Find Your Tool in 6 Steps
Result: 158

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 158
Research Images Video Music Agent Business Marketing Website API

"Trustworthy, scalable AI agents."

Rasa is a platform for AI chatbots, voicebots, and service automation. It is aimed at companies that want to integrate dialog-based assistants into their own systems, CRM, contact center, and communication channels in a controlled manner.Rasa Platform

Trustworthy, scalable AI agents.

7.5/10 Good
Free Developer Edition
Free local or production use for one bot with limited conversation volume and community support. Other Enterprise Scalable agent platform for production chat, voice, and service automation with enterprise support and custom deployment requirements.

Professional Services Consulting, implementation, architecture, agent design, and long-term support from Rasa.

Self-Hosted Deployment Operation in your own cloud, private cloud, on-premises, or air-gapped environment.

Own model providers Combination with self-hosted or external LLMs, speech, and integration services.
– (0)

Link

GDPR: Yes Rasa Platform can be assessed as usable for the EU/EEA region in the best available usage path in a GDPR-compliant manner, because Rasa provides a DPA/AVV and, according to its own website, the platform can be self-hosted or deployed in customer-owned infrastructure, private cloud, on-premise, and even in fully offline-operated environments. This provides a straightforward way to keep processing entirely within your own EU/EEA infrastructure. However, for the services provided by Rasa itself, the documentation remains partly unclear or only contractually regulated regarding server locations, EU data residency, and subprocessors.
Positive
Positive aspects are the published DPA/AVV, the explicit classification under GDPR, the commitment to process only on documented customer instructions, and the strong self-hosting/private-cloud focus. The product privacy policy also states that the products can be privately hosted by customers and that Rasa generally does not process personal data as part of the products. The website also mentions self-hosted deployment for Rasa Studio and promotes deployment in your own infrastructure, private cloud, on-premise, and even offline.
Negative
Negative or limiting is that the website states no specific EU/EEA server location for a managed SaaS or hosting option. The DPA only says that customer data is hosted in the location specified in the agreement. In addition, the subprocessor list is not openly published on the website, but is only provided 'upon written request'. A clear, general statement on the website that customer data is not used to train general models was also not found.
Server location
No specific server/data center location for Rasa Platform is stated on the website. The DPA only states that 'Customer Data is hosted in the location set forth in the Agreement'. Therefore, there is no publicly specified standard statement for EU/EEA data residency; however, through self-hosting/private cloud, the customer can determine the EU/EEA location themselves.

Link

“The AI community building the future.”

Hugging Face is not a single proprietary LLM provider, but a platform for hosting, discovering, distributing, evaluating, and deploying AI and LLM models. The Model Hub is used for storing, discovering, and using model checkpoints; LLMs can be used via Inference Providers, Inference Endpoints, or locally through libraries such as Transformers.Hugging Face

LLM “The AI community building the future.”

7.5/10 Good
Free You can test API access with a free Hugging Face account. There are monthly free credits. According to the current Hugging Face documentation, free users receive monthly credits, currently listed as $0.10, subject to change. After that, you need additional credits or pay based on usage. Subscription PRO With Hugging Face PRO, you get significantly more included inference credits. The pricing page lists, among other things, 20× included inference credits for PRO; the Inference docs currently mention $2.00 in monthly credits for PRO users.

Team & Enterprise For organizations, there are Team and Enterprise. These plans also include Inference Provider benefits or credits per seat and enable centralized billing, limits, and administration. According to Hugging Face, Team/Enterprise organizations currently receive $2.00 per seat in monthly credits. Other Pay-as-you-go If your credits are used up, you can continue making API requests by purchasing additional credits or paying based on usage. The costs depend on the specific model, provider, and usage.

Your own provider key In some cases, you can also use your own API keys from external providers. In that case, billing does not go through Hugging Face, but directly through the respective provider; according to the documentation, Hugging Face does not charge for this call.
– (0)

Link

GDPR: Partly For users throughout the EU/EEA, GDPR-compliant use is generally possible according to the information provided on the website, but only under certain conditions. Positive aspects include the documented EU data residency for Team and Enterprise plans, the reference to GDPR-compliant use with datasets, models, and inference endpoints stored in EU data centers, and the availability of an AVV exclusively through the Enterprise plan. At the same time, the general privacy policy mentions the company’s servers in the U.S. and describes third-party providers and subprocessors, some of which are located in the U.S. For standard use without a Team or Enterprise plan, repositories are always stored in the U.S., according to the website. Therefore, use within the EU/EEA is not universally compliant with the GDPR, but is only compliant depending on the plan and configuration.
Positive
The website features several positive elements: EU storage regions for Team and Enterprise organizations; an explicit statement that EU companies can use the ML development hub in a GDPR-compliant manner with storage in EU data centers; DPA/AVV for Enterprise; SOC 2 Type 2; according to the documentation, inference endpoints do not store payloads or tokens, only logs for 30 days; according to the documentation, inference provider routing does not store request bodies or responses for training purposes.
Negative
The general privacy policy states that the company and its servers are located in the U.S. and that personal data may be processed in the U.S. or other countries. It also lists several subprocessors based in the U.S. According to the website, repositories for users outside of Team/Enterprise are always stored in the U.S. The website does not provide evidence of a blanket, universally applicable “EU-only” hosting policy. A general, platform-wide opt-out from AI training is not clearly stated on the website; it is only specified for certain inference services that user data is not stored for training purposes.
Server Location
Information presented inconsistently on the website: The privacy policy states that the company and its servers are located in the U.S. At the same time, Hugging Face documents EU storage regions for Team and Enterprise plans and specifies GDPR-compliant use for EU companies, with datasets, models, and inference endpoints located in EU data centers. The list of subprocessors/service providers includes, among others, the U.S., France, and EMEA; specific individual EU data center locations are not specified in more detail on the pages found.

Link

"AI-Powered Professional Document Translation Tool"

Doclingo is an AI tool for translating PDF, Office, and scanned documents, with a focus on preserving layout, OCR, bilingual output, and post-editing.

Supported formats include PDF, Word, PPT, Excel, images, and others; there are also features such as a glossary, online editing, document chat, highlight-to-translate, and API integration.Doclingo

AI-Powered Professional Document Translation Tool

3.5/10 Insufficient
Free On the pricing page, visitors and registered users are listed as usage tiers; included are document-related translation features with restrictions. Specific limits are not always displayed cleanly on the rendered page. Subscription Premium Includes extended premium benefits such as more download/translation usage, batch upload, history, engine selection, online editing, document conversation, glossary, image translation, OCR, premium customer service, watermark removal, PDF tool usage, and AI proofreading.

Premium+ Extended premium tier with higher limits/additional benefits compared to Premium; the page mentions Premium+ and additional booster/discount benefits, but some limit values are publicly displayed as “undefined.” Other Booster Package / Character Pack as a one-time, non-auto-renewing model; according to the Help Center, usable with the same premium benefits and no time limit. For API usage, character-based quotas apply; if the quota is exhausted, you can buy Booster Packages or upgrade to higher memberships. For larger volumes, a Bulk Purchase / Discount Quote is offered via Sales contact. According to the official help, payments are processed via PayPal and Stripe; invoices are issued through Stripe.
– (0)

Link

GDPR: No The documentation available on the website does not demonstrate GDPR-compliant use for the EU/EEA region. On a positive note, according to the privacy policy, uploaded translation content is to be used solely for the translation function and, once the process is complete, should be deleted or anonymized whenever possible. However, several factors indicate that the service is not robustly compliant with the GDPR: According to the website, data is generally stored in China; EU/EEA data residency is not specified; a Data Processing Agreement (DPA) is not listed on the website; subprocessors are not transparently documented in a complete list; and the governing law and jurisdiction in the privacy policy refer to the People’s Republic of China.
Positive
A privacy policy is available on the website. It states that translation content is processed solely for the purpose of providing the translation feature and should be deleted or anonymized as soon as possible after the translation is complete. Additionally, the website lists SOC II compliance as a positive aspect.
Negative
The website does not mention EU/EEA hosting. Instead, it states that personal data is generally stored within the People’s Republic of China. A Data Processing Agreement (DPA) is not provided on the website. A complete list of subprocessors is not provided on the website. EU data residency, on-premises hosting, self-hosting, and an explicit opt-out from AI training are not mentioned on the website. The privacy policy is governed by the laws of the People’s Republic of China and designates Wuhan as the competent jurisdiction.
Server Location
According to the privacy policy, personal data is generally stored within the People’s Republic of China. If cross-border transfers occur—for example, in the case of international cloud services—the provider states that it will implement protective measures. No specific server or data center location in the EU/EEA is listed on the website.

Link

“Projects that practically manage themselves.”

Jira is a cloud and data center platform for project, task, and work management.

In its AI-enabled form, Jira combines classic planning, tracking, and workflows with Rovo AI, for example to create work items from Slack/Teams, summarize content, break down complex work into tasks, and provide agentic assistance and search across the Teamwork Graph.Jira / Atlassian Intelligence

Projects that practically manage themselves

6.9/10 Solid
Free For small teams; unlimited goals, projects, tasks, and forms, limited number of users and limited automations. Subscription Standard More user/team capability, Standard Support, more automations, data residency, and basic scaling.

Premium Everything in Standard plus unlimited storage, 99.9% SLA, 24/7 Premium Support, Project Archiving, Admin Insights, IP Allowlisting, Sandbox, Release Tracks, more automation, and Atlassian Intelligence. Other Enterprise Enterprise scaling, centralized administration, advanced security/compliance features, Enterprise support, and stronger data/AI control.

Marketplace / Rovo / Atlassian Intelligence Additional apps, AI features, agents, search, and automations depending on product and license scope.
– (0)

Link

GDPR: Partly For users throughout the EU/EEA, using Jira with Atlassian Intelligence in compliance with the GDPR is generally possible, but only under certain conditions. Positive aspects include the documented privacy policy, a DPA/AVV, a list of subprocessors, the explicit GDPR commitment, EU data residency for Rovo, and self-managed hosting for Jira Data Center. At the same time, the website indicates that processing for Atlassian Intelligence/Rovo features may also take place outside the EU/EEA—particularly in the U.S.—and that not all components are equally EU-resident. Therefore, to ensure compliant GDPR usage within the EU/EEA, the appropriate deployment model, data residency configuration, and a review of international data transfers are required.
Positive
Atlassian refers to its privacy policy, DPA/AVV, security measures, and list of subprocessors. For Rovo, EU data residency is documented, and Jira can also be operated as a self-managed variant via Jira Data Center on the customer’s own hardware or with IaaS providers. Rovo also mentions SOC 2 and ISO 27001, as well as the statement that LLM providers do not use inputs and outputs to improve their own services.
Negative
The website documents subprocessors and processing locations for Atlassian Intelligence and Rovo that are outside the EU/EEA, including the U.S. Furthermore, data residency is not equally available for all related components; according to the website, it is not available for Forge apps built in Studio. The website does not consistently demonstrate that AI functions operate exclusively within the EU.
Server Location
For cloud data residency, Atlassian lists the regions Europe (Frankfurt) and Europe (Dublin) for the EU. Data residency is available for Rovo. However, the list of subprocessors also includes the U.S. and, in some cases, EEA locations such as Belgium, the Netherlands, and Finland for AI-related processing, depending on the provider. For Jira Data Center, customers can choose the hosting environment themselves.

