Find Your Tool in 6 Steps
Result: 158

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 158
Research Images Video Music Agent Business Marketing Website API

"Your AI accelerator for every workflow, from the editor to the enterprise."

GitHub Copilot is an AI-powered coding assistant for IDE, GitHub.com, CLI, Mobile, and Windows Terminal. It offers code completion, chat, code review, agentic workflows, pull request summaries, MCP integration, and a cloud agent that can analyze repositories, make changes on branches, and prepare pull requests.

The product is clearly focused on software development and team workflows, not on general text or office applications.GitHub Copilot

Your AI accelerator for every workflow, from the editor to the enterprise

7.8/10 Good
Free GitHub Copilot Free Limited entry-level option for personal use; according to GitHub, includes up to 2,000 inline suggestions per month and limited premium requests. Not suitable for enterprise use.

GitHub Copilot Student For verified students; includes unlimited completions, Copilot Chat, additional models, and monthly premium requests. Subscription GitHub Copilot Pro For individual developers with unlimited IDE completions, Copilot Chat, additional models, and premium requests.

GitHub Copilot Pro+ Everything in Pro plus full access to available models in Copilot Chat, higher premium request limits, and priority access to advanced AI features.

GitHub Copilot Business For teams and organizations; includes Copilot Cloud Agent, centralized management, and Copilot policy control for organization members.

GitHub Copilot Enterprise For companies on GitHub Enterprise Cloud; includes everything in Copilot Business plus additional enterprise features and centralized assignment at the organization, user, and team level. Other GitHub AI Credits / usage-based billing Copilot plans include GitHub AI credits or quotas; for Business and Enterprise, credits are pooled per user at the billing unit level.

GitHub Enterprise Server Self-hosted GitHub platform for enterprises, on-premises or in a Virtual Private Cloud; important: according to GitHub, Copilot is currently not available for it.
– (0)

Link

GDPR: Partly For the European region, the conditions for GDPR-compliant use of GitHub Copilot have been documented. Positive aspects include the DPA/AVV that explicitly applies to GitHub Copilot, a documented EU data residency for GitHub Enterprise Cloud with Data Residency, and statements that, in cases of enforced data residency, code, prompts, and responses do not leave the region during inference. At the same time, standard usage is not consistently documented as being local to the EU; the list of subprocessors mentions several processing operations in the U.S., and individual model paths or functions have differing retention rules. Therefore, usage by EU/EEA users is not generally proven to be fully GDPR-compliant, but only with appropriate enterprise configurations and contractual frameworks.
Positive
GitHub documents that the GitHub DPA also applies to GitHub Copilot. For GitHub Enterprise Cloud with Data Residency, a Copilot policy is described that routes all Copilot requests to model endpoints within the specified region; supported regions are the U.S. and the European Union. GitHub also states that, when data residency is enforced, code, prompts, and Copilot responses do not leave the region during inference, and that Copilot-related logs and telemetry are stored in region-compliant storage. For Business and Enterprise customers, GitHub also specifies restrictive retention policies by default for certain types of usage—for example, no retention of prompts and suggestions when accessing the IDE for chat and code completions.
Negative
The website does not provide blanket assurance that all standard SaaS usage of Copilot within the EU/EEA takes place locally within the EU without further measures. GitHub’s list of subprocessors lists several processing locations in the U.S. Additionally, data is retained for varying lengths of time depending on the interface; for Copilot access other than IDE chat and code completions, GitHub specifies a retention period of 28 days for prompts and suggestions. For individual subscriptions, interaction data may be used to train and improve AI models, provided that opt-out has not been selected. The website does not indicate that GitHub Copilot offers true on-premises or self-hosted operation.
Server Location
For GitHub Copilot with Data Residency, the website lists the United States and the European Union as regions. With enforced data residency, code, prompts, and responses remain within the specified region during inference. However, the general list of subprocessors lists processing locations in the U.S. for several subprocessors. Specific EU countries or individual data center locations for Copilot are not specified on the website.

Link

"The Agentic Enterprise."

Salesforce Agentforce is a platform for CRM-adjacent AI agents in sales, customer service, field service, commerce, and internal processes. Agents operate based on Salesforce data, workflows, Data Cloud, Knowledge, APIs, and integrations.Salesforce Agentforce

The Agentic Enterprise

7.1/10 Good
Free Salesforce Foundations
Includes selected core Agentforce features such as Agent Builder, Prompt Builder, Agent Script, Agentforce Coworker, and Agentforce Vibes for eligible Salesforce editions. Other Conversations Consumption model for customer-oriented agent conversations.

Per-User Licenses User-based licensing for selected Agentforce and Salesforce editions.

Agentforce 1 Editions More comprehensive Salesforce editions with AI, agent, Data Cloud, and industry-specific features.

Agentforce for Service Service agents with templates, actions, omnichannel communication, and Service Cloud integration.

Professional Services Consulting, implementation, data preparation, governance, and agent development.
– (0)

Link

GDPR: Partly Salesforce documents several central building blocks for GDPR-compliant use of Agentforce in the EU/EEA region: a privacy policy, a data processing agreement, documented subprocessors, transfer mechanisms, zero-data-retention commitments for used third-party LLMs, as well as an EU/Switzerland option via Hyperforce Operating Zone. At the same time, standard use is not automatically completely unproblematic, because Salesforce itself describes international transfers, processing outside the country, and the use of third-party LLMs on its website. Therefore, compliant use from an EU/EEA perspective is possible, but typically only with the deliberate selection of suitable product/hosting options and contractual configurations.
Positive
Positively documented are: an existing privacy policy; Data Processing Addendum with SCCs or Processor Binding Corporate Rules; according to the FAQ, Agentforce is covered by the DPA; subprocessors and hosting countries are disclosed via the Infrastructure-&-Sub-processors documentation; Hyperforce Operating Zone offers processing and storage strictly within the EU and Switzerland region; zero-data-retention commitments are described for third-party LLMs; relevant certifications for Agentforce or the platform are listed, including ISO 27001, 27017, 27018, as well as SOC 2/SOC 3.
Negative
Negative or limiting factors are: Salesforce itself states on its website that personal data may be transferred to and stored in the USA and other jurisdictions; Agentforce can use third-party LLMs; specific default server locations for each Agentforce deployment are not directly stated on the product page, but instead outsourced to linked documentation; a true local on-premise/self-hosting option for Agentforce is not indicated on the website.
Server location
For Agentforce-specific hosting countries, Salesforce refers to the 'Infrastructure & Sub-processors Documentation'. The website also documents the Hyperforce Operating Zone for the EU and Switzerland; according to Salesforce, customer data there can be processed and stored strictly within the EU and Switzerland region. At the same time, the general privacy policy states that personal data may also be processed and stored in the USA, as well as via affiliates and third parties outside one's own country or jurisdiction.

Link

“The #1 AI Assistant for Your Meetings”

Fireflies.ai is an AI meeting assistant that automatically transcribes, summarizes, searches, and analyzes meetings. The tool supports video conferencing systems, audio/video uploads, meeting search, AskFred, a mobile app, a Chrome extension, an API, conversation intelligence, AI skills, and integrations with CRM, collaboration, and storage tools.Fireflies.ai

The #1 AI Assistant For Your Meetings

7.7/10 Good
Free Free entry with limited transcription, limited storage, AskFred, audio/video file upload, mobile app, Chrome extension and API access according to the pricing page. Subscription Pro For professionals and small teams; includes unlimited transcription, unlimited AI summaries, increased storage, downloads of transcripts/summaries/recordings, Personal Assistant, talk-time analytics, AI skills, voice agents, AI credits, action items, task manager, and unlimited integrations.

Business For growing businesses; includes Pro features plus unlimited storage, video recording, multi-language mode, conversation intelligence, team analytics, more AI credits, and user groups.

Enterprise For large enterprises; includes Business features plus Rules Engine, SSO, SCIM, HIPAA compliance, private storage, custom data retention, Transcript+Summary-only mode, more AI credits, Super Admin, and a dedicated account manager. Other API Fireflies provides API access for processing audio files and integrating them into your own workflows.

Private Storage Enterprise option for storing meeting data in a preferred location or dedicated storage environment.

AI Credits / AI Skills AI Credits control the use of specific AI features; AI Skills automatically extract follow-ups, scores, insights, and structured meeting data.
– (0)

Link

GDPR: Partly For users in the EU/EEA, compliance with the GDPR is only partially plausible. Positive aspects include a publicly available DPA, provisions regarding EU Standard Contractual Clauses, participation in the EU-U.S. Data Privacy Framework, documented data subject rights, and the statement that meeting content and personal data are not used for AI training. At the same time, the website states that the standard cloud stores and processes data in the U.S. Even with “Private Storage,” while data may be stored in the EU, the website indicates that processing still takes place in the U.S. The website does not specify any true EU/EEA data processing without U.S. processing or an on-premises/self-hosting option.
Positive
Existing DPA/AVV with binding instructions, SCCs as a fallback, EU-US Data Privacy Framework, documented support for data subject requests, subprocessor provisions with the right to object, statements regarding “no AI training” and “zero data retention” by third-party providers, as well as documented security and compliance certifications such as SOC 2 Type II and GDPR.
Negative
The website clearly states that the default is U.S. hosting and U.S. processing. Even with private storage in the EU, processing continues to take place in the U.S., according to the website. Full EU/EEA data residency for processing, an EU data center for the entire solution, or a self-hostable/on-premises option are not specified on the website. The provider’s ISO 27001 certification is not listed on the website.
Server Location
By default, according to the website, data is stored and processed in Fireflies’ secure cloud infrastructure in the U.S. on AWS and GCP. With “Private Storage,” data can also be stored in a customer-owned bucket in the EU; however, according to the website, processing still takes place in the U.S.

Link

“Industrialize Enterprise AI. Make Enterprise AI work.”

Celonis connects data from enterprise systems to create a dynamic, context-aware view of business processes. Companies can analyze workflows, identify causes of delays or policy violations, run simulations, and automate actions. AI capabilities such as Process Copilot, machine learning, predictions, and agent integration make process knowledge accessible through natural language and operational applications.Celonis

Industrialize enterprise AI. Make enterprise AI work.

8.1/10 Very good
Free Celonis Free Plan
An officially promoted free option designed to help you get started with the platform and for limited process mining applications. Current self-service availability may be restricted based on your account or region and should be verified in advance. Subscription Custom Celonis Subscription
Enterprise contracts are based on platform scope, data volume, applications, users, processes, and support requirements; there is no public standard price list. Other Celonis Process Intelligence Platform Data Core, process data model, process mining, analytics, action and business apps, and integrations.

