KIFOX - The Search Portal for AI Applications ?

KIFOX is a portal for AI tools and LLMs.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a rating as well as share their experience with an AI application, and can switch directly to the provider via a further link.

KIFOX is not an online shop, but a comparison and information portal for AI applications.

ⓘ“Ask me anything. It’s confidential.” - “The AI that respects your privacy”

Lumo is an AI assistant from Proton with a focus on confidentiality, no-logs, and zero-access encryption.

The tool supports, among other things, research, writing, translations, file analysis, coding assistance, and optional web search; in addition, there are Projects as well as integration with Proton Drive. Proton positions Lumo as a European, privacy-focused alternative to common AI chats.Lumo

Ask me anything. It’s confidential

Files, Privacy, No Training, No Logs, Open Source, Private AI Chat, Proton, Research, Writing, Encryption, ZeroAccess, Summary

Free Free use with limited access; even without an account, a chat can be started with restricted access. Subscription Lumo Plus Unlimited chats, extended chat history, unlimited encrypted chat history, search and favorites for previous chats, Ghost Mode, and uploading multiple or large files.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: From a GDPR perspective, Lumo is well suited for private and privacy-conscious use.

Positive is that Proton positions Lumo as a European service subject to the GDPR, which does not use chats for training purposes, keeps no logs of questions and answers, and protects stored chats with zero-access encryption. According to Proton, Lumo is also open source, making the code verifiable.

Negative is that Lumo is not primarily positioned as an enterprise platform with a publicly clearly documented DPA/AVV, tenant management, SSO, audit logs, or EU corporate governance.

Server location: Officially described as a European service; a specific data center location is not documented in detail on the official Lumo pages as a binding server region. Further link: Lumo product page, Lumo help, and Proton blog.

Data

Privacy Policy

Link

ⓘ"Your AI team that's there for you around the clock."

Notion AI is the AI integrated into Notion for knowledge work, research, writing, search, and automation.

The system can use content from your own workspace, connected apps, and in some cases the web to create texts, build pages and databases, generate meeting notes, analyze PDFs/images, and automate tasks with agents.Notion AI

AI for knowledge work, research, writing, search, and automation.

Agents, Tasks, Databases, Integrations, AI assistant, Notes, Projects, Writing, SSO, Search, Team Wiki, Knowledge Management, Summary

Free For individuals and personal projects; unlimited pages/blocks for solo use, basic organization, and limited team/upload features. Subscription Plus Plan For small teams; more collaboration, more guests, longer version history, and larger uploads; available for students/educators under certain conditions.

Business Plan For businesses; includes unlimited Notion AI usage, Advanced Integrations, and advanced team features. Other Enterprise Plan For larger organizations with Notion AI, SSO, SCIM, audit logs, advanced admin/security controls, and data residency options.

Notion AI / AI Agents / Ask Notion AI features are integrated or expanded depending on the plan; Enterprise offers stronger privacy and governance controls.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Notion AI is conditionally to well suited, especially in the Enterprise plan.

Positive is that Notion states it has a privacy and security program with DPA, GDPR alignment, SOC 2 Type 2, ISO 27001, ISO 27701, ISO 27017, and ISO 27018. For Notion AI, Notion states that Notion and AI subprocessors do not use customer data to train models by default and that AI subprocessors are contractually prohibited from using customer data for training. According to Notion, Enterprise workspaces use zero data retention with LLM providers; for non-Enterprise workspaces, LLM providers may retain customer data for up to 30 days or less.

Negative is that standard hosting remains in the USA unless Enterprise Data Residency is enabled, and Data Residency only applies to certain data types at rest; account, billing, usage, analytics, calendar/mail, and beta data may be processed or stored outside the selected region.

Server location: USA by default; Enterprise Data Residency can use, among others, EU-Central-1 Frankfurt with backup in EU-West-1 Ireland.

Notion AI security & privacy practices Data residency for Notion Security & privacy

Link

ⓘ“Automate your work.”

Make is a visual no-code/low-code automation platform for integrations, workflows, and increasingly also agentic AI processes.

Companies can use it to connect data and actions across 3,000+ apps, automate API-based processes, and incorporate AI features such as AI Agents, AI Toolkit, AI Content Extractor, AI Web Search, and MCP servers into scenarios. The product addresses both simple app automations and more complex enterprise workflows with team, governance, and hybrid connectivity.Make

Automate your work

API, Apps, Automation, Credits, Data Synchronization, Filters, AI Agents, Logs, No-Code, Router, Scenarios, Team Roles, Templates, Webhooks

Free Monthly credits, visual no-code workflow builder, 3,000+ apps, router & filter, support, and a longer minimum interval. Subscription Core Everything in Free plus unlimited active scenarios, more granular scheduling, higher data limits, and the Make API.

Pro Everything in Core plus Priority Scenario Execution, Custom Variables, and Full-Text Execution Log Search.

Teams Everything in Pro plus Teams, team roles, and sharing of scenario templates. Other Enterprise Custom Functions Support, Enterprise App Integrations, 24/7 Enterprise Support, Value Engineering, Overage Protection, and Advanced Security.

Credits / AI Agents Credit-based usage for scenarios and AI automation; scope of features varies by plan.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Make is conditionally to well suited, especially for European companies, if a DPA and an appropriate data region are used.

Positive is that Make provides a Privacy & GDPR page, a Data Processing Agreement, subprocessors/SCC documents, as well as SOC 2 Type II and SOC 3. Also positive is the European provider/Celonis connection and the ability to control automations very closely.