Link

Microsoft Copilot Studio is a graphical low-code platform for creating, customizing, publishing, and managing AI agents and agent flows.

The agents can access business data, use knowledge from SharePoint, websites, Dataverse, or enterprise connectors, perform tasks via flows/prompts/APIs, and be published in Microsoft 365, Teams, websites, apps, or additional channelsMS Copilot Studio

Create, customize, and launch AI agents effortlessly

6.6/10 Solid
Free Individuals can use a free trial version to create agents and test them in the test chat; however, according to Microsoft, agents cannot be published with the trial license. Subscription As a standalone Copilot Studio subscription for agents on supported channels, premium connectors, and production use; Copilot Studio is also included in certain Microsoft 365/Teams contexts or with Microsoft 365 Copilot to extend Microsoft 365 Copilot with agents. Other Pay-as-you-go via Azure billing; Pre-Purchase Plan with pre-purchased Copilot Credit Commit Units; Copilot Credit Capacity Packs as tenant-wide capacity. Copilot Credits measure usage depending on the agent response, action, and complexity.
– (0)

Link

GDPR: Partly Microsoft’s website lists several key GDPR-relevant components for Microsoft Copilot Studio in the EU/EEA region: EU Data Boundary, geographic data residency in EU/EFTA data centers, a DPA/AVV via the Microsoft Products and Services Data Protection Addendum, and compliance and governance features. At the same time, Microsoft itself states that the EU Data Boundary applies only under certain configuration requirements and that there are limited exceptions for transfers outside the EU Data Boundary. According to the website, this means that GDPR-compliant use is possible for EU/EEA customers, but not across the board without conditions.
Positive
The website documents the EU Data Boundary, selectable geographic data residency, DPA/AVV, references to GDPR support, and certifications such as ISO 27001 and SOC. For Copilot Studio, it is explicitly stated that EU/EFTA tenants with environments within the EU Data Boundary fall within the scope of coverage. Regarding prompt functions, it is also stated that customer data, prompts, and model responses are not used to train or improve the Azure OpenAI Service Foundation models.
Negative
The website makes EU/EEA-compliant data processing contingent on certain conditions, specifically the billing address and the creation of all environments within the EU Data Boundary. Furthermore, Microsoft itself refers to limited cases in which data may be transferred outside the EU Data Boundary. The website does not mention true on-premises or self-hosted operation of Copilot Studio.
Server Location
According to the website, for EU Data Boundary Services, customer data and pseudonymized personal data are stored and processed in data centers located in EU or EFTA countries. Data centers mentioned include those in Austria, Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy, the Netherlands, Norway, Poland, Spain, Sweden, and Switzerland. According to the website, this applies to Copilot Studio if a tenant with a billing address in the EU or EFTA is provisioned and all environments are created within the EU Data Boundary.

Link

“Your OpenClaw Ready for You” / “The #1 OpenClaw Hosting Platform”

MyClaw.ai is a managed hosting service for OpenClaw, an open-source personal AI assistant. According to its own description, MyClaw provides a private, dedicated OpenClaw instance and handles servers, updates, maintenance, backups, and operations so that users can use OpenClaw without having to install it themselves. OpenClaw itself is an agent that can be contacted via chat channels such as WhatsApp, Telegram, Slack, Discord, Signal, iMessage, or Microsoft Teams and can perform tasks through apps, files, browsers, calendars, email, and APIs.OpenClaw

A Personal AI Assistant … works 24/7, no setup needed.

6.1/10 Solid
Free OpenClaw Self-Hosting / local installation OpenClaw itself is described as free open-source software and can be operated locally or on your own infrastructure; users must handle setup, updates, security, model access, and maintenance themselves.

MyClaw Free Version No confirmed permanently free MyClaw free version found on the official pricing page. The pricing page lists paid managed hosting plans; a free trial is not clearly substantiated in the visible pricing content. Subscription Lite Managed OpenClaw hosting for personal projects and getting started; includes zero setup, instant access, personal AI assistant, 24/7 operation, automatic updates, private encrypted instance, daily backups, and smaller guaranteed resources.

Pro Advanced managed hosting plan for power users with more resources than Lite, priority support, automatic maintenance, encrypted isolated instance, daily backups, as well as custom skills and integrations.

Max Plan for more intensive workloads with even higher resources, 24/7 operation, automatic updates, private encrypted instance, daily backups, and priority support.

Ultra Highest officially listed managed hosting plan for demanding workloads with scalable high-performance resources, isolated instance, encrypted access, backups, custom skills, integrations, and priority support. Other AI Balance & Credits MyClaw mentions AI Balance & Credits in the Refund Policy; used credits are non-refundable, unused balance may be refunded upon request. The specific functional logic or model costs are not fully confirmed in the reviewed official sources.

External AI Model Providers MyClaw Terms indicate that the service may be integrated with third parties such as AI model providers and that their own terms apply; the specific supported providers and privacy policies must be reviewed for each configuration.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, the website does provide a privacy policy and a separate GDPR notice with legal bases, data subject rights, and information on international data transfers. At the same time, the website does not specify a concrete EU/EEA server location, no EU data residency, no AVV/DPA, no subprocessors list, and no certifications. In addition, the privacy policy mentions possible processing and transfers outside the jurisdiction, including the USA. On the positive side, according to the website OpenClaw is open source and, according to comparison and learning pages, can also be operated locally or on one's own server; this route would be the most privacy-friendly for EU/EEA users, but it is not offered by MyClaw itself as a simple, documented managed EU compliance path. Therefore, GDPR-compliant use from an EU/EEA perspective is only possible under certain conditions and with independent review.
Positive
The website includes a privacy policy as well as a separate GDPR notice for the EEA/UK. MyClaw describes isolated private instances, encrypted access, backups, and states that data is not used for general AI training. For connected Google services, it is also additionally explained that Google Workspace API data is not used to develop, improve, or train generalized AI/ML models. In addition, OpenClaw is presented as open source, and local installation as well as self-hosting on your own VPS are explicitly mentioned as usage options.
Negative
The website does not specify a concrete server/data center location, EU data residency, an AVV/DPA, a subprocessors list, explicit EU/EEA hosting evidence for the managed version, or relevant certifications such as ISO 27001 or SOC 2. The privacy policy is also itself described as a draft that is still to be legally reviewed before publication. In addition, the website mentions possible international data transfers, including to the USA.
Server location
Not specified on the website. There are references to managed cloud hosting, dedicated or isolated instances, and private containers, but no specifically named server location, no named data center, and no confirmed EU/EEA data residency.

Link

"The essential AI stack for your company. Simple for business users. Ready for advanced use cases."

Langdock is an enterprise-focused AI platform with chat, agents, workflows, integrations, knowledge search, and API access.

Companies can use it to centrally roll out generative AI, search internal knowledge bases, build automations, and run their own AI applications on a shared platform. Langdock officially positions itself as a model-agnostic platform for secure AI adoption in the enterprise.Langdock

The essential AI stack for your company. Simple for business users. Ready for advanced use cases

7.2/10 Good
Free Free trial period without a credit card to test the platform. Subscription Chat & Agents Basic subscription for model-agnostic AI chat and custom AI agents; usage limits included per user.

Business / Business Max Business offers standard limits; according to the docs, Business Max offers multiple times the usage limits for power users. Other Workflows Add-on Add-on for automations; Starter is included, Business offers higher execution volumes, Custom individual limits.

API Unified API for multiple models; Langdock charges a markup on model provider prices when using the API.

Enterprise Deployment Single-tenant SaaS, bring-your-own-cloud, or on-premise depending on company size and security requirements.
– (0)

Link

GDPR: Yes On its website, Langdock provides several clear building blocks for GDPR-compliant use throughout the EU/EEA: T&Cs/Privacy Policy, processing predominantly within the EU or EEA, EU hosting for multi-tenant SaaS, dedicated deployment options, self-hosting or on-premises, and statements regarding “no model training.” Since hosting on the customer’s own infrastructure and “bring your own cloud” are also explicitly offered, a straightforward path to GDPR-compliant use within the EU/EEA context is documented. One limitation is that, according to the AVV, data transfers to third countries are possible if the customer actively activates an LLM with a server location outside the EU.
Positive
Positive aspects include the available AVV/DPA, the statement that the processing of customer data generally takes place within the EU or an EEA member state, EU hosting of the multi-tenant SaaS, self-hosting and “bring your own cloud,” the documented list of subprocessors, “no model training” for customer data, and the mentioned ISO 27001 and SOC 2 Type II certifications.
Negative
A negative or limiting aspect is that the website does not guarantee that all processing will exclusively take place within the EU/EEA for every conceivable model configuration. The General Terms and Conditions of Service explicitly state that transfers to a third country are possible at the direction of the controller, for example, if an LLM with a server location outside the EU is activated. Furthermore, no clear, detailed evidence regarding open-source components was found on the website.
Server Location
The website states that the multi-tenant SaaS is hosted on servers within the EU via Microsoft Azure. It also states that the processing of customer data generally takes place within the European Union or a member state of the EEA. The list of subprocessors in the General Terms and Conditions (AVV) includes Microsoft Ireland Operations Limited, which processes data within the EU for hosting and Azure LLMs, as well as Amazon Web Services EMEA SARL, which processes data within the EU for AWS LLMs.

Link

“The only E-CAD software with AI support.”

ELECTRIX AI is a professional E-CAD platform for electrical engineering, control panel design, fluid technology, process engineering, electrical installation, and building automation. The integrated AI copilot provides support for bill of materials, terminal diagrams, macro placement, translations, technical assistance, requirements checking, and the creation of control cabinet layouts, among other features.Electrix WSCAD

The only AI-powered E-CAD software

5.6/10 Limited
Free Full trial access including all six engineering disciplines, add-ons, interfaces, and AI features.

ELECTRIX Education Free license for verified universities and educational institutions. Subscription ELECTRIX AI Rental License
Time-limited license with updates; standard term is one year according to the provider, with additional multi-year contract options available. Other ELECTRIX AI Purchase License Perpetual license for the E-CAD software.