Process Copilot Natural language queries, process analytics, charts, summaries, and context-aware insights.

AgentC Suite for building, connecting, orchestrating, and governing AI agents with process context.

AI API / Intelligence API Integration of Celonis process knowledge and Copilot features into external applications, communication platforms, and agent systems.

Marketplace and Business Apps Preconfigured applications and process solutions for finance, supply chain, procurement, sales, manufacturing, and other areas.

Premium and Premier Plus Support Extended support, service, and maintenance models for mission-critical installations.

Consulting and Partner Services Implementation, process modeling, data integration, consulting, and industry-specific solutions provided by Celonis and its partners.

Celonis Academy Training and certification programs for users, analysts, developers, and implementation teams.
– (0)

Link

GDPR: Yes On its website, Celonis outlines several key components for GDPR-compliant use within the EU/EEA: a Privacy Notice, a linked General Terms and Conditions (GTC)/Data Processing Agreement (DPA), a linked list of subprocessors, technical and organizational measures, and statements regarding the EU region for European customer data. Regarding AI features, it is further specified that customer data is not used to train large language models and that fine-tuning is performed only with the customer’s explicit consent. This clearly demonstrates a practical approach to GDPR-compliant use within the EU/EEA.
Positive
Positive aspects include the Privacy Notice available on the website, the linked General Terms and Conditions (GTC)/Data Processing Agreement (DPA), the linked list of subprocessors, the linked Standard Contractual Clauses (SCCs) and Terms of Use (TOMs), as well as the statement that European customers’ data is generally hosted in an EU data center. For AI applications, Celonis also states that hosting takes place in the same region as the Celonis platform and that customer data is not used for training LLMs; fine-tuning is performed only with the customer’s explicit consent.
Negative
A limitation is that the website does not specify a particular member state or a specific EU data center address; it only states in general terms that European customer data is hosted in the EU. The website does not provide evidence of a complete, genuine on-premises deployment of the platform; the documented on-premises components primarily concern extractors and clients, while processing and orchestration run via cloud services. An explicit opt-out function via the UI for AI training is not described; instead, training is generally ruled out, and fine-tuning is contingent upon explicit consent.
Server Location
The website does not specify a concrete server location by country or city. It only states that Celonis uses Microsoft and Amazon hosting and that the hosting location of the customer database generally corresponds to the customer’s location; for European customers, this means a data center in the EU. For AI applications, the same region is specified as for the Celonis platform; thus, for EU hosting, the hosting is also in the EU.

Link

"The all-in-one AI platform for businesses — Turnkey, Secure & GDPR-compliant"

Omnifact is a B2B AI platform for the secure use of generative AI in businesses. It combines team chat with multiple LLM providers, document-based AI assistants via Spaces, integrations, API access, privacy filters, role/team management, and optional enterprise deployment up to on-premise. The platform is clearly focused on data sovereignty, compliance, and integration into enterprise IT.Omnifact

The all-in-one AI platform for businesses — Turnkey, Secure & GDPR-compliant

7.3/10 Good
Subscription Pro Access to the entire Omnifact platform including Chat and Spaces, leading AI models with monthly usage credits, unlimited base-tier models after the credits are used up, Omnifact Privacy Filter™, teams up to a certain size, Knowledge Spaces with a page limit, email support, and onboarding materials. Other Enterprise Everything in Pro plus no team size limit, custom usage credits, self-hosted LLMs, Bring Your Own API Key, usage analytics, API access to Spaces, Enterprise SSO, custom SLAs, on-premise deployment, and a dedicated account manager.

Spaces API / Self-Hosted LLMs / BYOK For enterprise integrations, internal knowledge assistants, your own model infrastructure, and controlled model usage.
– (0)

Link

GDPR: Yes Omnifact presents several building blocks on its own website for GDPR-compliant use throughout the EU/EEA: DPA pursuant to Art. 28 GDPR, hosting of customer data in Microsoft Azure in the Germany West Central region (Frankfurt), EU-hosted model options, privacy filters to reduce external data sharing, a documented subprocessor register, as well as self-hosting/on-premise options. Since on-premise, private cloud, and EU hosting are also expressly offered, a straightforward path to GDPR-compliant use is clearly described. As a limitation, Omnifact itself points out that for certain activatable providers and US-related subprocessors, additional assessments pursuant to Art. 44 et seq. GDPR may be necessary depending on the configuration.
Positive
Particularly positive are the DPA that becomes effective automatically upon registration, the documented data processing in Frankfurt, the option for EU-hosted models via Google Vertex AI in the 'europe-west' region, the statement 'We never use your data to train our models', the self-hosting/on-premise deployment up to and including air gap, as well as the ISO/IEC 27001:2022 certification.
Negative
Negative or limiting is that Omnifact itself points out possible third-country risks on its own website: For subprocessors headquartered in the USA, US access cannot be ruled out despite EU data storage. In addition, for certain activatable providers such as Groq, it is explicitly noted that currently no DPA is provided and use therefore takes place under the customer's own responsibility. GDPR compliance therefore depends in part on the specific provider and hosting configuration selected.
Server location
For customer data on the Omnifact platform, the website states Microsoft Azure, Germany West Central region (Frankfurt). In addition, the website mentions EU-hosted models via Google Vertex AI with hosting in the 'europe-west' region. Furthermore, Omnifact promotes EU cloud, private cloud, and on-premise; other specific data center locations are only partially specified on the website.

Link

"The all-in-one AI application for everyone."

AnythingLLM is a local or hosted AI application for knowledge bases, RAG, team chat, document queries, and AI agents. The platform can be used as a desktop app, Docker deployment, or isolated cloud instance.AnythingLLM

The all-in-one AI application for everyone.

7.3/10 Good
Free AnythingLLM Desktop Local single-user app with local LLMs, RAG, document chat, API, and no mandatory account.

AnythingLLM Docker Free self-hosted multi-user system with RAG, agents, workspace permissions, API, and custom models. Subscription Cloud Basic Private managed instance for smaller teams and limited document volumes.

Cloud Pro Managed instance for larger teams, more documents, and extended support.

Enterprise Custom offering with on-premise support, custom domain, integrations, and SLA. Other Own infrastructure Costs for servers, storage, GPUs, model providers, backups, and security operations.

External LLM providers Usage-based costs for OpenAI, Azure, AWS, Anthropic, or other models.
– (0)

Link

GDPR: Yes For the EU/EEA region, AnythingLLM can be used in the best available usage path in a GDPR-compliant way, because the provider offers clearly documented local/offline desktop use as well as self-hosting. The website describes for Desktop that messages, chat histories, and documents remain local by default, the app can run completely offline, and telemetry can be disabled. In addition, self-hosted and on-premise options as well as Docker/cloud VM deployments are documented. The managed cloud SaaS, on the other hand, is only documented to a limited extent from a data protection perspective for the EU/EEA, because although AWS is named as the infrastructure, no EU/EEA server location, no EU data residency, no DPA/AVV, and no list of subprocessors are stated on the website.
Positive
Positive aspects are the explicitly documented local/offline use, 'everything is saved locally on your device by default', the absence of a mandatory account for Desktop, the opt-out option for telemetry, the documented complete deletion of documents in the local installation, as well as the clearly offered self-hosted, Docker, and on-premise paths.
Negative
Negative for the SaaS/cloud assessment is that no EU/EEA data center is named on the website, no EU data residency is guaranteed, no DPA/AVV can be found, no list of subprocessors is published, and no relevant certification such as ISO 27001 or SOC 2 is specified. The cloud privacy policy also mentions support/maintenance access by the team to hosted instances.
Server location
For AnythingLLM Cloud, it is only stated that data is stored and processed via 'Amazon Web Services'; a specific server/data center location in the EU/EEA is not stated on the website. Mintplex Labs Inc. is described in the Cloud Terms as being located in California, USA.

Link

Robotics

“Building a world where we do more of what we love, while our humanoid companions handle the rest.”

1X develops humanoid robots for household and general physical work. The current flagship product, NEO, is a humanoid home robot featuring Redwood AI, LLM, audio/visual intelligence, app control, a voice interface, remote control options, and Scheduled Expert Mode for tasks the robot cannot yet perform autonomously.1X Technologies

Building a world where we do more of what we love, while our humanoid companions handle the rest.

3.6/10 Insufficient
Subscription Standard – Monthly subscription with the Starter Productivity Package and Standard Delivery, as described on the order page.

Early Access – Ownership model with warranty, premium support, and priority delivery, as described on the order page. Other Refundable Deposit, Ownership, Subscription, Support/Priority Delivery, possibly future software/service enhancements.
– (0)

Link

GDPR: Unclear A privacy policy is available on the website, but for a reliable GDPR assessment, key information is missing regarding data processing agreements, subprocessors, specific server locations, EU data residency, and contractual safeguards. The Privacy Policy also mentions international data transfers to the USA and other jurisdictions without providing on the website the detailed evidence typically expected for a German tool directory.
Positive
It is positive that a Privacy Policy is available with data subject rights, a contact option via '[email protected]', as well as a section on international data transfers. In addition, the website describes technical architecture details such as 'onboard' or 'off-board language' as well as remote supervision, which allows certain conclusions about data processing.
Negative
It is negative that no AVV/DPA, no list of subprocessors, no specific EU data residency, no named data centers/server locations, no explicit opt-out from AI training for usage data, and no reliable certification evidence were found on the website. The Privacy Policy also states that personal data may be transferred to affiliated companies and service providers in the USA and other jurisdictions.
Server location
Not specifically stated on the website. The Privacy Policy only states that personal data may be transferred to affiliated companies and service providers in the USA and other jurisdictions; specific data centers or countries of primary processing are not named.

Link

"Build Production-Ready AI Agents."

Dify is a platform for AI agents, RAG, visual workflows, chatbots, and no-code AI applications. Teams can develop, test, deploy, monitor, and integrate LLM apps into existing systems via APIs or plugins.Dify

Build Production-Ready AI Agent.

7.6/10 Good
Free Sandbox Free cloud test environment with limited AI credits and core features.

Community Edition Open-source self-hosting with agents, workflows, RAG, APIs, and plugins. Subscription Professional Cloud workspace with extended usage scope, higher storage, logs, and team features.

