Find Your Tool in 6 Steps
Result: 155

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 155
Research Images Video Music Agent Business Marketing Website API

"Your medical AI assistant."

Tandem is an AI-powered medical assistant for doctors, therapists, nurses, and healthcare facilities.

The tool supports the preparation, documentation, and follow-up of treatment appointments, creates medical notes and documents in seconds, suggests suitable diagnosis and procedure codes, and allows editing via voice input. According to the website, Tandem supports over 50 specialties and integrations with more than 100 medical systems.Tandem Health

Your medical AI assistant

7.2/10 Good
Free For clinicians who want to integrate Tandem into their workflow without commitment; includes unlimited note generation, limited custom templates, inviting up to two colleagues, and limited daily Pro Actions. Subscription Pro – unlimited note and document generation, unlimited Pro Actions and personalization, 1-click transfer to 100+ medical systems, unlimited templates, clinician-led support.

Enterprise – everything in Pro plus custom integrations, onboarding/training/rollout, prioritized support, enterprise authentication, and detailed usage reports. Other Enterprise For larger practices and care organizations; includes everything in Pro plus custom EHR integrations, full onboarding, training & rollout, priority support, enterprise authentication, and detailed usage reports.

Custom Integrations Custom integrations into medical record systems if a system is not yet supported.
– (0)

Link

GDPR: Partly The website contains several strong indications for GDPR-compliant use in the EU/EEA region: Tandem describes itself as a processor for customer data, refers to a data processing agreement, states that the processing and storage of patient data take place exclusively in European data centers, and explains that patient data are not used to train AI models. However, the publicly accessible website does not provide specific server countries/data center providers, a publicly viewable list of subprocessors, or a publicly accessible DPA text. As a result, use from an EU/EEA perspective appears plausibly well safeguarded, but is not documented with complete transparency.
Positive
Positive aspects include the explicit statements that all patient data are processed and stored in Europe, that no audio recordings are stored, that patient data are not used for AI training, and that Tandem is certified according to ISO 27001 and ISO 13485. In addition, the privacy policy describes its role as a processor and refers to a DPA.
Negative
A negative aspect is that the website does not provide any specific public information on individual server locations or countries, no publicly available list of subprocessors, and no directly viewable DPA content. Likewise, no on-premise, self-hosting, or clearly documented private cloud option was indicated on the website.
Server location
The website states that patient data are processed and stored exclusively in European data centers, or that all data remain within the EU. A specific country, specific data center, or specific hosting provider is not stated on the website.

Link

The frontier AI research lab for visual intelligence.

Black Forest Labs is the company behind the FLUX models for AI-based image generation and image editing. The platform includes Playground, API, open-weights/self-hosting licenses, and enterprise offerings for visual AI workflows. FLUX.2 is officially described as a production model for image generation and image editing with multi-reference control and up to 4MP output.Black Forest Labs / FLUX

The frontier AI research lab for visual intelligence.

7.0/10 Good
Free Free or trial-based entry via the Playground; suitable for trying out FLUX.2 and image generation without your own integration. Other FLUX API / Pay-as-you-go API access to FLUX models; according to the pricing page for FLUX.2, FLUX Kontext, and additional image models with usage-based billing.

FLUX.2 [small] Fastest model variant for real-time use, prototyping, rapid iteration, and high speed; according to the model page also runnable locally and fine-tuning-ready.

FLUX.2 [pro] Production-oriented image generation and image editing with high quality and scalability.

FLUX.2 [flex] Variant for precise control, typography, small details, and finer visual control.

FLUX.2 [max] Highest-quality variant with particularly strong prompt adherence, editing consistency, professional output, and grounding features.

Self-Hosted Commercial License License for downloading, hosting, and using certain FLUX-[dev] models in your own applications; API resale or third-party API access is excluded without the corresponding rights.

Enterprise / Custom Deployment Custom enterprise options with dedicated infrastructure, custom fine-tuning, and integration support.
– (0)

Link

GDPR: Partly For the EU/EEA region, there is no clear evidence that the standard SaaS version complies with the GDPR. On the positive side, the provider describes on its website self-hosting, private cloud/on-premises operation, dedicated instances with “zero data retention” and “network isolation,” as well as GDPR-compliant data processing in an enterprise context. At the same time, according to the Terms of Service, general SaaS/website use allows for very extensive use of input and output data for further development and training. The simplest and best option for EU/EEA users is therefore the self-hosted or dedicated enterprise path, rather than the freely accessible standard SaaS usage.
Positive
The website lists self-hosted/open-source options, including “Deploy in your private cloud or on-premises with complete data isolation,” “No external calls: all inference runs inside your environment,” and “Full data sovereignty on your own infrastructure.” In addition, the Enterprise page mentions dedicated instances with “zero data retention and network isolation” as well as certifications/standards such as ISO 27001, SOC 2 Type II, and “GDPR-compliant data processing is standard.”
Negative
The website does not specify EU/EEA data residency or a specific server location for the standard services. A publicly linked page for the Terms of Service (TOS) or Data Processing Agreement (DPA), or a list of subprocessors, is also not available. Particularly critical: In the general terms, the user grants the provider a worldwide, perpetual, and irrevocable license to use input and output to “develop, train, and improve” technologies, products, and services. The website does not specify an explicit opt-out option from AI training for this standard use.
Server location
Not specified on the website. Although Enterprise, Self-Hosted, and Private Cloud options, as well as Azure AI Foundry, are mentioned, no specific EU/EEA data center, country, or binding EU data residency is specified for the standard SaaS version.

Link

"Best AI Video & Image Generator" / "Free AI Video Generator"

DeeVid AI is an AI platform for text-to-video, image-to-video, video-to-video, AI effects, AI music, text-to-speech, AI avatars, and AI ads. The provider positions itself as a platform with multiple video/image models such as Veo, Kling, Sora, Runway, Stable Diffusion, Pika, and others.Deevid AI

Best AI Video & Image Generator - Free AI Video Generator

3.7/10 Insufficient
Free Free Credits / Starting Credit
New users receive a small credit allowance for testing; free users generate content with watermarks. Subscription Lite For beginners and casual creators; monthly credits, AI video, AI image, text-to-speech, voice cloning/design, AI video ads, AI avatar, AI music, templates, private creation, no watermark, commercial use.

Pro Advanced plan for creators with a higher credit allocation, greater production capacity, 1080p output, AI video/image/audio features, Character Consistency, and commercial use.

Premium For high-volume users with a significantly higher credit allocation, Fast Generation Mode, 1080p output, priority support, and expanded production volumes. Other Credit Packs Additional credits can be purchased separately; credits serve as consumption units for video, image, and audio generation.

Third-Party Models DeeVid integrates and/or routes various video/image models such as Sora, Veo, Kling, Runway, Stable Diffusion, Pika, Luma, Hailuo, and others; specific data flows depend on the selected model.
– (0)

Link

GDPR: No From the perspective of a user in the EU/EEA, the website does include a privacy policy and contains statements regarding encryption, data deletion, and the fact that user inputs and outputs are not used to train the company’s own AI models. At the same time, the privacy policy lists data centers in North America as the primary storage location for personal data and refers only generally to “appropriate safeguards” for international data transfers. No data processing agreement (DPA), list of subprocessors, EU data residency, EU data center, private cloud/on-premises option, or reliable certification documentation could be found on the website. Thus, there is no evidence of GDPR-compliant use for the EU/EEA.
Positive
The following are positively documented: a dedicated privacy policy, information on the categories of data collected, SSL/TLS encryption, encrypted storage, access controls, defined retention periods, data subject rights, and the statement that inputs and outputs are not used to train AI models. Furthermore, it states that data used with third-party AI services is intended solely for processing the request and is not to be stored after processing.
Negative
A major negative factor for the EU/EEA assessment is that, according to the website, personal data is primarily stored in North America. No specifically named mechanisms, no Data Processing Agreement (DPA), and no subprocessors are disclosed for international data transfers. The website also lacks information on EU data residency, EU data centers, self-hosting, dedicated private cloud setups, and relevant certifications such as ISO 27001 or SOC 2.
Server Location
According to the privacy policy, personal data is primarily stored in data centers in North America; certain data may be stored locally if required by law. No EU/EEA server location is specified on the website.

Link

“Bringing technology to life”

ElevenLabs is an AI platform for speech synthesis, voice cloning, speech-to-text, dubbing, sound effects, music, conversational agents, and audio APIs.

The company no longer positions itself solely as a voice tool, but as a platform with ElevenCreative, ElevenAgents, and ElevenAPI for creators, businesses, and developers.ElevenLabs

Bringing technology to life

7.7/10 Good
Free Includes text-to-speech, speech-to-text, sound effects, voice design, music, productions, image & video, as well as limited studio projects and monthly credits. Subscription Starter Everything in Free plus a commercial license, Instant Voice Cloning, more Studio projects, commercial music use, and Dubbing Studio.

Creator Everything in Starter plus professional Voice Cloning and additional credits; suitable for creators with regular audio/voiceover needs.

Pro Everything in Creator plus higher audio quality and API-oriented audio output; suitable for professional production and developer workflows.

Scale Everything in Pro plus multiple workspace seats, team collaboration, and professional AI voices; suitable for teams and growing audio workflows.

Business Everything in Scale plus low latency for TTS, more professional AI voices, and more seats; suitable for companies with high production or integration needs. Other Enterprise Custom offer with tailored credits and seats, DPA/SLA commitments, BAA for HIPAA customers, custom SSO, higher concurrency, more voices, prioritized support, and additional enterprise features.

Pay-as-you-go / API / Startup Grants In addition to subscriptions, ElevenLabs also offers pay-as-you-go prepayment with or without a paid subscription; there is also API usage and a startup grant program for conversational AI integrations.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is not guaranteed across the board for the standard SaaS offering, but under Enterprise terms, there is a documented path to reduced-risk use: ElevenLabs offers a DPA, EU data residency in isolated environments, and, optionally, an EU-restricted processing path via API with Zero Retention Mode. At the same time, the website itself notes that data is stored in the U.S. by default and that processing may take place outside the selected region despite the chosen data residency. Therefore, usage within the European region appears to be robustly documented only under certain conditions.
Positive
The website features a privacy policy, a DPA, documented EU data residency as an enterprise feature, Zero Retention Mode to reduce stored content, an opt-out option from model training via account settings, and a reference to SOC 2. The DPA also specifies that processing is permitted only in accordance with documented customer instructions.
Negative
The website also states that customer data is hosted or stored in the U.S. by default. Even with data residency, processing may take place outside the selected region—for example, by international affiliates and subprocessors, as well as for support and content moderation. EU data residency is available only to Enterprise customers. The website does not provide evidence of full EU/EEA standard operations without these restrictions.
Server Location
According to the website, customer data is hosted or stored in the U.S. by default. Additionally, ElevenLabs offers isolated data residency environments in the EU for Enterprise customers. The website lists a separate environment for the EU at 'eu.residency.elevenlabs.io'. At the same time, it is noted that processing may take place outside the selected region despite the chosen storage location; processing can be restricted to the EU only in certain configurations, such as with Zero Retention Mode and API usage.