Maintenance and Support Software updates, support, and access to the WSCAD parts database.

Engineering Modules Electrical Engineering, Cabinet Engineering, P&ID, Fluid Engineering, Electrical Installation, and Building Automation.

Add-ons ProjectWizard, Automation, Interfaces, Manufacturing Integration, and other add-on modules.

Consulting and Training Onboarding, project consulting, training, and video tutorials via WSCADEMY.
– (0)

Link

GDPR: Partly For the European market, GDPR-compliant use is only feasible under certain conditions. On a positive note, WSCAD describes a privacy-focused architecture on the ELECTRIX website: Project content is not stored or transferred to third parties, chat histories are deleted after each session, text entries are end-to-end encrypted, and customer-specific guidelines and documents remain locally or on the customer’s own servers. At the same time, the privacy policy for AI features mentions that inputs are processed by AI and that anonymized inputs are used to improve the AI, and it refers to OpenAI Ireland Limited and, additionally, Perplexity AI, Inc. The website does not specify a concrete server or data center location for ELECTRIX AI within the EU or the EEA, nor does it provide a Data Processing Agreement (DPA), a list of subprocessors, or clearly documented EU data residency. Therefore, its use is not clearly and fully substantiated; rather, it is justifiable only on the condition that no personal or confidential data is entered into the AI and that local/in-house data storage for documents is indeed sufficient.
Positive
The product page emphasizes that personal data and IP addresses are not shared, project content is not stored or transferred to third parties, chat history is deleted after each session, and individual policies/documents remain entirely within the user’s IT environment—either locally or on the user’s own servers. From an EU/EEA perspective, this supports data-minimal and locally oriented processing steps.
Negative
At the same time, the privacy policy states that input data is processed for AI and used in anonymized form to improve the AI or to train AI models. Furthermore, OpenAI Ireland Limited and Perplexity AI, Inc. are mentioned. The website does not specify a specific ELECTRIX AI server location within the EU/EEA, EU data residency, a Data Processing Agreement (DPA), a list of subprocessors, an explicit opt-out from AI training, or certifications such as ISO 27001 or SOC 2. As a result, essential GDPR evidence for EU/EEA users remains incomplete.
Server Location
Not specified on the website. The privacy policy lists OpenAI Ireland Limited in Dublin, Ireland, as the provider of the AI platform; additionally, it mentions an interface provided by Perplexity AI, Inc. in the U.S. for wscaduniverse.com. The website does not specify a specific server or data center location for ELECTRIX AI itself within the EU/EEA.

Link

Robotics

“The Global Leader in Social Humanoid Robotics” / “Engineering the world’s most advanced social humanoid robots.”

Engineered Arts develops and builds humanoid robots for social interaction, entertainment, education, research, events, and public installations. The flagship Ameca is a full-scale, interactive, and programmable humanoid robot equipped with cameras, microphones, speakers, and 61 degrees of freedom. All current robots are operated via the Tritium software platform.Engineered Arts

The Global Leader in Social Humanoid Robotics" / "Engineering the world's most advanced social humanoid robots.

4.9/10 Limited
Other Purchase on request, rental/rental on request, customized configurations, Tritium AI Subscription, maintenance/support and optional warranty extensions. Direct prices are not given here as no verified official standard price list was found. Ameca: CE publicly named. The official Ameca spec page states "Certifications: CE".
– (0)

Link

GDPR: Unclear Although the website contains several statements regarding data protection, local processing whenever possible, and general GDPR compliance, it does not include a robust privacy policy with details on product data processing, specific server or data center locations, EU/EEA data residency, a data processing agreement (DPA), a list of subprocessors, or a robust opt-out option for AI training. The documentation is therefore too incomplete to allow for a reliable assessment of GDPR compliance throughout the EU/EEA.
On the positive side
On the positive side, according to the website, Mesmer and Tritium were developed with a focus on data protection and security; data processing takes place locally whenever possible; encrypted and secure data processing is mentioned; and the website repeatedly refers to GDPR compliance and international privacy standards. In addition, the website describes its own robotics software platform comprising Tritium, Tritium OS, and a user-side Python IDE, which suggests a certain degree of technical control.
Negative
On the negative side, the website provides no concrete evidence of EU/EEA hosting, no specific data centers are named, no Data Processing Agreement (DPA), no subprocessors, no statement regarding international data transfers, no product-specific statement on the retention of interaction data, and no clear assurance that user inputs, uploads, or conversation data are not used to train general models. Furthermore, certifications are not reliably documented on the Mesmer and Tritium pages found.
Server location
Not specified on the website. The only information found was that Tritium AI is described as a cloud-based solution and that data processing takes place locally whenever possible; specific server or data center locations in the EU/EEA are not mentioned.

Link

“Ask me anything. It’s confidential.” - “The AI that respects your privacy”

Lumo is an AI assistant from Proton with a focus on confidentiality, no-logs, and zero-access encryption.

The tool supports, among other things, research, writing, translations, file analysis, coding assistance, and optional web search; in addition, there are Projects as well as integration with Proton Drive. Proton positions Lumo as a European, privacy-focused alternative to common AI chats.Lumo

Ask me anything. It’s confidential

7.0/10 Good
Free Free use with limited access; even without an account, a chat can be started with restricted access. Subscription Lumo Plus Unlimited chats, extended chat history, unlimited encrypted chat history, search and favorites for previous chats, Ghost Mode, and uploading multiple or large files.
– (0)

Link

GDPR: Partly The website highlights several strong data protection and compliance measures for Lumo in the EU/EEA context: Proton explicitly states that it is “GDPR compliant,” designates an EU representative in Luxembourg, provides a privacy policy for Lumo, offers a general DPA/T&C for Proton services, and outlines a clear “no logs,” “no sharing,” and “no training” approach for Lumo. At the same time, a significant gap remains for a comprehensive assessment of the best possible EU/EEA setup: The website does not specify a concrete location of servers or data centers for Lumo within the EU/EEA or an explicit EU data residency for Lumo. An on-premises or self-hosting option is also not mentioned on the website. Therefore, while GDPR-compliant use from an EU/EEA perspective is plausible, it is not fully substantiated and is only reliable under certain conditions.
Positive
Positive aspects include Lumo’s product-specific privacy policy, the general Proton DPA/AVV, the explicit statement regarding GDPR compliance, the EU representative in Luxembourg, the statements “no logs,” “no training,” “never send your data to any third parties,” Proton’s control over the servers, and the open-source note regarding the code and models used.
Negative
On the negative side, or rather as a limitation, the Lumo website does not specify a concrete EU/EEA server location, does not explicitly state EU data residency, does not offer a dedicated private cloud option, and does not provide an on-premises or self-hosting option. Furthermore, Lumo’s privacy policy mentions only “selected partner APIs” for enabled web search, without naming them on the resulting Lumo page.
Server Location
The website states that Lumo’s models run “exclusively on servers Proton controls” and that Lumo is “built and based in Europe.” The website does not specify a specific location for the servers or data centers, nor does it name a particular EU or EEA country. Proton AG is based in Geneva, Switzerland; in addition, an EU representative in Luxembourg is listed.

Link

“The home of the AI Workforce” / “Scale GTM results, without scaling headcount”

Relevance AI is a low-/no-code platform for building, orchestrating, and operating AI agents and multi-agent workforces. The current focus is strongly on go-to-market processes such as sales, marketing, CRM enrichment, outbound, inbound qualification, customer success, and support automation.Relevance AI

The home of the AI Workforce / Scale GTM results, without scaling headcount

7.4/10 Good
Free Free entry-level plan for creating, cloning, and testing agents; includes unlimited agents & tools, Chat to Invent Changes, 2,000+ integrations, one workforce, one user, one project, 30 days of task history, marketplace access, community forum, as well as SOC 2/GDPR information. Subscription Pro For GTM operators and engineers who want to use agents more productively; includes everything in Free plus unlimited Workforces, two Build Users, scheduled Tasks, Chat Mode, Smart Escalations, Activity Center, Premium App Triggers, and Bring Your Own LLM.

Team For teams with larger workloads; includes everything in Pro plus Credit Rollover, five Build Users, End Users, multiple Shared Projects, Calling & Meeting Agents, A/B Testing, Analytics Dashboard, and Priority Support.

Enterprise Custom enterprise plan with unlimited users and projects, Enterprise App Triggers, Agent Evaluations, Work Hour Controls, Multi-Org Management, Enterprise Security, Dedicated Account Manager, Custom Implementation, and Priority Early Access. Other Actions Usage units for agent and workflow executions; different monthly or annual quotas are included depending on the plan.

Vendor Credits Prepaid/quota model for third-party AI model usage; according to the Terms, Vendor Credits can be used for Third-Party-AI-Model-Usage and are tied to an active subscription.

Bring Your Own LLM Users can connect their own LLM accounts or API keys, for example for OpenAI, Anthropic, or Google; processing then additionally depends on the respective provider and its DPA/Terms.

Enterprise Data Retention Enterprise feature for the automatic control of the retention and deletion of Tool Runs, Agent Conversations, Workforce Tasks, and Asset Versions; according to the documentation, it must be activated by Relevance AI.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is generally possible based on the information available on the website, but it is not fully unambiguous and is not easy to verify in every variant. Positive aspects include the selectable EU/UK region for data storage, the explicit statement regarding GDPR compliance, a documented commitment not to train on customer data, as well as references to a DPA and subprocessors. Limiting factors are that the specifically named European location, London, is in the United Kingdom and therefore not in the EU/EEA, that the actual subprocessors list is not disclosed within the reviewed domain area on the referenced website, and that additional checks remain necessary for parts of the processing outside the platform or with third-party providers.
Positive
The website documents a privacy policy, a security overview, EU/UK data residency at account creation, export and deletion options, SOC 2 Type II, DPA references, PII masking, as well as the statement 'We do not use your data to train our models or improve our services unless you have a specific partnership agreement with us'. In addition, Relevance AI mentions enterprise options such as 'single tenant or private cloud deployment' and multi-region deployment.
Negative
The website does not name an EU/EEA data center in the strict sense, but instead explicitly names London in the United Kingdom for Europe. A specific AVV/DPA with customers is not clearly findable as a clearly linked customer document within the reviewed domain area; there is only the note that a DPA can be viewed on the website. The subprocessors are only mentioned by reference to an external trust center subdomain, which was not used here as a source. In addition, the Data Security Policy explains that it does not apply to the processing, storage, or transmission of data outside the platform; the data retention documentation likewise states that retention rules do not apply to data processed or stored by subprocessors.
Server location
According to the website, depending on the selection made during registration, data storage is possible in Australia, the USA, or in the EU/UK region. For the European region, 'EU (London)' is specifically named. The website does not specify a data center within the EU or the EEA; for Europe, only London in the United Kingdom is mentioned.