Team Larger team workspace with more users, capacities, and advanced features.

Enterprise Customized infrastructure, security, support, and governance solution. Other Dify Premium on AWS One-click deployment as an AWS AMI in your own VPC with branding and enterprise options.

Your own model providers Direct connection of your own API keys for OpenAI, Anthropic, Google, local models, and additional providers.
– (0)

Link

GDPR: Yes For the EU/EEA area, Dify can be assessed as usable in the best available usage path in a GDPR-compliant manner, because the website on the one hand mentions self-hosting or enterprise deployment in controlled environments and on the other hand describes data protection mechanisms on the SaaS/enterprise side such as Privacy Policy, SCC-based third-country transfers, as well as Data Processing Agreements. For the standard SaaS variant, however, the situation remains less ideal, because the Privacy Policy mentions US servers and also refers to processing in the USA, EEA, and China; therefore, the positive assessment is primarily sustainable via the self-hosted/on-premise or controlled deployment path.
Positive
Positive aspects are the GDPR compliance stated on the website, the reference to comprehensive Data Processing Agreements, the mention of Standard Contractual Clauses for transfers from the EEA/Switzerland to third countries not considered adequate, an EU representative in Ireland, as well as the clearly documented deployment options with 'on-premise, public cloud, VPC' and a self-hosted/open-source offering.
Negative
A negative aspect is that the standard Privacy Policy for cloud/website operation mentions US servers and also describes processing in the USA and China. A specific EU/EEA-exclusive server location for Dify SaaS, an explicit EU data residency commitment, a publicly discoverable subprocessor list, and a clearly findable statement on opting out of general AI training are not specified on the website.
Server location
The Privacy Policy states that website servers are located in the USA and that data may be processed or stored in regions where LangGenius, affiliated companies, or service providers have facilities, including the USA, Australia, Canada, China, and the EEA. A specific EU data center for the SaaS is not specified on the website.

Link

"AI Meeting Assistant with #1 Noise Cancellation"

Krisp is an AI-powered voice and meeting product platform with three publicly visible product lines: AI Meeting Assistant for individuals and teams, Call Center AI for contact center environments, and AI Voice SDK for developers.

In the meeting space, Krisp offers, among other things, transcription, recording, AI notes, summaries, noise cancellation, accent adjustment, integrations, and webhooks. For call centers, additional features include Accent Conversion, Voice Translation, Agent Assist, and analytics functions.Krisp

AI Meeting Assistant with #1 Noise Cancellation

7.4/10 Good
Free Test access to premium features without a credit card; includes, among other things, transcription, noise cancellation, audio/video recording, AI notes, and action items. Subscription Core For individuals and small teams; unlimited AI note-taker, bot-free transcription, audio/video recording, AI notes, action items, in-person meeting notes, noise cancellation, as well as integrations/webhooks.

Advanced For advanced teams with enhanced meeting, integration, and voice AI features. Other Enterprise / Call Center AI Custom enterprise/call center options with security, integration, compliance, and support requirements.

AI Voice SDK Developer SDK for integrating Krisp Noise Cancellation/Voice AI into your own products; processing can take place on the customer side.
– (0)

Link

GDPR: Partly Krisp provides several components relevant to GDPR compliance on its website, including a privacy policy, a DPA/AVV, guidance on processing as a data processor, a list of subprocessors, and statements indicating that, where possible, data sharing and training with third-party providers are opt-out options. For the EU/EEA region, however, the situation is only partially favorable, because Krisp itself states for the enterprise/call center sector that all customer data is hosted on servers in the United States and that regional data residency outside the U.S. is not currently supported. At the same time, there are individual data-minimal or local processing methods, such as local noise suppression and, in some cases, device-based transcription. Thus, GDPR-compliant use is not guaranteed across the board, but only under specific use cases and with careful review of the data flow, the selected product line, and the contractual safeguards.
Positive
Positive aspects include the existing privacy policy, the published DPA, the identification of subprocessors, the statement regarding processing as a data processor for customers, SOC 2 Type II as the cited certification, and several references to local processing: According to the website, noise cancellation runs locally on the device, and audio is not sent to the cloud or a server; in transcription mode, transcription can take place entirely on the device, depending on the language and settings. On the security page for the AI Meeting Assistant, Krisp also explains that data sharing and training permissions are deselected for third-party providers, so that neither Krisp data nor customer data is to be used for model training.
Negative
From an EU/EEA perspective, the main concern is that Krisp explicitly states that its call center and enterprise offerings are hosted in the U.S. and, at the same time, explains that it currently does not support regional data residency outside the U.S. Additionally, the website lists several subprocessors located in the United States. Cloud processing is used for recordings and certain AI meeting assistant features; according to the help page, meeting recordings are stored in the cloud. The website does not provide evidence of clearly documented EU data residency for SaaS operations, a generally available self-hosting or on-premises option, or end-to-end EU/EEA operations for all product lines.
Server Location
For the Enterprise/Call Center segment, Krisp states that all customer data is hosted on secure servers in the United States and that regional data residency outside the U.S. is not currently supported. For the AI Meeting Assistant, the website does not specify a clear primary server location but refers to AWS infrastructure as well as subprocessors in the United States and Finland. EU/EEA data residency is not generally guaranteed on the website.

Link

"Gen AI With The Control You Need."

Paradigm is an enterprise GenAI platform from LightOn for private LLMs, enterprise search, RAG, document analysis, and knowledge work. The platform can be operated in a sovereign European cloud, private cloud, on-premises, or air-gapped environment.LightOn Paradigm

Gen AI With The Control You Need.

7.3/10 Good
Free LightOn API Starter
Free entry for API tests and initial OCR, extraction, and retrieval applications. Subscription API Business API usage for productive teams with business support and usage-based scaling.

Paradigm SaaS Seat-based enterprise AI with chat, RAG, enterprise search, permissions, and integrations.

Enterprise Custom deployment with SLA, SSO, SCIM, governance, private cloud, or on-premises. Other On-Premise / Air Gap Operation entirely within your own infrastructure for classified or regulated data.

Hybrid Deployment Local data storage combined with sovereign European GPU resources.

Professional Services Implementation, data connectivity, model integration, retrieval optimization, and customer-specific use cases.
– (0)

Link

GDPR: Yes LightOn Paradigm can overall be assessed as usable in a GDPR-compliant manner for users in the EU/EEA based on the provider's website, because LightOn explicitly offers on-premise, hybrid, and SaaS operating models with sovereign European cloud infrastructure, and for on-premise it even states that compute and data remain on the customer's infrastructure. In addition, the legal texts refer to GDPR compliance, DPA/AVV agreements with customers, and safeguards for international transfers. The assessment is based on the best available usage path in the EU/EEA, not only a possible standard SaaS setup.
Positive
Positive aspects are the clearly documented deployment options on-premise, hybrid, and SaaS on sovereign European cloud infrastructure. For hybrid, it states that data remains on-premise and only European cloud GPUs are used for inference. In the legal texts, LightOn identifies itself as a data processor for customer data and refers to a DPA/AVV concluded with the customer. In addition, there is a dedicated GDPR compliance page with data subject rights, protective measures, storage limitation, and information on international transfers.
Negative
Negative or limiting is that the specific server/data center location for Paradigm SaaS is not identified down to the country/data center level. The privacy policy only states that most processing directly controlled by LightOn takes place in France or in the EU and that some processing by subprocessors may take place in various locations. According to the website, a complete subprocessor list is only available upon request. Furthermore, an explicit general "no training on any customer content" is not comprehensively documented on the website for every usage scenario; training is explicitly excluded for feedback content transmitted to LightOn, while chat/support data is in some cases mentioned for service improvement or machine learning in the website/support context.
Server location
The website does not name a single specific Paradigm data center. The privacy policy states that most processing directly controlled by LightOn takes place in France or in the EU; further processing by subprocessors may occur in various locations. For the product page, SaaS is described as 'entirely hosted on sovereign European cloud infrastructure', hybrid with 'sovereign European cloud GPUs', and on-premise with data and compute on customer infrastructure.

Link

PayPerVideo creates short AI videos from text descriptions in the browser. According to the provider’s email, Grok, Veo 3.1, Seedance, Runway, Vidu, and Kling are available; these six model families are also listed on the website. Users select an engine themselves or use “Let AI Choose.” Payment is made per generation or via one-time purchased video packages, without creating a PayPerVideo account.PayPerVideo

Pay per video. No subscription.

3.3/10 Insufficient
Other Single AI Video / Pay-as-you-go One video generation; model selection; length, resolution, and aspect ratios depend on the model; commercial use according to the terms.

Starter Pack 5 AI Video Pack Five generation codes; one-time purchase; choice between the available models; according to the package description, codes do not expire.

Creator Pack 20 AI Video Pack Twenty generation codes; one-time purchase; model selection; according to the package description, codes do not expire.

30 AI Video Pack Thirty generation codes; one-time purchase; model selection; according to the package description, codes do not expire.
– (0)

Link

GDPR: Unclear The website does not demonstrate sufficient GDPR compliance for the EU/EEA area. Although there is a subpage titled 'Privacy Policy' that discusses the collection, use, storage, and protection of information, the content discoverable via the web tool lacks specific details on EU/EEA data residency, server location, AVV/DPA, subprocessors, opt-out from AI training, and certifications. Therefore, no reliable compliance assessment is possible for the entire European area.
Positive
At least a '/privacy' subpage is available on the website. In addition, the product page states that no account is required and promotes 'No subscription' and 'No signup', which can reduce the scope of directly collected account data.
Negative
The website does not specify an EU/EEA server location, EU data residency, an AVV/DPA, a subprocessor list, a contractual statement excluding AI training with customer data, on-premise/self-hosting options, or relevant certifications such as ISO 27001 or SOC 2. The website also mentions several external model families or integrations without transparently documenting the data protection-related integration of these providers on the website.
Server location
Not specified on the website. No specific location of servers or data centers for the EU/EEA can be found on the pages identified.

Link

"AI editing for every kind of video."

Descript is an AI-powered audio and video editor that lets you record, transcribe, edit, and publish content.

A key feature is text-based editing: video and audio editing works similarly to editing a document. Added to that are features like Underlord as an AI co-editor, screen recording, remote recording, AI voices, automatic clips, subtitles, and translation/dubbing.Description

AI editing for every kind of video

7.1/10 Good
Free Free entry for recording, transcription, text-based editing, and limited AI/media usage. Subscription Hobbyist For individuals; watermark-free projects, more media time, and basic AI features.