Link

"Track & Boost Your Brand's Visibility in both AI Search (…) and Traditional Search"

Writesonic is an AI marketing platform for SEO, Generative Engine Optimization (GEO), AI search visibility, and content creation.

The tool monitors how brands appear in AI responses and search systems, provides recommendations for action, and supports the creation, updating, and optimization of content. According to the official documentation, Writesonic combines traditional search such as Google/Bing with AI search such as ChatGPT, Claude, Perplexity, Gemini, and Grok.Writesonic

Track & Boost Your Brand's Visibility in both AI Search (…) and Traditional Search

7.2/10 Good
Free Start without a credit card for SEO and AI content tools; no permanently fully featured free version recognizable as a guaranteed standard plan. Subscription Starter For early-stage brands with AI Search Tracking, GEO, AI Article Writer, Content Optimization, SEO & Content AI Agent, Chatsonic, and basic project/team features.

Basic For growing brands with more GEO tracking, more AI content, Site Audits, Premium SEO Data, integrations, and additional team/project limits.

Growth For scaling teams with more AI Search Tracking, content generation, SEO Audits, Sentiment Analysis, AI Search Volume Data, integrations, and enhanced support. Other Enterprise Custom solution for large brands and agencies with custom AI Search Tracking, custom limits, SSO/SAML, dedicated GEO strategist, account manager, and tailored projects.

Chatsonic / SEO Agents / Integrations Additional AI features for SEO, content, data analysis, web browsing, file uploads, image generation, and marketing workflows.
– (0)

Link

GDPR: Partly The website documents several important data protection components for use within the EU/EEA: privacy policy, DPA/AVV, list of subprocessors, SCCs for third-country transfers, as well as an explicit commitment not to use customer data for training general models. At the same time, the website consistently states the region 'United States' for hosting, model providers, and numerous other subprocessors. EU data residency, EU data centers, or a self-hosting/on-premise option are not specified on the website. Therefore, from an EU/EEA perspective, use appears possible only under certain conditions, in particular on the basis of contractual transfer mechanisms and the controller’s own risk assessment.
Positive
Positively documented are a Data Processing Agreement, the classification of Writesonic as a processor for customer data, EU Standard Contractual Clauses for EEA transfers, support with DPIAs, as well as the statement that customer data is not used for training or fine-tuning general, foundation, or large language models of Writesonic or model providers. In addition, the website refers to a SOC 2 Type 2 audit.
Negative
Negative for straightforward GDPR-compliant use within the EU/EEA is that the website lists the United States as the region for primary cloud hosting, selected workloads, frontend, backend, databases, vector storage, support, analytics, and AI model providers. The privacy policy also expressly states that personal data may be transferred to, stored, and processed in the United States and other countries. EU data residency, an EU/EEA data center as a standard or option, as well as on-premise/self-hosting, are not specified on the website.
Server location
According to Schedule 3 of the DPA, the regions listed for Microsoft Azure as primary cloud hosting, AWS for selected workloads, as well as numerous other infrastructure and AI service providers are in the United States. EU/EEA data residency or a data center in the EU/EEA is not specified on the website.

Link

"The music you've been searching for, generated in seconds."

Mubert is an AI music tool for generating, licensing, and integrating royalty-free music. Publicly visible offerings include Mubert Render for creators, Mubert API for apps, games, AI agents, and content platforms, as well as Mubert Studio for musicians who contribute material.

The focus is less on classic song releases and more on legally compliant background music for videos, streams, podcasts, apps, and UGC workflows.Mubert

The music you've been searching for, generated in seconds

3.2/10 Insufficient
Free Free entry point for generating initial tracks; suitable for testing and for simple/private use with limitations. Subscription Subscription model for recurring use of Mubert Render, royalty-free Music Catalog, and generated tracks; exact plan names/features may vary by region/site. Other Perpetual License One-time licensing of individual tracks or permanent use according to the license terms.

Mubert API API access for products, apps, and platforms with generative music; Mubert mentions plannable generation tiers and custom terms/limits via Sales.

Mubert Business / Streamers / Play Special usage options for public spaces, streaming, business contexts, and background music.
– (0)

Link

GDPR: Unclear The website includes a privacy policy that describes fundamental data subject rights, such as the right to access and the right to erasure. However, for a robust assessment of GDPR compliance within the EU/EEA, the website lacks essential evidence, particularly regarding EU data residency, server locations/data centers, data processing agreements (DPAs), subprocessors, international data transfer mechanisms, and a clear prohibition on the use of customer data for model training. Therefore, compliance across the entire European region cannot be reliably demonstrated based on the website alone.
Positive
A privacy policy is available on the website; there, Mubert lists data subjects’ rights, such as the right to export stored personal data and the right to erasure. Furthermore, Mubert is clearly identified as a U.S. company, and there are product-specific privacy policy notices.
Negative
The website does not specify a Data Processing Agreement (DPA) for business customers, a list of subprocessors, EU/EEA data residency, specific server or data center locations, Standard Contractual Clauses (SCCs) or transfer details for EU data transfers, on-premises/self-hosting options, open-source components, a clear opt-out from AI training using user inputs or uploads, or relevant certifications such as ISO 27001 or SOC 2.
Server Location
Not specified on the website. The privacy policy lists Mubert Inc. as a company based in the U.S., but does not specify any specific server or data center locations within or outside the EU/EEA.

Link

"Design websites faster with intelligent tools."

Framer is a visual, no-code website builder with CMS, hosting, SEO features, and real-time collaboration.

The AI features help with creating layouts, components, and translations; in addition, there is a plugin system for integrations with models like OpenAI, Anthropic, and Gemini. Framer is therefore particularly interesting for marketing websites, landing pages, portfolios, and multilingual websites.Framer

Design websites faster with intelligent tools

7.4/10 Good
Free For non-commercial use, design experiments, Framer subdomain, CMS testing, limited uploads, and collaboration with a few editors. Subscription Basic For personal, hobby, and side projects; custom domain and website publishing without free-tier limitations.

Pro For professionals, small teams, agencies, and startups; more capacity, use of team/marketing stacks, and professional website operation.

Scale For growing companies with flexible, usage-based scaling, higher limits, and add-ons. Other Enterprise Custom contracts, SLAs, enhanced security, direct engineering support, bulk pricing, and enterprise support.

Add-ons Extensions for CMS items, collections, bandwidth, pages, events, and additional enterprise/scale features.
– (0)

Link

GDPR: Partly Framer documents a GDPR-compliant legal basis for data processing in the EU/EEA context via a Data Processing Addendum with SCCs and describes security measures and certifications. At the same time, the website lists AWS data centers in the United States as the hosting location for all services. The website does not specify an EU data residency or an EU/EEA hosting option. Additionally, according to the AI Notice, inputs and outputs from non-enterprise customers are used in de-identified form to train Framer’s AI models. For use within Europe, Framer cannot therefore be generally considered fully GDPR-compliant, but only under certain conditions—specifically, following a DPA/SCC review and depending on the pricing plan or the decision to opt out of certain AI features.
Positive
The website includes a privacy policy, a Data Processing Agreement (DPA) based on Article 28 with reference to Standard Contractual Clauses (SCCs) for transfers to third countries, a list of subprocessors, and security information. Framer also cites ISO 27001:2022 and SOC 2 Type 2. For enterprise customers, the AI Notice states that inputs and outputs are not used for training Framer AI models.
Negative
The website lists AWS facilities in the United States as the hosting location for all Framer services. The website does not specify an EU data residency, EU data centers, or an EU-only hosting option. For non-enterprise customers, the AI Notice permits the use of inputs and outputs in de-identified form for training Framer AI models. The website does not provide for an on-premises or true self-hosting option.
Server Location
According to the security page, all Framer services are hosted in AWS facilities in the United States. AWS is also listed in the subprocessor list with “Territories: United States.” An EU/EEA data center location for the service itself is not specified on the website.

Link

"Snowflake powers AI, data engineering, applications, and analytics on a trusted, scalable AI Data Cloud — eliminating silos and accelerating innovation."

Snowflake Cortex Analyst is a text-to-SQL/conversational analytics service for structured data in Snowflake.

Business users can ask questions in natural language; Cortex Analyst generates SQL and provides answers without requiring end users to write SQL themselves. The feature can be integrated via REST API and relies on Semantic Views / Semantic Models, custom instructions, and verified queries for high accuracy.Snowflake Cortex Analyst

Snowflake powers AI, data engineering, applications, and analytics on a trusted, scalable AI Data Cloud — eliminating silos and accelerating innovation

6.6/10 Solid
Subscription Snowflake generally uses a consumption-based model instead of traditional fixed monthly subscriptions. Other Snowflake Consumption / Credits Usage is billed based on Snowflake consumption; Snowflake describes its pricing as consumption-based according to storage and compute.

Cortex Analyst API Usage Cortex Analyst can be used via REST API and is suitable for apps, dashboards, chatbots, or Streamlit applications.

Cortex AI / Cortex Search / Cortex Agents Additional Cortex features for LLM functions, search, agents, and other AI workloads; costs depend on the function, model, region, and usage.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of Snowflake Cortex Analyst is only plausibly documented under certain conditions. Positive aspects include a current AVV/DPA, documented subprocessors, EU/EEA-adjacent regions for hosting, and controllable limits for cross-region inference. At the same time, the website shows that Cortex Analyst partly uses cross-region inference and that Snowflake processes usage data for the analysis, development, and improvement of its products. Comprehensive, simple, standard GDPR compliance for every usage scenario is therefore not clearly demonstrated; it depends on the selected region, the account settings, and the contractual arrangement.
Positive
The website includes a privacy policy, a current Data Processing Addendum dated January 11, 2026, a subprocessor list, a DPIA factsheet, information on EU/EEA-suitable regions, and notes that customers can choose their data region. Snowflake also describes a data residency commitment for stored data in the selected region and mentions certifications such as ISO 27001 and SOC 2 Type II.
Negative
The website does not indicate any straightforward on-premise or self-hosting option for Cortex Analyst. For Cortex AI, cross-region inference is described; depending on the configuration, processing may therefore be routed to other regions. In addition, the privacy policy states that usage data is used for the analysis, development, and improvement of products and services. An explicit, product-specific statement on the website that prompts, uploads, chat histories, or outputs from Cortex Analyst are generally not used for model training is not provided on the website.
Server location
For Snowflake in general and for Cortex Analyst, EU/EEA-relevant regions are listed on the website, including among others AWS EU (Frankfurt) and EU (Ireland) as well as Azure West Europe (Netherlands). Snowflake also documents additional European regions for accounts and inference boundaries, such as Ireland, France, the Netherlands, Sweden, and Zurich. At the same time, it is documented that cross-region inference for Cortex AI is possible and must be separately limited or disabled.