Link

“The Ultimate AI Creative Suite for Creators Marketers Sellers”

Pollo AI is a multimodal AI creative suite for video, image, avatar, and audio creation. The platform combines Creative Studio, Marketing Studio, Commerce Studio, and Pollo Agent and offers features such as text-to-video, image-to-video, reference-to-video, AI image generator, AI voice generator, voice cloning, face swap, lip sync, UGC ads, product shots, and virtual try-on.Pollo AI

The Ultimate AI Creative Suite for Creators Marketers Sellers

4.8/10 Limited
Free Start for Free / Free Use
Get started with limited usage for initial generations; specific quotas may change. Subscription Lite Creator plan for regular use with a credit allowance and access to core image and video features; exact limits depend on checkout and promotions.

Pro Advanced Creator plan with a larger credit/usage allowance, higher production capacity, and expanded features.

Ultra / Unlimited promotions Higher-tier plan or promotional model with expanded or temporarily unlimited model access; unlimited use may be subject to dynamic speed adjustments. Other Creative Studio AI video, text-to-video, image-to-video, video-to-video, AI video editor, AI image generator, avatars, voice, and effects.

Marketing Studio UGC videos, ads, URL-to-video, script-to-ad, Facebook, TikTok, YouTube, and Instagram video ads.

Commerce Studio Product videos, product images, virtual try-on, listing images, Amazon/Shopify/e-commerce visuals.

Pollo Agent Agentic video creation for production-ready videos, scenes, SFX, consistent characters, and automated editing.

Pollo API API access with API keys, model selection, video/image generation, task status, webhooks, and usage-based billing or top-up models.

Top-ups / Credits Additional usage packages for API or web app; specific billing depends on model, duration, resolution, and usage.
– (0)

Link

GDPR: Unclear For the EU/EEA region, GDPR compliance cannot be reliably verified based on the information available on the provider's website. It is positive that a privacy policy is available on the main domain and that the API privacy policy mentions a DPA as well as naming third-party processors for AI generation. However, key information for a reliable EU/EEA assessment is missing, in particular regarding server location/data center, EU data residency, available DPA/Data Processing Agreement text, subprocessor list with locations and relevant certifications. Therefore, no clear statement can be made regarding fully GDPR-compliant use for SaaS usage throughout the entire European region.
Positive
The website provides a general privacy policy for Pollo AI as well as a separate API privacy policy. The API privacy policy explicitly states that the use of the API services is subject to a 'Data Processing Agreement (DPA)'. In addition, the API privacy policy names several third-party providers for AI processing and describes that, depending on the model, selected inputs may be transmitted to these providers; furthermore, a choice option via model selection is described. The main privacy policy also states that uploaded images are only stored temporarily for certain functions and are automatically deleted shortly after video generation.
Negative
The website does not specify concrete server locations or data centers, EU/EEA data residency, a linked or retrievable DPA/Data Processing Agreement version, a complete subprocessor list with roles and locations, SCC/transfer information for data transfers outside the EU/EEA, a clear opt-out from general AI training, or certifications such as ISO 27001 or SOC 2. On-premise, self-hosting, or private cloud options are also not specified on the website.
Server location
Not specified on the website. No concrete information on server locations, data centers, or EU/EEA data residency was found on the main domain or in the identified API legal pages.

Link

"Generative AI Tools & Digital Assets for Creators"

Artlist is a creative platform for music, SFX, footage, templates, and AI tools. According to Artlist, the AI Suite includes, among other things, AI Video, AI Images, AI Music, AI Voiceover, and Artlist Studio.Artlist AI Suite

Generative AI Tools & Digital Assets for Creators

6.1/10 Solid
Subscription AI Starter AI credits for the AI Toolkit; depending on the credit tier, AI voiceover, AI image, AI video, AI music, and Artlist Studio.

AI Professional Higher AI credits, Artlist Studio, end-to-end AI production, character/location/shot control, team credit control, priority generation, and up to several team members.

Artlist Max Combination of stock catalog and AI tools for music, SFX, footage, templates, LUTs, plugins, as well as AI image, AI video, AI music, and AI voiceover.

Max Business Business offering for companies and agencies with stock catalog, AI products, commercial license, legal protection, security/compliance features, SSO, curation service, and account manager.

Enterprise Customized solution for global teams with AI products, stock, scalable features, tailored enterprise license, support, security, and control. Other AI Credits Credits are renewed monthly and used across AI products/models; additional credits can be booked.

Voice Cloning / Custom Voices Creation of personalized voices based on authorized audio samples; rights and consents must be secured by the user.
– (0)

Link

GDPR: Partly The website highlights several positive aspects regarding data protection and compliance for users throughout the EU/EEA: Artlist states that it complies with the GDPR, lists an EU representative office in Luxembourg, describes international data transfers using SCCs, mentions ISO 27001 certification, and provides information on the storage of prompts and project data in a “private cloud.” At the same time, crucial information required for clear and comprehensive GDPR compliance is missing directly from the website: No specific server or data center location within the EU/EEA is mentioned; no reliable EU data residency is guaranteed; no freely accessible Data Processing Agreement (DPA) is provided for customers; and no list of subprocessors is published. Additionally, Artlist itself states that some integrated third-party models may use inputs/outputs for training or model improvement, provided this is indicated in each case. Thus, from an EU/EEA perspective, GDPR-compliant use appears possible only under certain conditions, particularly with careful model selection and the user’s own contractual review.
Positive
The website features a privacy policy, an EU representative in Luxembourg, a reference to SCCs for international data transfers, ISO 27001 certification, and statements that data is stored in encrypted environments within a “private cloud.” Regarding AI content, the product page also states that prompts, uploads, and outputs are not used for training; the privacy help article specifies that third-party models are generally contractually excluded from training, unless Artlist explicitly indicates otherwise for individual models. Uploads for AI generation are supposed to be stored only temporarily and then deleted; according to the website, only the generated assets are stored.
Negative
The website does not specify a specific EU/EEA server location or data center. There is no evidence of an explicit EU data residency for the service. A Data Processing Agreement (DPA) accessible to customers is not listed on the website. A list of subprocessors is not provided on the website. The help page also explains that some models may use inputs and outputs for AI training or model improvement if this is indicated; thus, “no training” is not consistently guaranteed across the board. On-premises, self-hosting, or other local deployment options are not listed on the website.
Server Location
The specific server location or data center location is not specified on the website. It is only stated that data is stored “in encrypted environments within our private cloud.” Relevant for EU/EEA users: The website does not provide a binding assurance of EU data residency or an EU/EEA data center.

Link

“AI for scientific research.”

Elicit is an AI-powered research assistant designed to search for, review, evaluate, and synthesize scientific literature. The tool supports basic literature searches, automated research reports, and systematic reviews, including screening, data extraction, and citation management. All key AI statements are to be linked to text passages from the underlying publications.Elicit

AI for scientific research.

7.4/10 Good
Free Limited Research Agent, monthly limited automated reports, unlimited search across more than 138 million publications, unlimited abstracts, Paper-Chat when full text is available, source display, and Zotero import. Subscription Plus Includes Basic features plus expanded access to the Research Agent, more automated reports, export to RIS, CSV, BIB, PDF, and DOCX, larger extraction tables, and clinical trial search.

Pro For systematic reviews; includes an advanced Research Agent, a dedicated review workflow, higher screening and report quotas, research alerts, custom extraction from uploads, explanations for AI responses, output templates, and API access.

Scale For collaborative research teams; includes Pro features plus full Research Agent access, image interpretation, real-time collaboration, larger reports and tables, and an admin panel with usage and seat management.

Enterprise For corporations, universities, and research institutions; includes SSO/SAML, 2FA, domain verification, user analytics, custom deployments, single-tenancy options, custom data sources and templates, higher review limits, unlimited alerts and API usage, and no training on customer data by default. Other Elicit API API access is available starting with the Pro plan; reports and reviews generated via the API count toward the respective workflow quota. According to the documentation, systematic reviews via the API are reserved for Enterprise plans.

Institutional Agreements Custom contracts for universities, research groups, and companies, including onboarding, training, customer success, and customized data sources.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is not clearly documented as standard SaaS in the EU. On the positive side, the service has its own privacy policy, a Data Processing Addendum referencing the EU GDPR, UK GDPR, Swiss data protection law, and SCCs, as well as a published reference to subprocessors. On the negative side, the website explicitly states that the servers are located in the U.S. The website does not specify EU data residency or EU/EEA data centers. Consequently, use appears to be possible only under certain conditions—such as additional contractual review and careful data minimization—but not as a clearly and fully secured standard EU/EEA solution.
Positive
The website includes a privacy policy, a DPA/AVV-like “Data Processing Addendum,” references to SCCs, obligations for subprocessors, and information on the rights of individuals in the European Economic Area. In addition, the website states “No training on your data by default” for Enterprise and refers to SOC 2 Type II.
Negative
The website explicitly states that the servers are located in the U.S. The website does not specify EU data residency, EU/EEA data centers, or a clear EU hosting path. Although a link to the list of subprocessors is provided, the content of that list is not viewable online. On-premises or self-hosting options are not specified on the website.
Server Location
According to the privacy policy: Servers in the United States. No other specific EU/EEA server locations or EU data residency are specified on the website.

Link

"Track & Boost Your Brand's Visibility in both AI Search (…) and Traditional Search"

Writesonic is an AI marketing platform for SEO, Generative Engine Optimization (GEO), AI search visibility, and content creation.

The tool monitors how brands appear in AI responses and search systems, provides recommendations for action, and supports the creation, updating, and optimization of content. According to the official documentation, Writesonic combines traditional search such as Google/Bing with AI search such as ChatGPT, Claude, Perplexity, Gemini, and Grok.Writesonic

Track & Boost Your Brand's Visibility in both AI Search (…) and Traditional Search

7.2/10 Good
Free Start without a credit card for SEO and AI content tools; no permanently fully featured free version recognizable as a guaranteed standard plan. Subscription Starter For early-stage brands with AI Search Tracking, GEO, AI Article Writer, Content Optimization, SEO & Content AI Agent, Chatsonic, and basic project/team features.

Basic For growing brands with more GEO tracking, more AI content, Site Audits, Premium SEO Data, integrations, and additional team/project limits.

Growth For scaling teams with more AI Search Tracking, content generation, SEO Audits, Sentiment Analysis, AI Search Volume Data, integrations, and enhanced support. Other Enterprise Custom solution for large brands and agencies with custom AI Search Tracking, custom limits, SSO/SAML, dedicated GEO strategist, account manager, and tailored projects.