Creator For active creators and small teams; more media time, more AI credits, and advanced creative AI features.

Business For teams; more media time, more AI credits, Brand Studio, team features, translation/dubbing, and collaboration. Other Enterprise Custom offer with SSO, SCIM, centralized administration, dedicated Customer Success, security documentation, and Enterprise support.

AI Credits / Media Hours Usage is based on media time and AI credits depending on the plan; additional Enterprise and Team quotas are possible.
– (0)

Link

GDPR: Partly Descript provides several pieces of data protection and security information relevant to the EU/EEA region on its website, including a privacy policy outlining EEA rights, a list of subprocessors, information on data encryption, a DPO contact, and statements regarding AI training and opt-out options. At the same time, the website does not specify EU/EEA data residency or EU servers as mandatory options for standard SaaS use; rather, it states that Descript is based in the United States and processes and stores information in the United States. Thus, GDPR-compliant use from an EU/EEA perspective is not generally guaranteed, but is subject to conditions such as careful contract review, third-country transfer assessments, and internal risk assessments.
Positive
Positive aspects include the existing privacy policy, the explicit address to users in the EEA, the designated contact address of the Data Protection Officer, the published list of subprocessors, the statement regarding SOC 2 Type II compliance, the reference to DPAs with third-party providers, and an opt-out option for data sharing for internal AI training purposes. Additionally, Descript describes encryption at rest and in transit.
Negative
From an EU/EEA perspective, it is a negative that the website does not list any EU data residency, any EU/EEA data center, or any on-premises/self-hosting option. The privacy policy states that Descript is based in the U.S. and processes and stores information in the U.S. The subprocessors page lists locations primarily in the U.S. For AI Speakers, the privacy policy also reserves the right to use associated training data for research and development purposes; a general contractual exclusion for any form of training is not comprehensively documented on the website.
Server Location
The website does not specify an EU/EEA server location for customer data in a binding manner. The Security page lists Amazon S3 or Google Cloud as storage locations without guaranteeing an EU region. The privacy policy explicitly states that Descript is based in the U.S. and processes and stores information in the U.S.

Link

Midjourney is an AI tool for generating images and, by now, also short videos from text and image prompts.

Midjourney is an AI image generator with a web and Discord interface that translates text, reference images, and style prompts into high-quality visuals. Today, the tool covers not only classic text-to-image, but also image references, style references, Character/Omni References, moodboards, Describe functions, editor workflows, and short image-to-video animations. Particularly striking is the strong creative controllability through personalization and visual references. Important for professional use: Commercial use is generally permitted, but its suitability for data protection and enterprise use can only be rated as limited due to US-based storage, training-related concerns, and limited business administration.Midjourney

community-funded research lab … building the most beautiful AI models in the world

3.9/10 Insufficient
Subscription Basic Plan: Entry into image generation with limited Fast GPU time; no Relax Mode, no Stealth Mode.

Standard Plan: More Fast GPU time, unlimited image generation in Relax Mode, HD video possible in Fast Mode.

Pro Plan: More Fast GPU time, Stealth Mode, more simultaneous image/video prompts, Relax Mode for images and SD video.

Mega Plan: Highest official tier with maximum Fast GPU time and the highest parallelization limits within the standard plans. Other Annual Billing Annual payment with a discount compared to monthly payment.

Fast/Relax Mode Usage depends, depending on the plan, on fast GPU time and Relax Mode.

Stealth Mode Included only in Pro and Mega; is intended to keep images/videos private, but does not apply in open/shared rooms.
– (0)

Link

GDPR: No The information documented on the website does not demonstrate full GDPR compliance for users in the EU/EEA. On a positive note, Midjourney addresses EEA/EU-related issues in its privacy policy and specifies standard contractual clauses for data transfers. At the same time, the website explicitly states that the personal data processed by Midjourney is stored on servers in the United States. The website does not specify an EU data residency, EU/EEA data centers, a Data Processing Agreement (DPA), subprocessors, or an on-premises/self-hosting option. Additionally, the website states that data generated from the use of the service may be used to train the models.
Positive
Privacy policy available; separate notices for the EEA/EU, Switzerland, and the UK are provided; Standard Contractual Clauses for transfers from the EEA/EU context are mentioned; deletion of accounts and data is described; non-essential cookies are to be used only with explicit consent.
Negative
The website states that personal data is stored on Midjourney servers in the U.S. The website does not specify an EU data residency or an EU/EEA hosting option. A Data Processing Agreement (DPA) is not mentioned on the website. Subprocessors are not listed on the website. The privacy policy and training documentation explicitly state that data generated from the use of the service and user data may be relevant for training or for training machine learning algorithms; an opt-out option for general model training is not provided on the website. On-premises, self-hosting, or private cloud options are not listed on the website.
Server Location
As stated on the website: personal data processed by Midjourney is stored on Midjourney servers in the United States. EU/EEA server locations or EU data residency are not specified on the website.

Link

“The ultimate AI-powered camera control for filmmakers & creators” / Platform for AI video, image, audio, supercomputer, MCP/CLI, Marketing Studio, Cinema Studio, and AI Influencer.

Higgsfield AI is a creative platform for generative images, videos, ads, UGC, AI influencers, storyboards, VFX presets, camera movements, character consistency, and marketing content. The platform brings together many leading models and proprietary workflows in a single interface.Higgsfield.AI

The ultimate AI-powered camera control for filmmakers & creators

3.9/10 Insufficient
Free The official website advertises “Try Free”; specific permanently free limits were not fully confirmed in the publicly readable pricing content. Subscription Individual / Single Plans Higgsfield uses a credit-based model for image, video, and premium generations. The currently binding names and limits of the individual plans could not be fully verified on the dynamic pricing page during research access; the official pricing page is the authoritative source.

Team Plan Shared workspace for creative teams with collaboration on prompts, visuals, and videos; designed for joint production and team workflows.

Enterprise Enterprise offering with SOC-2-aligned security, SSO, custom integrations, audit logs, and SLA support according to the enterprise page; specific terms and privacy details must be requested. Other Credits Generations consume Credits depending on model, resolution, length, and function; according to the official MCP page, MCP uses the same Credit system as the Higgsfield platform.

MCP / CLI / API Use of Higgsfield generations via external agents or developer/automation access; API limits and restrictions may be set by Higgsfield.

Enterprise / Custom Individual workflows, integrations, security requirements, and volume needs via Enterprise sales; no fully verified publicly standardized pricing/performance scheme.
– (0)

Link

GDPR: Unclear The website includes a privacy policy with a section for European users in the EEA/UK, including EU/EEA representatives and information on international data transfers. However, for a robust assessment of GDPR compliance throughout the EU/EEA, the website lacks key information regarding data protection authorities (DPAs), subprocessors, EU data residency, specific server/data center locations, self-hosting, and a contractually guaranteed exclusion of AI training. Therefore, compliance for EU/EEA users as a whole can only be assessed as unclear.
Positive
The website includes a privacy policy, an explicit notice for European users in the EEA/UK, specified legal bases, data subject rights, and an EU/EEA representative in France. It also mentions that content can be deleted and that account content is typically removed within certain timeframes.
Negative
The website does not specify a Data Processing Agreement (DPA), a list of subprocessors, specific EU/EEA data centers or EU data residency, an on-premises/self-hosting option, a clear opt-out from AI training for prompts, uploads, or outputs, nor does it list relevant certifications such as ISO 27001 or SOC 2. The privacy policy also mentions international transfers to the U.S. or other locations.
Server Location
Not specifically stated on the website. The privacy policy only states that personal data may be transferred to the U.S. or other locations; specific server or data center locations within the EU/EEA are not mentioned.

Link

"Turn any idea into stunning images and cinematic video"

BasedLabs is an AI platform for creating and editing images, videos, and in some cases also audio/voice content.

Officially, the platform advertises, among other things, an AI Image Generator, AI Video Generator, Face Swap, Voice Changer, Video Editor, YouTube Video Editor, community/feed features, as well as an API for using models in your own applications. The focus is clearly on creator, social media, advertising, and content workflows.BasedLabs AI

Turn any idea into stunning images and cinematic video

3.3/10 Insufficient
Free Free AI tools and credits via platform/community; exact limits may vary. Other Starter One-time credit purchase for tests, images, and short videos.

Creator More credits for regular creator use.

Pro More credits, bonus credits, and more professional use.

Studio High credit volume for high-volume production.

Enterprise / API Enterprise pricing, API access, and custom solutions available.
– (0)

Link

GDPR: No Although the website contains a privacy policy that refers to GDPR rights for EU users, it does not demonstrate, from the perspective of the EU/EEA, that its use is fully or reliably GDPR-compliant. The website lacks specific information regarding EU/EEA data residency, server locations/data centers, a data processing agreement (DPA), a list of subprocessors, and a contractually guaranteed exclusion of training with user data. Additionally, the website lists BasedLabs AI, Inc. in Delaware, USA, with its principal place of business in San Diego, which typically leads EU/EEA users to expect cross-border data processing without the relevant safeguards being sufficiently documented on the website.
Positive
Positively noted are a publicly accessible privacy policy, explicit references to GDPR rights for EU users, a contact point for data protection inquiries, and an enterprise-level note regarding “SOC 2-compliant infrastructure” and encryption.
Negative
A major negative is that the website does not specify a concrete EU/EEA server location, does not guarantee EU data residency, no Data Processing Agreement (DPA) can be found, no subprocessors are disclosed, and no clear opt-out or contractual exclusion for AI training using user inputs, uploads, or outputs is documented. Furthermore, according to the Terms of Service, the platform is operated by a U.S. company.
Server Location
Not specified on the website. The Terms of Service only state that BasedLabs AI, Inc. is registered in Delaware, USA, and has its principal place of business in San Diego; specific server or data center locations or EU/EEA hosting are not mentioned.

Link

"The leading AI platform"

innoGPT is a German multi-model AI platform for private users, teams, and companies. Officially, it combines language models, image generation, voice integration, file/document work, a prompt library, projects, Code Interpreter, web search, academic search, Deep Research, assistants, integrations, and an API in one interface. It also includes team features, desktop apps, and a clear data protection/compliance focus with EU hosting, DPA, and Trust Center.InnoGPT

All AI models. One tool. Permanent updates. Fully GDPR-compliant

7.4/10 Good
Free Free trial period without payment details according to the provider; suitable for evaluation. Subscription Personal According to the public OMR profile for private use with access to all models and functions except team functionality.

