Find Your Tool in 6 Steps
Result: 158

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 158
Research Images Video Music Agent Business Marketing Website API

"Free Online AI Photo Editor, Image Generator & Design Tool"

Pixlr is a browser-based photo editor, design, and AI image editing service. The platform offers Pixlr Editor, Pixlr Express, Pixlr Designer, Remove Background, Batch Editor, AI Image Generator, Super Scale, Templates, and mobile apps.Pixlr

Free Online AI Photo Editor, Image Generator & Design Tool

4.3/10 Limited
Free Free access to Pixlr’s basic features; usable for many simple edits, but with limitations on premium and AI features. Subscription Plus Ad-free use, unlimited saving, and monthly AI credits for basic usage.

Premium Full access to premium features across platforms, significantly more AI credits, Private Mode for AI generations, as well as a larger library of fonts, templates, elements, animations, and other assets.

Team The team plan is listed in the pricing data structure; the specific included features must currently be checked on the pricing page or with the provider. Other AI Credit Pack Additional AI credits for generative tools; according to the Pricing FAQ, Credit Packs do not expire and are counted separately from subscription credits.

Enterprise Custom solution for more seats or custom API solutions; details available upon request.

Pixlr for Education Free PixlrEdu upgrades for schools and universities worldwide.
– (0)

Link

GDPR: Unclear The website contains a privacy policy with explicit GDPR references, EU representation, and notices on safeguards for transfers outside the EEA. However, for a reliable assessment of GDPR compliance across the entire EU/EEA area, the website lacks key evidence, particularly regarding specific server or data center locations, EU data residency, AVV/DPA, subprocessors, and a contractually regulated exclusion of AI training for regular user data. Therefore, from an EU/EEA perspective, use is only insufficiently documented and overall must be classified as unclear.
Positive
Positively documented are a detailed privacy policy, the designation of an EU representative in Hamburg, a data protection officer, GDPR legal bases, data subject rights, references to standard contractual clauses or appropriate safeguards for transfers outside the EEA, as well as a 30-day deletion statement after account closure. For Pixlr for Education, it is also stated that photos are stored locally in the web browser and are not uploaded or made publicly accessible.
Negative
Negative is that the website does not name any specific server locations or EU data centers, does not guarantee EU data residency, does not provide or describe an AVV/DPA, does not publish a list of subprocessors, and does not provide a reliable statement that regular prompts, uploads, or outputs are not used to train general AI models. In addition, the homepage mentions numerous external AI models and the privacy policy permits transfers outside the EEA subject to appropriate safeguards.
Server location
Not specified on the website. Only the company's registered office in Singapore is specified, as well as that personal data may, under certain circumstances, be transferred outside the EEA to other Pixlr companies or third-party processors.

Link

Robotics

“The future of home care is here”

Figure AI develops electrically powered humanoid robots designed to perform human tasks in industrial, logistics, and—in the future—domestic environments. Figure 02 was tested at BMW Spartanburg in a real production environment; Figure 03 is more focused on domestic use, Helix AI, safety, and mass production.Figure.AI

The future of home help is here

3.4/10 Insufficient
Other Enterprise/pilot/partner projects on request. Industrial and commercial partnerships, such as BMW and Catalyst Brands, are documented; public purchase, rental or leasing conditions are not guaranteed.
– (0)

Link

GDPR: Unclear Although the website does include a privacy policy, it is clearly geared toward U.S. states and does not demonstrate robust GDPR compliance for users throughout the EU/EEA. In particular, the website does not specify EU/EEA data residency, specific server or data center locations, a Data Processing Agreement (DPA), a list of subprocessors, on-premises or self-hosting options, or relevant certifications. The documentation is therefore too incomplete for an assessment from an EU/EEA perspective.
Positive
The website includes a separate privacy policy, a contact option at [email protected], and information indicating that Figure may, in certain cases, process personal data of end users or employees as a service provider for its clients.
Negative
The documentation available on the website refers to U.S. data protection laws and makes no specific statements regarding the GDPR for the EU/EEA. There is a lack of reliable information regarding EU data residency, mechanisms for transfers to third countries, data processing agreements (DPAs), subprocessors, the option to opt out of AI training, server locations, and security certifications.
Server Location
Not specified on the website. The only information available is that the service is operated and administered from offices in the United States.