Chatsonic / SEO Agents / Integrations Additional AI features for SEO, content, data analysis, web browsing, file uploads, image generation, and marketing workflows.
– (0)

Link

GDPR: Partly The website documents several important data protection components for use within the EU/EEA: privacy policy, DPA/AVV, list of subprocessors, SCCs for third-country transfers, as well as an explicit commitment not to use customer data for training general models. At the same time, the website consistently states the region 'United States' for hosting, model providers, and numerous other subprocessors. EU data residency, EU data centers, or a self-hosting/on-premise option are not specified on the website. Therefore, from an EU/EEA perspective, use appears possible only under certain conditions, in particular on the basis of contractual transfer mechanisms and the controller’s own risk assessment.
Positive
Positively documented are a Data Processing Agreement, the classification of Writesonic as a processor for customer data, EU Standard Contractual Clauses for EEA transfers, support with DPIAs, as well as the statement that customer data is not used for training or fine-tuning general, foundation, or large language models of Writesonic or model providers. In addition, the website refers to a SOC 2 Type 2 audit.
Negative
Negative for straightforward GDPR-compliant use within the EU/EEA is that the website lists the United States as the region for primary cloud hosting, selected workloads, frontend, backend, databases, vector storage, support, analytics, and AI model providers. The privacy policy also expressly states that personal data may be transferred to, stored, and processed in the United States and other countries. EU data residency, an EU/EEA data center as a standard or option, as well as on-premise/self-hosting, are not specified on the website.
Server location
According to Schedule 3 of the DPA, the regions listed for Microsoft Azure as primary cloud hosting, AWS for selected workloads, as well as numerous other infrastructure and AI service providers are in the United States. EU/EEA data residency or a data center in the EU/EEA is not specified on the website.

Link

"Create high-impact, professional video content without the inevitable cost and delay of outsourced video production."

Elai is an AI video generator for professional avatar, training, e-learning, communication, and marketing videos. The tool offers AI Avatars, Custom Avatars, Voice Cloning, automatic translation, AI Storyboard, Article-to-Video, PPTX-to-Video, Avatar Dialogs, personalization, Screen Recorder, and API.Elai.io

Create high-impact, professional video content without the inevitable cost and delay of outsourced video production

6.9/10 Solid
Free Free entry with 1 user, a very limited minute allowance, access to 80+ avatars, 75+ languages, and creator features. Subscription Creator For individual creators with more video minutes, Full HD video, and the complete avatar, voice, and language library.

Team For teams with multiple editors/guests, custom images and fonts, Ultra 4K video, Premium Voices, Selfie Avatar, and Voice Clone.

Enterprise Custom plan with unlimited users, multiple Voice Clones, Selfie Avatars, Premium Avatars, Brand Kit, Workspaces, SSO, and Premium Support. Other API API access for paid and trial accounts; supports video rendering, Story API, Avatar API, Voice API, webhooks, media upload, and personalization.

Custom Avatar / Voice Cloning Enterprise-grade features for digital twins, custom avatars, and voice cloning; rights and consents must be verified before use.

Zapier app and API integration for automated video creation, personalization, and external workflows.
– (0)

Link

GDPR: Partly The website demonstrates compliance with several key GDPR requirements for the EU/EEA region, in particular a published DPA, a list of subprocessors with processing locations, the inclusion of EU/EEA-related data protection laws in the DPA, and certification under the EU-U.S. Data Privacy Framework. At the same time, the website repeatedly mentions U.S.-based data centers for standard data storage and does not document a general EU data residency policy as the standard for Elai. According to the list of subprocessors, Amazon Web Services is listed as “United States or Ireland, as selected by the Customer and/or as set forth in the Agreement,” but the security page explicitly states “USA” for user data and backups. Therefore, GDPR-compliant use within the EU/EEA appears to be possible only under certain conditions and with contractual clarification; it is not clearly established as the standard case.
Positive Aspects
Positive aspects include a publicly available DPA, explicit reference to the GDPR and EU Area Law, a published list of subprocessors with locations, the possibility of AWS processing in Ireland as per the subprocessor list, and the published participation in the EU-U.S. Data Privacy Framework.
Negative
A negative aspect is that the website repeatedly cites the U.S. as the storage location for data, backups, and servers. The website does not clearly guarantee general EU data residency for Elai-SaaS. There is no clear statement on the website that customer data, uploads, prompts, or outputs are not used to train general models. Relevant certifications such as ISO 27001 or SOC 2 are not listed on the website.
Server Location
The Security page states that “all data, including backups” is stored in data centers in the United States, operated by AWS and DigitalOcean, among others. However, in the DPA’s list of subprocessors, Amazon Web Services is listed as “United States or Ireland, as selected by the Customer and/or as set forth in the Agreement.” For Microsoft Azure, the United States is specified. Therefore, the website does not clearly indicate a uniform EU/EEA data residency.

Link

"Design websites faster with intelligent tools."

Framer is a visual, no-code website builder with CMS, hosting, SEO features, and real-time collaboration.

The AI features help with creating layouts, components, and translations; in addition, there is a plugin system for integrations with models like OpenAI, Anthropic, and Gemini. Framer is therefore particularly interesting for marketing websites, landing pages, portfolios, and multilingual websites.Framer

Design websites faster with intelligent tools

7.4/10 Good
Free For non-commercial use, design experiments, Framer subdomain, CMS testing, limited uploads, and collaboration with a few editors. Subscription Basic For personal, hobby, and side projects; custom domain and website publishing without free-tier limitations.

Pro For professionals, small teams, agencies, and startups; more capacity, use of team/marketing stacks, and professional website operation.

Scale For growing companies with flexible, usage-based scaling, higher limits, and add-ons. Other Enterprise Custom contracts, SLAs, enhanced security, direct engineering support, bulk pricing, and enterprise support.

Add-ons Extensions for CMS items, collections, bandwidth, pages, events, and additional enterprise/scale features.
– (0)

Link

GDPR: Partly Framer documents a GDPR-compliant legal basis for data processing in the EU/EEA context via a Data Processing Addendum with SCCs and describes security measures and certifications. At the same time, the website lists AWS data centers in the United States as the hosting location for all services. The website does not specify an EU data residency or an EU/EEA hosting option. Additionally, according to the AI Notice, inputs and outputs from non-enterprise customers are used in de-identified form to train Framer’s AI models. For use within Europe, Framer cannot therefore be generally considered fully GDPR-compliant, but only under certain conditions—specifically, following a DPA/SCC review and depending on the pricing plan or the decision to opt out of certain AI features.
Positive
The website includes a privacy policy, a Data Processing Agreement (DPA) based on Article 28 with reference to Standard Contractual Clauses (SCCs) for transfers to third countries, a list of subprocessors, and security information. Framer also cites ISO 27001:2022 and SOC 2 Type 2. For enterprise customers, the AI Notice states that inputs and outputs are not used for training Framer AI models.
Negative
The website lists AWS facilities in the United States as the hosting location for all Framer services. The website does not specify an EU data residency, EU data centers, or an EU-only hosting option. For non-enterprise customers, the AI Notice permits the use of inputs and outputs in de-identified form for training Framer AI models. The website does not provide for an on-premises or true self-hosting option.
Server Location
According to the security page, all Framer services are hosted in AWS facilities in the United States. AWS is also listed in the subprocessor list with “Territories: United States.” An EU/EEA data center location for the service itself is not specified on the website.

Link

"The music you've been searching for, generated in seconds."

Mubert is an AI music tool for generating, licensing, and integrating royalty-free music. Publicly visible offerings include Mubert Render for creators, Mubert API for apps, games, AI agents, and content platforms, as well as Mubert Studio for musicians who contribute material.

The focus is less on classic song releases and more on legally compliant background music for videos, streams, podcasts, apps, and UGC workflows.Mubert

The music you've been searching for, generated in seconds

3.2/10 Insufficient
Free Free entry point for generating initial tracks; suitable for testing and for simple/private use with limitations. Subscription Subscription model for recurring use of Mubert Render, royalty-free Music Catalog, and generated tracks; exact plan names/features may vary by region/site. Other Perpetual License One-time licensing of individual tracks or permanent use according to the license terms.

Mubert API API access for products, apps, and platforms with generative music; Mubert mentions plannable generation tiers and custom terms/limits via Sales.

Mubert Business / Streamers / Play Special usage options for public spaces, streaming, business contexts, and background music.
– (0)

Link

GDPR: Unclear The website includes a privacy policy that describes fundamental data subject rights, such as the right to access and the right to erasure. However, for a robust assessment of GDPR compliance within the EU/EEA, the website lacks essential evidence, particularly regarding EU data residency, server locations/data centers, data processing agreements (DPAs), subprocessors, international data transfer mechanisms, and a clear prohibition on the use of customer data for model training. Therefore, compliance across the entire European region cannot be reliably demonstrated based on the website alone.
Positive
A privacy policy is available on the website; there, Mubert lists data subjects’ rights, such as the right to export stored personal data and the right to erasure. Furthermore, Mubert is clearly identified as a U.S. company, and there are product-specific privacy policy notices.
Negative
The website does not specify a Data Processing Agreement (DPA) for business customers, a list of subprocessors, EU/EEA data residency, specific server or data center locations, Standard Contractual Clauses (SCCs) or transfer details for EU data transfers, on-premises/self-hosting options, open-source components, a clear opt-out from AI training using user inputs or uploads, or relevant certifications such as ISO 27001 or SOC 2.
Server Location
Not specified on the website. The privacy policy lists Mubert Inc. as a company based in the U.S., but does not specify any specific server or data center locations within or outside the EU/EEA.

Link

“The #1 framework for AI-generated electronics.”

tscircuit is an open-source, code-based EDA framework that allows you to describe schematics and PCBs in React and TypeScript. From the code, the system generates schematic, PCB, 3D, and manufacturing views, among other things. AI assistants can interpret requirements, search for components, and generate the necessary tscircuit code.tscircuit

The #1 framework for AI-generated music

3.6/10 Insufficient
Free The core is open-source under the MIT license and can be used locally via the CLI or as a TypeScript/React framework. This enables full-fledged circuit design, PCB layout, simulation, and export workflows. Other PCB Hosting and Ordering Service Hosting and ordering of printed circuit boards, circuit modules, schematics, 3D models, and other electronics assets.

Private Registry Use of a custom npm-compatible registry for internal components, files, and team collaboration.

