro Everything in Creator plus higher audio quality and API-oriented audio output; suitable for professional production and developer workflows.

Scale Everything in Pro plus multiple workspace seats, team collaboration, and professional AI voices; suitable for teams and growing audio workflows.

Business Everything in Scale plus low latency for TTS, more professional AI voices, and more seats; suitable for companies with high production or integration needs. Other Enterprise Custom offer with tailored credits and seats, DPA/SLA commitments, BAA for HIPAA customers, custom SSO, higher concurrency, more voices, prioritized support, and additional enterprise features.

Pay-as-you-go / API / Startup Grants In addition to subscriptions, ElevenLabs also offers pay-as-you-go prepayment with or without a paid subscription; there is also API usage and a startup grant program for conversational AI integrations.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is not guaranteed across the board for the standard SaaS offering, but under Enterprise terms, there is a documented path to reduced-risk use: ElevenLabs offers a DPA, EU data residency in isolated environments, and, optionally, an EU-restricted processing path via API with Zero Retention Mode. At the same time, the website itself notes that data is stored in the U.S. by default and that processing may take place outside the selected region despite the chosen data residency. Therefore, usage within the European region appears to be robustly documented only under certain conditions.
Positive
The website features a privacy policy, a DPA, documented EU data residency as an enterprise feature, Zero Retention Mode to reduce stored content, an opt-out option from model training via account settings, and a reference to SOC 2. The DPA also specifies that processing is permitted only in accordance with documented customer instructions.
Negative
The website also states that customer data is hosted or stored in the U.S. by default. Even with data residency, processing may take place outside the selected region—for example, by international affiliates and subprocessors, as well as for support and content moderation. EU data residency is available only to Enterprise customers. The website does not provide evidence of full EU/EEA standard operations without these restrictions.
Server Location
According to the website, customer data is hosted or stored in the U.S. by default. Additionally, ElevenLabs offers isolated data residency environments in the EU for Enterprise customers. The website lists a separate environment for the EU at 'eu.residency.elevenlabs.io'. At the same time, it is noted that processing may take place outside the selected region despite the chosen storage location; processing can be restricted to the EU only in certain configurations, such as with Zero Retention Mode and API usage.

Link

"Where AI agents share, discuss, and upvote. Humans welcome to observe."

Moltbook is a public social platform where AI agents can post, comment, vote, and organize themselves into communities ("Submolts").

Humans are primarily intended as observers. In addition, Moltbook positions itself as an identity layer for agents: developers can build apps in which bots authenticate with their Moltbook identity and bring their reputation with them.Moltbook

A Social Network for AI Agents

3.1/10 Insufficient
Free The website is publicly accessible; people can observe agent activity. For active use, X/Twitter login or developer access is currently relevant. Other Developer Early Access
Early Access for developers who want to build apps for AI agents; mentioned are agent authentication, identity verification, agent marketplace, customer support bots, AI assistant platform, developer tools, and social platform for agents.
– (0)

Link

GDPR: Unclear Although the website includes a privacy policy with a section for UK/EEA data subjects, legal bases, and information on international data transfers, However, the website lacks key information necessary for a robust assessment of GDPR compliance throughout the EU/EEA, particularly regarding specific server and data center locations, EU data residency, data processing agreements, subprocessors, and certifications. Therefore, compliance from an EU/EEA perspective is unclear overall.
Positive
Positive aspects include a published privacy policy, an explicit reference to the rights of UK/EEA data subjects under the GDPR, specified legal bases for certain processing activities, and contact information for data protection inquiries at [email protected]. Furthermore, the policy states that applicable legal requirements will be complied with when transferring data to third countries.
Negative
A negative aspect is that the website does not specify any concrete EU/EEA server locations and explicitly provides for transfers and storage in countries outside the EEA/UK, including the U.S. and Canada. A Data Processing Agreement (DPA), a list of subprocessors, a commitment to EU data residency, an on-premises/self-hosting option, a documented opt-out from AI training, and relevant certifications are not provided on the website.
Server Location
Not specified on the website. The privacy policy only states that data may be transferred to and stored in countries other than the country of origin, including the United States, Canada, or other jurisdictions outside the EEA and the UK. No specific EU/EEA data center location is mentioned.

Link

“The AI community building the future.”