Negative is that, depending on the connected apps, modules, AI providers, and third parties, data may be transferred to additional systems; for AI functions, the respective model providers must also be reviewed separately.

Server location: Make does not publicly state in all sources a clear blanket server location for all accounts; Enterprise/regions/subprocessors should be checked specifically. Further link: Make Privacy & GDPR, Security, DPA.

Privacy & GDPR

Link

ⓘ“Where go-to-market teams go to grow”

HubSpot is an integrated customer platform with Smart CRM, Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub, as well as Breeze as an embedded AI layer.

The platform combines customer, sales, marketing, service, and content processes in one system. AI features support, among other things, content creation, prospecting, data preparation, support automation, and analytics.HubSpot

Where go-to-market teams go to grow

Automation, Breeze-AI, Content, CRM, Data Hub, Deals, Email, Integrations, Contacts, Landing pages, Marketing, Reporting, Sales, Service

Free Free basic features for CRM, contacts, deals, forms, email tools, and getting started with HubSpot. Subscription Starter Customer Platform Starter features across core HubSpot products for small businesses and startups.

Professional Hubs Advanced automation, reporting, campaign, sales, service, or content features by hub.

Enterprise Hubs Advanced scaling, governance, security, reporting, permissions, and enterprise features. Other HubSpot Hubs Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Commerce Hub; scope of features varies by hub and tier.

Add-ons / Breeze AI Additional seats, limits, AI/Breeze features, integrations, and enterprise options depending on the contract.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, HubSpot is conditionally to well suited, especially with EU data hosting, a DPA, and proper configuration.

Positive is that HubSpot provides a Data Processing Agreement and that new or migrated customers can host data in an EU data center in Frankfurt. HubSpot states that product infrastructure is operated on AWS in the USA, Canada, Australia, and the EU/Germany, and that customer data is stored and processed in the respective account data center. It is also positive that AI model training settings can be configured at the account level.

Negative is that external integrations, tracking code, marketing/analytics functions, AI functions, and third-party apps can create additional data flows.

Server location: Depending on the account data center: USA, Canada, Australia, or EU/Germany; EU hosting in Frankfurt possible. Further link: HubSpot DPA, Cloud Infrastructure, AI Settings.

Legal Center

Link

ⓘThe frontier AI research lab for visual intelligence.

Black Forest Labs is the company behind the FLUX models for AI-based image generation and image editing. The platform includes Playground, API, open-weights/self-hosting licenses, and enterprise offerings for visual AI workflows. FLUX.2 is officially described as a production model for image generation and image editing with multi-reference control and up to 4MP output.Black Forest Labs / FLUX

The frontier AI research lab for visual intelligence.

API, Image editing, Image generation, FineTuning, FLUX, AI Images, LLM large language model flux, Brand assets, Product Visuals, Reference Images, Self-Hosting, Text-to-Image, Typography

Free Free or trial-based entry via the Playground; suitable for trying out FLUX.2 and image generation without your own integration. Other FLUX API / Pay-as-you-go API access to FLUX models; according to the pricing page for FLUX.2, FLUX Kontext, and additional image models with usage-based billing.

FLUX.2 [small] Fastest model variant for real-time use, prototyping, rapid iteration, and high speed; according to the model page also runnable locally and fine-tuning-ready.

FLUX.2 [pro] Production-oriented image generation and image editing with high quality and scalability.

FLUX.2 [flex] Variant for precise control, typography, small details, and finer visual control.

FLUX.2 [max] Highest-quality variant with particularly strong prompt adherence, editing consistency, professional output, and grounding features.

Self-Hosted Commercial License License for downloading, hosting, and using certain FLUX-[dev] models in your own applications; API resale or third-party API access is excluded without the corresponding rights.

Enterprise / Custom Deployment Custom enterprise options with dedicated infrastructure, custom fine-tuning, and integration support.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Black Forest Labs is conditionally suitable.

Positive is that the official German company BFL GmbH, based in Freiburg im Breisgau, is listed in the legal notice and that Black Forest Labs states ISO 27001 in the official footer. Another positive aspect is that there is a self-hosting path with FLUX-[dev] models, under which certain models can be downloaded under a commercial license, hosted, and integrated into your own applications.

Negative is that the Privacy Policy refers to the services of Black Forest Labs Inc. and, according to the Privacy Policy, prompts, image files, and outputs may be used for the provision, development, training, and improvement of the services or AI models. In addition, the FLUX API Service Terms expressly state that inputs and outputs may be used to improve the products and to train the AI models. I was unable to verify a publicly and clearly accessible AVV/DPA for standard API usage or a guaranteed EU-only data residency.

Server location: No guaranteed EU-only information is available for the Managed API / Playground; with self-hosting, the server location depends on your own infrastructure. Further sources: BFL legal notice, Privacy Policy, FLUX API Terms, Self-Hosted Terms.

Privacy Polic Usage Policy

Link

ⓘ“Leading partner for AI assistants for Swiss network operators and fiduciary firms”

Connect AI develops and operates tailor-made AI assistants for companies, primarily for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services. The core product, Employee GPT, is marketed as a secure alternative to ChatGPT/Copilot for companies that can be operated in Switzerland or the EU. The offering is complemented by AI rollout programs for executives, teams, and companies.Connect AI

AI assistants for businesses, especially for customer service, internal knowledge work, sales, and industry-specific scenarios such as fiduciary services

Chatbot, GDPR, EmployeeGPT, AI Assistants, SMEs, Customer service, No Training, Role Permissions, SalesAgent, SwissHosting, Support, TreuhandGPT, Knowledge Base

Subscription Employee GPT / Employee GPT Secure private ChatGPT alternative for companies; according to the provider, with internal knowledge sources, Swiss hosting, no training on customer data, role-based permissions, private container environments, and customer ownership of data, knowledge bases, and chat logs. The pricing logic is described in a blog post as a monthly fee per employee plus a one-time onboarding fee.