Link

“Design anything in seconds with AI” / “the world’s easiest way to design anything with the power of AI”

Playground is an AI design and image editor for logos, social media posts, stickers, T-shirts, mockups, memes, illustrations, and image editing via prompt. The current product is more focused on AI design and templates than on classic pure text-to-image boards.Playground AI

Design anything in seconds with AI

3.9/10 Insufficient
Free Free Plan
Limited Playground-v3 edits, very limited monthly edits for certain external/premium models, daily download limit; Background Removal and Upscaling only in the Pro Plan. Subscription Pro: higher limits, background removal, upscaling, more premium model edits.

Pro Plus: significantly higher quotas for premium models and extended usage. Other Day Pass One-time 24-hour access with an additional credit/edit quota.

Credit Purchases Additional credits for certain models such as GPT-4o, Seedream, or Nano Banana; credits can be purchased additionally.

iOS Subscriptions In the App Store, Design Pro and Design Pro Plus are listed as in-app subscriptions; the scope of features may differ from web subscriptions.
– (0)

Link

GDPR: Unclear Not documented on the website. Using the available web search tool, no discoverable subpages or documents on the specified domain could be found regarding the privacy policy, AVV/DPA, subprocessors, EU data residency, server locations, opt-out from AI training, or certifications. Therefore, no reliable GDPR assessment for the entire EU/EEA area is possible based solely on the provider's website.
Positive
No reliable positive evidence could be found on the website.
Negative
Privacy policy, server locations, AVV/DPA, subprocessors, EU data residency, on-premise/self-hosting, open-source components, training opt-out, and certifications cannot be found via the website using the available search access or are not stated on the website.
Server location
Not stated on the website.

Link

"Your Visual Studio"

Fotor is a web-based creative and image editing tool with AI features for photo enhancement, background removal, retouching, text-to-image, image-to-video, design templates, and AI agent workflows.

The tool runs in the browser as well as on Windows, Mac, iOS, and Android and is aimed at beginners, content teams, marketers, freelancers, and smaller businesses that want to create visual content without complex professional software.Fotor

Your Visual Studio

4.5/10 Limited
Free Free forever; limited credits, one simultaneous generation, few chats and tasks with AI Agent Sisi, basic editing, basic templates, limited effects/fonts, limited creation storage duration, small cloud storage, and exports with watermarks. Subscription Fotor Pro More credits, multiple simultaneous generations, significantly more AI Agent Sisi chats, AI Agent tasks, 100+ editing tools, AI portrait retouch, many templates/assets, premium effects/fonts, exclusive AI models, unlimited creation storage duration, more cloud storage, and watermark-free HD/transparent PNG exports.

Fotor Pro+ Everything in Pro plus more credits, more parallel generations, more AI Agent Sisi usage, AI batch edit for Background Remover/Replacement, multiple brand kits, AI slides generation, significantly more cloud storage, and advanced project/asset features. Other Fotor Max / Credits Higher usage and storage limits; Fotor uses credits for AI models and mentions rollover of unused credits with an active subscription for up to a certain period.

AI Headshot Plans One-time headshot packages for individual and team use with AI Headshots, Redo, fast processing, and HD quality.

API Plans API plans are listed as a separate section on the pricing page; specific usage should be checked separately.
– (0)

Link

GDPR: No The website includes a privacy policy, but the information provided does not clearly demonstrate compliance with the GDPR from an EU/EEA perspective. For AIGC inputs, AIGC outputs, and face data-related processing, Fotor cites servers from Amazon Web Services in the United States. The website does not specify EU/EEA data residency, a Data Processing Agreement (DPA), a list of subprocessors, or a self-hosting/on-premises option. Consequently, there is no fully documented evidence of GDPR-compliant use for users in the European region.
Positive
Positively documented are a published privacy policy, options for deleting personal data, and statements that Face Data is not used to train other AI products. Furthermore, it states that content is transferred to third-party models only after explicit user action and engine selection, and is to be used solely for the requested generation.
Negative
From an EU/EEA perspective, the following are particularly negative: the explicitly stated server locations in the U.S. for AIGC inputs, AIGC outputs, and Face Data, the absence of an EU data residency policy on the website, the absence of a Data Processing Agreement (DPA) on the website, the absence of a list of subprocessors on the website, and the lack of any on-premises, private cloud, or hybrid options specified on the website. In addition, the privacy policy refers to the laws of the People’s Republic of China and designates Chengdu as the place of jurisdiction.
Server Location
The privacy policy specifies Amazon Web Services servers in the United States for AIGC inputs, AIGC outputs, and Face Data. No other EU/EEA data center locations are listed on the website.

Link

“The AI community building the future.”

Hugging Face is a central platform for the AI/machine learning community. The Hub is used for sharing, hosting, and collaboratively developing models, datasets, and AI applications; in addition, Hugging Face offers Spaces, Inference Providers, Inference Endpoints, HuggingChat, Enterprise Hub, and open-source libraries such as Transformers.Hugging Face

The AI community building the future

8.0/10 Very good
Free Free access to the Hub to discover, experiment, share, and collaborate with models, datasets, and Spaces; suitable for learning, open-source projects, and initial prototypes. Subscription PRO Account Personal subscription with more private storage, more public storage, more inference credits, a higher ZeroGPU quota, Spaces Dev Mode, ZeroGPU Spaces Hosting, private Dataset Viewer, and blog features.

Team Organization plan for growing teams with SSO, Storage Regions, Audit Logs, Resource Groups, Repository Analytics, advanced authentication and visibility controls, token control, and team benefits for ZeroGPU / Inference Providers.

Enterprise Enterprise plan with Team features plus higher storage, bandwidth, and API limits, SCIM provisioning, advanced security and access controls, managed billing, legal/compliance processes, and dedicated support.

Enterprise Plus Extended enterprise plan according to the Enterprise documentation with additional governance, policy, network, SSO, managed user, and vendor onboarding features; to be evaluated individually. Other Inference Providers Pay-as-you-go-Modell für Zugriff auf Modelle externer und eigener Inference Provider über eine zentrale API; Abrechnung über Hugging Face oder über eigene Provider Keys möglich.

Inference Endpoints Dedizierte, autoskalierende Deployments für ML-Modelle auf gemanagter Infrastruktur; nutzungsabhängige Abrechnung nach Instanz/Hardware.

Spaces Hardware / ZeroGPU / Jobs / Storage Zusätzliche nutzungsabhängige Modelle für Spaces-Hardware, ZeroGPU-Erweiterungen, Jobs/Scripts, Training/Fine-Tuning, Eval-Workloads und zusätzlichen Speicher.
– (0)

Link

GDPR: Yes On its website, Hugging Face lists several components relevant to the EU/EEA region: a privacy policy with its EU headquarters in France, a list of subprocessors, explicitly available GDPR data processing agreements for Enterprise plans, SOC 2 Type 2, and selectable EU data residency for Team and Enterprise organizations. However, according to the documentation, standard usage may involve storage in the U.S. in some cases; the best documented approach for GDPR-compliant use in the EU/EEA is therefore to use Team/Enterprise plans with EU regions or EU data residency, along with contractual safeguards via a DPA. In addition, there is a robust open-source/self-hosting option using Hugging Face’s own components.
Positive
Positive aspects include the documented EU headquarters in France, a published privacy policy, a published list of subprocessors, available GDPR data processing agreements through Enterprise plans, SOC 2 Type 2, and explicitly available EU storage regions for models, datasets, Spaces, and—according to the documentation—inference endpoints as well.
Negative
A negative aspect is that, according to the website, repositories for non-Team/non-Enterprise users are always stored in the U.S. Additionally, the list of subprocessors mentions several processing activities in the U.S. or the United States/EMEA. A generally available, directly linked standard DPA for all plans was not found on the website; the DPA is only mentioned in connection with Enterprise plans. The website lacks a comprehensive, consistent overview of certain points, such as the specific EU countries where data centers are located, ISO 27001 compliance, and a general, platform-wide AI training opt-out.
Server Location
The website states: For non-Team/non-Enterprise users, repositories are stored in the U.S. For Team and Enterprise plans, the documented selectable regions are “US” and “EU”; for buckets, the options are also “US” and “EU.” The Privacy Policy also mentions possible processing in the U.S. and other countries. Specific individual EU/EEA data center locations are not listed on the website.

Link

Microsoft Copilot Studio is a graphical low-code platform for creating, customizing, publishing, and managing AI agents and agent flows.

The agents can access business data, use knowledge from SharePoint, websites, Dataverse, or enterprise connectors, perform tasks via flows/prompts/APIs, and be published in Microsoft 365, Teams, websites, apps, or additional channelsMS Copilot Studio

Create, customize, and launch AI agents effortlessly

6.6/10 Solid
Free Individuals can use a free trial version to create agents and test them in the test chat; however, according to Microsoft, agents cannot be published with the trial license. Subscription As a standalone Copilot Studio subscription for agents on supported channels, premium connectors, and production use; Copilot Studio is also included in certain Microsoft 365/Teams contexts or with Microsoft 365 Copilot to extend Microsoft 365 Copilot with agents. Other Pay-as-you-go via Azure billing; Pre-Purchase Plan with pre-purchased Copilot Credit Commit Units; Copilot Credit Capacity Packs as tenant-wide capacity. Copilot Credits measure usage depending on the agent response, action, and complexity.
– (0)

Link

GDPR: Partly Microsoft’s website lists several key GDPR-relevant components for Microsoft Copilot Studio in the EU/EEA region: EU Data Boundary, geographic data residency in EU/EFTA data centers, a DPA/AVV via the Microsoft Products and Services Data Protection Addendum, and compliance and governance features. At the same time, Microsoft itself states that the EU Data Boundary applies only under certain configuration requirements and that there are limited exceptions for transfers outside the EU Data Boundary. According to the website, this means that GDPR-compliant use is possible for EU/EEA customers, but not across the board without conditions.
Positive
The website documents the EU Data Boundary, selectable geographic data residency, DPA/AVV, references to GDPR support, and certifications such as ISO 27001 and SOC. For Copilot Studio, it is explicitly stated that EU/EFTA tenants with environments within the EU Data Boundary fall within the scope of coverage. Regarding prompt functions, it is also stated that customer data, prompts, and model responses are not used to train or improve the Azure OpenAI Service Foundation models.
Negative
The website makes EU/EEA-compliant data processing contingent on certain conditions, specifically the billing address and the creation of all environments within the EU Data Boundary. Furthermore, Microsoft itself refers to limited cases in which data may be transferred outside the EU Data Boundary. The website does not mention true on-premises or self-hosted operation of Copilot Studio.
Server Location
According to the website, for EU Data Boundary Services, customer data and pseudonymized personal data are stored and processed in data centers located in EU or EFTA countries. Data centers mentioned include those in Austria, Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy, the Netherlands, Norway, Poland, Spain, Sweden, and Switzerland. According to the website, this applies to Copilot Studio if a tenant with a billing address in the EU or EFTA is provisioned and all environments are created within the EU Data Boundary.