Hugging Face is a central platform for the AI/machine learning community. The Hub is used for sharing, hosting, and collaboratively developing models, datasets, and AI applications; in addition, Hugging Face offers Spaces, Inference Providers, Inference Endpoints, HuggingChat, Enterprise Hub, and open-source libraries such as Transformers.Hugging Face

The AI community building the future

8.0/10 Very good
Free Free access to the Hub to discover, experiment, share, and collaborate with models, datasets, and Spaces; suitable for learning, open-source projects, and initial prototypes. Subscription PRO Account Personal subscription with more private storage, more public storage, more inference credits, a higher ZeroGPU quota, Spaces Dev Mode, ZeroGPU Spaces Hosting, private Dataset Viewer, and blog features.

Team Organization plan for growing teams with SSO, Storage Regions, Audit Logs, Resource Groups, Repository Analytics, advanced authentication and visibility controls, token control, and team benefits for ZeroGPU / Inference Providers.

Enterprise Enterprise plan with Team features plus higher storage, bandwidth, and API limits, SCIM provisioning, advanced security and access controls, managed billing, legal/compliance processes, and dedicated support.

Enterprise Plus Extended enterprise plan according to the Enterprise documentation with additional governance, policy, network, SSO, managed user, and vendor onboarding features; to be evaluated individually. Other Inference Providers Pay-as-you-go-Modell für Zugriff auf Modelle externer und eigener Inference Provider über eine zentrale API; Abrechnung über Hugging Face oder über eigene Provider Keys möglich.

Inference Endpoints Dedizierte, autoskalierende Deployments für ML-Modelle auf gemanagter Infrastruktur; nutzungsabhängige Abrechnung nach Instanz/Hardware.

Spaces Hardware / ZeroGPU / Jobs / Storage Zusätzliche nutzungsabhängige Modelle für Spaces-Hardware, ZeroGPU-Erweiterungen, Jobs/Scripts, Training/Fine-Tuning, Eval-Workloads und zusätzlichen Speicher.
– (0)

Link

GDPR: Yes On its website, Hugging Face lists several components relevant to the EU/EEA region: a privacy policy with its EU headquarters in France, a list of subprocessors, explicitly available GDPR data processing agreements for Enterprise plans, SOC 2 Type 2, and selectable EU data residency for Team and Enterprise organizations. However, according to the documentation, standard usage may involve storage in the U.S. in some cases; the best documented approach for GDPR-compliant use in the EU/EEA is therefore to use Team/Enterprise plans with EU regions or EU data residency, along with contractual safeguards via a DPA. In addition, there is a robust open-source/self-hosting option using Hugging Face’s own components.
Positive
Positive aspects include the documented EU headquarters in France, a published privacy policy, a published list of subprocessors, available GDPR data processing agreements through Enterprise plans, SOC 2 Type 2, and explicitly available EU storage regions for models, datasets, Spaces, and—according to the documentation—inference endpoints as well.
Negative
A negative aspect is that, according to the website, repositories for non-Team/non-Enterprise users are always stored in the U.S. Additionally, the list of subprocessors mentions several processing activities in the U.S. or the United States/EMEA. A generally available, directly linked standard DPA for all plans was not found on the website; the DPA is only mentioned in connection with Enterprise plans. The website lacks a comprehensive, consistent overview of certain points, such as the specific EU countries where data centers are located, ISO 27001 compliance, and a general, platform-wide AI training opt-out.
Server Location
The website states: For non-Team/non-Enterprise users, repositories are stored in the U.S. For Team and Enterprise plans, the documented selectable regions are “US” and “EU”; for buckets, the options are also “US” and “EU.” The Privacy Policy also mentions possible processing in the U.S. and other countries. Specific individual EU/EEA data center locations are not listed on the website.

Link

AI-powered video platform for avatar-based business videos.

Synthesia is an AI video platform that enables companies to create professional videos without a camera, studio, or actors.

Content can be transformed from a prompt, script, document, PDF, or URL into multi-scene videos and then refined with avatars, voices, branding, and translations. The clear focus is on training, sales enablement, marketing, and internal communication.Synthesia

The #1 AI video platform for business

7.7/10 Good
Free Free entry with AI video creation, limited credits, limited video minutes, and a small selection of AI avatars. Subscription Starter Everything in Basic plus video downloads, AI Video Assistant, AI Dubbing, removal of the Synthesia logo, your own Personal Avatars, more avatars, support, and credits.

Creator Everything in Starter plus more Personal Avatars, API access, branded video pages, multiple avatars per scene, interactive videos, more AI avatars, priority support, and more credits. Other Enterprise Custom Enterprise plan with unlimited video minutes, translation, many stock avatars, unlimited Personal Avatars, SAML/SSO, live collaboration, Brand Kits, SCORM export, onboarding, dedicated CSM, and custom credits.