AI Customer Support AI agents, help center, personalized responses, knowledge library, analytics and reports, service quality, and multilingual 24/7 support.

Sales Agent Personal sales agent for customers, lead qualification, product recommendations, upselling/cross-selling, audience insights, analytics, and reduction of cart abandonment.

Event Agent / TreuhandGPT / AI Strategy Listed on the website as additional solutions; specific public details on plans and features are not fully verifiably available. Other Customer-specific implementation & operation The Terms and Conditions describe Connect-AI Services as the customer-specific implementation and operation of the Connect-AI platform; fees, packages, usage volume, and term are defined in the respective Agreement.

Onboarding / Consulting / Integrations According to the Employee-GPT blog, the pricing framework includes not only the platform and secure hosting but also training and personal support; specific terms are clarified on a project-by-project basis.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: From a data protection perspective, Connect AI is well suited to very well suited, especially for Swiss and European companies with high requirements for data sovereignty.

Positive is that Connect AI Group GmbH is based in Zurich, Switzerland, and in its privacy policy describes processing in accordance with applicable Swiss and European data protection requirements, including reference to GDPR/DSGVO. For Employee GPT, Connect AI highlights particularly strong data protection features: models hosted in Switzerland, no data transfer abroad, no sharing of data with third parties, no use of customer data for model training, role-based access rights, private container environments, and hosting with FINMA-certified partners such as Swisscom. In addition, according to the Employee GPT page, customers retain ownership of data, knowledge bases, and chat logs.

Negative is that the general privacy policy also mentions Google Cloud and HubSpot; electronic customer data is described there as being stored with Google Cloud, and HubSpot may store data, among other places, in the USA. In addition, the terms and conditions state that Connect AI may use third parties/subcontractors and that, unless otherwise agreed, the agents are operated using OpenAI technology via Microsoft Azure. For a robust GDPR/FADP assessment, the AVV/DPA, subprocessors, specifically selected hosting, model providers, deletion periods, and data flows should therefore be contractually reviewed for each project.

Server location: For Employee GPT, according to the provider, Switzerland; in general, the privacy policy mentions physical data in Switzerland & Europe as well as electronic data with Google Cloud.

Privacy Policy

Link

ⓘ"Language. Quality. Performance." as well as "The AI manufactory that writes in your voice."

newsrooms positions itself as an AI-powered content platform for high-quality communication.

According to the official description, the tool transforms sources into "publication-ready content," learns the writing style of users or the brand, and offers, among other things, Image Studio, File Processing, Research Agent, and Research Assistant, as well as focus areas such as SEO, GEO & GAIO. The platform is clearly aimed at professional content, PR, marketing, and editorial teams.Newsrooms

The AI manufactory that writes in your voice

2Click2Publish, Content creation, EU Hosting, AI Factory, Communication, Media, Newsroom, PR, Editorial, Writing style, Target groups

Subscription The app homepage mentions a free trial period or a free trial account with standardized Communication Tasks and curated newsroom language styles.

⚠️ No confirmed information available – as of 30/04/2026. Publicly visible offering/product segments include Enterprise, MyNewsroom, Industry Solution, Startups, Journalists, and Agency Services; I could not reliably find a verifiable public list of all subscription tiers with their feature scope.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Newsrooms.ai is conditionally to well suited, provided the publicly available provider information is accurate.

Positive is that, according to the search snippet, the website states “Built in the EU, hosted in the EU,” GDPR compliance, and preparation for the EU AI Act. The legal notice lists AI Newsrooms Technology GmbH in Vienna, Austria, which is generally positive in terms of the EU legal framework and GDPR review.

Negative is that no reliable detailed information was publicly available on DPA/AVV, subprocessors, model providers, retention periods, training use, or specific data center regions.

Server location: According to the website snippet, EU hosting; specific data center locations: No verified information available.

Privacy Policy

Link

ⓘAmazon Nova is Amazon's own family of foundation models for text, image/video understanding, document analysis, agents, tool use, and speech.

Nova is used via Amazon Bedrock APIs, in particular InvokeModel, InvokeModelWithResponseStream, Converse, ConverseStream, and, for Sonic, via bidirectional streaming.Amazon Nova API

LLM “frontier intelligence” - “industry-leading price-performance”

Agents, AWS, Batch, Bedrock, Image, Fine-tuning, Guardrails, KMS, Multimodal, Nova, PrivateLink, RAG, Text Analysis, Video

Free AWS shows “Get started for free,” but for Amazon Nova/Bedrock, publicly documented billing is primarily usage-based; specific free quotas depend on AWS offerings, region, and account. Other On-Demand / Standard Tier Usage-based inference by model, modality, and tokens or image/video/special usage.

Flex / Priority / Reserved Tiers Bedrock supports different service tiers to manage cost, availability, latency, and throughput.

Batch Inference Asynchronous processing of larger workloads; according to AWS, cheaper than On-Demand for selected models.

Provisioned Throughput Reserved capacity for higher or predictable throughput; required for certain custom or production scenarios.