Business According to the OMR profile for companies with all functions, all models, no limits, up to 1000 users, as well as SSO/SCIM/SAML. Other Enterprise Custom offer for large organizations; according to the OMR profile for 1000+ users, on-premise possible and individual support.

Shared-/Family models A shared-access/family model with EU hosting was mentioned publicly; specific functional details should be checked directly with the provider.
– (0)

Link

GDPR: Yes The website clearly emphasizes compliance with the GDPR for the European market: innoGPT describes EU hosting—specifically servers in Frankfurt am Main—a directly executable data processing agreement (DPA) in accordance with Article 28 of the GDPR, a zero-training/zero-retention policy, automatic deletion schedules, and a Trust Center featuring subprocessors and compliance documents. Additionally, according to the Help Center, admin settings are available for different model hosting levels, including “EU Hosting / EU Processing.” From an EU/EEA perspective, this provides a documented path to GDPR-compliant use.
Positive
Positive aspects include EU/Germany hosting for the core infrastructure, a data processing agreement (DPA) in accordance with Article 28 of the GDPR, documented subprocessors in the Trust Center, zero training as stated on the security page and in the Help Center, ISO/IEC 27001:2022 in the Trust Center, and a clearly described data flow with storage and deletion after 180 days. Additionally, the website lists hosting options for individual models, such as “EU Hosting / EU Processing,” which is relevant for EU/EEA users.
Negative
A limitation is that the website also states that not all models are processed exclusively within the EU: The Help Center mentions “EU Hosting / Global Processing” and “Global Hosting / Global Processing” as well. As a result, actual compliance in individual cases depends on the model selected and the admin settings. The website does not consistently provide comprehensive evidence to support a claim that, without exception, all processing for all models takes place exclusively within the EU/EEA.
Server Location
The website specifies servers in Frankfurt am Main, Germany, for core data and platform hosting, as well as hosting within the EU in general. According to the Help Center, three levels are listed for individual models: “EU Hosting / EU Processing,” “EU Hosting / Global Processing,” and “Global Hosting / Global Processing.”

Link

Amazon Nova is Amazon's own family of foundation models for text, image/video understanding, document analysis, agents, tool use, and speech.

Nova is used via Amazon Bedrock APIs, in particular InvokeModel, InvokeModelWithResponseStream, Converse, ConverseStream, and, for Sonic, via bidirectional streaming.Amazon Nova API

LLM “frontier intelligence” - “industry-leading price-performance”

6.8/10 Solid
Free AWS shows “Get started for free,” but for Amazon Nova/Bedrock, publicly documented billing is primarily usage-based; specific free quotas depend on AWS offerings, region, and account. Other On-Demand / Standard Tier Usage-based inference by model, modality, and tokens or image/video/special usage.

Flex / Priority / Reserved Tiers Bedrock supports different service tiers to manage cost, availability, latency, and throughput.

Batch Inference Asynchronous processing of larger workloads; according to AWS, cheaper than On-Demand for selected models.

Provisioned Throughput Reserved capacity for higher or predictable throughput; required for certain custom or production scenarios.

Fine-Tuning / Custom Models Customization using your own training/validation data; use of individual models typically via provisioned capacity.

Guardrails / Knowledge Bases / Agents / Prompt Routing Additional Bedrock features for security, RAG, agent orchestration, model routing, and governance.
– (0)

Link

GDPR: Partly The documentation on the AWS website outlines several components for GDPR-compliant use in the EU/EEA context: AWS references a GDPR-compliant DPA, refers to SCCs for international transfers, describes Bedrock/Nova as capable of being supported in a GDPR-compliant manner, and documents in-region and EU-specific processing options. At the same time, the documentation found does not allow for the inference of a comprehensive, automatic “EU-only” default configuration for all Nova scenarios; compliance depends on the specific region selected, the chosen Bedrock routing, and the customer’s configuration. Therefore, from an EU/EEA perspective, its use can only be considered GDPR-compliant under certain conditions.
Positive
Positive aspects include an AWS Data Processing Addendum, which, according to AWS, is GDPR-compliant and applies automatically; SCCs or additional safeguards for transfers; the option for processing in an EU region; references to EU-based data residency with Bedrock routing; encryption at rest and in transit, customer-managed key management, and the statement that inputs/outputs via Amazon Bedrock are not used to train Amazon Bedrock models, including Amazon Nova.
Negative
A negative or limiting aspect is that the documentation for Amazon Nova itself does not guarantee a blanket EU/EEA-only operating mode as the standard for all usage scenarios. In addition to in-region routing, Bedrock offers geo- and global routing; for GDPR-sensitive cases, the customer must therefore actively select the appropriate option. The website does not specify an explicit Nova-specific server location for all functions, a Nova-specific list of subprocessors, an explicit self-hosting/on-premises deployment of Nova, or a clear statement regarding open-source components.
Server Location
The website documents for Amazon Bedrock that in-region processing remains strictly within the selected region and that geo-routing can occur within a geographic area such as the EU. For Amazon Nova, the Bedrock regional table lists at least one EU region as available, namely 'eu-north-1 (Stockholm)' for Nova 2 Sonic. A general, central server location for Amazon Nova is not specified on the website.

Link

"Stable Diffusion is a deep learning model used for converting text to images" / "Use Stable Diffusion online for free"

stablediffusionweb.com is a web interface for using Stable Diffusion models, especially Stable Diffusion XL. It offers text-to-image, a prompt database, upscaling, partly video/advanced models, and a credit-based pricing model.Stable Diffusion

Stable Diffusion is a deep learning model used for converting text to images

3.6/10 Insufficient
Free Free use with a daily credit quota, a limited number of images per generation, without ads/watermarks according to the pricing page; commercial license and private images/videos are not included. Subscription Pro Monthly credit allowance, more images per generation, no ads, no watermark, upscaling, advanced image and video models, commercial license, and private images/videos.

Max Higher monthly credit allowance, Pro features, advanced models, commercial license, and private images/videos. Other Credit/Usage Logic Usage is based on credits; specific consumption values depend on the function.

Contradictory Contract Presentation Pricing describes monthly/annual plans, while the Terms simultaneously refer to a software license without recurring fees; the pricing/contract logic should be reviewed before purchase.
– (0)

Link

GDPR: Unclear The website does mention a privacy policy and states that the service acts as a controller and processor within the meaning of the EU GDPR. However, for a reliable assessment of usability throughout the EU/EEA, key information is missing on the website, in particular regarding server location/data center, EU data residency, data processing agreement, subprocessors, international data transfers, and a contractual exclusion of training on user data.
Positive
It is positive that a dedicated privacy policy is available and explicitly mentions the GDPR. In addition, the website states that information is only collected when it is needed to provide the service, that data is only stored for as long as necessary for the requested service, and that personal data is not intended to be made public or shared with third parties, except where this is required by law.
Negative
It is negative that no server location and no EU data residency are specified on the website. A DPA is not specified on the website. A list of subprocessors is not specified on the website. Certifications such as ISO 27001 or SOC 2 are not specified on the website. An opt-out option for AI training is not specified on the website. In addition, the Acceptable Use Policy describes that prompts, uploads, and outputs may be reviewed automatically and manually, without the website explaining a more detailed data protection framework for EU/EEA users.
Server location
Not specified on the website. Neither specific server locations nor EU/EEA data centers or EU data residency are mentioned.

Link

"The central AI platform for your company."

Logicc is a central B2B AI platform that bundles several leading models into one interface and offers features such as web search, deep research, document chat, image generation, assistants, and code support.

The platform is clearly geared toward businesses and advertises EU/Germany hosting, "No AI training," and optional hosting on your own servers. Officially, Logicc mentions, among others, ChatGPT/OpenAI, Gemini, Claude, and Mistral models, as well as Smart Select AI for automatic model selection.Logicc

The central AI platform for your company

7.4/10 Good
Free Free trial period with no obligation; suitable for trying out in a team. Subscription Business Access to all AI models, Smart Select AI, unlimited document uploads, text/voice/document chat, web search, security standards, EU computing, no AI training, and GDPR compliance.

Secure+ Everything in Business plus team collaboration, custom assistants, shared assistant library, higher usage limit, priority support, and a stronger focus on secure team use.

Max Everything in Secure+ plus very high usage limits, access to powerful models, §203 StGB confidentiality agreement, SSO/Identity Management, end-to-end encryption, and support for security/privacy questions. Other Enterprise Custom offering with many users, individual API integrations, SSO/Identity Management, advanced compliance features, dedicated support, SLA, onboarding workshop, training, possible own server hosting, and model API.

Own API keys / integrations / model API Relevant in higher-tier or Enterprise contexts for individual system connectivity, databases, software integration, and API usage.
– (0)

Link

GDPR: Yes Based on the information published on the Logicc website itself, a clearly documented path to GDPR-compliant use within the EU/EEA is evident. Logicc describes data storage exclusively within the EU, storage on German servers, AI processing conducted solely within the EU, the General Terms and Conditions (AVV) including Terms of Use (TOMs) and information on subprocessors, as well as a contractual and technical prohibition on the use of customer data for model training. In addition, the website lists hosting on the company’s own servers as an option, which further reinforces this as the best available approach.
Positive
Particularly positive are the points mentioned on the website: GDPR-compliant within the EU, conversation and application data stored on German servers, AI processing exclusively within the EU, zero data retention by model providers, no model training using customer data, Terms of Service (TOS) including Terms of Use (TOMs) and information on subprocessors used, as well as the mentioned option of hosting on one’s own servers.
Negative
A limitation is that, although the website makes numerous claims regarding data protection and provides structural details, no separately accessible list of subprocessors was found; instead, it merely states that information on subprocessors is included in the General Terms and Conditions. The pages reviewed also lack specific statements regarding SOC 2, an explicit “EU data residency” product option as a selectable tenant/region mechanism for customers, and specific open-source components of the platform.
Server Location
The website states that all conversation and application data is permanently stored in the ISO 27001-certified data centers of Hetzner Online GmbH in Nuremberg and Falkenstein. It also states that data processing for all AI models available on Logicc takes place exclusively within the European Union.

Link

“A one-stop, integrated AI developer studio for end-to-end development of AI applications.”