Link

"Trustworthy, scalable AI agents."

Rasa is a platform for AI chatbots, voicebots, and service automation. It is aimed at companies that want to integrate dialog-based assistants into their own systems, CRM, contact center, and communication channels in a controlled manner.Rasa Platform

Trustworthy, scalable AI agents.

7.5/10 Good
Free Developer Edition
Free local or production use for one bot with limited conversation volume and community support. Other Enterprise Scalable agent platform for production chat, voice, and service automation with enterprise support and custom deployment requirements.

Professional Services Consulting, implementation, architecture, agent design, and long-term support from Rasa.

Self-Hosted Deployment Operation in your own cloud, private cloud, on-premises, or air-gapped environment.

Own model providers Combination with self-hosted or external LLMs, speech, and integration services.
– (0)

Link

GDPR: Yes Rasa Platform can be assessed as usable for the EU/EEA region in the best available usage path in a GDPR-compliant manner, because Rasa provides a DPA/AVV and, according to its own website, the platform can be self-hosted or deployed in customer-owned infrastructure, private cloud, on-premise, and even in fully offline-operated environments. This provides a straightforward way to keep processing entirely within your own EU/EEA infrastructure. However, for the services provided by Rasa itself, the documentation remains partly unclear or only contractually regulated regarding server locations, EU data residency, and subprocessors.
Positive
Positive aspects are the published DPA/AVV, the explicit classification under GDPR, the commitment to process only on documented customer instructions, and the strong self-hosting/private-cloud focus. The product privacy policy also states that the products can be privately hosted by customers and that Rasa generally does not process personal data as part of the products. The website also mentions self-hosted deployment for Rasa Studio and promotes deployment in your own infrastructure, private cloud, on-premise, and even offline.
Negative
Negative or limiting is that the website states no specific EU/EEA server location for a managed SaaS or hosting option. The DPA only says that customer data is hosted in the location specified in the agreement. In addition, the subprocessor list is not openly published on the website, but is only provided 'upon written request'. A clear, general statement on the website that customer data is not used to train general models was also not found.
Server location
No specific server/data center location for Rasa Platform is stated on the website. The DPA only states that 'Customer Data is hosted in the location set forth in the Agreement'. Therefore, there is no publicly specified standard statement for EU/EEA data residency; however, through self-hosting/private cloud, the customer can determine the EU/EEA location themselves.

Link

Robotics

“The Global Leader in Social Humanoid Robotics” / “Engineering the world’s most advanced social humanoid robots.”

Engineered Arts develops and builds humanoid robots for social interaction, entertainment, education, research, events, and public installations. The flagship Ameca is a full-scale, interactive, and programmable humanoid robot equipped with cameras, microphones, speakers, and 61 degrees of freedom. All current robots are operated via the Tritium software platform.Engineered Arts

The Global Leader in Social Humanoid Robotics" / "Engineering the world's most advanced social humanoid robots.

4.9/10 Limited
Other Purchase on request, rental/rental on request, customized configurations, Tritium AI Subscription, maintenance/support and optional warranty extensions. Direct prices are not given here as no verified official standard price list was found. Ameca: CE publicly named. The official Ameca spec page states "Certifications: CE".
– (0)

Link

GDPR: Unclear Although the website contains several statements regarding data protection, local processing whenever possible, and general GDPR compliance, it does not include a robust privacy policy with details on product data processing, specific server or data center locations, EU/EEA data residency, a data processing agreement (DPA), a list of subprocessors, or a robust opt-out option for AI training. The documentation is therefore too incomplete to allow for a reliable assessment of GDPR compliance throughout the EU/EEA.
On the positive side
On the positive side, according to the website, Mesmer and Tritium were developed with a focus on data protection and security; data processing takes place locally whenever possible; encrypted and secure data processing is mentioned; and the website repeatedly refers to GDPR compliance and international privacy standards. In addition, the website describes its own robotics software platform comprising Tritium, Tritium OS, and a user-side Python IDE, which suggests a certain degree of technical control.
Negative
On the negative side, the website provides no concrete evidence of EU/EEA hosting, no specific data centers are named, no Data Processing Agreement (DPA), no subprocessors, no statement regarding international data transfers, no product-specific statement on the retention of interaction data, and no clear assurance that user inputs, uploads, or conversation data are not used to train general models. Furthermore, certifications are not reliably documented on the Mesmer and Tritium pages found.
Server location
Not specified on the website. The only information found was that Tritium AI is described as a cloud-based solution and that data processing takes place locally whenever possible; specific server or data center locations in the EU/EEA are not mentioned.

Link

“The AI community building the future.”

Hugging Face is not a single proprietary LLM provider, but a platform for hosting, discovering, distributing, evaluating, and deploying AI and LLM models. The Model Hub is used for storing, discovering, and using model checkpoints; LLMs can be used via Inference Providers, Inference Endpoints, or locally through libraries such as Transformers.Hugging Face

LLM “The AI community building the future.”

7.5/10 Good
Free You can test API access with a free Hugging Face account. There are monthly free credits. According to the current Hugging Face documentation, free users receive monthly credits, currently listed as $0.10, subject to change. After that, you need additional credits or pay based on usage. Subscription PRO With Hugging Face PRO, you get significantly more included inference credits. The pricing page lists, among other things, 20× included inference credits for PRO; the Inference docs currently mention $2.00 in monthly credits for PRO users.

Team & Enterprise For organizations, there are Team and Enterprise. These plans also include Inference Provider benefits or credits per seat and enable centralized billing, limits, and administration. According to Hugging Face, Team/Enterprise organizations currently receive $2.00 per seat in monthly credits. Other Pay-as-you-go If your credits are used up, you can continue making API requests by purchasing additional credits or paying based on usage. The costs depend on the specific model, provider, and usage.

Your own provider key In some cases, you can also use your own API keys from external providers. In that case, billing does not go through Hugging Face, but directly through the respective provider; according to the documentation, Hugging Face does not charge for this call.
– (0)

Link

GDPR: Partly For users throughout the EU/EEA, GDPR-compliant use is generally possible according to the information provided on the website, but only under certain conditions. Positive aspects include the documented EU data residency for Team and Enterprise plans, the reference to GDPR-compliant use with datasets, models, and inference endpoints stored in EU data centers, and the availability of an AVV exclusively through the Enterprise plan. At the same time, the general privacy policy mentions the company’s servers in the U.S. and describes third-party providers and subprocessors, some of which are located in the U.S. For standard use without a Team or Enterprise plan, repositories are always stored in the U.S., according to the website. Therefore, use within the EU/EEA is not universally compliant with the GDPR, but is only compliant depending on the plan and configuration.
Positive
The website features several positive elements: EU storage regions for Team and Enterprise organizations; an explicit statement that EU companies can use the ML development hub in a GDPR-compliant manner with storage in EU data centers; DPA/AVV for Enterprise; SOC 2 Type 2; according to the documentation, inference endpoints do not store payloads or tokens, only logs for 30 days; according to the documentation, inference provider routing does not store request bodies or responses for training purposes.
Negative
The general privacy policy states that the company and its servers are located in the U.S. and that personal data may be processed in the U.S. or other countries. It also lists several subprocessors based in the U.S. According to the website, repositories for users outside of Team/Enterprise are always stored in the U.S. The website does not provide evidence of a blanket, universally applicable “EU-only” hosting policy. A general, platform-wide opt-out from AI training is not clearly stated on the website; it is only specified for certain inference services that user data is not stored for training purposes.
Server Location
Information presented inconsistently on the website: The privacy policy states that the company and its servers are located in the U.S. At the same time, Hugging Face documents EU storage regions for Team and Enterprise plans and specifies GDPR-compliant use for EU companies, with datasets, models, and inference endpoints located in EU data centers. The list of subprocessors/service providers includes, among others, the U.S., France, and EMEA; specific individual EU data center locations are not specified in more detail on the pages found.

Link

“Ask me anything. It’s confidential.” - “The AI that respects your privacy”

Lumo is an AI assistant from Proton with a focus on confidentiality, no-logs, and zero-access encryption.

The tool supports, among other things, research, writing, translations, file analysis, coding assistance, and optional web search; in addition, there are Projects as well as integration with Proton Drive. Proton positions Lumo as a European, privacy-focused alternative to common AI chats.Lumo

Ask me anything. It’s confidential

7.0/10 Good
Free Free use with limited access; even without an account, a chat can be started with restricted access. Subscription Lumo Plus Unlimited chats, extended chat history, unlimited encrypted chat history, search and favorites for previous chats, Ghost Mode, and uploading multiple or large files.
– (0)

Link

GDPR: Partly The website highlights several strong data protection and compliance measures for Lumo in the EU/EEA context: Proton explicitly states that it is “GDPR compliant,” designates an EU representative in Luxembourg, provides a privacy policy for Lumo, offers a general DPA/T&C for Proton services, and outlines a clear “no logs,” “no sharing,” and “no training” approach for Lumo. At the same time, a significant gap remains for a comprehensive assessment of the best possible EU/EEA setup: The website does not specify a concrete location of servers or data centers for Lumo within the EU/EEA or an explicit EU data residency for Lumo. An on-premises or self-hosting option is also not mentioned on the website. Therefore, while GDPR-compliant use from an EU/EEA perspective is plausible, it is not fully substantiated and is only reliable under certain conditions.
Positive
Positive aspects include Lumo’s product-specific privacy policy, the general Proton DPA/AVV, the explicit statement regarding GDPR compliance, the EU representative in Luxembourg, the statements “no logs,” “no training,” “never send your data to any third parties,” Proton’s control over the servers, and the open-source note regarding the code and models used.
Negative
On the negative side, or rather as a limitation, the Lumo website does not specify a concrete EU/EEA server location, does not explicitly state EU data residency, does not offer a dedicated private cloud option, and does not provide an on-premises or self-hosting option. Furthermore, Lumo’s privacy policy mentions only “selected partner APIs” for enabled web search, without naming them on the resulting Lumo page.
Server Location
The website states that Lumo’s models run “exclusively on servers Proton controls” and that Lumo is “built and based in Europe.” The website does not specify a specific location for the servers or data centers, nor does it name a particular EU or EEA country. Proton AG is based in Geneva, Switzerland; in addition, an EU representative in Luxembourg is listed.