Fine-Tuning / Custom Models Customization using your own training/validation data; use of individual models typically via provisioned capacity.

Guardrails / Knowledge Bases / Agents / Prompt Routing Additional Bedrock features for security, RAG, agent orchestration, model routing, and governance.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: Amazon Nova via Amazon Bedrock is well suited from a GDPR perspective if AWS contracts, DPA, region, IAM, logging, and cross-region inference are configured correctly.

Positive is that, according to AWS, Amazon Bedrock does not store or log prompts and completions, does not use them to train AWS models, and does not distribute them to third parties. According to AWS, model providers do not receive access to the Bedrock deployment accounts, logs, or customer inputs/outputs. In addition, Bedrock offers encryption in transit and at rest, AWS KMS, IAM, CloudTrail, PrivateLink, and compliance references including GDPR, ISO, SOC, CSA STAR, HIPAA Eligible, and FedRAMP High for AWS GovCloud.

Negative is that, under the shared responsibility model, the customer remains responsible for correct configuration, region, access rights, logs, tags, external data sources, knowledge bases, and cross-region inference.

Server location: Depends on the selected AWS region; with geographic cross-region inference, prompts/outputs can be processed within a geography such as the EU, while with global cross-region inference, data can be processed worldwide in supported commercial AWS regions. Further links: Amazon Bedrock Data Protection, Security & Privacy, Cross-Region Inference.

Data protection

Link

ⓘ"The leading AI platform"

innoGPT is a German multi-model AI platform for private users, teams, and companies. Officially, it combines language models, image generation, voice integration, file/document work, a prompt library, projects, Code Interpreter, web search, academic search, Deep Research, assistants, integrations, and an API in one interface. It also includes team features, desktop apps, and a clear data protection/compliance focus with EU hosting, DPA, and Trust Center.InnoGPT

All AI models. One tool. Permanent updates. Fully GDPR-compliant

API, DPA, Chat, Privacy, Deep Research, German AI platform, Document Analysis, GDPR-compliant, EU Hosting, ISO27001, AI with Integrations, AI with On-Premise, AI Platform for Enterprises, Multi-Model AI, Team AI, Web search, ZeroTraining

Free Free trial period without payment details according to the provider; suitable for evaluation. Subscription Personal According to the public OMR profile for private use with access to all models and functions except team functionality.

Business According to the OMR profile for companies with all functions, all models, no limits, up to 1000 users, as well as SSO/SCIM/SAML. Other Enterprise Custom offer for large organizations; according to the OMR profile for 1000+ users, on-premise possible and individual support.

Shared-/Family models A shared-access/family model with EU hosting was mentioned publicly; specific functional details should be checked directly with the provider.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: InnoGPT is well suited from a GDPR perspective, especially for German and European companies.

Positive is that InnoGPT advertises EU/Germany hosting, GDPR compliance, ISO 27001, AES-256 encryption, TLS transmission, row-level security, access controls, a DPA under Art. 28 GDPR, zero training, and configurable automatic deletion periods. According to the security page, data is physically located in Frankfurt am Main with certified EU providers; InnoGPT also describes an encryption layer intended to prevent the infrastructure host from viewing readable content.

Negative is that, according to the provider, AWS Frankfurt is used; therefore, companies should review subprocessors, the DPA, key management, ties to US providers, model providers, and specific data flows.

Server location: Frankfurt am Main / Germany according to the InnoGPT security page. Further link: InnoGPT Privacy & Security, Privacy and Cost/Compliance Blog.

Privacy

Link

ⓘ"The most powerful AI platform for enterprises"

Mistral AI is a French provider of generative AI with Le Chat as the user interface, Studio/API for developers, Mistral Vibe for coding workflows, and Mistral Compute as a European-hosted AI cloud.

The platform covers chat, search, document analysis, multimodal models, agents, workflows, API usage, and self-deployment. A key differentiator is the combination of SaaS, API, open-weight models, and local/on-prem deployment.Mistral AI

The most powerful AI platform for enterprises

API, Image generation, Chat, Coding, Connectors, Deep Research, Document Analysis, Embeddings, EU Hosting, AI Agents, AI assistant, Memories, OCR, Projects, Research

Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; suitable for getting started and everyday use. Subscription Le Chat Pro More messages and web searches, more Extended Thinking and Deep Research, document storage, many projects, Mistral Vibe for coding, chat/email support, and high-quality image generation.

Le Chat Team Secure team workspace with more storage per user, domain verification, data export, and team features. Other Enterprise Private deployments with custom models, UI, and tools; individual enterprise features such as SSO, audit logs, custom limits, and private deployments.

Mistral AI Studio / API Usage-based API for models, agents, OCR, embeddings, coding, multimodal workflows, and developer integration.

Mistral Vibe / Coding Coding features in Le Chat and additional pay-as-you-go usage beyond the regular limits.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: Mistral AI is well suited from a GDPR perspective, especially for European companies and professional use.

Positive is that Mistral AI documents privacy controls for Le Chat and the API: Le Chat Free may use conversations for model improvement, but users can choose to opt out; Le Chat Pro, Team, and Enterprise do not use conversations for model training by default; API data is not used for model training; Connector data and Libraries are not used for training. Also positive are the DPA, GDPR rights, SCCs for international transfers, subprocessor arrangements, and technical/organizational safeguards.

Negative is that, depending on the feature, data may be temporarily transferred outside the EU to subprocessors, and that Free/certain Le Chat uses are weaker from a privacy perspective than Pro/Team/Enterprise or the API.