IBM watsonx.ai is a development platform for building, customizing, testing, and deploying generative AI, traditional machine learning models, and AI agents. It combines foundation models, prompt and agent tools, RAG, AutoAI, APIs, notebooks, and production runtimes in a single environment. The platform can be operated as IBM Cloud SaaS or via IBM Software Hub in your own OpenShift environments.IBM watsonx.ai

A comprehensive, all-in-one AI development studio for end-to-end development of AI applications.

8.0/10 Very good
Free Toolbox Playground / Free Free plan with a limited monthly foundation model quota, limited machine learning compute hours, and limited text extraction. Suitable for testing, playground use, and initial prototyping.

Lite Runtime Plan Free runtime plan with limited capacity for testing machine learning and inference. Foundation model tuning is not supported on the Lite plan. Subscription Essentials – Pay-as-you-go For production deployments with no fixed minimum usage; usage-based billing for models, machine learning, text extraction, model tuning, and other resources.

Standard – Pay-as-you-go Enterprise plan with a larger included compute quota and additional usage-based billing; designed for extensive production and enterprise workloads.

HIPAA-Ready Specialized plan for generative AI and machine learning under HIPAA security and privacy requirements; officially available only in the IBM Cloud Dallas region. Other IBM Foundation Models Use IBM Granite models via pay-as-you-go inference or dedicated on-demand hosting, depending on the model.

Third-party models Access to models from Meta, Google, DeepSeek, Mistral, and others; usage-based inference or dedicated on-demand deployment, depending on the model.

Embedding and Reranking Models Usage-based billing for IBM and third-party embedding models, as well as reranking capabilities for semantic search and RAG.

Deploy on Demand Dedicated hosting of selected foundation models with hourly runtime billing; availability depends on the model and region.

Machine Learning / AutoAI Usage-based billing via Capacity Unit Hours for training, AutoAI, model deployment, and scoring.

LoRA/QLoRA Fine-Tuning Customization of supported foundation models using your own data; according to IBM, QLoRA is available in Frankfurt and Dallas, among other locations.

Custom Foundation Models Import, hosting, and deployment of customer-owned or customized foundation models on dedicated infrastructure.

IBM Software Hub / On-Premise Self-operated watsonx.ai installation on Red Hat OpenShift, including a private registry and optional air-gapped environment; customized software, infrastructure, and support agreement.

Enterprise Support Extended support and SLA options in addition to the included basic support.
– (0)

Link

GDPR: Yes For users in the EU/EEA, GDPR-compliant use in accordance with the best available practice documented on the IBM website is well-documented, because IBM provides a DPA for the processing of personal data and watsonx.ai can be operated not only as SaaS but also via the IBM Software Hub in a user’s own OpenShift environment or on-premises. In addition, EU regions are designated on IBM Cloud for watsonx.ai Runtime and watsonx.ai Studio. This provides a relatively straightforward path to data-sovereign usage within Europe, particularly through self-hosting or EU regions. However, a blanket statement that any standard SaaS usage is automatically fully GDPR-compliant cannot be substantiated in every detail on the website.
Positive
IBM outlines a data protection infrastructure that includes the IBM Privacy Statement and the IBM Data Processing Addendum. For watsonx.ai, EU regions on IBM Cloud are documented, specifically Frankfurt for watsonx.ai Runtime and watsonx.ai Studio. Additionally, watsonx.ai can be installed via IBM Software Hub on private, on-premises, or the customer’s own OpenShift infrastructure. In the FAQs, IBM also states that prompts do not train the foundation models and that customer data is intended to remain private to the account.
Negative
No standalone, product-specific subpage for watsonx.ai was found on the website that provides a clear, comprehensive EU/EEA data residency commitment for all pricing plans and all components. A specific, publicly accessible list of subprocessors specifically for watsonx.ai was not found; instead, IBM refers generally to DPAs, privacy information, and, in some cases, lists available upon request. An explicit opt-out mechanism is also not described separately on the website but is only indirectly addressed by the fact that, according to the FAQs, customer data is not used for model training.
Server Location
For the SaaS/IBM Cloud version, EU locations are documented on the IBM website, specifically Frankfurt (eu-de) for watsonx.ai Runtime and watsonx.ai Studio. An IBM article on watsonx on IBM Cloud also mentions secure facilities in Dallas and Frankfurt. When using the service via IBM Software Hub or on-premises, the customer determines the infrastructure location themselves. Other specific server locations for all watsonx.ai components are not consistently listed on the website.

Link

“Chat with any PDF using AI: ask questions, get summaries, and find answers.”

PDF.ai is an AI tool for chatting with PDF documents.

Users can ask questions about PDFs, generate summaries, find content, and extract data; in addition, the provider offers an API for Parse, Extract, Split, and Ask for document-driven workflows. The product is positioned as a web app, Chrome extension, and API.PDF.ai

Chat with any PDF using AI: ask questions, get summaries, and find answers

4.0/10 Limited
Free Free start or demo/trial use for uploading and chatting with PDFs; exact limits should be checked on the live pricing page. Subscription Starter Monthly credit quota for PDF.ai usage and API/document workflows.

Pro Higher credit quota for more intensive PDF analysis and document processing.

Scale Significantly higher credit quota for teams or larger document volumes.

Growth Very high credit quota for extensive workflows. Other API API for parsing, extracting, splitting, and processing PDFs in your own workflows.

Credits Usage-based billing via monthly credits per plan.
– (0)

Link

GDPR: Unclear For the EU/EEA area, a certain security and privacy orientation is apparent on the website, but the evidence central to a reliable GDPR assessment is missing or not specified on the website. Positive aspects include references to encrypted transmission and storage, a private document option without contact with cloud storage, as well as statements that documents are not used for other purposes. However, the website lacks clear information on EU/EEA data residency, specific server locations, DPA/AVV, subprocessors, and relevant certifications of the provider itself.
Positive
The website contains statements about encrypted storage and transmission, a private document option in which documents do not come into contact with cloud storage, as well as limited purpose limitation of processing. In addition, the API website states for the parse function 'files deleted after processing'.
Negative
The website does not specify EU/EEA data residency, specific server or data center locations, a DPA/AVV, a list of subprocessors, an explicit opt-out from AI training at the policy/contract level, on-premise/self-hosting offerings, or certifications such as ISO 27001 or SOC 2 of the provider itself. The indication that a 'data storage partner' is SOC2 Type II accredited does not replace this evidence.
Server location
Not specified on the website. Only a 'data storage partner' is mentioned, which according to the website is accredited as 'SOC2 Type II'; no country, EU/EEA reference, or specific data center location is stated.

Link

“Boost visibility in Google, ChatGPT, and beyond.”

Surfer is an SEO and AI visibility platform for planning, creating, optimizing, and monitoring content.

The product combines Content Editor, Topical Map, Content Audit, SERP Analyzer, Audit, as well as AI visibility tracking for systems such as ChatGPT, Perplexity, Google AI Overview, Google AI Mode, and Gemini. In addition, it includes AI writing features, internal linking, integrations, and team/workspace functions.Surfer

Boost visibility in Google, ChatGPT, and beyond

7.1/10 Good
Free Free tools such as Chrome Extension, AI Writing Tools, AI Detector, Humanizer, and courses; no fully featured permanently free version of the Surfer platform. Subscription Discovery Getting started with content creation and optimization, limited documents, page tracking, AI SEO guidelines, Surfy, and Humanizer.

Standard Unified SEO workflow, more documents, AI visibility tracking, AI prompts, integrations, brand knowledge, 1-click content optimization, and team collaboration.

Pro Everything in Standard plus more AI prompt tracking, multiple brand workspaces, internal linking, content ideas, coverage gap, templates, custom voices, and cannibalization report.

Peace of Mind Everything in Pro plus more unlimited optimization, more AI visibility tracking, API access, and VIP/scale features. Other Enterprise Customized packages with SSO, Enterprise Security, Advisory, Legal Onboarding Assistance, Early Access, Custom Limits, White-Label, Priority Support, and Team Onboarding.

AI Credits / Top-ups Additional AI credits can be added to active subscriptions.
– (0)

Link

GDPR: Partly Surfer documents on its own website a GDPR reference, customer privacy notices, and an integrated AVA/DPA through acceptance of the customer clause. For users throughout the EU/EEA, this is positive. At the same time, Surfer lists processing locations for hosting and several subprocessors as 'EU / United States', 'United States', or 'Global' and explicitly permits transfers outside the EEA based on appropriate safeguards. A binding EU data residency only within the EU/EEA, an exclusively European server location, or an on-premise/self-hosting option is not stated on the website. Therefore, GDPR-compliant use in the EU/EEA appears possible only under certain conditions, not as clearly and comprehensively demonstrated.
Positive
There is a general privacy policy, a customer privacy policy, and a DPA provision on the website. The customer privacy policy states that customers enter into a Data Processing Agreement by accepting the clause, that Surfer provides support with Art. 28 / Art. 32 matters, enables audits, and publishes a list of subprocessors with processing locations. Surfer identifies itself as a Polish company and expressly refers to the GDPR.
Negative
For the actual hosting, Surfer lists Google Cloud Platform with processing location 'EU / United States' and Cloudflare with 'Global'. According to the list, several other subprocessors process data in the United States or globally. Surfer expressly reserves the right to transfer data outside the EEA. Fixed EU data residency, exclusive EU/EEA hosting, an opt-out from AI training for user inputs, as well as on-premise/self-hosting are not stated on the website.
Server location
According to the subprocessor list: Google Cloud Platform for hosting, data processing, storage, and backups with processing location 'EU / United States'; Cloudflare for CDN, security, and data transmission with processing location 'Global'. A specific single data center or an exclusively EU/EEA data center is not stated on the website.

Link

“The Visual No Code App Builder – Now Powered By AI”

Adalo is a visual no-code platform for building and publishing database-driven web apps as well as native iOS and Android apps from a single project.

AI features such as Ada, Magic Start, Magic Add, Visual AI Direction, and X-Ray support the generation, editing, and review of apps using natural language. The focus is therefore on app building, data modeling, publishing, and integrations—not on an isolated AI chat or content tool.Adalo

The Visual No Code App Builder – Now Powered By AI

6.4/10 Solid
Free Free plan for building and testing, unlimited screens, limited records per app, and Ada AI Assistant. Subscription Starter One published app, unlimited App Actions, one App Editor, Custom Fonts, Custom Domain, Publish to Web, automated app store publishing, no Adalo branding, and Ada AI Assistant.