Link

“Get found. Get booked. Get paid.”

Jimdo is a platform developed in Germany for websites and small online businesses. Users can use AI to create a website with a structure, text, images, and calls to action, and then manage bookings, forms, online stores, payments, invoices, and local visibility. The AI assistant, Companion, analyzes existing Jimdo business data and suggests specific steps for optimization.Jimdo

A website that thinks along with you and helps self-employed individuals build and grow their businesses.

6.7/10 Solid
Free Free monthly credit allowance, access to core platform features, web and mobile experiences, advanced models, and one-click LLM integration. Subscription Standard Free features plus private projects, a larger monthly credit allowance, the ability to purchase additional credits, GitHub integration, and task forking.

Pro Standard features plus a large context window, advanced reasoning, system prompt editing, custom AI agents, high-performance computing, a higher credit allowance, and prioritized support.

Enterprise Custom enterprise plan with higher usage limits, SSO, domain capture, shared workspaces, role-based access control, audit logs, managed hosting, onboarding, and enterprise support. Other Credits Consumption units for AI agents, development steps, and platform usage; the standard plan allows you to purchase additional credits.

GitHub Code Export Full synchronization and transfer of the generated code to your own GitHub repository.

Managed Hosting Hosting, monitoring, authentication, database, and deployment can be provided within the platform.

Enterprise Cloud Deployment Custom deployment within the company’s cloud and governance environment; technical and regional details available upon request.

Integrations and MCP More than 100 integrations, payment providers, APIs, and MCP connections for external systems and workflows.
– (0)

Link

GDPR: Yes Jimdo is a German company (Jimdo GmbH, Hamburg) and explicitly promotes itself on its own website as GDPR-compliant: “GDPR-compliant data protection and security built in from day one.” The infrastructure runs on AWS data centers within the EU; a Data Processing Agreement (DPA) has been an automatic part of the Terms of Service since February 2022; subprocessors are documented; and international transfers are safeguarded via Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework. For German users, this makes GDPR-compliant use possible without any significant additional effort.
Positive
Explicit commitment to the GDPR on the homepage; servers located exclusively in the EU (AWS EU); DPA automatically included in the Terms of Service (no separate agreement required); public list of subprocessors with legal bases (SCCs, EU-U.S. DPF); Headquarters in Germany (Hamburg); dedicated data protection contact address ([email protected]); technical and organizational measures (TOMs) documented.
Negative
No evidence of Jimdo’s own ISO 27001 or SOC 2 certification on the website (only a reference to AWS security practices); No explicit statement regarding the option to opt out of AI training found on the website; no self-hosting or on-premises option available; users are entirely reliant on Jimdo’s cloud infrastructure.
Server Location
AWS data centers within the European Union (explicitly documented at legal.jimdo.com/hc/en-us/articles/20332078550676). No specific country or data center is named, but EU data residency is confirmed. No international data transfers for the core infrastructure.

Link

"One Voice AI Assistant. Different Ways to Use It."

Speechify is a voice AI platform that converts text into natural-sounding speech and also offers features such as Voice Typing, Voice AI Assistant, AI Podcasts, OCR scanning, as well as creator/studio features like Voice Over, Dubbing, and Voice Cloning.

The product is available as a web app, browser extension, and for iOS, Android, macOS, and Windows; there is also an API for developers.Speechify

One Voice AI Assistant. Different Ways to Use It

6.4/10 Solid
Free Basic text-to-speech features, slower listening, limited simple voices, and text-to-speech only. Subscription Premium High-quality natural voices, many languages, faster listening, Scan & Listen, AI Summaries & Chats.

Speechify Studio Separate subscription for voiceovers, creator content, podcasts, videos, dubbing, and audio production. Other API Text-to-speech API with a free tier and scalable usage plans for apps and workflows.