Server location: By default, Mistral hosts data in the European Union; when the US API endpoint is explicitly used, data is hosted in the USA

Privacy Where do you store my data or my Organization's data? Data Processing Addendum

Link

ⓘ"Built to make you extraordinarily productive, Cursor is the best way to code with AI."

Cursor is an AI-powered development environment for software development with agents, autocomplete, CLI, cloud agents, and code review features.

Officially, Cursor is positioned as a tool that enables developers to delegate tasks to agents, write code faster, and work in parallel across multiple environments. More recent releases add, among other things, an agent-centric interface, parallel multitasking with subagents, canvases, and automations.Cursor – Anysphere

Built to make you extraordinarily productive, Cursor is the best way to code with AI

Agents, Autocomplete, Bugbot, Cloud Agents, Code Editor, Codebase Chat, Debugging, AI Coding, MCP, Privacy Mode, RBAC, Refactoring, SSO

Free Free use without a credit card, limited agent requests and limited tab completion. Subscription Pro Extended agent limits, access to frontier models, MCPs, Skills, Hooks, and Cloud Agents.

Pro+ Everything in Pro plus significantly more usage for OpenAI, Claude, and Gemini models.

Ultra Everything in Pro plus very high usage and priority access to new features.

Teams Everything in Pro plus shared chats, Commands and Rules, centralized billing, usage analytics, org-wide Privacy Mode, RBAC, and SAML/OIDC SSO. Other Enterprise Pooled Usage, Invoice/PO Billing, SCIM, AI Code Tracking API, Audit Logs, granular admin/model controls, Priority Support, and Account Management.

Bugbot Separate code review/bug detection offering with Pro, Teams, and Enterprise options.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Cursor is conditionally to well suited, especially with Privacy Mode enabled and for Team/Enterprise use.

Positive is that Anysphere provides a Data Processing Addendum, addresses EU/UK data protection law and Standard Contractual Clauses, and refers to SOC 2 Type II, annual penetration tests, and subprocessor review. Also positive: When Privacy Mode is enabled, Cursor implements technical and contractual measures such as Zero Data Retention with model providers, so that code data is not stored by model providers or used for training.

Negative is that Cursor is a US-adjacent cloud/SaaS tool, uses subprocessors, and there is no publicly documented general EU-only hosting as a standard.

Server location: No confirmed general EU server location; however, Cursor states that it does not use infrastructure in China. Further link: Cursor Security, Data Use, DPA.

Privacy Policy Security

Link

ⓘ"Built to Keep You in Flow State"

Windsurf is an AI-powered coding assistant, or rather an agentic IDE for software development.

The Windsurf Editor combines the local agent Cascade with the cloud agent Devin, supports model routing via Adaptive, offers IDE integrations, MCP connections, previews, and team/enterprise features for governance, security, and deployment. The tool is aimed primarily at developers, technical teams, and companies, not general office users.Windsurf

Built to Keep You in Flow State

Agents, Autocomplete, Cascade, Codebase, Debugging, EU Cluster, FedRAMP, Hybrid, IDE, AI Coding, RBAC, Refactoring, Self-Hosting, SSO, ZDR

Free Light Usage Allowance, Tab, Previews/Deploys depending on the limit and getting started in Windsurf. Subscription Pro Standard Usage Allowance, unlimited core features, additional usage at the API price.

Max Heavy Usage Allowance for power users and high agent/coding usage. Other Teams Team plan with centralized billing, admin dashboard, analytics, support, and team features. Enterprise SSO, access controls, RBAC, volume discounts, hybrid deployment, account management, and custom deployment.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Windsurf is conditionally to well suited, especially for Teams, Enterprise, EU cluster, Hybrid, or Self-hosted.

Positive is that Windsurf documents SOC 2 Type II, penetration tests, Zero Data Retention as standard for Teams/Enterprise, and ZDR opt-in for Individual plans. Also positive are EU servers in Frankfurt for Enterprise options, Hybrid Deployment with a customer-owned data-hosting instance, and Self-hosted Deployment in the company’s own private cloud or on-premises.

Negative is that in cloud plans, requests may pass through Windsurf servers and subprocessors; certain features such as web search, MCP, or remote indexing may require data retention or subprocessors without ZDR.

Server location: Standard cloud USA; Enterprise EU option Frankfurt; Hybrid/Self-hosted controllable by the customer. Further link: Windsurf Security and Pricing.

Security Privacy Policy

Link

ⓘ"AI-first coding in your natural language"

Gemini Code Assist is Google's AI-powered coding assistant for the entire software development lifecycle. It supports code completion, generation, chat, testing, debugging, and documentation in IDEs and—in the Business editions—additionally in various Google Cloud interfaces such as BigQuery, Cloud Run, Firebase, or Apigee.Gemini Code Assist

AI-first coding in your natural language

Agent Mode, Autocomplete, Code assistance, Code Generation, Code review, Debugging, GeminiCLI, IAM, IDE, Refactoring, SmartActions, Teams, Tests, VPC

Free No-cost tier for individual developers; suitable for code completion, chat, and coding assistance in supported development environments. Subscription Gemini Code Assist Standard Monthly or annual user licenses; includes professional coding assistance, IDE support, Gemini CLI, code completion, chat, smart actions, and enterprise data privacy framework.

Gemini Code Assist Enterprise Advanced enterprise version with enterprise features such as code customization, metrics/observability, private codebase contexts, enterprise access controls, and stronger governance. Other Google Developer Program Gemini Code Assist is also available through the Google Developer Program; exact features depend on the respective program status.