External AI Providers AI requests can be processed via OpenAI and Anthropic; potential costs and quotas depend on the specific integration.
– (0)

Link

GDPR: Unclear For the European region (EU/EEA), the website contains references to data protection rights under the GDPR and EEA relevance, but key evidence for a reliable assessment of the practical GDPR compliance of the entire service is missing. In particular, the website does not document a server location, EU data residency, a DPA/AVV, a subprocessor list, or reliable information on international data transfers. A positive aspect is that tscircuit can also be used locally via CLI and is presented as an open-source MIT project; however, the website does not specifically describe whether this is sufficient for straightforward, fully GDPR-compliant use in the EU/EEA.
Positive
The website has a privacy policy with references to rights for persons in the EEA as well as an explanation of legal bases under the GDPR. In addition, the website describes tscircuit as open source under the MIT license and mentions local use via the CLI; furthermore, a private registry model is mentioned.
Negative
The website does not specify a DPA/AVV, subprocessors, EU data residency, specific server or data center locations, SCCs or other transfer mechanisms, certifications such as ISO 27001 or SOC 2, or an explicit statement that content is not used to train general AI models. In the terms of use, the provider is based in California, USA.
Server location
Not specified on the website. The website names tscircuit Inc. as a company in San Francisco, California, USA, but provides no specific server or data center location and no EU/EEA data residency.

Link

“Create custom, responsive websites with the power of code — visually.”

Webflow is a visual platform for creating, managing, and hosting websites and web-based experiences.

Its features include, among other things, a visual builder, CMS, hosting, collaboration, APIs, localization, Analyze/Optimize, as well as Webflow AI for site generation, copy, CMS content, and SEO/AEO support. For classification as an “AI tool,” it is important to note: AI is a growing part of the product, but not its sole core.Webflow

Build, manage, optimize — all with Webflow AI

7.3/10 Good
Free Free entry point for building and testing Webflow projects with a Webflow subdomain. Subscription Basic For simple websites with their own domain and no CMS focus.

CMS For blogs, content websites, and dynamic content with CMS features.

Business For larger marketing and business websites with higher capacity and more traffic.

Standard / Plus / Advanced For online stores with increasing e-commerce features and capacities.

Starter / Core / Growth / Freelancer / Agency Workspace plans for individuals, teams, freelancers, and agencies with collaboration, roles, and client access. Other Enterprise Custom Enterprise offering with advanced security, support, governance, and scalability features.

Webflow AI AI Site Builder and AI Assistant for website creation, pages, CMS Collection Items, SEO/AEO, and help in the Editor.
– (0)

Link

GDPR: Partly Webflow documents several important building blocks for GDPR-compliant use for customers in the EU/EEA region: a privacy policy, a Data Processing Addendum as a data processing agreement, a subprocessor list, standard contractual clauses in the DPA, certifications, as well as statements that customer data is not used to train generative AI models. At the same time, Webflow explicitly states the storage of customer and end-user data in the USA and refers to data transfers to the USA or other countries. Explicit EU data residency or clearly documented EU/EEA hosting as a standard or simple option is not specified on the website. For the EU/EEA as a whole, use is therefore only viable under certain conditions and following the user's own legal review, not as clearly and comprehensively demonstrated standard compliance.
Positive
Positively documented are a DPA/data processing agreement, the inclusion of the EU Standard Contractual Clauses and the UK transfer mechanism in the DPA, a published subprocessor list, contractual obligations toward subprocessors, statements excluding AI training on customer data, as well as certifications such as SOC 2 Type II, ISO 27001, ISO 27017, and ISO 27018.
Negative
Negative from an EU/EEA perspective is above all that Webflow itself states that it stores customer and end-user data in the USA, and that the website does not indicate clear EU data residency, no exclusive EU/EEA data center for SaaS use, and no on-premise/self-hosting option. This means that a third-country transfer risk remains, and fully uncomplicated GDPR use is not demonstrated on the basis of the website.
Server location
The website states that Webflow stores customer and end-user data in the USA. The DPA additionally describes that the infrastructure is operated via ISO 27001-certified Amazon Web Services data centers in multiple regions and Availability Zones; however, specific EU/EEA server locations for customer data are not named. The subprocessor list lists the locations of individual subcontracted processors, including the USA, the United Kingdom, and Ireland.

Link

"Turn text into videos with AI voices"

Fliki is an AI video and voiceover tool that turns prompts, scripts, blog articles, and presentations into videos with AI voices, visuals, music, and subtitles. According to the provider, Fliki supports 2,000+ AI voices in 80+ languages, text-to-video, blog-to-video, PPT-to-video, AI Avatars, Voice Cloning, translation, screen recording, and auto-editing.Fliki

Turn text into videos with AI voices

7.5/10 Good
Free Free entry without a credit card; limited audio/video creation, 720p export, short export length, limited workflows, and restricted media/AI features. Subscription Standard For creators with more credits, 1080p videos, more voices, premium stock media, translation into 80+ languages, longer videos, Make/Zapier integration, limited avatars, voice cloning, AI Playground, YouTube publishing, and commercial rights.

Premium For professional teams and studios with significantly more credits, longer videos, multiple voice cloning/custom voice options, AI video clips, all AI avatars, brand kits, custom fonts, photo avatars, and priority support.

Enterprise Custom plan with custom credits, bulk discounts, higher quotas, invoiced billing, API access, personalized avatars, professional voice cloning, custom templates, dedicated account manager, and team collaboration. Other Credits Fliki uses a credit system; credit consumption depends, among other things, on video length, media source, AI Avatar, and AI Video Clips.

Integrations / API Make and Zapier integration in Standard/Premium; API access is officially mentioned in the Enterprise plan.
– (0)

Link

GDPR: Partly For the EU/EEA region, GDPR-compliant use, based on the information provided on the website, can only be substantiated to a limited extent. Positive aspects include references to an Enterprise DPA, EU data residency options, and statements that content will not be used for training without explicit consent. However, a negative aspect is that the general privacy policy states that the servers and central databases are located in the U.S. and does not provide evidence of general, standard EU data residency for all pricing plans. Therefore, no clear and comprehensive GDPR compliance is documented for standard SaaS usage; a viable approach appears to lie more in utilizing enterprise features with a DPA and EU data residency.
Positive
The website includes references to a data processing agreement for Enterprise plans, data residency options in the “US, EU,’ SOC 2 Type II certification for Enterprise, and a statement that uploaded scripts, voice recordings, and exported videos will not be used to train AI models without explicit consent. Consent and withdrawal rights are also mentioned in connection with voice cloning.
Negative
The privacy policy lists the U.S. as a location where information may be transferred, stored, or processed, and states that servers or central databases are located in the U.S. A public subpage listing subprocessors was not provided on the website. A generally available DPA page for all customers, a default EU data residency for regular SaaS use, and on-premises/self-hosting options were not specified on the website.
Server Location
The privacy policy states that information may be transferred to, stored, or processed in the U.S. when accessed from outside the U.S., and that servers or central databases are located in the U.S. Additionally, data residency options in “US, EU” are mentioned on Enterprise subpages. No specific EU/EEA data center or country is specified on the website.

Link

“The Creator-First Generative AI Platform”

Leonardo.AI is a generative AI platform for image, video, design, and motion workflows.

Officially, the product is positioned for creating high-quality visuals from prompts or reference images, for precise editing, upscaling, as well as for API-powered production workflows. The platform also offers team collaboration and developer access via API.Leonardo.AI

The Creator-First Generative AI Platform

7.0/10 Good
Free Free entry with daily renewed Fast Tokens, image generation, video generation, Flow State, limited Blueprints, limited Realtime Canvas, Realtime Generation, Presets, Elements, platform models, and third-party models. Subscription Essential For daily hobby use and enthusiasts; includes monthly Fast Tokens, Token Bank, private generations, presets, Enhanced Quality, unlimited personal collections, personal AI models, simultaneous generations, and top-up tokens.

Subscription Premium For semi-professionals and active creators; includes more monthly Fast Tokens, a larger Token Bank, private generations, Enhanced Quality, unlimited collections, more personal AI models, higher parallelization, queue, top-up tokens, and unlimited Relaxed Image Generation for selected models.

Subscription Ultimate For professional creators, small businesses, and content producers; includes significantly more monthly Fast Tokens, a larger Token Bank, private generations, Enhanced Quality, many personal AI models, higher parallelization, a larger queue, top-up tokens, as well as unlimited Relaxed Image and Video Generation for selected models.

Subscription / Team Starter Team plan with Shared Tokens, Bank Capacity, Fast Tokens per seat, private team generations, team token usage for model training, unlimited collections, unlimited Realtime Canvas and Realtime Generation actions, Enhanced Quality, and team workflow features.

Subscription / Team Growth Advanced team plan with more Shared Tokens, higher Bank Capacity, more Fast Tokens per seat, private team generations, model training with Team Tokens, unlimited collections, unlimited Realtime actions, and Enhanced Quality. Other Custom Plan Individually tailored plan for larger workflows; includes custom Fast Tokens per seat, all Starter and Growth features, as well as bespoke requirements.

Pay as you go / API Usage-based API option with no long-term commitment, automatic top-ups, access to the latest models, and parallel generations.

API Custom For higher production volumes and long-term scaling; includes custom limits for parallel generations, model-based discounts, and dedicated support for production deployments.
– (0)

Link

GDPR: Partly For the EU/EEA region, GDPR-compliant use is partially documented but not fully guaranteed. Positive aspects include a published privacy policy with a European focus, a Data Processing Addendum with SCCs, an EEA representative in Ireland, and a list of subprocessors. However, a negative aspect is that the website itself mentions data storage in the U.S. and processing in Australia and other countries, lists AWS as its hosting provider in the U.S., and does not guarantee EU data residency. Additionally, according to the privacy policy, Leonardo.Ai reserves the right to use content and account data to improve the service and to train algorithms and AI products. Thus, GDPR-compliant use within the EU/EEA appears possible only under certain conditions and following a detailed case-by-case review, rather than as a clearly established standard practice.
Positive
The website includes a privacy policy, a Data Processing Addendum with standard contractual clauses for limited third-country transfers, information on data subject rights, an EEA representative in Ireland, and a published list of subprocessors. For multi-user/team setups, the DPA describes processing as a data processor in accordance with documented customer instructions.
Negative
The website lists the U.S. as the standard storage location and Australia and other countries as processing locations. The list of subprocessors includes several providers in the U.S. and Singapore; a binding EU/EEA data residency is not specified. In addition, the privacy policy states that content and associated account data may be used to improve the service and to train algorithms, models, and AI products. A clear, general opt-out option for AI training is not provided on the website.
Server Location
According to the privacy policy, information is stored in the United States and processed in Australia and other countries. The DPA names AWS as the hosting and infrastructure provider and lists AWS, headquartered in the United States, in the list of subprocessors. The website does not specify a specific EU/EEA server location or EU data residency.

Link

“Smarter business planning, powered by purpose-built AI”

LivePlan is a cloud-based software solution for business plans, financial forecasts, pitch presentations, and ongoing business management.