Credits / API / Custom Avatar Synthesia uses credits as a shared currency for AI usage features; custom Personal Avatars are included depending on the plan or expanded on the Enterprise side.
– (0)

Link

GDPR: Partly The website documents several key building blocks for GDPR-compliant use in the EU/EEA region: privacy policy, DPA/AVV, named subprocessors, EU storage in Ireland as well as backups in Frankfurt, and international transfer mechanisms via SCCs. At the same time, the website lists numerous subprocessors outside the EU/EEA, and the published DPA version even describes the inclusion of data in an AI training dataset. Therefore, GDPR-compliant use in the EU/EEA appears possible only under certain conditions, in particular after reviewing the specific contractual situation, the activated features, and the third-country transfers.
Positive
Positive aspects include the DPA/AVV documented on the website, the subprocessor list, EU data storage in Ireland with secondary backups in Frankfurt, an EU GDPR representative in Denmark, as well as stated certifications such as ISO 27001, ISO 42001, and SOC 2 Type II.
Negative
A negative aspect is that, according to the website, transfers outside the UK and EEA may take place and numerous subprocessors are located in the USA or other third countries. In addition, the published DPA version contains a passage on the use of data for an AI training dataset. No explicit general opt-out statement for AI training was found on the website. On-premise or self-hosting options are not indicated on the website.
Server location
According to the website, customer data is currently stored in the EU in data centers in Ireland; operational backups are also located in Ireland, with secondary backups in the AWS Frankfurt region. In addition, the website describes data transfers to the USA within AWS services using SCCs. According to the subprocessor list, further processing also partly takes place via providers outside the EU/EEA.

Link

Inspiring AGI to Benefit Humanity - free AI chatbot & agent powered by GLM

Zhipu AI is a Chinese large language model provider that operates internationally under the name Z.ai. At its core is the GLM model family for text, reasoning, agents, coding, vision, OCR, image, video, and audio capabilities. The platform offers API access, coding plans, web search, Translation Agent, and Slide/Poster Agent.Zhipu AI / Z.ai – GLM

LLM "Inspiring AGI to Benefit Humanity - free AI chatbot & agent powered by GLM"

3.9/10 Insufficient
Free GLM-4.5-Flash / free quotas
Z.AI describes GLM-4.5-Flash as a free model variant for reasoning, coding, and agents; in addition, free trial quotas may be available depending on the platform status. Subscription GLM Coding Plan
Personally assigned coding subscription for officially supported coding tools; not intended for general API use, resale, or use by third parties. Other API Usage / Usage-Based Billing API access to GLM models, SDKs, OpenAI-compatible usage, streaming, function calling, structured output, context caching, and tool usage; billing is usage-based depending on the model and platform rules.

Enterprise / Individual Agreements Separate written agreements are possible; no confirmed information is available regarding standardized EU enterprise plans or EU hosting.
– (0)

Link

GDPR: No Although the website documents a privacy policy as well as a DPA for API services embedded in the privacy policy, it does not demonstrate fully GDPR-compliant use for the European region. The main factor arguing against this is that, according to the provider’s own statement, it generally provides the services from Singapore and, as a rule, processes customer data in Singapore. An EU/EEA data residency, EU data centers, an EU SaaS offering, on-premise/self-hosting of the actual model, or a European hosting path are not stated on the website.
Positive
Positively documented are a privacy policy, a DPA for API services, the classification of the provider as a processor for customer data in the API context, commitments to process data only on instructions, and the statement that End User Content for API services is not used to develop or improve the services except with explicit consent. In addition, it is stated that content in the API service is not stored but processed in real time.
Negative
The main negative point is that, according to the website, the services are generally provided from Singapore and customer data is, as a rule, processed in Singapore. For international transfers, only general references are made to 'appropriate safeguards' and 'legally recognized transfer mechanisms,' without naming specific EU mechanisms, SCC documents, EU data centers, or EU data residency. Subprocessors, specific server locations, certifications such as ISO 27001 or SOC 2, and an AVA/DPA conclusion process as a separate customer artifact are not stated on the website. A self-hosting or on-premise route for the platform is also not stated.
Server location
The website states that the provider generally provides the services from Singapore, that group companies and commissioned service providers are typically based in Singapore, and that customer data is, as a rule, processed in Singapore. An EU/EEA data center or EU data residency is not stated on the website.

Link

“Build production-ready apps through conversation.”

Emergent is an agent-based no-code—or “vibe-coding”—app builder. Natural-language requirements are transformed into complete web and mobile applications, complete with user interface, backend logic, database, authentication, integrations, and hosting. Users can export the generated code via GitHub and continue developing or deploying it outside the platform.Emergent

Build production-ready apps through conversation.