Link

“Smarter business planning, powered by purpose-built AI”

LivePlan is a cloud-based software solution for business plans, financial forecasts, pitch presentations, and ongoing business management.

The AI helps with writing plan sections, rewriting texts, suggesting forecasts, validating ideas, and conducting market-related research. In addition, LivePlan offers integrations with QuickBooks Online and Xero, as well as dashboards for comparing forecasts with actual data.LivePLan

Smarter business planning, powered by purpose-built AI

7.3/10 Good
Subscription Standard Write a business plan, collaborate with others, download and print the plan; suitable for classic business planning and simple financial planning.

Premium Everything in Standard plus multiple forecast scenarios, QuickBooks Online and Xero integration, Actual Results Dashboard, automated Forecast Builder, Monthly Review, and Actuals + Forecast. Other LivePlan Coach / Expert Additional offering with personal video support, priority support, and individual guidance for planning and use.

Consultant / Strategic Advisor Use Training and resources for consultants, startup centers, and strategic advisors.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is only plausible if it is properly documented. Positive aspects include a dedicated privacy policy, an available DPA/AVV, explicit references to the GDPR, provisions regarding international data transfers via standard contractual clauses, and statements that AI inputs are not used to train the models. At the same time, the website does not specify a concrete EU/EEA server location, EU data residency, or any on-premises/self-hosting option. Furthermore, the DPA page links to an external Palo Alto domain for the list of subprocessors rather than to a subpage of liveplan.com; thus, no complete list of subprocessors is documented on the domain evaluated here.
Positive
A privacy policy, a DPA/AVV referencing the GDPR, and documented processing in accordance with customer instructions are in place. The Terms of Service explicitly require a valid DPA for the processing of EU data. For EU data transfers, the website cites standard contractual clauses as a protective mechanism. Regarding AI functions, it is stated that transmitted data is not used as training data for AI models or processing services; additionally, there is an opt-in option for analyzing interactions to improve AI functions, which, according to the website, can be revoked at any time.
Negative
The website does not specify a specific server location in the EU/EEA. There is no documented EU data residency, no commitment to EU data centers, and no on-premises/self-hosting option. The security page lists AWS as the data center provider, but without specifying a region. For AI features, data is sent to third-party providers such as Anthropic, Google Gemini, and OpenAI; although the website states that the data is anonymized and not used for training, this still constitutes an additional processing chain from an EU/EEA perspective. A complete list of subprocessors is not provided on liveplan.com itself.
Server Location
AWS is listed as the data center provider. The website does not specify a specific location for the servers or data centers within the EU/EEA.

Link

"AI that creates content. And proves that it works."

neuroflash is a German audience intelligence and AI content platform for marketing, branding, and target group validation. The tool combines generative AI, ChatFlash, content creation, Brand Hub, PerformanceFlash, Digital Twins, image generation, web research, SEO features, API, and MCP. (neuroflash.com )Neuroflash

AI that creates content. And proves that it works

7.5/10 Good
Subscription Essential For teams that want to create AI content efficiently; includes Editor & ChatFlash, AI Images, PerformanceFlash, ResearchFlash, text models, image models, document editor, content templates, prompt templates, Flash Actions, Web Search, audience chat, SEO Research Mode, workflows, Brand Voice, Digital Twins, and Knowledge Assets to a limited extent.

Pro Advanced plan with more capacity, advanced models, a larger context window, more Digital Twins/audiences, advanced validation features, team features, as well as API and MCP access.

Enterprise Custom enterprise plan for organizations with unlimited or customized audiences, premium models, SSO, a dedicated Customer Success Manager, custom integrations, custom workflows, training, and consulting services. Other API / MCP neuroflash offers API and MCP access to integrate neuroflash into platforms and tools such as Claude, Cursor, and other work environments.

Custom Enterprise Services Customized agreements depending on the number of users, the scope of the Digital Twins, desired integrations, custom workflows, and consulting services.
– (0)

Link

GDPR: Partly The website lists several data protection and hosting features relevant for the EU/EEA area: neuroflash mentions servers in Germany or in the EU, refers to GDPR-compliant processing, states an ISO/IEC 27001:2022 certification, and explains that content is not used for training external models. At the same time, the privacy policy states that AI requests are processed in the EU and in the USA on servers of external providers. A publicly available AVV/DPA or a list of subprocessors could not be clearly found on the website. This makes GDPR-compliant use for EU/EEA users plausible, but based on the publicly accessible documentation, it can only be assessed with reservations.
Positive
Positive aspects include the information about servers in Germany or in the EU, the explicit GDPR focus, the ISO/IEC 27001:2022 certification, the note about encryption, and the statement that content is not used for training external models.
Negative
Negative or limiting is the fact that the privacy policy also mentions the processing of AI requests in the USA via external providers. In addition, no clearly linked public AVV/DPA was found on the website, nor a separate list of subprocessors, nor a clearly documented on-premise or self-hosting option.
Server location
According to the privacy policy, personal data is processed and/or stored in the EU on servers of Google Cloud Platform and at Raidboxes in Germany. For AI requests in the neuroflash app, the website states processing in the EU and in the USA on servers of external providers. Further specific data center locations or a complete list of providers are not provided on the website.

Link

“The Creator-First Generative AI Platform”

Leonardo.AI is a generative AI platform for image, video, design, and motion workflows.

Officially, the product is positioned for creating high-quality visuals from prompts or reference images, for precise editing, upscaling, as well as for API-powered production workflows. The platform also offers team collaboration and developer access via API.Leonardo.AI

The Creator-First Generative AI Platform

7.0/10 Good
Free Free entry with daily renewed Fast Tokens, image generation, video generation, Flow State, limited Blueprints, limited Realtime Canvas, Realtime Generation, Presets, Elements, platform models, and third-party models. Subscription Essential For daily hobby use and enthusiasts; includes monthly Fast Tokens, Token Bank, private generations, presets, Enhanced Quality, unlimited personal collections, personal AI models, simultaneous generations, and top-up tokens.

Subscription Premium For semi-professionals and active creators; includes more monthly Fast Tokens, a larger Token Bank, private generations, Enhanced Quality, unlimited collections, more personal AI models, higher parallelization, queue, top-up tokens, and unlimited Relaxed Image Generation for selected models.

Subscription Ultimate For professional creators, small businesses, and content producers; includes significantly more monthly Fast Tokens, a larger Token Bank, private generations, Enhanced Quality, many personal AI models, higher parallelization, a larger queue, top-up tokens, as well as unlimited Relaxed Image and Video Generation for selected models.

Subscription / Team Starter Team plan with Shared Tokens, Bank Capacity, Fast Tokens per seat, private team generations, team token usage for model training, unlimited collections, unlimited Realtime Canvas and Realtime Generation actions, Enhanced Quality, and team workflow features.

Subscription / Team Growth Advanced team plan with more Shared Tokens, higher Bank Capacity, more Fast Tokens per seat, private team generations, model training with Team Tokens, unlimited collections, unlimited Realtime actions, and Enhanced Quality. Other Custom Plan Individually tailored plan for larger workflows; includes custom Fast Tokens per seat, all Starter and Growth features, as well as bespoke requirements.

Pay as you go / API Usage-based API option with no long-term commitment, automatic top-ups, access to the latest models, and parallel generations.

API Custom For higher production volumes and long-term scaling; includes custom limits for parallel generations, model-based discounts, and dedicated support for production deployments.
– (0)

Link

GDPR: Partly For the EU/EEA region, GDPR-compliant use is partially documented but not fully guaranteed. Positive aspects include a published privacy policy with a European focus, a Data Processing Addendum with SCCs, an EEA representative in Ireland, and a list of subprocessors. However, a negative aspect is that the website itself mentions data storage in the U.S. and processing in Australia and other countries, lists AWS as its hosting provider in the U.S., and does not guarantee EU data residency. Additionally, according to the privacy policy, Leonardo.Ai reserves the right to use content and account data to improve the service and to train algorithms and AI products. Thus, GDPR-compliant use within the EU/EEA appears possible only under certain conditions and following a detailed case-by-case review, rather than as a clearly established standard practice.
Positive
The website includes a privacy policy, a Data Processing Addendum with standard contractual clauses for limited third-country transfers, information on data subject rights, an EEA representative in Ireland, and a published list of subprocessors. For multi-user/team setups, the DPA describes processing as a data processor in accordance with documented customer instructions.
Negative
The website lists the U.S. as the standard storage location and Australia and other countries as processing locations. The list of subprocessors includes several providers in the U.S. and Singapore; a binding EU/EEA data residency is not specified. In addition, the privacy policy states that content and associated account data may be used to improve the service and to train algorithms, models, and AI products. A clear, general opt-out option for AI training is not provided on the website.
Server Location
According to the privacy policy, information is stored in the United States and processed in Australia and other countries. The DPA names AWS as the hosting and infrastructure provider and lists AWS, headquartered in the United States, in the list of subprocessors. The website does not specify a specific EU/EEA server location or EU data residency.

Link

"Multiplayer AI for human-agent collaboration."

Dust is an enterprise platform for AI agents, internal knowledge search, and teamwork. Teams connect data sources, tools, conversations, and company knowledge with agents that can research, analyze, write, and execute workflows.Dust

Multiplayer AI for human-agent collaboration.

7.3/10 Good
Free Free basic version
Limited workspace for initial agents, conversations, and tests Subscription Pro Pro usage for individuals and team members with a higher agent and credit quota.

Max Higher usage capacities for intensive agent and tool usage. Other Enterprise Custom offering with governance, connectors, security features, SSO, SCIM, and enterprise support.

Programmatic Usage Separately billed API and workflow usage for automated agent calls.