Custom Quote / Google Cloud For larger organizations, individual Google Cloud offers, billing via Google Cloud, and the Pricing Calculator may be relevant.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: From a GDPR perspective, Gemini Code Assist is conditionally to well suited, especially in the Standard and Enterprise editions.

Positive is that Google Cloud states for Standard and Enterprise that prompts are processed in accordance with the Cloud Terms and the Cloud Data Processing Addendum; prompts and responses are not used to train the Gemini Code Assist Standard and Enterprise models. Prompts are transmitted in encrypted form. In addition, Google Cloud cites security and compliance controls such as IAM, Private Google Access, VPC Service Controls, Enterprise Access Controls, as well as certifications such as SOC 1/2/3, ISO 27001, 27017, 27018, and 27701.

Negative is that the free Individual version must be assessed under a separate Privacy Notice and does not offer the same enterprise data protection framework as Standard/Enterprise. In addition, Google Cloud remains a shared responsibility model: customers must correctly configure projects, access, repositories, logs, extensions, and data sharing.

Server location: For Standard/Enterprise, data residency depends on Google Cloud configuration, service terms, and regional settings; a blanket local or on-prem deployment is not substantiated.

Data Governance Privacy Privacy Notice for Individuals

Link

ⓘ"One Voice AI Assistant. Different Ways to Use It."

Speechify is a voice AI platform that converts text into natural-sounding speech and also offers features such as Voice Typing, Voice AI Assistant, AI Podcasts, OCR scanning, as well as creator/studio features like Voice Over, Dubbing, and Voice Cloning.

The product is available as a web app, browser extension, and for iOS, Android, macOS, and Windows; there is also an API for developers.Speechify

One Voice AI Assistant. Different Ways to Use It

API, Audio, Accessibility, Dubbing, AI voices, Learning, PDF Listening, Text-to-Speech, Voice cloning, Voiceover, Read Aloud, Summary

Free Basic text-to-speech features, slower listening, limited simple voices, and text-to-speech only. Subscription Premium High-quality natural voices, many languages, faster listening, Scan & Listen, AI Summaries & Chats.

Speechify Studio Separate subscription for voiceovers, creator content, podcasts, videos, dubbing, and audio production. Other API Text-to-speech API with a free tier and scalable usage plans for apps and workflows.

Enterprise / EDU Enterprise and education offerings for larger organizations, teams, and integrations.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: Speechify is conditionally suitable from a GDPR perspective.

Positive is that Speechify describes rights for EEA, Switzerland, and UK users, enables data deletion, mentions Standard Contractual Clauses for transfers outside Europe, and states encryption in transit and at rest.

Negative is that, according to the Privacy Policy, Speechify transfers information to the USA, where it is processed and stored; in addition, User Content and personal data are synchronized with the servers depending on usage. A publicly clear AVV/DPA for regular users could not be reliably verified.

Server location: USA. Further link: Speechify Privacy and Pricing.

Privacy Policy

Link

ⓘ“All-in-one AI video and audio platform” Async is an AI platform for audio and video production with remote recording, editing, AI voices, voice cloning, dubbing, subtitles, clips, and publishing workflows.



The product is aimed at both solo creators and teams and companies that want to produce podcasts, video formats, social clips, or voice-first content. The platform combines recording, post-production, and publishing in one workflow.Async

All-in-one AI video and audio platform

Audio Editing, Dubbing, AI Clips, Music, PodcastHosting, Reframe, Teams, Text-to-Speech, Thumbnails, Subtitles, Video Editing, VoiceCloning

Free Free entry with limited AI credits, limited media upload, text-to-speech, cloud storage, and basic features. Subscription Essentials More monthly AI Credits, unlimited media upload in AI Chat, more text-to-speech, AI Clips, Reframe, Dubbing/Lipsync, Subtitles, Thumbnail Generator, and more storage.

Pro Higher credit amount, greater usage for video, audio, and voice features, more storage, and professional creator workflows.

Teams Team workspace, collaboration, significantly more credits and storage, shared use for teams. Other Business Customized business offering with custom credits, custom storage, live support, onboarding, Customer Happiness Manager, and dedicated support.

Top-up Packs Additional AI credits as one-time packages; usage depends on model, medium, duration, and resolution.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: Async is conditionally suitable from a GDPR perspective.

Positive is that Async lists GDPR rights, describes voice biometric data rules, requires explicit consent for voice cloning, mentions deletion rights, describes encryption for biometric voice data, and states that it does not sell or unauthorizedly share such data. The pricing page also mentions GDPR compliance, encryption in transit and at rest, as well as SOC2 certification.

Negative is that Async is operated by Podcastle Inc. / DBA Async based in Delaware, USA, and the Privacy Policy describes international data transfers. Particularly critical are voice cloning, biometric templates, recordings, videos, dubbing, and AI-generated media.

Server location: No verified specific server location is publicly documented; company headquarters in the USA/Delaware, international processing possible. Further link: Async Privacy, AI Terms, and Pricing.