Enterprise / EDU Enterprise and education offerings for larger organizations, teams, and integrations.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, GDPR-compliant use is only verifiable to a limited extent. The website has a privacy policy with information on data subject rights for the EEA/Switzerland/UK as well as on Standard Contractual Clauses for third-country transfers. At the same time, Speechify explicitly names the USA as the default storage location and does not provide any information on the website about EU data residency, EU data centers, or a self-hosting/on-premise option. A DPA/AVV is only indirectly discernible through Enterprise/API references, not as a publicly accessible contractual document.
Positive
Positive aspects include the existing privacy policy, the explicitly stated rights for users in the EEA, references to SCCs for data transfers outside Europe, and a note on customer-specific DPA/SLA terms in the Enterprise/API context. In addition, it is mentioned for certain local content that data is stored on the device and can be synchronized with servers.
Negative
Negative is that, according to the website, Speechify transfers submitted information to the USA, where it processes and stores it. A specific server location in the EU/EEA, EU data residency, a published subprocessor list, a clearly documented AVV/DPA page, an on-premise/self-hosting option, and a clear opt-out from AI training for general models are not indicated on the website.
Server location
The website explicitly states the USA as the storage and processing location. A specific EU/EEA data center or EU data residency is not indicated on the website.

Link

"Built to Keep You in Flow State"

Windsurf is an AI-powered coding assistant, or rather an agentic IDE for software development.

The Windsurf Editor combines the local agent Cascade with the cloud agent Devin, supports model routing via Adaptive, offers IDE integrations, MCP connections, previews, and team/enterprise features for governance, security, and deployment. The tool is aimed primarily at developers, technical teams, and companies, not general office users.Windsurf

Built to Keep You in Flow State

7.1/10 Good
Free Light Usage Allowance, Tab, Previews/Deploys depending on the limit and getting started in Windsurf. Subscription Pro Standard Usage Allowance, unlimited core features, additional usage at the API price.

Max Heavy Usage Allowance for power users and high agent/coding usage. Other Teams Team plan with centralized billing, admin dashboard, analytics, support, and team features. Enterprise SSO, access controls, RBAC, volume discounts, hybrid deployment, account management, and custom deployment.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, GDPR-compliant use is not clearly documented for the general standard SaaS variant, as the privacy policy mentions processing on servers in the USA. At the same time, the website mentions EU servers in Frankfurt for enterprise/hybrid deployments as well as self-hosted and VPC options. This means that GDPR-compliant use in the European region appears possible only under certain, rather enterprise-oriented conditions.
Positive
The website links to a privacy policy and a DPA. In addition, EU servers in Frankfurt are mentioned for certain enterprise deployments. There are references to hybrid deployment, a self-hosted plan, VPC deployment, as well as SOC 2 Type II.
Negative
The privacy policy mentions servers in the USA and international transfers including, among others, to the USA. General EU data residency for all plans is not documented on the website. A list of subprocessors is not provided on the website. An explicit, generally applicable opt-out for AI training is not clearly documented on the website for all product variants.
Server location
By default, the privacy policy mentions servers in the USA. For enterprise/hybrid deployments, the security page mentions EU servers in Frankfurt, Germany. No other specific data center locations in the EU/EEA region are provided on the website.

Link

“The #1 AI Headshot Generator for Professional Headshots”

HeadshotPro is an AI tool for creating professional business and team headshots from uploaded selfies.

The product is aimed at both individuals and companies and, in addition to individual packages, also offers team features such as an admin dashboard, API, webhooks, and enterprise SSO. It is officially positioned as a SaaS for professional portraits, LinkedIn/CV photos, team pages, and branded employee photos.HeadshotPro

The #1 AI Headshot Generator for Professional Headshots

7.2/10 Good
Free Free headshot test feature; according to HeadshotPro, lower quality than the professional generator. Other Individual Packages One-time packages for professional AI headshots, commercial use, and download of the generated images.

Corporate / Team Headshots Team dashboard, invitations for employees, consistent company styles, branded profile pictures, and management of larger groups.