Connectors Connection of data sources such as Slack, Notion, Google Drive, GitHub, Salesforce, Microsoft 365, and other systems.
– (0)

Link

GDPR: Partly Dust documents several building blocks on its own website that are relevant for the GDPR in the EU/EEA area: a platform privacy policy based in France, references to GDPR compliance, an EU hosting option for enterprise customers, EU routes under 'eu.dust.tt', DPA/contract references via the documentation, as well as statements that customer data is not used for model training. However, the documentation is not strong enough for fully straightforward GDPR use throughout the entire EU/EEA, because EU data residency is only mentioned as an option for Enterprise, the standard SaaS variant is not clearly described as EU-resident, and a clearly linked AVV/DPA text or a standalone subprocessors overview on the website could not be found unambiguously. Therefore, GDPR-compliant use is plausible under conditions, especially via the Enterprise/EU hosting option.
Positive
Positive aspects include the provider's EU connection with an address in Paris, the explicit references to 'GDPR Compliant', the available EU hosting option, documented EU routes under 'eu.dust.tt', statements about 'no model training' and 'Zero Data Retention' with model providers, as well as the mention of SOC 2 Type II.
Negative
Negative or limiting is that the website does not provide a clearly complete, easily findable DPA/AVV page and no clearly named subprocessors list with locations. In addition, according to the website, EU data residency is only explicitly available for Enterprise; for standard SaaS use, the server location is not documented consistently and unambiguously. An on-prem/self-hosting option is not stated on the website.
Server location
The website mentions an EU hosting option. On the changelog page, it states that since February 7, 2025, there has been a data hosting option on European servers, exclusively for enterprise customers, for databases, files, and vectors. In the Snowflake documentation, EU routes with 'https://eu.dust.tt' are also mentioned. A specific country/data center is not consistently stated on the reviewed pages; in a blog post, servers in the EU or Frankfurt are mentioned as examples, but no generally binding standard server location for all plans is specified.

Link

“The home of the AI Workforce” / “Scale GTM results, without scaling headcount”

Relevance AI is a low-/no-code platform for building, orchestrating, and operating AI agents and multi-agent workforces. The current focus is strongly on go-to-market processes such as sales, marketing, CRM enrichment, outbound, inbound qualification, customer success, and support automation.Relevance AI

The home of the AI Workforce / Scale GTM results, without scaling headcount

7.4/10 Good
Free Free entry-level plan for creating, cloning, and testing agents; includes unlimited agents & tools, Chat to Invent Changes, 2,000+ integrations, one workforce, one user, one project, 30 days of task history, marketplace access, community forum, as well as SOC 2/GDPR information. Subscription Pro For GTM operators and engineers who want to use agents more productively; includes everything in Free plus unlimited Workforces, two Build Users, scheduled Tasks, Chat Mode, Smart Escalations, Activity Center, Premium App Triggers, and Bring Your Own LLM.

Team For teams with larger workloads; includes everything in Pro plus Credit Rollover, five Build Users, End Users, multiple Shared Projects, Calling & Meeting Agents, A/B Testing, Analytics Dashboard, and Priority Support.

Enterprise Custom enterprise plan with unlimited users and projects, Enterprise App Triggers, Agent Evaluations, Work Hour Controls, Multi-Org Management, Enterprise Security, Dedicated Account Manager, Custom Implementation, and Priority Early Access. Other Actions Usage units for agent and workflow executions; different monthly or annual quotas are included depending on the plan.

Vendor Credits Prepaid/quota model for third-party AI model usage; according to the Terms, Vendor Credits can be used for Third-Party-AI-Model-Usage and are tied to an active subscription.

Bring Your Own LLM Users can connect their own LLM accounts or API keys, for example for OpenAI, Anthropic, or Google; processing then additionally depends on the respective provider and its DPA/Terms.

Enterprise Data Retention Enterprise feature for the automatic control of the retention and deletion of Tool Runs, Agent Conversations, Workforce Tasks, and Asset Versions; according to the documentation, it must be activated by Relevance AI.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is generally possible based on the information available on the website, but it is not fully unambiguous and is not easy to verify in every variant. Positive aspects include the selectable EU/UK region for data storage, the explicit statement regarding GDPR compliance, a documented commitment not to train on customer data, as well as references to a DPA and subprocessors. Limiting factors are that the specifically named European location, London, is in the United Kingdom and therefore not in the EU/EEA, that the actual subprocessors list is not disclosed within the reviewed domain area on the referenced website, and that additional checks remain necessary for parts of the processing outside the platform or with third-party providers.
Positive
The website documents a privacy policy, a security overview, EU/UK data residency at account creation, export and deletion options, SOC 2 Type II, DPA references, PII masking, as well as the statement 'We do not use your data to train our models or improve our services unless you have a specific partnership agreement with us'. In addition, Relevance AI mentions enterprise options such as 'single tenant or private cloud deployment' and multi-region deployment.
Negative
The website does not name an EU/EEA data center in the strict sense, but instead explicitly names London in the United Kingdom for Europe. A specific AVV/DPA with customers is not clearly findable as a clearly linked customer document within the reviewed domain area; there is only the note that a DPA can be viewed on the website. The subprocessors are only mentioned by reference to an external trust center subdomain, which was not used here as a source. In addition, the Data Security Policy explains that it does not apply to the processing, storage, or transmission of data outside the platform; the data retention documentation likewise states that retention rules do not apply to data processed or stored by subprocessors.
Server location
According to the website, depending on the selection made during registration, data storage is possible in Australia, the USA, or in the EU/UK region. For the European region, 'EU (London)' is specifically named. The website does not specify a data center within the EU or the EEA; for Europe, only London in the United Kingdom is mentioned.

Link

"AI Meeting Assistant with #1 Noise Cancellation"

Krisp is an AI-powered voice and meeting product platform with three publicly visible product lines: AI Meeting Assistant for individuals and teams, Call Center AI for contact center environments, and AI Voice SDK for developers.

In the meeting space, Krisp offers, among other things, transcription, recording, AI notes, summaries, noise cancellation, accent adjustment, integrations, and webhooks. For call centers, additional features include Accent Conversion, Voice Translation, Agent Assist, and analytics functions.Krisp

AI Meeting Assistant with #1 Noise Cancellation

7.4/10 Good
Free Test access to premium features without a credit card; includes, among other things, transcription, noise cancellation, audio/video recording, AI notes, and action items. Subscription Core For individuals and small teams; unlimited AI note-taker, bot-free transcription, audio/video recording, AI notes, action items, in-person meeting notes, noise cancellation, as well as integrations/webhooks.

Advanced For advanced teams with enhanced meeting, integration, and voice AI features. Other Enterprise / Call Center AI Custom enterprise/call center options with security, integration, compliance, and support requirements.

AI Voice SDK Developer SDK for integrating Krisp Noise Cancellation/Voice AI into your own products; processing can take place on the customer side.
– (0)

Link

GDPR: Partly Krisp provides several components relevant to GDPR compliance on its website, including a privacy policy, a DPA/AVV, guidance on processing as a data processor, a list of subprocessors, and statements indicating that, where possible, data sharing and training with third-party providers are opt-out options. For the EU/EEA region, however, the situation is only partially favorable, because Krisp itself states for the enterprise/call center sector that all customer data is hosted on servers in the United States and that regional data residency outside the U.S. is not currently supported. At the same time, there are individual data-minimal or local processing methods, such as local noise suppression and, in some cases, device-based transcription. Thus, GDPR-compliant use is not guaranteed across the board, but only under specific use cases and with careful review of the data flow, the selected product line, and the contractual safeguards.
Positive
Positive aspects include the existing privacy policy, the published DPA, the identification of subprocessors, the statement regarding processing as a data processor for customers, SOC 2 Type II as the cited certification, and several references to local processing: According to the website, noise cancellation runs locally on the device, and audio is not sent to the cloud or a server; in transcription mode, transcription can take place entirely on the device, depending on the language and settings. On the security page for the AI Meeting Assistant, Krisp also explains that data sharing and training permissions are deselected for third-party providers, so that neither Krisp data nor customer data is to be used for model training.
Negative
From an EU/EEA perspective, the main concern is that Krisp explicitly states that its call center and enterprise offerings are hosted in the U.S. and, at the same time, explains that it currently does not support regional data residency outside the U.S. Additionally, the website lists several subprocessors located in the United States. Cloud processing is used for recordings and certain AI meeting assistant features; according to the help page, meeting recordings are stored in the cloud. The website does not provide evidence of clearly documented EU data residency for SaaS operations, a generally available self-hosting or on-premises option, or end-to-end EU/EEA operations for all product lines.
Server Location
For the Enterprise/Call Center segment, Krisp states that all customer data is hosted on secure servers in the United States and that regional data residency outside the U.S. is not currently supported. For the AI Meeting Assistant, the website does not specify a clear primary server location but refers to AWS infrastructure as well as subprocessors in the United States and Finland. EU/EEA data residency is not generally guaranteed on the website.

Link

“AI for scientific research.”

Elicit is an AI-powered research assistant designed to search for, review, evaluate, and synthesize scientific literature. The tool supports basic literature searches, automated research reports, and systematic reviews, including screening, data extraction, and citation management. All key AI statements are to be linked to text passages from the underlying publications.Elicit

AI for scientific research.

7.4/10 Good
Free Limited Research Agent, monthly limited automated reports, unlimited search across more than 138 million publications, unlimited abstracts, Paper-Chat when full text is available, source display, and Zotero import. Subscription Plus Includes Basic features plus expanded access to the Research Agent, more automated reports, export to RIS, CSV, BIB, PDF, and DOCX, larger extraction tables, and clinical trial search.

Pro For systematic reviews; includes an advanced Research Agent, a dedicated review workflow, higher screening and report quotas, research alerts, custom extraction from uploads, explanations for AI responses, output templates, and API access.

Scale For collaborative research teams; includes Pro features plus full Research Agent access, image interpretation, real-time collaboration, larger reports and tables, and an admin panel with usage and seat management.

Enterprise For corporations, universities, and research institutions; includes SSO/SAML, 2FA, domain verification, user analytics, custom deployments, single-tenancy options, custom data sources and templates, higher review limits, unlimited alerts and API usage, and no training on customer data by default. Other Elicit API API access is available starting with the Pro plan; reports and reviews generated via the API count toward the respective workflow quota. According to the documentation, systematic reviews via the API are reserved for Enterprise plans.

Institutional Agreements Custom contracts for universities, research groups, and companies, including onboarding, training, customer success, and customized data sources.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is not clearly documented as standard SaaS in the EU. On the positive side, the service has its own privacy policy, a Data Processing Addendum referencing the EU GDPR, UK GDPR, Swiss data protection law, and SCCs, as well as a published reference to subprocessors. On the negative side, the website explicitly states that the servers are located in the U.S. The website does not specify EU data residency or EU/EEA data centers. Consequently, use appears to be possible only under certain conditions—such as additional contractual review and careful data minimization—but not as a clearly and fully secured standard EU/EEA solution.
Positive
The website includes a privacy policy, a DPA/AVV-like “Data Processing Addendum,” references to SCCs, obligations for subprocessors, and information on the rights of individuals in the European Economic Area. In addition, the website states “No training on your data by default” for Enterprise and refers to SOC 2 Type II.
Negative
The website explicitly states that the servers are located in the U.S. The website does not specify EU data residency, EU/EEA data centers, or a clear EU hosting path. Although a link to the list of subprocessors is provided, the content of that list is not viewable online. On-premises or self-hosting options are not specified on the website.
Server Location
According to the privacy policy: Servers in the United States. No other specific EU/EEA server locations or EU data residency are specified on the website.