Privacy Policy

Link

ⓘAlibaba Cloud Qwen is Alibaba Cloud's LLM/multimodal model family. Through Model Studio / DashScope, developers can use Qwen models via API, including text models, multimodal models, reasoning models, coding models, translation models, and open-source/open-weight variants. The API is OpenAI-compatible and can be used via different endpoints depending on the region.Alibaba Cloud Qwen API

LLM “one-stop model service platform”,

Batch, Cache, Coding, DashScope, EU Region, Fine-tuning, Multimodal, Qwen API, Reasoning, Responses API, Language models, Tool Calling

Free Free quotas for certain models/regions; Free Quota applies only to real-time inference and not to batch calls, context cache, fine-tuning, deployment, or custom models. Other Pay-as-you-go / Model Invocation Usage-based billing by model, input/output tokens, thinking/non-thinking mode, region, and deployment mode.

Batch Calls Separate processing of large workloads; not covered by the Free Quota.

Context Cache Cache function to reduce repeated context costs; not covered by the Free Quota.

Fine-Tuning / Deployment / Custom Models Model customization and deployment of proprietary or fine-tuned models; billed separately and not covered by the Free Quota.

OpenAI-/Responses-compatible API Qwen models support OpenAI-compatible interfaces and the Responses API for agentic applications.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: Alibaba Cloud Qwen API / Model Studio is conditionally suitable from a GDPR perspective.

Positive is that Alibaba Cloud Model Studio officially states that it never uses data for model training and encrypts transmitted data when creating applications or training models. It is also positive that Alibaba Cloud provides GDPR information, a Data Processing Addendum, SCCs, and international data protection mechanisms. For the Qwen API, several deployment modes are documented, including EU with endpoint and data storage in Germany/Frankfurt as well as inference resources restricted to the EU.

Negative is that, depending on the mode, data may be processed in Singapore, the USA, China, Hong Kong, the EU, or in global deployment modes; the “International” mode stores the endpoint/data in Singapore but schedules computing resources globally excluding mainland China, while “Global” names the USA/Virginia or Germany/Frankfurt as the endpoint/storage location but schedules computing resources globally.

Server location: Depending on the selected deployment mode: International = Singapore with global scheduling excluding mainland China; US = Virginia; Chinese Mainland = Beijing; China Hong Kong = Hong Kong; EU = Germany/Frankfurt with EU-restricted inference. Further links: Model Studio privacy/training, Qwen API regions, Model Pricing/Deployment Modes, Alibaba Cloud DPA.

Alibaba Cloud International Website Privacy Policy

Link

ⓘLlama is Meta's family of generative foundation models for text and, in part, image/text understanding.

Meta positions Llama as a flexibly deployable model series that can be fine-tuned, distilled, and deployed “anywhere”; this includes self-hosting, private cloud, and hosting through partners. Llama 4 brings native multimodality, while Llama 3.x continues to address important text, coding, translation, and agent use cases.Meta Llama

LLM “Industry Leading, Open-Source AI”

API, Chat, Coding, Coding Assistant, Edge, Fine-tuning, Llama Stack, Multimodal, RAG, Self-Hosting, Language model, Tool Calling, Vision

Free Llama model weights / Download Llama models can be downloaded, fine-tuned, distilled, and self-hosted under the Meta license; infrastructure costs for self-hosting are incurred separately.

Meta Llama API Preview / Waitlist The Llama API is officially positioned via waitlist/login; I could not reliably substantiate a permanently freely usable public API free version with guaranteed limits. Other Managed Llama API API access to current Llama models, API key, playground, SDKs, OpenAI-like integration, tool calling, and models such as Llama 4 Maverick/Scout according to the official Llama API page.

Self-hosting / own cloud / edge Operation of the model weights on your own infrastructure, with cloud providers, or locally; suitable for data protection, cost control, and individual optimization.

Cloud provider / third-party hosting Llama models are available through various cloud and inference providers; data protection, pricing, and server locations then depend on the respective provider.

Fine-tuning / distillation / Llama Stack Customization and integration into your own AI architectures, depending on the model license, infrastructure, and technical setup.

– ★★★★★★★★★★ (0)

Link

GDPR: Conditional GDPR assessment: Meta Llama must be assessed in two parts from a GDPR perspective: The Llama models as downloadable/open-weight models can generally be operated in a very privacy-friendly way when self-hosted, because server location, logging, access control, and data flows can be controlled directly. The Meta Llama API, on the other hand, can only be assessed with limited clarity from a GDPR perspective, because not all details regarding the DPA/data processing agreement, EU data residency, and the specific API server location are transparently documented publicly.

Positive is that Meta explicitly states for the Llama API that API inputs and outputs are not used for training or improving the models, that data is not used for advertising/ad targeting, that role-based access controls are used, that API data is stored separately from other Meta product data, and that data is encrypted both in transit and at rest.

Negative is that, according to the official site, the Llama API still operates via waitlist/login and that no publicly fully verifiable EU DPA/server location details are freely available.

Server location: Freely selectable for self-hosting; for the Meta Llama API, it cannot be publicly verified as EU-only. Further links: Llama API, Llama models, Llama license/FAQ.

Privacy Policy

Link

ⓘ"Frontier intelligence, customized to you."

The Mistral API is the developer and enterprise interface for Mistral models.

Through Mistral AI Studio, companies and developers can use models via API, test prompts, build agents, implement RAG workflows, use fine-tuning, manage workspaces, and bill API usage. Mistral offers both open-weight and commercial/premier models.Mistral API

LLM - build, customize, and deploy AI, your way

Agents, Coding, Embeddings, EU API, EU Hosting, Fine-tuning, Multimodal, OCR, RAG, Self-deployment, Language models, Tool Calling

Free Le Chat Free Personal AI assistant for chat, search, learning, images, projects, memories, and connectors; not to be equated with productive API usage. Other API / La Plateforme Usage-based API for Mistral models, chat, embeddings, OCR, agents, coding, multimodal models, and developer workflows.