API / Enterprise / Sales API and enterprise options for larger or integrated headshot workflows.
– (0)

Link

GDPR: Partly HeadshotPro provides a privacy policy, a DPA/AVV, a list of subprocessors, and information on security and data deletion on its website. For users in the EU/EEA, this provides a formal framework for GDPR-compliant use, including SCCs for transfers from the EEA, the United Kingdom, and Switzerland. At the same time, the website does not specify EU data residency; rather, it specifies that hosting and processing take place in the U.S. and lists several U.S. subprocessors for hosting, databases, AI processing, and content. Therefore, GDPR-compliant use appears possible only under certain conditions and following an additional independent review of the transfer, the legal bases, and the risk assessment.
Positive
The website publishes a DPA/AVV, provisions regarding documented instructions, support for data subject rights, TOMs, subprocessor information, and SCCs for international transfers. In addition, HeadshotPro states that it processes personal data solely for the purpose of providing services and not for its own purposes, such as marketing, advertising, or profiling.
Negative
The website does not specify an EU/EEA-exclusive data residency. The Security Policy and the list of subprocessors mention data hosting and processing in the U.S., including GCS in the U.S., Render, Vercel, MongoDB, OpenAI, Google Gemini, Replicate, and Fal.ai. The website does not specify an on-premises, self-hosting, or dedicated private cloud option for the EU/EEA. Relevant certifications such as ISO 27001 or SOC 2 are not listed on the website.
Server Location
The website specifically lists the U.S. as a location. The Security Policy mentions data hosting in GCS facilities in the U.S. ('us-east-1') as well as Render; the list of subprocessors includes production systems for customer content in facilities in the U.S. as well as infrastructure subprocessors, including Google Cloud Platform with “EU/US,” Render US, Vercel US, and MongoDB US. A binding EU data residency requirement is not specified on the website.

Link

"AI that brings out the best in you, from first idea to final draft"

Paperpal is an AI-powered academic writing tool for researchers, students, authors, and scientific teams.

It combines language correction, academic paraphrasing, research and citation assistance, PDF chat, plagiarism checking, and other pre-submission features on one platform. The provider explicitly positions Paperpal as a secure all-in-one solution for scientific writing.Paperpal

AI that brings out the best in you, from first idea to final draft

4.7/10 Limited
Free Free entry with academic writing features, PDF chat, Research & Cite, AI detector, plagiarism check, and submission checks with limitations. Subscription Extended or unlimited use of central functions such as Language Editing, Consistency, Research Q&A, Citation Generation, writing features, and advanced academic checks. Other Teams Plan Group plan for 2–10 members with centralized billing, activation codes, and team discounts; according to support, based on Paperpal Prime annual.

Institutional Plans Individual solutions for universities, institutions, students, or employees.

Multi-year Plan One-time longer-term option for users who want to book long-term.
– (0)

Link

GDPR: Unclear For users in the EU/EEA, the Paperpal website contains several positive statements about data protection and security, including references to GDPR compliance, ISO certification, and the statement that user data is not used to train the AI. However, for a robust GDPR assessment for the entire European area, the website lacks key, concretely verifiable information, in particular regarding EU/EEA data residency, specific server locations, a publicly available DPA/AVV, and a list of subprocessors. Therefore, GDPR-compliant use cannot be clearly demonstrated based on the website documentation.
Positive
Positive are the explicitly stated data protection and security measures: Paperpal describes itself as 'fully aligned' with GDPR, mentions ISO/IEC 27001 certification, refers to CSA STAR Level 1, states encrypted storage and transmission, and says that inputs, prompts, and documents are not used to train the AI.
Negative
Negative is that the website does not name any specifically identified EU/EEA data centers or countries. Likewise, no publicly accessible DPA/AVV, no list of subprocessors, and no clear statement regarding EU data residency, SCCs, or other mechanisms for data transfers within the EU/EEA were found on the website. On-premise, self-hosting, or private cloud options are also not indicated on the website.
Server location
The website mentions 'SSAE 18/SOC1-certified facilities', 'trusted globally', as well as Amazon Web Services/cloud infrastructure, but does not specify any concrete server location or any EU/EEA country. EU data residency is not stated on the website.

Link

“Design anything in seconds with AI” / “the world’s easiest way to design anything with the power of AI”

Playground is an AI design and image editor for logos, social media posts, stickers, T-shirts, mockups, memes, illustrations, and image editing via prompt. The current product is more focused on AI design and templates than on classic pure text-to-image boards.Playground AI

Design anything in seconds with AI

3.9/10 Insufficient
Free Free Plan
Limited Playground-v3 edits, very limited monthly edits for certain external/premium models, daily download limit; Background Removal and Upscaling only in the Pro Plan. Subscription Pro: higher limits, background removal, upscaling, more premium model edits.