Link

“The #1 AI Assistant for Your Meetings”

Fireflies.ai is an AI meeting assistant that automatically transcribes, summarizes, searches, and analyzes meetings. The tool supports video conferencing systems, audio/video uploads, meeting search, AskFred, a mobile app, a Chrome extension, an API, conversation intelligence, AI skills, and integrations with CRM, collaboration, and storage tools.Fireflies.ai

The #1 AI Assistant For Your Meetings

7.7/10 Good
Free Free entry with limited transcription, limited storage, AskFred, audio/video file upload, mobile app, Chrome extension and API access according to the pricing page. Subscription Pro For professionals and small teams; includes unlimited transcription, unlimited AI summaries, increased storage, downloads of transcripts/summaries/recordings, Personal Assistant, talk-time analytics, AI skills, voice agents, AI credits, action items, task manager, and unlimited integrations.

Business For growing businesses; includes Pro features plus unlimited storage, video recording, multi-language mode, conversation intelligence, team analytics, more AI credits, and user groups.

Enterprise For large enterprises; includes Business features plus Rules Engine, SSO, SCIM, HIPAA compliance, private storage, custom data retention, Transcript+Summary-only mode, more AI credits, Super Admin, and a dedicated account manager. Other API Fireflies provides API access for processing audio files and integrating them into your own workflows.

Private Storage Enterprise option for storing meeting data in a preferred location or dedicated storage environment.

AI Credits / AI Skills AI Credits control the use of specific AI features; AI Skills automatically extract follow-ups, scores, insights, and structured meeting data.
– (0)

Link

GDPR: Partly For users in the EU/EEA, compliance with the GDPR is only partially plausible. Positive aspects include a publicly available DPA, provisions regarding EU Standard Contractual Clauses, participation in the EU-U.S. Data Privacy Framework, documented data subject rights, and the statement that meeting content and personal data are not used for AI training. At the same time, the website states that the standard cloud stores and processes data in the U.S. Even with “Private Storage,” while data may be stored in the EU, the website indicates that processing still takes place in the U.S. The website does not specify any true EU/EEA data processing without U.S. processing or an on-premises/self-hosting option.
Positive
Existing DPA/AVV with binding instructions, SCCs as a fallback, EU-US Data Privacy Framework, documented support for data subject requests, subprocessor provisions with the right to object, statements regarding “no AI training” and “zero data retention” by third-party providers, as well as documented security and compliance certifications such as SOC 2 Type II and GDPR.
Negative
The website clearly states that the default is U.S. hosting and U.S. processing. Even with private storage in the EU, processing continues to take place in the U.S., according to the website. Full EU/EEA data residency for processing, an EU data center for the entire solution, or a self-hostable/on-premises option are not specified on the website. The provider’s ISO 27001 certification is not listed on the website.
Server Location
By default, according to the website, data is stored and processed in Fireflies’ secure cloud infrastructure in the U.S. on AWS and GCP. With “Private Storage,” data can also be stored in a customer-owned bucket in the EU; however, according to the website, processing still takes place in the U.S.

Link

“Launch your dream site in seconds”

Hostinger Website Builder is a no-code website builder with integrated hosting, a domain/SSL bundle, templates, marketing features, and several AI tools.

Users can create websites via drag-and-drop or with an AI prompt and then customize them for portfolios, company websites, blogs, or small to medium-sized online stores. Particularly relevant are the integrated AI features for text, images, logos, blog posts, product descriptions, and SEO.Hostinger

Build anything with AI from a personal site to an advanced web app – no coding needed

7.2/10 Good
Subscription Premium For small businesses, appointment pages, and professional presentations; includes AI Website Builder, Hostinger Horizons Credits, a free domain in the first year, email inboxes, hosting, and security features.

Business Website Builder For websites and online stores; includes AI tools, e-commerce features, domain, SSL, email, multiple websites, Vibe-Coding/Horizons Credits, SEO, marketing, and email campaign features.

Web Hosting / WordPress / Cloud / VPS Alternative hosting plans for users who need WordPress, their own code, cloud resources, or VPS control. Other Hostinger Horizons AI-powered prompt-based web app/website builder with credits, depending on the plan.

Domains, Email, CDN, Agency Hosting, API Additional products and extensions related to hosting, domain management, email, performance, and developer access.
– (0)

Link

GDPR: Partly Hostinger documents its GDPR compliance on its own website, explicitly refers to processing in accordance with the GDPR, provides a Data Processing Agreement (DPA) for its Website Builder, and offers multiple data center locations within the EU for its standard hosting plans. However, according to the help page, the server location for the specifically mentioned Hostinger Website Builder is fixed for primary files and cannot be selected as an EU data residency; additionally, assets are delivered via a global Cloudflare CDN. Furthermore, the privacy policy explicitly mentions possible transfers to third countries outside the EU/EEA. From an EU/EEA perspective, GDPR-compliant use is therefore only possible under certain conditions and upon review of the specific data flow; full compliance is not clearly demonstrated.
Positive
The website includes a privacy policy with explicit reference to the GDPR, an AVV/DPA for the website builder as a “Covered Service,” information on Standard Contractual Clauses (SCCs) for transfers to third countries, multiple EU server locations for hosting plans, and a statement that conversations with Hostinger AI Agents are not used for training or fine-tuning AI models. Hostinger also states that it is ISO/IEC 27001-compliant.
Negative
For the Hostinger Website Builder, the website does not specify a specific, selectable EU server location for primary data; instead, it states that primary files are stored at a fixed location and assets are delivered via a global CDN with over 330 locations. The privacy policy also states that some servers may be located outside the EU/EEA, such as in the U.S., Brazil, Singapore, and Indonesia. A dedicated subpage with a clear list of subprocessors was not found on the website.
Server Location
For general web and cloud hosting plans, Hostinger lists EU locations in France, Germany, Lithuania, the Netherlands, and the United Kingdom; these can be selected according to the help page. However, for the specific Hostinger Website Builder under consideration, the policy only states that primary files are stored at a fixed location and that assets are delivered worldwide via the Cloudflare CDN. A specific EU/EEA primary location for the Website Builder is not specified on the website.

Link

"Turn text into videos with AI voices"

Fliki is an AI video and voiceover tool that turns prompts, scripts, blog articles, and presentations into videos with AI voices, visuals, music, and subtitles. According to the provider, Fliki supports 2,000+ AI voices in 80+ languages, text-to-video, blog-to-video, PPT-to-video, AI Avatars, Voice Cloning, translation, screen recording, and auto-editing.Fliki

Turn text into videos with AI voices

7.5/10 Good
Free Free entry without a credit card; limited audio/video creation, 720p export, short export length, limited workflows, and restricted media/AI features. Subscription Standard For creators with more credits, 1080p videos, more voices, premium stock media, translation into 80+ languages, longer videos, Make/Zapier integration, limited avatars, voice cloning, AI Playground, YouTube publishing, and commercial rights.

Premium For professional teams and studios with significantly more credits, longer videos, multiple voice cloning/custom voice options, AI video clips, all AI avatars, brand kits, custom fonts, photo avatars, and priority support.

Enterprise Custom plan with custom credits, bulk discounts, higher quotas, invoiced billing, API access, personalized avatars, professional voice cloning, custom templates, dedicated account manager, and team collaboration. Other Credits Fliki uses a credit system; credit consumption depends, among other things, on video length, media source, AI Avatar, and AI Video Clips.

Integrations / API Make and Zapier integration in Standard/Premium; API access is officially mentioned in the Enterprise plan.
– (0)

Link

GDPR: Partly For the EU/EEA region, GDPR-compliant use, based on the information provided on the website, can only be substantiated to a limited extent. Positive aspects include references to an Enterprise DPA, EU data residency options, and statements that content will not be used for training without explicit consent. However, a negative aspect is that the general privacy policy states that the servers and central databases are located in the U.S. and does not provide evidence of general, standard EU data residency for all pricing plans. Therefore, no clear and comprehensive GDPR compliance is documented for standard SaaS usage; a viable approach appears to lie more in utilizing enterprise features with a DPA and EU data residency.
Positive
The website includes references to a data processing agreement for Enterprise plans, data residency options in the “US, EU,’ SOC 2 Type II certification for Enterprise, and a statement that uploaded scripts, voice recordings, and exported videos will not be used to train AI models without explicit consent. Consent and withdrawal rights are also mentioned in connection with voice cloning.
Negative
The privacy policy lists the U.S. as a location where information may be transferred, stored, or processed, and states that servers or central databases are located in the U.S. A public subpage listing subprocessors was not provided on the website. A generally available DPA page for all customers, a default EU data residency for regular SaaS use, and on-premises/self-hosting options were not specified on the website.
Server Location
The privacy policy states that information may be transferred to, stored, or processed in the U.S. when accessed from outside the U.S., and that servers or central databases are located in the U.S. Additionally, data residency options in “US, EU” are mentioned on Enterprise subpages. No specific EU/EEA data center or country is specified on the website.

Link

"Generative AI Tools & Digital Assets for Creators"

Artlist is a creative platform for music, SFX, footage, templates, and AI tools. According to Artlist, the AI Suite includes, among other things, AI Video, AI Images, AI Music, AI Voiceover, and Artlist Studio.Artlist AI Suite

Generative AI Tools & Digital Assets for Creators

6.1/10 Solid
Subscription AI Starter AI credits for the AI Toolkit; depending on the credit tier, AI voiceover, AI image, AI video, AI music, and Artlist Studio.

AI Professional Higher AI credits, Artlist Studio, end-to-end AI production, character/location/shot control, team credit control, priority generation, and up to several team members.

Artlist Max Combination of stock catalog and AI tools for music, SFX, footage, templates, LUTs, plugins, as well as AI image, AI video, AI music, and AI voiceover.

Max Business Business offering for companies and agencies with stock catalog, AI products, commercial license, legal protection, security/compliance features, SSO, curation service, and account manager.

Enterprise Customized solution for global teams with AI products, stock, scalable features, tailored enterprise license, support, security, and control. Other AI Credits Credits are renewed monthly and used across AI products/models; additional credits can be booked.