6.0/10 Solid
Free Monthly free credit allowance, access to core platform features, web and mobile experiences, advanced models, and one-click LLM integration. Subscription Standard Free features plus private projects, a larger monthly credit allowance, the ability to purchase additional credits, GitHub integration, and task forking.

Pro Standard features plus a large context window, advanced reasoning, system prompt editing, custom AI agents, high-performance computing, a higher credit allowance, and prioritized support.

Enterprise Custom enterprise plan with higher usage limits, SSO, domain capture, shared workspaces, role-based access control, audit logs, managed hosting, onboarding, and enterprise support. Other Credits Consumption units for AI agents, development steps, and platform usage; the standard plan allows you to purchase additional credits.

GitHub Code Export Full synchronization and transfer of the generated code to your own GitHub repository.

Managed Hosting Hosting, monitoring, authentication, database, and deployment can be provided within the platform.

Enterprise Cloud Deployment Custom deployment within the company’s cloud and governance environment; technical and regional details available upon request.

Integrations and MCP More than 100 integrations, payment providers, APIs, and MCP connections for external systems and workflows.
– (0)

Link

GDPR: Partly The website documents several security-related aspects, such as ISO 27001, SOC 2 Type II, code export, hosting outside the platform, and even self-hosting or on-premises deployments. However, this alone is not sufficient for GDPR-compliant use within the EU/EEA. I was unable to find any reliable information on the website regarding EU/EEA server locations, EU data residency, subprocessors, or a data processing agreement (DPA). On the positive side, however, Emergent describes a way to run generated applications on your own servers, in your own cloud, or on-premises. Therefore, its use is conditional from a GDPR perspective: a more privacy-friendly approach is conceivable through self-hosting or hosting the generated application on one’s own servers, whereas the standard SaaS documentation is too incomplete for the EU/EEA region.
Positive
The website describes full code ownership rights, GitHub sync/export, and deployments to your own servers, your own cloud environments, or on-premises. Additionally, the website lists ISO 27001 and SOC 2 Type II as certifications.
Negative
The website does not specify a concrete EU/EEA server location for the SaaS platform, a guaranteed EU data residency, a list of subprocessors, a locatable AVV/DPA, or a clear statement that prompts, uploads, or outputs are not used for general model training or that an opt-out option is available for this purpose.
Server Location
Not specified on the website. There are references to hosting, managed hosting, and the option to deploy applications on one’s own servers, in one’s own cloud, or on-premises; however, a specific location for the Emergent SaaS servers or data centers within the EU/EEA was not found on the website.

Link

“A suite of free AI-powered features …”

Shopify Magic is Shopify’s integrated AI suite for e-commerce workflows.

It supports, among other things, writing product descriptions, blog posts, emails, theme content, suggested replies in customer support, customer segment descriptions, as well as AI-powered image editing in the file editor. The features are generally available for free within Shopify, but the specific availability of individual features may vary depending on the functional area.Shopify Magic

A suite of free AI-powered features …

7.2/10 Good
Subscription Shopify offers testing options; Shopify Magic can be used in the Shopify admin as an integrated AI feature as soon as a suitable Shopify store is being used. Other Basic For small shops; online store, product management, checkout, payment processing, basic commerce features, and access to relevant Shopify features including AI features where available.

Grow For growing merchants; more features, better scalability, and enhanced commerce/reporting options compared to Basic.

Advanced For larger teams and shops; advanced reports, higher scalability, stronger commerce features, and more operational control. Other Shopify Plus Enterprise commerce with individual contracts, greater scalability, enhanced customization, automation, and support features.

Retail / Starter / Agentic / Enterprise / Apps Additional Shopify offerings for POS/retail, simple sales channels, agentic commerce features, enterprise scenarios, and app extensions.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, GDPR-compliant use of Shopify Magic can only be substantiated to a limited extent. Positively documented are a privacy policy for merchants, a DPA, a subprocessors list, a European primary contracting party in Ireland, as well as European storage of certain merchant and customer data at rest for new merchants in Europe. At the same time, Shopify itself documents that despite storage in Europe, international data transfers still take place for processing and that the infrastructure geographically balances data between multiple Google Cloud regions. For Shopify Magic itself, there is also no indication of fully comprehensive, feature-specific EU-only operation, no on-premise/self-hosting, and no explicit opt-out for AI training at the feature level.
Positive
The website documents a DPA, a subprocessors list, information on GDPR-compliant transfer mechanisms, the primary EMEA contracting party Shopify International Limited in Ireland, as well as European data storage of certain data for new merchants in Europe. For Shopify Magic, it is also stated that Shopify does not use a merchant’s store-level data to operate Shopify Magic for other merchants.
Negative
The website does not indicate exclusive EU/EEA processing for Shopify Magic. Shopify explicitly states that even with storage in Europe, international data transfers take place for processing. An explicit opt-out from AI training for Shopify Magic, an on-premise/self-hosting option, and disclosed open-source components of Shopify Magic are not indicated on the website.
Server location
The website states that certain merchant and customer personal data for new merchants in Europe is stored at rest in Europe by default. At the same time, it states that Shopify dynamically balances storage between multiple Google Cloud Platform regions and that even with European storage, international data transfers take place for processing. The subprocessors list includes, among others, AWS headquartered in the USA, Google Cloud Canada Corporation in Canada, and Adyen in the Netherlands. No separate, specific server location is indicated for Shopify Magic itself.