Self-Deployment / Open-Weight Models Selected models can be operated independently or via cloud/enterprise deployments; the range of features depends on the respective model.

Enterprise Private Deployment Customized private deployment for organizations with increased control, security, and scalability requirements.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes GDPR assessment: From a GDPR perspective, the Mistral API is well suited, especially for European companies.

Positive is that Mistral AI is a French company, provides a Data Processing Addendum, and clearly documents for the API that API data is not used for model training. In addition, Mistral states that data is hosted in the European Union by default; only when the US API endpoint is explicitly used is data hosted in the USA. Also positive are GDPR rights, DPA, SCCs for international transfers, subprocessor review, and the ability for Enterprise customers to disable certain features involving transfers outside the EU at the organization level.

Negative is that, depending on the feature, data may be temporarily transferred outside the EU to subprocessors and that feedback functions or certain products may have their own training/improvement logic.

Server location: European Union by default; USA when the US endpoint is explicitly used. Further links: Mistral Privacy Docs, Data Location Help, Mistral DPA.

Privacy

Link

ⓘMidjourney is an AI tool for generating images and, by now, also short videos from text and image prompts.

Midjourney is an AI image generator with a web and Discord interface that translates text, reference images, and style prompts into high-quality visuals. Today, the tool covers not only classic text-to-image, but also image references, style references, Character/Omni References, moodboards, Describe functions, editor workflows, and short image-to-video animations. Particularly striking is the strong creative controllability through personalization and visual references. Important for professional use: Commercial use is generally permitted, but its suitability for data protection and enterprise use can only be rated as limited due to US-based storage, training-related concerns, and limited business administration.Midjourney

community-funded research lab … building the most beautiful AI models in the world

Image generation, Concept art, Discord, Illustrations, AI Images, Moodboards, Prompting, Remix, StealthMode, Style worlds, Upscaling, Variations, Video

Subscription Basic Plan: Entry into image generation with limited Fast GPU time; no Relax Mode, no Stealth Mode.

Standard Plan: More Fast GPU time, unlimited image generation in Relax Mode, HD video possible in Fast Mode.

Pro Plan: More Fast GPU time, Stealth Mode, more simultaneous image/video prompts, Relax Mode for images and SD video.

Mega Plan: Highest official tier with maximum Fast GPU time and the highest parallelization limits within the standard plans. Other Annual Billing Annual payment with a discount compared to monthly payment.

Fast/Relax Mode Usage depends, depending on the plan, on fast GPU time and Relax Mode.

Stealth Mode Included only in Pro and Mega; is intended to keep images/videos private, but does not apply in open/shared rooms.

– ★★★★★★★★★★ (0)

Link

GDPR: Unclear GDPR assessment: From a GDPR perspective, Midjourney is conditionally to critically suitable for company data.

Positive is that Midjourney publishes a Privacy Policy with legal bases for the EEA/UK/Switzerland, SCCs or transfer mechanisms, and user rights. It is also positive that Midjourney clearly documents the plan features, including Stealth Mode in Pro and Mega.

Negative is that Midjourney may collect personal data including prompts, uploaded images, videos, documents, spoken inputs, IP address, usage data, and contact information. The Terms also grant Midjourney a broad, worldwide, royalty-free, and irrevocable license to Input Content and generated assets. By default, content is publicly visible and remixable; Stealth Mode is only available in Pro/Mega and does not help with content in open or shared Discord/community spaces.

Server location: No guaranteed EU-only data residency; Midjourney processes data at operational locations and wherever the parties involved are located, i.e. potentially outside the user's country. Further link: Midjourney Privacy Policy, Terms, and plan comparison.

Privacy Policy

Link

ⓘ"Ask, Chat, Create and More"

Meta AI is a generative AI assistant from Meta for chat, research, recommendations, image/video creation, file analysis, shopping, local recommendations, and voice interactions.
It is integrated into Meta products such as WhatsApp, Messenger, Instagram, Facebook, the standalone app, meta.ai, and Meta AI Glasses.
Since April 2026, according to Meta, Meta AI has been powered by Muse Spark, the first model in a new model family from Meta Superintelligence Labs.Meta AI

Your personal AI assistant

Image analysis, Chat, Files, Recommendations, Instagram, AI assistant, AI video, local tips, Meta apps, Shopping, Social Media, Vibes, Voice, WhatsApp

Free Free use as a personal AI assistant for answers, recommendations, image/file understanding, voice/text, creative content, and use across Meta apps.

– ★★★★★★★★★★ (0)

Link

GDPR: Unclear GDPR assessment: From a GDPR perspective, Meta AI is conditionally acceptable to critical, especially for professional or confidential use.

Positive is that Meta AI is widely available, can be used within Meta apps and as a standalone app, data is encrypted in transit, and according to the app store’s data safety information, users can request data deletion.

Negative is that Meta AI is deeply integrated into the Meta ecosystem and, according to the official app description, can derive answers and recommendations from what people share or talk about on Instagram, Facebook, and Threads. According to Google Play’s data safety information, the app may collect location, personal information, and many other types of data, and may share personal information and device IDs with third parties. A clear Meta-AI-specific AVV/DPA for regular end users or EU-only data residency is not publicly documented as standard.

Server location: No verified EU-only data residency is available for Meta AI; Meta Platforms, Inc. is listed as the app provider based in Menlo Park, USA.

Privacy Policy

Link