Voice Cloning / Custom Voices Creation of personalized voices based on authorized audio samples; rights and consents must be secured by the user.
– (0)

Link

GDPR: Partly The website highlights several positive aspects regarding data protection and compliance for users throughout the EU/EEA: Artlist states that it complies with the GDPR, lists an EU representative office in Luxembourg, describes international data transfers using SCCs, mentions ISO 27001 certification, and provides information on the storage of prompts and project data in a “private cloud.” At the same time, crucial information required for clear and comprehensive GDPR compliance is missing directly from the website: No specific server or data center location within the EU/EEA is mentioned; no reliable EU data residency is guaranteed; no freely accessible Data Processing Agreement (DPA) is provided for customers; and no list of subprocessors is published. Additionally, Artlist itself states that some integrated third-party models may use inputs/outputs for training or model improvement, provided this is indicated in each case. Thus, from an EU/EEA perspective, GDPR-compliant use appears possible only under certain conditions, particularly with careful model selection and the user’s own contractual review.
Positive
The website features a privacy policy, an EU representative in Luxembourg, a reference to SCCs for international data transfers, ISO 27001 certification, and statements that data is stored in encrypted environments within a “private cloud.” Regarding AI content, the product page also states that prompts, uploads, and outputs are not used for training; the privacy help article specifies that third-party models are generally contractually excluded from training, unless Artlist explicitly indicates otherwise for individual models. Uploads for AI generation are supposed to be stored only temporarily and then deleted; according to the website, only the generated assets are stored.
Negative
The website does not specify a specific EU/EEA server location or data center. There is no evidence of an explicit EU data residency for the service. A Data Processing Agreement (DPA) accessible to customers is not listed on the website. A list of subprocessors is not provided on the website. The help page also explains that some models may use inputs and outputs for AI training or model improvement if this is indicated; thus, “no training” is not consistently guaranteed across the board. On-premises, self-hosting, or other local deployment options are not listed on the website.
Server Location
The specific server location or data center location is not specified on the website. It is only stated that data is stored “in encrypted environments within our private cloud.” Relevant for EU/EEA users: The website does not provide a binding assurance of EU data residency or an EU/EEA data center.

Link

"Seeking the optimal conversion from energy to intelligence"

Moonshot AI is the provider behind Kimi, an LLM and agent platform focused on long contexts, coding, deep research, documents, spreadsheets, slides, web search, and multimodal processing. The Kimi API offers models such as Kimi K2.6, K2.5, K2, and Moonshot-v1.Moonshot AI

LLM “Seeking the optimal conversion from energy to intelligence”

3.9/10 Insufficient
Other Pay-as-you-go API Flexible, usage-based billing according to input and output tokens, model selection, and, where applicable, document/tool usage; suitable for developers and small teams.

Kimi K2.6 / K2.5 / K2 / Moonshot V1 Model families for multimodal or text-based tasks, long context, coding, agents, reasoning, and dialogue tasks.

Enterprise Solutions & Customization For medium-sized and large companies with flexible rate limits, multi-project deployments, support, SLA-oriented reliability, and individual agreements according to the platform page.
– (0)

Link

GDPR: Unclear Although the specified domain https://platform.moonshot.ai/ contains references to data protection and compliance, the information essential for a robust GDPR assessment throughout the EU/EEA is either missing or cannot be found on this domain. In particular, the website does not specify: the specific server location or data center location, EU/EEA data residency, subprocessors, the Data Processing Agreement (DPA), the option to opt out of model training, or relevant certifications. Since only information from this domain may be taken into account, overall compliance cannot be reliably verified.
Positive
The website provides links to a privacy policy and terms of use. Additionally, the homepage for enterprise offerings mentions “data compliance and privacy protections.” There is also an open-source/locally-based approach via documented integrations with OpenClaw, as well as references to open-source components such as Kimi CLI and MoonPalace.
Negative
The website does not specify an EU/EEA server location, EU data residency, a Data Processing Agreement (DPA), a list of subprocessors, a contractual exclusion of training with customer data, on-premises or true self-hosting options for the models themselves, or ISO 27001, SOC 2, or comparable certifications. Additionally, the domain redirects to content on a different domain; since only the specified domain may be evaluated, the documentation on the target domain itself remains incomplete.
Server Location
Not specified on the website. No specific location of servers or data centers within the EU/EEA or outside the EU/EEA can be found on the specified domain.

Link

"Your AI accelerator for every workflow, from the editor to the enterprise."

GitHub Copilot is an AI-powered coding assistant for IDE, GitHub.com, CLI, Mobile, and Windows Terminal. It offers code completion, chat, code review, agentic workflows, pull request summaries, MCP integration, and a cloud agent that can analyze repositories, make changes on branches, and prepare pull requests.

The product is clearly focused on software development and team workflows, not on general text or office applications.GitHub Copilot

Your AI accelerator for every workflow, from the editor to the enterprise

7.8/10 Good
Free GitHub Copilot Free Limited entry-level option for personal use; according to GitHub, includes up to 2,000 inline suggestions per month and limited premium requests. Not suitable for enterprise use.

GitHub Copilot Student For verified students; includes unlimited completions, Copilot Chat, additional models, and monthly premium requests. Subscription GitHub Copilot Pro For individual developers with unlimited IDE completions, Copilot Chat, additional models, and premium requests.

GitHub Copilot Pro+ Everything in Pro plus full access to available models in Copilot Chat, higher premium request limits, and priority access to advanced AI features.

GitHub Copilot Business For teams and organizations; includes Copilot Cloud Agent, centralized management, and Copilot policy control for organization members.

GitHub Copilot Enterprise For companies on GitHub Enterprise Cloud; includes everything in Copilot Business plus additional enterprise features and centralized assignment at the organization, user, and team level. Other GitHub AI Credits / usage-based billing Copilot plans include GitHub AI credits or quotas; for Business and Enterprise, credits are pooled per user at the billing unit level.

GitHub Enterprise Server Self-hosted GitHub platform for enterprises, on-premises or in a Virtual Private Cloud; important: according to GitHub, Copilot is currently not available for it.
– (0)

Link

GDPR: Partly For the European region, the conditions for GDPR-compliant use of GitHub Copilot have been documented. Positive aspects include the DPA/AVV that explicitly applies to GitHub Copilot, a documented EU data residency for GitHub Enterprise Cloud with Data Residency, and statements that, in cases of enforced data residency, code, prompts, and responses do not leave the region during inference. At the same time, standard usage is not consistently documented as being local to the EU; the list of subprocessors mentions several processing operations in the U.S., and individual model paths or functions have differing retention rules. Therefore, usage by EU/EEA users is not generally proven to be fully GDPR-compliant, but only with appropriate enterprise configurations and contractual frameworks.
Positive
GitHub documents that the GitHub DPA also applies to GitHub Copilot. For GitHub Enterprise Cloud with Data Residency, a Copilot policy is described that routes all Copilot requests to model endpoints within the specified region; supported regions are the U.S. and the European Union. GitHub also states that, when data residency is enforced, code, prompts, and Copilot responses do not leave the region during inference, and that Copilot-related logs and telemetry are stored in region-compliant storage. For Business and Enterprise customers, GitHub also specifies restrictive retention policies by default for certain types of usage—for example, no retention of prompts and suggestions when accessing the IDE for chat and code completions.
Negative
The website does not provide blanket assurance that all standard SaaS usage of Copilot within the EU/EEA takes place locally within the EU without further measures. GitHub’s list of subprocessors lists several processing locations in the U.S. Additionally, data is retained for varying lengths of time depending on the interface; for Copilot access other than IDE chat and code completions, GitHub specifies a retention period of 28 days for prompts and suggestions. For individual subscriptions, interaction data may be used to train and improve AI models, provided that opt-out has not been selected. The website does not indicate that GitHub Copilot offers true on-premises or self-hosted operation.
Server Location
For GitHub Copilot with Data Residency, the website lists the United States and the European Union as regions. With enforced data residency, code, prompts, and responses remain within the specified region during inference. However, the general list of subprocessors lists processing locations in the U.S. for several subprocessors. Specific EU countries or individual data center locations for Copilot are not specified on the website.

Link

"Create high-impact, professional video content without the inevitable cost and delay of outsourced video production."

Elai is an AI video generator for professional avatar, training, e-learning, communication, and marketing videos. The tool offers AI Avatars, Custom Avatars, Voice Cloning, automatic translation, AI Storyboard, Article-to-Video, PPTX-to-Video, Avatar Dialogs, personalization, Screen Recorder, and API.Elai.io

Create high-impact, professional video content without the inevitable cost and delay of outsourced video production

6.9/10 Solid
Free Free entry with 1 user, a very limited minute allowance, access to 80+ avatars, 75+ languages, and creator features. Subscription Creator For individual creators with more video minutes, Full HD video, and the complete avatar, voice, and language library.

Team For teams with multiple editors/guests, custom images and fonts, Ultra 4K video, Premium Voices, Selfie Avatar, and Voice Clone.

Enterprise Custom plan with unlimited users, multiple Voice Clones, Selfie Avatars, Premium Avatars, Brand Kit, Workspaces, SSO, and Premium Support. Other API API access for paid and trial accounts; supports video rendering, Story API, Avatar API, Voice API, webhooks, media upload, and personalization.

Custom Avatar / Voice Cloning Enterprise-grade features for digital twins, custom avatars, and voice cloning; rights and consents must be verified before use.

Zapier app and API integration for automated video creation, personalization, and external workflows.
– (0)

Link

GDPR: Partly The website demonstrates compliance with several key GDPR requirements for the EU/EEA region, in particular a published DPA, a list of subprocessors with processing locations, the inclusion of EU/EEA-related data protection laws in the DPA, and certification under the EU-U.S. Data Privacy Framework. At the same time, the website repeatedly mentions U.S.-based data centers for standard data storage and does not document a general EU data residency policy as the standard for Elai. According to the list of subprocessors, Amazon Web Services is listed as “United States or Ireland, as selected by the Customer and/or as set forth in the Agreement,” but the security page explicitly states “USA” for user data and backups. Therefore, GDPR-compliant use within the EU/EEA appears to be possible only under certain conditions and with contractual clarification; it is not clearly established as the standard case.
Positive Aspects
Positive aspects include a publicly available DPA, explicit reference to the GDPR and EU Area Law, a published list of subprocessors with locations, the possibility of AWS processing in Ireland as per the subprocessor list, and the published participation in the EU-U.S. Data Privacy Framework.
Negative
A negative aspect is that the website repeatedly cites the U.S. as the storage location for data, backups, and servers. The website does not clearly guarantee general EU data residency for Elai-SaaS. There is no clear statement on the website that customer data, uploads, prompts, or outputs are not used to train general models. Relevant certifications such as ISO 27001 or SOC 2 are not listed on the website.
Server Location
The Security page states that “all data, including backups” is stored in data centers in the United States, operated by AWS and DigitalOcean, among others. However, in the DPA’s list of subprocessors, Amazon Web Services is listed as “United States or Ireland, as selected by the Customer and/or as set forth in the Agreement.” For Microsoft Azure, the United States is specified. Therefore, the website does not clearly indicate a uniform EU/EEA data residency.

Link