Link

"Specialized language models for a sovereign Europe"

Aleph Alpha offers PhariaAI, a sovereign, customizable end-to-end AI suite for enterprises and public authorities.

The suite includes, among other things, PhariaAssistant for chat, summarization, document analysis, and translation, PhariaStudio for developing and evaluating custom AI applications, as well as PhariaOS for operation and administration. The platform is designed for sensitive, regulated, and business-critical environments and can be operated on-premises, in the cloud, or in a hybrid setup.Aleph Alpha

Trust. Responsibility. Sovereignty

6.8/10 Solid
Other Enterprise / Project Business Customized solutions for companies, authorities, and regulated environments with PhariaAI, specialized language models, APIs, data integration, and compliance architecture.

PhariaAI / PhariaInference API Programmatic access to Aleph Alpha functions via APIs such as PhariaInference, PhariaData, PhariaSearch, and PhariaStudio.

Government / Sovereign Deployments Sovereign deployments such as Pharia Government Assistant with EU hosting, data isolation, and specific compliance commitments.
– (0)

Link

GDPR: Yes From an EU/EEA perspective, GDPR-compliant use in accordance with the best practice documented on the website is plausible because Aleph Alpha explicitly positions its AI suite on European infrastructure, offers flexible deployment options—including its own data centers and infrastructure—and provides installable PhariaAI documentation for customer-side deployments. This provides a straightforward path to data-sovereign use within the EU/EEA, even though the website does not publicly disclose all detailed evidence for individual compliance points regarding the managed/SaaS variant.
Positive
Positive aspects include the clear focus on “European infrastructure,” the statement that every model runs on European infrastructure, the documented installability of PhariaAI, the explicit option for infrastructure “in the cloud and in the customer’s own data center,” the documented hybrid deployment, and the privacy policy, which references data processing agreements for website service providers.
Negative
Negative or incomplete aspects include the fact that the website does not provide a dedicated DPA for product customers, does not publish a list of subprocessors for the actual product, no explicit opt-out or contractual exclusion of model training using customer data, no clearly specified EU data residency for a standard SaaS product instance, and no certifications such as ISO 27001 or SOC 2 listed on the website.
Server Location
The website repeatedly mentions “European infrastructure.” In addition, Aleph Alpha describes its own AI data center, “alpha ONE,” in Germany and mentions a PhariaAI-as-a-Service partnership on European infrastructure with STACKIT. However, a specific, universally applicable server location for all product variants is not conclusively specified.

Link

The frontier AI research lab for visual intelligence.

Black Forest Labs is the company behind the FLUX models for AI-based image generation and image editing. The platform includes Playground, API, open-weights/self-hosting licenses, and enterprise offerings for visual AI workflows. FLUX.2 is officially described as a production model for image generation and image editing with multi-reference control and up to 4MP output.Black Forest Labs / FLUX

The frontier AI research lab for visual intelligence.

7.0/10 Good
Free Free or trial-based entry via the Playground; suitable for trying out FLUX.2 and image generation without your own integration. Other FLUX API / Pay-as-you-go API access to FLUX models; according to the pricing page for FLUX.2, FLUX Kontext, and additional image models with usage-based billing.

FLUX.2 [small] Fastest model variant for real-time use, prototyping, rapid iteration, and high speed; according to the model page also runnable locally and fine-tuning-ready.

FLUX.2 [pro] Production-oriented image generation and image editing with high quality and scalability.

FLUX.2 [flex] Variant for precise control, typography, small details, and finer visual control.

FLUX.2 [max] Highest-quality variant with particularly strong prompt adherence, editing consistency, professional output, and grounding features.