The AI helps with writing plan sections, rewriting texts, suggesting forecasts, validating ideas, and conducting market-related research. In addition, LivePlan offers integrations with QuickBooks Online and Xero, as well as dashboards for comparing forecasts with actual data.LivePLan

Smarter business planning, powered by purpose-built AI

7.3/10 Good
Subscription Standard Write a business plan, collaborate with others, download and print the plan; suitable for classic business planning and simple financial planning.

Premium Everything in Standard plus multiple forecast scenarios, QuickBooks Online and Xero integration, Actual Results Dashboard, automated Forecast Builder, Monthly Review, and Actuals + Forecast. Other LivePlan Coach / Expert Additional offering with personal video support, priority support, and individual guidance for planning and use.

Consultant / Strategic Advisor Use Training and resources for consultants, startup centers, and strategic advisors.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use is only plausible if it is properly documented. Positive aspects include a dedicated privacy policy, an available DPA/AVV, explicit references to the GDPR, provisions regarding international data transfers via standard contractual clauses, and statements that AI inputs are not used to train the models. At the same time, the website does not specify a concrete EU/EEA server location, EU data residency, or any on-premises/self-hosting option. Furthermore, the DPA page links to an external Palo Alto domain for the list of subprocessors rather than to a subpage of liveplan.com; thus, no complete list of subprocessors is documented on the domain evaluated here.
Positive
A privacy policy, a DPA/AVV referencing the GDPR, and documented processing in accordance with customer instructions are in place. The Terms of Service explicitly require a valid DPA for the processing of EU data. For EU data transfers, the website cites standard contractual clauses as a protective mechanism. Regarding AI functions, it is stated that transmitted data is not used as training data for AI models or processing services; additionally, there is an opt-in option for analyzing interactions to improve AI functions, which, according to the website, can be revoked at any time.
Negative
The website does not specify a specific server location in the EU/EEA. There is no documented EU data residency, no commitment to EU data centers, and no on-premises/self-hosting option. The security page lists AWS as the data center provider, but without specifying a region. For AI features, data is sent to third-party providers such as Anthropic, Google Gemini, and OpenAI; although the website states that the data is anonymized and not used for training, this still constitutes an additional processing chain from an EU/EEA perspective. A complete list of subprocessors is not provided on liveplan.com itself.
Server Location
AWS is listed as the data center provider. The website does not specify a specific location for the servers or data centers within the EU/EEA.

Link

"AI that creates content. And proves that it works."

neuroflash is a German audience intelligence and AI content platform for marketing, branding, and target group validation. The tool combines generative AI, ChatFlash, content creation, Brand Hub, PerformanceFlash, Digital Twins, image generation, web research, SEO features, API, and MCP. (neuroflash.com )Neuroflash

AI that creates content. And proves that it works

7.5/10 Good
Subscription Essential For teams that want to create AI content efficiently; includes Editor & ChatFlash, AI Images, PerformanceFlash, ResearchFlash, text models, image models, document editor, content templates, prompt templates, Flash Actions, Web Search, audience chat, SEO Research Mode, workflows, Brand Voice, Digital Twins, and Knowledge Assets to a limited extent.

Pro Advanced plan with more capacity, advanced models, a larger context window, more Digital Twins/audiences, advanced validation features, team features, as well as API and MCP access.

Enterprise Custom enterprise plan for organizations with unlimited or customized audiences, premium models, SSO, a dedicated Customer Success Manager, custom integrations, custom workflows, training, and consulting services. Other API / MCP neuroflash offers API and MCP access to integrate neuroflash into platforms and tools such as Claude, Cursor, and other work environments.

Custom Enterprise Services Customized agreements depending on the number of users, the scope of the Digital Twins, desired integrations, custom workflows, and consulting services.
– (0)

Link

GDPR: Partly The website lists several data protection and hosting features relevant for the EU/EEA area: neuroflash mentions servers in Germany or in the EU, refers to GDPR-compliant processing, states an ISO/IEC 27001:2022 certification, and explains that content is not used for training external models. At the same time, the privacy policy states that AI requests are processed in the EU and in the USA on servers of external providers. A publicly available AVV/DPA or a list of subprocessors could not be clearly found on the website. This makes GDPR-compliant use for EU/EEA users plausible, but based on the publicly accessible documentation, it can only be assessed with reservations.
Positive
Positive aspects include the information about servers in Germany or in the EU, the explicit GDPR focus, the ISO/IEC 27001:2022 certification, the note about encryption, and the statement that content is not used for training external models.
Negative
Negative or limiting is the fact that the privacy policy also mentions the processing of AI requests in the USA via external providers. In addition, no clearly linked public AVV/DPA was found on the website, nor a separate list of subprocessors, nor a clearly documented on-premise or self-hosting option.
Server location
According to the privacy policy, personal data is processed and/or stored in the EU on servers of Google Cloud Platform and at Raidboxes in Germany. For AI requests in the neuroflash app, the website states processing in the EU and in the USA on servers of external providers. Further specific data center locations or a complete list of providers are not provided on the website.

Link

"Trustworthy artificial intelligence that powers humanity towards superproductivity"

AI21 Labs is an Israeli provider of large language models and AI orchestration systems for enterprises. Its core product in the model space is the Jamba family, a hybrid SSM/Transformer model family for long contexts, RAG, question-answering systems, document processing, and secure enterprise deployments. In addition, with Maestro, AI21 offers a model-agnostic orchestration system for validated RAG agents and complex business tasks.AI21 Labs

LLM "Trustworthy artificial intelligence that powers humanity towards superproductivity"

7.2/10 Good
Free New accounts receive time-limited trial credits for AI21 Platform, APIs, SDK, and Playground. Truly usable for testing, prototyping, and evaluation; billing or a paid plan is required for continuous production use. Subscription Pay As You Go: usage-based access to Foundation Model APIs, SDK, and unlimited seats.

Custom Plan: includes pay-as-you-go features plus volume agreements, premium rate limits, private cloud hosting, priority support, a dedicated account manager, and AI consulting. No direct prices listed. Other AI21 uses token-based API billing, custom payment/enterprise plans, and cloud provider billing through partners such as AWS, Microsoft Azure, Google Cloud / Vertex AI Model Garden, or SageMaker/Bedrock. Additionally, self-deployment, fine-tuning, quantization, and custom AI systems are relevant, depending on the contract and infrastructure. No direct prices listed.
– (0)

Link

GDPR: Partly From the perspective of a user in the EU/EEA, it is not clearly demonstrated that AI21’s standard SaaS offering complies with the GDPR, because the website explicitly states that personal data is processed on servers outside the EEA, Switzerland, and the UK, including in the U.S. At the same time, however, AI21 describes private deployment options such as VPC and on-premises, as well as a DPA available upon request. Thus, GDPR-compliant use in the EU/EEA is conceivable only under certain conditions—specifically, with private deployment, appropriate contract terms, and the user’s own verification of the actual data residency in the specific setup.
Positive
The following aspects are confirmed: a published privacy policy; explicit GDPR-related transfer mechanisms such as SCCs, an adequacy decision, or a DPF in the privacy policy; a DPA/AVV template available upon request; private deployment options, including VPC and on-premises; statements that AI21 does not train models on customer content unless otherwise agreed in writing; and certifications or information regarding ISO 27001, ISO 27017, ISO 27018, SOC 2, and ISO 42001.
Negative
A major negative for standard EU/EEA operations is that AI21’s Privacy Policy mentions the processing of personal data on servers outside the EEA, including in the U.S. A specific EU/EEA server location for AI21’s own standard SaaS service is not specified on the website. No list of subprocessors was found on the website. An explicit, generally worded EU data residency commitment for the standard service was also not found on the website.
Server Location
The Privacy Policy states that personal data is processed on servers outside the EEA, Switzerland, and the UK, including in the U.S. Specific EU/EEA data center locations for standard SaaS usage are not specified on the website. The Deployment page merely lists data residency options such as “Single tenant,” “VPC,” and “On-premise,” but does not specify any specific countries or data centers within the EU/EEA.

Link

“EDA’s premier code-based, AI-driven PCB design tool.”

JITX is a code-based platform for the development and optimization of complex printed circuit boards, particularly high-frequency systems. Requirements are described in Python; AI can generate or revise the code. JITX uses this to generate schematics and layouts, employs routing and optimization methods, and can initiate and evaluate electromagnetic simulations using Ansys HFSS.JTIX

Software-defined electronics

3.5/10 Insufficient
Free Permanent free access to designs under the CERN OHL Permissive License; unlimited design complexity, routine automation, technical design checks, and component optimization. Other Enterprise Locally hosted platform for proprietary designs, choice of design license, PLM integration, KiCad, Altium, and Siemens Expedition connectivity, air gap, and dedicated support.

Trial / Demo / Training Customized demonstrations, trial accounts, and training programs.

Consulting Consulting for automated hardware design and implementation of the JITX methodology.

Custom Development Custom development, company-specific design libraries, verification rules, and integrations.
– (0)

Link

GDPR: Unclear For the entire EU/EEA region, compliance with the GDPR as stated on the provider’s website is not sufficiently substantiated. On the positive side, according to the website, JITX can run on local hardware or the provider’s own infrastructure. At the same time, the privacy policy for the services mentions hosting and processing in the U.S. as well as transfers from Europe to the U.S. The website does not provide an AVV/DPA, EU data residency, specific EU/EEA data centers, a list of subprocessors, or an explicit exclusion of the use of customer data for AI training.
Positive
The website describes JITX as running locally or on the user’s own infrastructure: “Runs on your hardware,” “JITX runs on your local computer,” and “JITX runs on your infrastructure with your approved AI.” In addition, the privacy policy lists European data subject rights and, regarding international transfers, refers to appropriate safeguards as well as the option to request contractual guarantees.
Negative
The privacy policy explicitly states that the services are hosted in the U.S. and that personal data from Europe is transferred to the U.S., among other destinations. For a robust GDPR assessment, the website lacks a Data Processing Agreement (DPA), information on EU/EEA data residency, specific data center locations in the EU/EEA, a list of sub-processors, a documented opt-out from AI training, and relevant certifications.
Server Location
According to the privacy policy, the services are hosted in the United States, and personal data is processed and stored in the United States. The website does not specify a specific EU/EEA server location or EU data residency.

Link

"Seeking the optimal conversion from energy to intelligence"

Moonshot AI is the provider behind Kimi, an LLM and agent platform focused on long contexts, coding, deep research, documents, spreadsheets, slides, web search, and multimodal processing. The Kimi API offers models such as Kimi K2.6, K2.5, K2, and Moonshot-v1.Moonshot AI

LLM “Seeking the optimal conversion from energy to intelligence”

3.9/10 Insufficient
Other Pay-as-you-go API Flexible, usage-based billing according to input and output tokens, model selection, and, where applicable, document/tool usage; suitable for developers and small teams.