Professional More published apps, more employees/editors, more storage, and advanced integrations.

Team More published apps, more editor/team capacity, Priority Support, and team-oriented capacity increases.

Business More apps, unlimited editor structure or stronger team/business features, and enterprise-level enhancements. Other Adalo Blue Dedicated infrastructure, custom monitoring, on-premise option, and connection to any data sources, including legacy systems without an API. Add-ons Additional published apps and additional app editors can be added depending on the plan.
– (0)

Link

GDPR: Partly Adalo provides a privacy policy on its website and a Data Processing Agreement (DPA) embedded in its Terms of Service, with explicit reference to the GDPR. At the same time, according to its privacy policy, Adalo is based in the United States and describes international data transfers only in general terms as involving “appropriate safeguards,” without providing evidence on its website of a specific EU/EEA server location, EU data residency, or an EU SaaS option. For users throughout the EU/EEA, GDPR-compliant use is therefore justifiable at best under certain conditions, particularly based on the DPA and following a careful independent review of the transfers and the categories of data used.
Positive
Positive aspects include a published privacy policy, a DPA/SLA as part of the Terms, the explicit mention of the GDPR, the allocation of roles with the customer as the controller and Adalo as the processor, and the statement that “Customer Content” is processed only on behalf of and in accordance with the customer’s instructions.
Negative
On the negative side, the website does not document any EU/EEA data center, any EU data residency, any on-premises/self-hosting option, or a robust opt-out for AI training. Furthermore, the website refers to international data transfers only in general terms and does not list any specific subprocessors in Schedule 2 of the DPA, but rather lists “N/A.”
Server Location
The privacy policy states that Adalo is based in the U.S. and that data may be transferred, stored, and processed in countries where Adalo or its service providers operate. The website does not specify a specific server or data center location or EU/EEA data residency.

Link

“When something feels off, Buoy it”

Buoy Health is a U.S. digital health/AI tool for symptom checking, initial clinical assessment, triage, and care navigation.

End users can enter symptoms via chat/quiz and receive possible causes, guidance on urgency, and recommendations for next steps in care. In addition, Buoy offers clinically editorially supervised health content, disease-specific AI quizzes, as well as an API for integration into apps, websites, and patient portals.Buoy Health

When something feels off, Buoy it

3.4/10 Insufficient
Free Free to use; account creation is free according to the Help Center. Includes AI-powered symptom checking, clinical guidance, and indications of possible next steps. Other Buoy API / Enterprise Programs Symptom-checking and triage engine for integration into websites, apps, or organizational programs; demo/contract model for organizations.

Third-Party Services / Care Navigation Buoy can direct users to third-party providers, health services, or care pathways; availability and terms depend on the respective partner.
– (0)

Link

GDPR: No Although the website includes a privacy policy and general security information, it does not provide any reliable details regarding EU/EEA data residency, EU data centers, data processing agreements (DPAs), subprocessors, or a GDPR-specific processing framework. On the contrary, the privacy policy explicitly states that Buoy is operated from the United States and that data processing is subject to U.S. law. For users throughout the EU/EEA, the website therefore does not demonstrate fully GDPR-compliant use.
Positive
Positive aspects include a publicly accessible privacy policy, references to technical and organizational security measures such as encryption, firewalls, identity management, and intrusion prevention/detection, as well as a mentioned HITRUST certification. In addition, Buoy describes options for filing complaints and contacting the company via email.
Negative
A particular negative factor for an EU/EEA GDPR assessment is that the website describes Buoy as being controlled and offered in the U.S., and the privacy policy explicitly states that U.S. law—and not the law of other jurisdictions—applies. Furthermore, the Terms of Service state that users must be located in the U.S. to use the services. The website does not specify EU server locations, EU data residency, SCCs/transfer mechanisms, AVV/DPA, a list of subprocessors, the option to opt out of AI training for general models, or on-premises/self-hosting options.
Server Location
Not specified on the website. The Privacy Policy merely states that Buoy is controlled and offered from the United States; specific server or data center locations in the EU/EEA are not mentioned.

Link

"The leading AI management and orchestration platform" / "AI platform – Made in Germany"

The neuland.ai HUB is an AI management and orchestration platform for companies. It brings together AI chat, assistants, projects, workflows, AI apps, integrations, document processing, governance, and model strategy within a controlled enterprise framework.neuland.ai

AI platform – Made in Germany

6.4/10 Solid
Free Free trial period with full access to get started, AI chat with your own documents, prompt tests, and creation of assistants; no credit card and no commitment according to the pricing page. Subscription Business Business plan for teams with scalable usage, core modules, AI assistants, projects, assistant creation, as well as centralized role and permission management.

Enterprise Customized enterprise package with unlimited users and use cases, tailored AI systems, AI apps, integration into existing IT systems, cloud or on-premise operation, industry competency models, as well as advanced security and compliance options. Other Custom onboarding Implementation support by Customer Success with a tailored onboarding plan for Business and Enterprise customers. Other Custom AI apps Development, operation, and monitoring of custom AI applications tailored to business processes and systems.

Custom enablement / academy Training, change support, and structured rollout for sustainable AI use within the company.

On-premise & dedicated hosting Operation of the neuland.ai HUB in your own infrastructure or a dedicated environment for the highest security requirements, data sovereignty, and regulated environments.

AI app store / SDK Marked as “Coming soon”: access to agentic AI apps as well as an SDK for custom AI apps, agents, and integrations.
– (0)

Link

GDPR: Yes The website outlines a clear path for GDPR-compliant use within Europe. Decisive factors are the explicitly stated options 'Secure EU hosting or on-premise operation', the statement that the entire neuland.ai HUB as well as all deployed models are operated and processed exclusively in the EU, and the claim that the platform complies with the GDPR. Since the assessment should reflect the best available path, compliance here should be rated as 'yes'.
Positive
Positive aspects are the EU operating models mentioned on the website, in particular EU hosting and on-premise operation, the statement regarding exclusive processing in the EU, the explicit mention of GDPR compliance, and the existing privacy policy. In addition, the published ISO/IEC 27001:2022 certification indicates a formalized level of information security.
Negative
A negative or limiting factor is that no specifically named server location at country level within the EU/EEA is stated on the website in the subpages found. Likewise, no separately identifiable information was found on the website regarding a DPA/AVV, subprocessors, or an explicit opt-out or contractual exclusion of AI training using customer data.
Server location
The website mentions EU hosting or exclusive processing in the EU; however, no specific country, data center, or data center operator is specified on the website.

Link

“Truly usable and practical AI”

Tencent Hunyuan is Tencent Cloud’s AI model family. It includes text models, reasoning models, vision, video understanding, image generation, translation, 3D generation, and open-source models. Tencent positions Hunyuan for content creation, mathematics, code, dialogue, enterprise scenarios, and multimodal workflows.Tencent Hunyuan / Tencent HY

LLM “Truly usable and practical AI”

3.9/10 Insufficient
Free Free Resource Package / Test Quota
Upon initial activation of Tencent HY Text Generation Global, a one-time free test quota is provided as a Resource Package; after it is used up or expires, postpaid activation is required. Other Token Postpaid / Pay-as-you-go API billing based on token consumption for Hunyuan text functions; billing via Tencent Cloud according to usage and with postpaid enabled.

Tencent HY 3D Global Separate product for 3D generation from text, image, or sketch with its own billing and API/cloud usage.

Enterprise / Tencent Cloud Agreements Individual cloud, contractual, and compliance setups are possible via Tencent Cloud; specific terms and data regions must be reviewed contractually.
– (0)

Link

GDPR: Unclear On the specified product page for Tencent Hunyuan itself, there is no reliable information on EU data residency, a Hunyuan-specific AVV/DPA module, a contractual exclusion of AI training with customer data, or an EU/EEA-specific hosting option. While the Tencent Cloud website does contain general privacy and DPA documents as well as a European contact for the EEA/Switzerland, the information available on the website does not allow a clear conclusion that Tencent Hunyuan can be used in a GDPR-compliant manner throughout the entire EU/EEA area.
Positive
The website documents a general privacy policy for Tencent Cloud, a general Data Processing and Security Agreement, and European regions such as Frankfurt. In addition, for users in the EEA/Switzerland, Tencent Cloud Europe B.V. in the Netherlands is named as the responsible entity for the privacy policy.
Negative
The website does not specify the following for Tencent Hunyuan itself: the specific server location of the service, guaranteed EU data residency, Hunyuan-specific subprocessors, a Hunyuan-specific AVV/DPA annex, a documented on-prem/self-hosting option in the product documentation, or a clear statement that prompts, uploads, or outputs are not used to train general models.
Server location
For Tencent Cloud in general, regions are documented, including 'Europe (Frankfurt)'. For Tencent Hunyuan itself, no specific server or data center location is stated on the website.

Link

"Work AI that Works"

Glean is an enterprise work AI platform that brings together search, assistants, and agents across enterprise data.

The platform connects to business applications, documents, chats, and tickets, respects existing permissions, and supports features such as enterprise search, generative answers, data analysis, deep research, and agentic automation. It is clearly geared toward enterprises rather than consumer self-service.Glean

Work AI that Works

7.7/10 Good
Subscription Glean Enterprise Work AI platform with Enterprise Search, Assistant, Agents, Connectors, permissions, company context, and security features.

Glean Enterprise Flex Seat-based licensing combined with pooled FlexCredits for advanced AI features; includes platform capabilities and usage-based premium features. Other FlexCredits / Usage-based Features Advanced features such as Thinking Mode, Deep Research, Data Analysis, Canvas, image understanding, and other features may consume credits.