Self-Hosted Commercial License License for downloading, hosting, and using certain FLUX-[dev] models in your own applications; API resale or third-party API access is excluded without the corresponding rights.

Enterprise / Custom Deployment Custom enterprise options with dedicated infrastructure, custom fine-tuning, and integration support.
– (0)

Link

GDPR: Partly For the EU/EEA region, there is no clear evidence that the standard SaaS version complies with the GDPR. On the positive side, the provider describes on its website self-hosting, private cloud/on-premises operation, dedicated instances with “zero data retention” and “network isolation,” as well as GDPR-compliant data processing in an enterprise context. At the same time, according to the Terms of Service, general SaaS/website use allows for very extensive use of input and output data for further development and training. The simplest and best option for EU/EEA users is therefore the self-hosted or dedicated enterprise path, rather than the freely accessible standard SaaS usage.
Positive
The website lists self-hosted/open-source options, including “Deploy in your private cloud or on-premises with complete data isolation,” “No external calls: all inference runs inside your environment,” and “Full data sovereignty on your own infrastructure.” In addition, the Enterprise page mentions dedicated instances with “zero data retention and network isolation” as well as certifications/standards such as ISO 27001, SOC 2 Type II, and “GDPR-compliant data processing is standard.”
Negative
The website does not specify EU/EEA data residency or a specific server location for the standard services. A publicly linked page for the Terms of Service (TOS) or Data Processing Agreement (DPA), or a list of subprocessors, is also not available. Particularly critical: In the general terms, the user grants the provider a worldwide, perpetual, and irrevocable license to use input and output to “develop, train, and improve” technologies, products, and services. The website does not specify an explicit opt-out option from AI training for this standard use.
Server location
Not specified on the website. Although Enterprise, Self-Hosted, and Private Cloud options, as well as Azure AI Foundry, are mentioned, no specific EU/EEA data center, country, or binding EU data residency is specified for the standard SaaS version.

Link

xAI offers Grok models via its API for text generation, reasoning, coding, tool use, document-centric workflows, and agentic research. The current docs focus primarily on Grok 4.20 as the new flagship, as well as on server-side tools such as Web Search, X Search, Code Execution, and Collections Search.

Additionally, xAI documents classic model-listing endpoints such as /v1/models and /v1/language-models.xAI API – Grok

LLM “Build with Grok, the AI model designed to deliver truthful, insightful answers.”

7.1/10 Good
Other Token-based API usage Billing based on input, reasoning, completion, image, and cached prompt tokens per model.

Server-side Tools Additional billing for tool invocations; costs may increase with the complexity of agentic requests.

Credits / API Key API usage takes place via an xAI account, API key, and purchased credits.

Enterprise / ZDR Enterprise customers can use Zero Data Retention so that API requests and responses are not stored.

Voice / Imagine / Batch / Tools Additional product areas for real-time conversations, TTS/STT, image/video generation, batch processing, web search, and structured outputs.
– (0)

Link

GDPR: Partly The website documents several privacy-relevant components for use in the EU/EEA region, but no consistently clear, demonstrable full GDPR compliance for standard use of the xAI API. Positive aspects include statements such as "no training without explicit permission," an Enterprise option for Zero Data Retention, references to a "Data Processing Addendum," as well as to "EU data residency options." At the same time, essential points remain unclear on the provider's website or are only indirectly evidenced: a specific server location or specific EU/EEA data centers are not named, subprocessors are not listed on the website, and a DPA/AVV is mentioned but could not be found in detail on the domain reviewed here. For GDPR-compliant use in the European region, the tool therefore appears realistic only under certain conditions, in particular with an Enterprise setup, DPA/AVV, and ideally Zero Data Retention or explicitly agreed EU data residency.
Positive
Several positive privacy signals can be found on the website: xAI states that API inputs and outputs are not used for training without explicit permission. For Enterprise accounts, there is "Zero Data Retention," meaning API requests and responses are not stored. For the Voice APIs, the website also mentions "GDPR Compliant," "Data processing agreements and EU data residency options," as well as "Regional processing for compliance requirements." SOC 2 Type 2 is also mentioned.
Negative
From an EU/EEA perspective, crucial details are missing from the website or remain vague: specific EU/EEA server locations or named data centers are not provided; subprocessors are not listed on the website; a DPA/AVV is mentioned, but its contents could not be found on the reviewed domain; according to the Security FAQ, the standard API generally stores requests and responses for 30 days unless Zero Data Retention is activated as an Enterprise feature. As a result, a simple blanket GDPR approval for all types of use is not substantiated.
Server location
Not specified on the website. There are references to "EU data residency options" and "Regional processing for compliance requirements," but no specifically named server locations or data centers in the EU/EEA.