Kimi K2.6 / K2.5 / K2 / Moonshot V1 Model families for multimodal or text-based tasks, long context, coding, agents, reasoning, and dialogue tasks.

Enterprise Solutions & Customization For medium-sized and large companies with flexible rate limits, multi-project deployments, support, SLA-oriented reliability, and individual agreements according to the platform page.
– (0)

Link

GDPR: Unclear Although the specified domain https://platform.moonshot.ai/ contains references to data protection and compliance, the information essential for a robust GDPR assessment throughout the EU/EEA is either missing or cannot be found on this domain. In particular, the website does not specify: the specific server location or data center location, EU/EEA data residency, subprocessors, the Data Processing Agreement (DPA), the option to opt out of model training, or relevant certifications. Since only information from this domain may be taken into account, overall compliance cannot be reliably verified.
Positive
The website provides links to a privacy policy and terms of use. Additionally, the homepage for enterprise offerings mentions “data compliance and privacy protections.” There is also an open-source/locally-based approach via documented integrations with OpenClaw, as well as references to open-source components such as Kimi CLI and MoonPalace.
Negative
The website does not specify an EU/EEA server location, EU data residency, a Data Processing Agreement (DPA), a list of subprocessors, a contractual exclusion of training with customer data, on-premises or true self-hosting options for the models themselves, or ISO 27001, SOC 2, or comparable certifications. Additionally, the domain redirects to content on a different domain; since only the specified domain may be evaluated, the documentation on the target domain itself remains incomplete.
Server Location
Not specified on the website. No specific location of servers or data centers within the EU/EEA or outside the EU/EEA can be found on the specified domain.

Link

"The first no-design creation software"

Mate is a web-based content creation software for on-brand images, graphics, animations, videos, social media assets, performance marketing creatives, and website visuals. The platform is aimed at teams that want to create content in corporate design without any design skills. AI features include Brand AI, AI Onboarding, AI Templates, AI Caption, AI Pictures, as well as AI Posts & Templates.Mate Studio

Create agency-level visuals in less than 60 seconds with AI

7.3/10 Good
Subscription Free trial / Demo
Trial option without a credit card as well as regular live demos; no permanently free production plan publicly listed.

Basic Entry-level plan with AI credits, asset storage, stock assets from Unsplash and Pexels, social media integrations, and email support.

Pro For small teams; includes Basic features plus more AI credits, more asset storage, video and audio features, custom font, multiple color schemes, scheduled social media posts, and bookable add-ons.

Business For power users and growing teams; includes Pro features plus more storage, unlimited color schemes, DAM and publishing tool integrations, full role management, approval workflow, and priority support.

Enterprise Custom offering for large teams, multiple brands, and international locations; includes Business features plus custom digital and print templates, multiple brandings, dedicated account manager, SSO, and enterprise service package. Other Add-ons Service packages, integrations, SSO options, enterprise services, and custom templates.

AI Credits Monthly AI credits depending on the plan; exact quotas vary by plan.
– (0)

Link

GDPR: Partly The website documents several data protection and hosting aspects relevant for the EU/EEA region: Mate describes itself as GDPR-compliant, offers an AVV/DPA upon request, and states hosting on AWS in European regions. This is positive for use in the EU/EEA. However, the documentation published on the website is not sufficient for a fully clear classification as 'yes', because key points are only available indirectly or only upon request: specific EU data center countries are not named, the list of subprocessors is not publicly viewable, an explicit exclusion of training with customer data is not stated on the website, and certifications such as ISO 27001 or SOC 2 are not mentioned on the website.
Positive
Positively documented are: Privacy policy available, AVV/DPA available upon request, Hosting via AWS in European regions, AES-256 encryption for data at rest as well as an external penetration test, which can be shared under NDA. In addition, Mate positions itself as a 'One European Creation platform' and 'Built with ❤️ in Europe'.
Negative
Negative or limiting is that the website states no specific server location within the EU/EEA, provides no publicly viewable subprocessor list, mentions no explicit opt-out or contractual exclusion of AI training with customer data, describes no on-prem/self-hosting option, and states no relevant certifications such as ISO 27001 or SOC 2 on the website.
Server location
The Security page states that Mate's entire infrastructure runs on Amazon AWS and is 'hosted in European regions'. A specific country or specific data center in the EU/EEA is not stated on the website.

Link

“Launch your dream site in seconds”

Hostinger Website Builder is a no-code website builder with integrated hosting, a domain/SSL bundle, templates, marketing features, and several AI tools.

Users can create websites via drag-and-drop or with an AI prompt and then customize them for portfolios, company websites, blogs, or small to medium-sized online stores. Particularly relevant are the integrated AI features for text, images, logos, blog posts, product descriptions, and SEO.Hostinger

Build anything with AI from a personal site to an advanced web app – no coding needed

7.2/10 Good
Subscription Premium For small businesses, appointment pages, and professional presentations; includes AI Website Builder, Hostinger Horizons Credits, a free domain in the first year, email inboxes, hosting, and security features.

Business Website Builder For websites and online stores; includes AI tools, e-commerce features, domain, SSL, email, multiple websites, Vibe-Coding/Horizons Credits, SEO, marketing, and email campaign features.

Web Hosting / WordPress / Cloud / VPS Alternative hosting plans for users who need WordPress, their own code, cloud resources, or VPS control. Other Hostinger Horizons AI-powered prompt-based web app/website builder with credits, depending on the plan.

Domains, Email, CDN, Agency Hosting, API Additional products and extensions related to hosting, domain management, email, performance, and developer access.
– (0)

Link

GDPR: Partly Hostinger documents its GDPR compliance on its own website, explicitly refers to processing in accordance with the GDPR, provides a Data Processing Agreement (DPA) for its Website Builder, and offers multiple data center locations within the EU for its standard hosting plans. However, according to the help page, the server location for the specifically mentioned Hostinger Website Builder is fixed for primary files and cannot be selected as an EU data residency; additionally, assets are delivered via a global Cloudflare CDN. Furthermore, the privacy policy explicitly mentions possible transfers to third countries outside the EU/EEA. From an EU/EEA perspective, GDPR-compliant use is therefore only possible under certain conditions and upon review of the specific data flow; full compliance is not clearly demonstrated.
Positive
The website includes a privacy policy with explicit reference to the GDPR, an AVV/DPA for the website builder as a “Covered Service,” information on Standard Contractual Clauses (SCCs) for transfers to third countries, multiple EU server locations for hosting plans, and a statement that conversations with Hostinger AI Agents are not used for training or fine-tuning AI models. Hostinger also states that it is ISO/IEC 27001-compliant.
Negative
For the Hostinger Website Builder, the website does not specify a specific, selectable EU server location for primary data; instead, it states that primary files are stored at a fixed location and assets are delivered via a global CDN with over 330 locations. The privacy policy also states that some servers may be located outside the EU/EEA, such as in the U.S., Brazil, Singapore, and Indonesia. A dedicated subpage with a clear list of subprocessors was not found on the website.
Server Location
For general web and cloud hosting plans, Hostinger lists EU locations in France, Germany, Lithuania, the Netherlands, and the United Kingdom; these can be selected according to the help page. However, for the specific Hostinger Website Builder under consideration, the policy only states that primary files are stored at a fixed location and that assets are delivered worldwide via the Cloudflare CDN. A specific EU/EEA primary location for the Website Builder is not specified on the website.

Link

“AI Companion API for Chat, Image, Video and…” / “One integration, intelligent routing, transparent billing.”

ModelRush is a unified API platform for text, image, video, audio, and voice models. Developers can access multiple models and capabilities through an OpenAI-compatible endpoint, including chat completions, image generation/editing, video generation, speech, transcription, private uploads, and webhooks.ModelRush

One integration, intelligent routing, transparent billing

6.6/10 Solid
Free Agent Basic Trial Limited-time trial of the Agent Basic plan; card required and automatic renewal after the trial period unless canceled. (modelrush.ai) Subscription Agent Basic Personal agent with a monthly runtime allowance, workspace file storage, media storage, and outgoing bandwidth allowance.

Agent Pro Higher runtime, workspace, media, and bandwidth allowance for more intensive agent use.

Agent Max Largest agent plan with unlimited monthly runtime and expanded file, media, and bandwidth allowance. Other Model API Usage Model calls are not included in the agent membership and are billed separately via prepaid credits based on actual usage.

Prepaid Credits Credit packages for API usage, model calls, media generation, and agent workflows.

Chat Completions API OpenAI-compatible chat interface for synchronous or streaming text responses. (modelrush.ai)

Image / Video / Audio APIs Image generation, image editing, video generation, text-to-speech, audio transcription, uploads, webhooks, and prediction queries.

Enterprise Zero Data Retention Only for compatible routes and only with a written Enterprise agreement or DPA; Customer Content is then not intentionally persistently stored in active memory.
– (0)

Link

GDPR: Partly The website documents several privacy-relevant components for use within the EU/EEA: ModelRush describes a privacy policy, the role as a processor for customer content, data deletion, retention periods, as well as a data processing agreement in the enterprise context. At the same time, the website shows that content may be transmitted to third-party providers depending on the selected model and region, and that international transfers outside the EU/EEA may occur. A clear, generally valid proof of EU/EEA-exclusive processing or a blanket EU data residency commitment for the entire service is not stated on the website. For EU/EEA users, GDPR-compliant use therefore appears possible only under conditions, for example through careful model/region selection and, if applicable, a written enterprise agreement for Zero Data Retention or stronger commitments.
Positive
Positive aspects include the published privacy policy, the explicit processor/service provider role for customer content, references to data processing agreements, deletion and retention rules, as well as the statement that ModelRush does not use customer content to train its own models unless an explicit opt-in has occurred. In addition, the documentation refers to regions, regional availability, and Enterprise Zero Data Retention by written agreement.
Negative
Negative or limiting is that, according to the website, customer content is shared with selected model providers and their logging, retention, and training may vary depending on the model, region, plan, and route. The website also states that ModelRush and its service providers may process information outside the user's country and use Standard Contractual Clauses or other mechanisms for this purpose. A specific EU/EEA server location for the overall service, a published subprocessor list, and a clear general EU data residency commitment are not stated on the website.
Server location
No general central server/data center location for ModelRush is stated on the website. Instead, the website shows region-dependent execution depending on the model. On the pricing page, for example, execution regions such as 'us-virginia' and 'cn-beijing' are visible; the API documentation mentions region support without guaranteeing general EU/EEA data residency on the pages found. EU/EEA data centers are not specifically evidenced on the pages found.

Link