APIs / Developer Platform / MCP APIs for Search, Chat, and Agents; integrations with Cursor, Claude Code, Copilot, and MCP hosts.
– (0)

Link

GDPR: Partly Glean documents several components relevant to the GDPR in the EU/EEA region on its own website: GDPR compliance, a Data Processing Addendum with SCCs, a list of subprocessors, customer rights for the EEA, and customer-controlled hosting options—including deployment in preferred regions and operation in the customer’s own AWS, Azure, or GCP cloud. At the same time, the website indicates that standard subprocessors and LLM/cloud providers are based in the U.S., and the general privacy policy describes international transfers to the U.S. This appears to offer a viable path for GDPR-compliant use in the EU/EEA, but not as a simple, blanket solution for standard SaaS usage in all cases.
Positive
Positive aspects include the published DPA with EU Standard Contractual Clauses, the explicit designation of Glean as a data processor in the DPA, the documented support for data subject rights and data protection impact assessments, the list of subprocessors, the statement on data sovereignty across global regions, the option for an isolated single-tenant deployment, and customer-hosted deployments in their own AWS, Azure, or GCP cloud. In addition, Glean lists certifications and attestations such as SOC 2 Type II, ISO/IEC 27001, and ISO/IEC 42001.
Negative
A negative or limiting aspect is that the website does not provide a specific commitment regarding EU/EEA data centers for the standard deployment, with named countries or regions. The published list of subprocessors includes numerous U.S. providers, such as AWS, Google, Microsoft, OpenAI, Anthropic, Groq, Fireworks.ai, and Snowflake, as well as a support affiliate in India. The privacy policy also describes data transfers to the U.S. or other jurisdictions. The website does not provide a reliable statement confirming that the standard SaaS version is processed entirely within the EU/EEA.
Server Location
The website does not provide a fixed list of EU/EEA servers with specific countries for the standard SaaS version. It mentions global regions such as “AMER, EMEA, or APAC,” as well as customer-controlled deployment in the preferred region. The list of subprocessors includes several U.S. subprocessors and an affiliate in India. For customer-hosted deployments, the website refers to the customer’s own AWS, Azure, or GCP cloud; the specific EU/EEA location would be selectable by the customer, but is not further specified on the website.

Link

"Your Visual Studio"

Fotor is a web-based creative and image editing tool with AI features for photo enhancement, background removal, retouching, text-to-image, image-to-video, design templates, and AI agent workflows.

The tool runs in the browser as well as on Windows, Mac, iOS, and Android and is aimed at beginners, content teams, marketers, freelancers, and smaller businesses that want to create visual content without complex professional software.Fotor

Your Visual Studio

4.5/10 Limited
Free Free forever; limited credits, one simultaneous generation, few chats and tasks with AI Agent Sisi, basic editing, basic templates, limited effects/fonts, limited creation storage duration, small cloud storage, and exports with watermarks. Subscription Fotor Pro More credits, multiple simultaneous generations, significantly more AI Agent Sisi chats, AI Agent tasks, 100+ editing tools, AI portrait retouch, many templates/assets, premium effects/fonts, exclusive AI models, unlimited creation storage duration, more cloud storage, and watermark-free HD/transparent PNG exports.

Fotor Pro+ Everything in Pro plus more credits, more parallel generations, more AI Agent Sisi usage, AI batch edit for Background Remover/Replacement, multiple brand kits, AI slides generation, significantly more cloud storage, and advanced project/asset features. Other Fotor Max / Credits Higher usage and storage limits; Fotor uses credits for AI models and mentions rollover of unused credits with an active subscription for up to a certain period.

AI Headshot Plans One-time headshot packages for individual and team use with AI Headshots, Redo, fast processing, and HD quality.

API Plans API plans are listed as a separate section on the pricing page; specific usage should be checked separately.
– (0)

Link

GDPR: No The website includes a privacy policy, but the information provided does not clearly demonstrate compliance with the GDPR from an EU/EEA perspective. For AIGC inputs, AIGC outputs, and face data-related processing, Fotor cites servers from Amazon Web Services in the United States. The website does not specify EU/EEA data residency, a Data Processing Agreement (DPA), a list of subprocessors, or a self-hosting/on-premises option. Consequently, there is no fully documented evidence of GDPR-compliant use for users in the European region.
Positive
Positively documented are a published privacy policy, options for deleting personal data, and statements that Face Data is not used to train other AI products. Furthermore, it states that content is transferred to third-party models only after explicit user action and engine selection, and is to be used solely for the requested generation.
Negative
From an EU/EEA perspective, the following are particularly negative: the explicitly stated server locations in the U.S. for AIGC inputs, AIGC outputs, and Face Data, the absence of an EU data residency policy on the website, the absence of a Data Processing Agreement (DPA) on the website, the absence of a list of subprocessors on the website, and the lack of any on-premises, private cloud, or hybrid options specified on the website. In addition, the privacy policy refers to the laws of the People’s Republic of China and designates Chengdu as the place of jurisdiction.
Server Location
The privacy policy specifies Amazon Web Services servers in the United States for AIGC inputs, AIGC outputs, and Face Data. No other EU/EEA data center locations are listed on the website.

Link

“All-in-one AI video and audio platform” Async is an AI platform for audio and video production with remote recording, editing, AI voices, voice cloning, dubbing, subtitles, clips, and publishing workflows.



The product is aimed at both solo creators and teams and companies that want to produce podcasts, video formats, social clips, or voice-first content. The platform combines recording, post-production, and publishing in one workflow.Async

All-in-one AI video and audio platform

6.9/10 Solid
Free Free entry with limited AI credits, limited media upload, text-to-speech, cloud storage, and basic features. Subscription Essentials More monthly AI Credits, unlimited media upload in AI Chat, more text-to-speech, AI Clips, Reframe, Dubbing/Lipsync, Subtitles, Thumbnail Generator, and more storage.

Pro Higher credit amount, greater usage for video, audio, and voice features, more storage, and professional creator workflows.

Teams Team workspace, collaboration, significantly more credits and storage, shared use for teams. Other Business Customized business offering with custom credits, custom storage, live support, onboarding, Customer Happiness Manager, and dedicated support.

Top-up Packs Additional AI credits as one-time packages; usage depends on model, medium, duration, and resolution.
– (0)

Link

GDPR: Partly The website contains several GDPR-relevant elements, such as a privacy policy with a GDPR section, data subject rights for users in the EEA, information on security measures, and an opt-out option for AI training. However, for use throughout the EU/EEA, the documentation is not comprehensive enough to warrant a clear “yes”: The website does not specify a specific server or data center location, does not explicitly state EU data residency, and an explicitly linked Terms of Service (TOS)/Data Processing Agreement (DPA) for customers could not be found on the website. Furthermore, the privacy policy provides for international data transfers, and the terms of service permit, by default, the use of input/output data to improve services and third-party AI, unless users opt out.
Positive
Positive aspects include the explicit GDPR section in the privacy policy, data subject rights for individuals in the EU/EEA, security measures for biometric voice data such as encryption “in transit” and “at rest,” the reference to third-party providers’ contractual obligations regarding voice biometric data, and an explicit opt-out for the use of input and output data for AI training by contacting the company. On the homepage, Async also promotes “GDPR” and “SOC 2” for its Voice API.
Negative
A negative factor for an EU/EEA assessment is that the website does not specify a concrete EU/EEA data residency or a specific server location. The privacy policy only states that data is processed at the company’s facilities and at other locations of the parties involved and may be transferred to other countries. An explicit Data Processing Agreement (DPA) for customers and a dedicated list of subprocessors for product processing were not found on the website. Additionally, the Terms of Service permit, by default, the use of input and output data for “research and development” as well as to improve services and third-party AI; exclusion from this use is only possible after actively opting out.
Server Location
Not specified on the website. The privacy policy only states that data may be processed at the company’s facilities and at other locations of the parties involved in the processing and may be transferred to other jurisdictions; no specific EU/EEA region or data center is mentioned.

Link

"Built to make you extraordinarily productive, Cursor is the best way to code with AI."

Cursor is an AI-powered development environment for software development with agents, autocomplete, CLI, cloud agents, and code review features.

Officially, Cursor is positioned as a tool that enables developers to delegate tasks to agents, write code faster, and work in parallel across multiple environments. More recent releases add, among other things, an agent-centric interface, parallel multitasking with subagents, canvases, and automations.Cursor – Anysphere

Built to make you extraordinarily productive, Cursor is the best way to code with AI

7.6/10 Good
Free Free use without a credit card, limited agent requests and limited tab completion. Subscription Pro Extended agent limits, access to frontier models, MCPs, Skills, Hooks, and Cloud Agents.

Pro+ Everything in Pro plus significantly more usage for OpenAI, Claude, and Gemini models.

Ultra Everything in Pro plus very high usage and priority access to new features.

Teams Everything in Pro plus shared chats, Commands and Rules, centralized billing, usage analytics, org-wide Privacy Mode, RBAC, and SAML/OIDC SSO. Other Enterprise Pooled Usage, Invoice/PO Billing, SCIM, AI Code Tracking API, Audit Logs, granular admin/model controls, Priority Support, and Account Management.

Bugbot Separate code review/bug detection offering with Pro, Teams, and Enterprise options.
– (0)

Link

GDPR: Partly For users in the EU/EEA, use that is conditionally GDPR-compliant is documented, but not as a simple standard SaaS offering with EU data residency. Positive aspects include a published privacy policy, a Data Processing Addendum, a published list of subprocessors on the Trust Portal, documented data subject rights, and a clear “no training/zero data retention” path via “Privacy Mode.” On the negative side, according to the privacy policy, Anysphere processes personal data on servers in various jurisdictions, including the U.S., and data for EEA users may be transferred to U.S. servers or other countries outside the EEA/UK. The website does not specify an explicit EU data residency or an EU/EEA data center for the main SaaS environment. The best-documented way to achieve greater GDPR compliance is therefore to use “Privacy Mode” in conjunction with a DPA; for Cloud Agents, there is also a self-hosted infrastructure option, but it does not replace the entire Cursor Cloud, as inference and planning continue to run via the Cursor Cloud.
Positive
Privacy policy available; DPA/AVV available; subprocessors are listed at trust.cursor.com/subprocessors; data subject rights for users are described; 'Privacy Mode' is documented, including 'zero data retention' by providers and a statement that customer data will not be used by Cursor for training; SOC 2 Type II is mentioned on the security page; for Cloud Agents, there is a self-hosted option on the user’s own infrastructure.
Negative
The website does not specify guaranteed EU/EEA data residency for the standard SaaS offering. According to the Privacy Policy, processing takes place on servers in various jurisdictions, including the U.S.; for EEA users, data may be transferred to U.S. servers or other countries outside the EEA/UK. A specific server location in the EU/EEA, a dedicated EU data center, or ISO 27001 certification are not specified on the website. The self-hosted agent option is only a partial solution because planning and inference still run through Cursor Cloud.
Server Location
The website does not specify a specific EU/EEA server location. The Privacy Policy only states that personal data is processed on servers in various jurisdictions, including the U.S., and that for users in the EEA, data may be transferred to U.S. servers or other countries outside the EEA/UK. No EU data residency is specified on the website.

Link