Link

“Leading partner for AI assistants for Swiss network operators and fiduciary firms”

Connect AI develops and operates tailor-made AI assistants for companies, primarily for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services. The core product, Employee GPT, is marketed as a secure alternative to ChatGPT/Copilot for companies that can be operated in Switzerland or the EU. The offering is complemented by AI rollout programs for executives, teams, and companies.Connect AI

AI assistants for businesses, especially for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services

6.5/10 Solid
Subscription Employee GPT / Employee GPT Secure private ChatGPT alternative for companies; according to the provider, with internal knowledge sources, Swiss hosting, no training on customer data, role-based permissions, private container environments, and customer ownership of data, knowledge bases, and chat logs. The pricing logic is described in a blog post as a monthly fee per employee plus a one-time onboarding fee.

AI Customer Support AI agents, help center, personalized responses, knowledge library, analytics and reports, service quality, and multilingual 24/7 support.

Sales Agent Personal sales agent for customers, lead qualification, product recommendations, upselling/cross-selling, audience insights, analytics, and reduction of cart abandonment.

Event Agent / TreuhandGPT / AI Strategy Listed on the website as additional solutions; specific public details on plans and features are not fully verifiably available. Other Customer-specific implementation & operation The Terms and Conditions describe Connect-AI Services as the customer-specific implementation and operation of the Connect-AI platform; fees, packages, usage volume, and term are defined in the respective Agreement.

Onboarding / Consulting / Integrations According to the Employee-GPT blog, the pricing framework includes not only the platform and secure hosting but also training and personal support; specific terms are clarified on a project-by-project basis.
– (0)

Link

GDPR: Partly The website contains several positive statements regarding the privacy-friendly use of Employee GPT in the European context, particularly regarding data storage in Switzerland or the EU, self-hosted open-source models, “cloud or on-premises,” and “no use of customer data for model training.” However, for an assessment covering the entire EU/EEA area, the documentation is not sufficient to warrant an unqualified “yes,” because the general privacy policy also mentions data processing outside the EU/EEA, and there is no clear, detailed evidence—freely accessible on the website—regarding EU/EEA data residency, a list of subprocessors, or certifications. The best available approach appears to be a controlled deployment close to the EU/Switzerland via Swiss/EU hosting or “on-premises,” but this is only partially documented.
Positive
Positive aspects include the product-related statements regarding Employee GPT: “Your data is anonymized and remains in Switzerland or the EU,” “No use of customer data for model training,” “role-based access rights and private container environments,” “Hosting with FINMA-certified partners,” as well as the statement that self-hosted open-source models and hosting preferences—“cloud or on-premises”—are supported.
Negative
A negative or limiting aspect is that the general privacy policy also mentions transfers to third countries and lists Google Cloud and HubSpot; furthermore, it states that recipients may be located outside Switzerland/the EU/the EEA. A publicly accessible, specific list of subprocessors, reliable details on EU data center locations, a clearly described EU data residency model for all variants, and relevant certifications such as ISO 27001 or SOC 2 are not provided on the website.
Server Location
Employee GPT product page: Data remains “in Switzerland or the EU”; it also mentions “Swiss infrastructure” and, for the Swiss models, “no data transfer abroad.” General Privacy Policy: physical data is stored in “Switzerland & Europe,” while electronic data from customers and users is stored on Google Cloud; HubSpot stores data in the U.S., among other locations. Specific individual EU/EEA data center countries are not listed on the website.

Link

"Best AI Video & Image Generator" / "Free AI Video Generator"

DeeVid AI is an AI platform for text-to-video, image-to-video, video-to-video, AI effects, AI music, text-to-speech, AI avatars, and AI ads. The provider positions itself as a platform with multiple video/image models such as Veo, Kling, Sora, Runway, Stable Diffusion, Pika, and others.Deevid AI

Best AI Video & Image Generator - Free AI Video Generator

3.7/10 Insufficient
Free Free Credits / Starting Credit
New users receive a small credit allowance for testing; free users generate content with watermarks. Subscription Lite For beginners and casual creators; monthly credits, AI video, AI image, text-to-speech, voice cloning/design, AI video ads, AI avatar, AI music, templates, private creation, no watermark, commercial use.

Pro Advanced plan for creators with a higher credit allocation, greater production capacity, 1080p output, AI video/image/audio features, Character Consistency, and commercial use.

Premium For high-volume users with a significantly higher credit allocation, Fast Generation Mode, 1080p output, priority support, and expanded production volumes. Other Credit Packs Additional credits can be purchased separately; credits serve as consumption units for video, image, and audio generation.

Third-Party Models DeeVid integrates and/or routes various video/image models such as Sora, Veo, Kling, Runway, Stable Diffusion, Pika, Luma, Hailuo, and others; specific data flows depend on the selected model.
– (0)

Link

GDPR: No From the perspective of a user in the EU/EEA, the website does include a privacy policy and contains statements regarding encryption, data deletion, and the fact that user inputs and outputs are not used to train the company’s own AI models. At the same time, the privacy policy lists data centers in North America as the primary storage location for personal data and refers only generally to “appropriate safeguards” for international data transfers. No data processing agreement (DPA), list of subprocessors, EU data residency, EU data center, private cloud/on-premises option, or reliable certification documentation could be found on the website. Thus, there is no evidence of GDPR-compliant use for the EU/EEA.
Positive
The following are positively documented: a dedicated privacy policy, information on the categories of data collected, SSL/TLS encryption, encrypted storage, access controls, defined retention periods, data subject rights, and the statement that inputs and outputs are not used to train AI models. Furthermore, it states that data used with third-party AI services is intended solely for processing the request and is not to be stored after processing.
Negative
A major negative factor for the EU/EEA assessment is that, according to the website, personal data is primarily stored in North America. No specifically named mechanisms, no Data Processing Agreement (DPA), and no subprocessors are disclosed for international data transfers. The website also lacks information on EU data residency, EU data centers, self-hosting, dedicated private cloud setups, and relevant certifications such as ISO 27001 or SOC 2.
Server Location
According to the privacy policy, personal data is primarily stored in data centers in North America; certain data may be stored locally if required by law. No EU/EEA server location is specified on the website.

Link

“Turn text into video with AI”

HeyGen is an AI video platform that enables the creation, localization, and personalization of avatar-based videos from text, images, audio, presentations, or templates.

The product includes, among other things, AI Studio, Video Translation, Digital Twins, Voice Cloning, Video Agent, as well as API, CLI, and MCP access. Officially, HeyGen states that it has 100,000+ teams on the web platform and 1,000,000+ developers on the developer platform.HeyGen

Turn text into video with AI

7.2/10 Good
Free Limited number of short videos, custom digital twin, standard processing, stock avatars, 720p export, sharing/download, as well as trial access to premium features. Subscription Creator For solo creators; longer videos, Custom Digital Twin, unlimited Photo Avatars, many Stock Video Avatars, Voice Cloning, many languages, faster processing, 1080p, Brand Kit, and watermark removal.

Pro For advanced individuals; everything in Creator plus significantly more premium usage, faster processing, translation script editing, and 4K export.

Business For teams/businesses; everything in Creator plus more generative usage, multiple Custom Digital Twins, centralized billing, Auto-Reload Credits, team members, Workspace Collaboration, comments, interactive videos, Screen Recorder, SCORM export, LMS and automation integrations. Other Enterprise Custom offer with unlimited videos, no maximum video duration, 4K, fastest processing, multi-workspace control, role management, SCIM, MFA, commercial contract terms, priority support, dedicated CSM, and onboarding.

API Pricing Separate API access for developers and product teams; HeyGen refers to a separate API pricing overview.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of HeyGen is only plausible under certain conditions that are properly documented; it is not considered standard use that is entirely unproblematic. Positive aspects include an available DPA, SCCs, the EU-US Data Privacy Framework, a European DPO, and documented sub-processor arrangements. However, a negative aspect is that, according to the website, all customer data is stored on AWS in the U.S., and the website does not specify any EU/EEA data residency, any EU data center, or any on-premises/self-hosting option. For standard SaaS in the EU/EEA, a third-country transfer to the U.S. therefore remains an inherent part of the service.
Positive
The website documents a privacy policy, a Data Processing Addendum, SCC information for EU/UK/Switzerland transfers, EU-US DPF certification, a DPO based in Europe, SOC 2 Type II, and an opt-out from AI training. For Enterprise customers, data use for AI training is excluded by default.
Negative
The website states that all HeyGen customer data is stored in the U.S. on AWS. The website does not specify EU data residency, EU/EEA data centers, a private cloud option in the EU/EEA, a hybrid model, or on-premises/self-hosting. Furthermore, according to the privacy policy, HeyGen reserves the right to process data for its own purposes, including service improvement and AI model training; for non-enterprise customers, the only option mentioned is to opt out by contacting the company.
Server Location
According to the website, the services are hosted on AWS in the U.S.; all customer data is stored in the U.S. EU/EEA server locations are not specified on the website.

Link