Pro Plus: significantly higher quotas for premium models and extended usage. Other Day Pass One-time 24-hour access with an additional credit/edit quota.

Credit Purchases Additional credits for certain models such as GPT-4o, Seedream, or Nano Banana; credits can be purchased additionally.

iOS Subscriptions In the App Store, Design Pro and Design Pro Plus are listed as in-app subscriptions; the scope of features may differ from web subscriptions.
– (0)

Link

GDPR: Unclear Not documented on the website. Using the available web search tool, no discoverable subpages or documents on the specified domain could be found regarding the privacy policy, AVV/DPA, subprocessors, EU data residency, server locations, opt-out from AI training, or certifications. Therefore, no reliable GDPR assessment for the entire EU/EEA area is possible based solely on the provider's website.
Positive
No reliable positive evidence could be found on the website.
Negative
Privacy policy, server locations, AVV/DPA, subprocessors, EU data residency, on-premise/self-hosting, open-source components, training opt-out, and certifications cannot be found via the website using the available search access or are not stated on the website.
Server location
Not stated on the website.

Link

"Where knowledge begins"

Perplexity Sonar is a family of models for AI search, web-based answers, research, reasoning, and deep research. The API is particularly strong in current facts, citations, product comparisons, summaries, and research workflows.Perplexity Sonar

LLM “Where knowledge begins”

7.0/10 Good
Other Sonar Lightweight search model with web grounding for fast fact-based answers, current information, summaries, and comparisons.

Sonar Pro Advanced search with grounding for more complex questions, follow-ups, and optional Pro Search with multi-step tool use.

Sonar Reasoning Pro Reasoning model for complex, multi-step analysis and inference tasks with web context.

Sonar Deep Research Research model for comprehensive investigations across many sources, detailed reports, and deeper analyses.

Search API Separate API access for raw web search results with filters, without token-based response generation.

Embeddings API Embedding models for semantic search, RAG, retrieval, and machine learning applications.

AWS Marketplace API credits can be obtained via AWS Marketplace with consolidated billing and enterprise procurement.
– (0)

Link

GDPR: Partly For Perplexity Sonar, GDPR-compliant use in the EU/EEA is only conditionally plausible. Positively documented for the Sonar API are a strict zero-data-retention policy and the exclusion of training with customer data. At the same time, no reliable information can be found on the stated website regarding EU/EEA server locations, EU data residency, data center locations, subprocessors, or a DPA/AVV. In addition, the documentation refers to third-party models and external payment processing for parts of the platform, which creates additional review effort from an EU/EEA perspective.
Positive
The website explicitly states that the Sonar API does not store transmitted content data and does not use customer data to train the models. In addition, security attestations such as SOC 2 Type II are mentioned.
Negative
The website does not specify an EU/EEA server location, EU data residency, a DPA/AVV, a list of subprocessors, specific data centers, or on-premise/self-hosting options. For the Agent API, the documentation also mentions the use of third-party providers such as OpenAI, Anthropic, Google, and xAI, which can create additional data protection complexity.
Server location
Not specified on the website. No specific locations of servers or data centers in the EU/EEA were found on the stated domain.

Link

"Create Videos Without Limits" / "Turn any idea into videos. Ads, explainers, stories, anything you can imagine."

invideo AI is an AI video platform for prompt-to-video, AI Video Generator, AI Avatars, image-to-video, UGC Ads, AI Animation, AI Ad Generator, Video Translator, Voice Cloning, subtitles, image generation, and classic video editing via invideo Studio.invideo AI

Turn any idea into videos. Ads, explainers, stories, anything you can imagine.

4.1/10 Limited
Free Free use without a credit card; limited access to AI models, weekly reset quota, exports with the InVideo logo and stock media watermark. Subscription Plus Paid entry-level plan for exploratory use; access to paid AI/video features, credits, stock providers, and watermark removal compared to Free.

Max Expanded plan for occasional or more intensive use with a larger credit allowance than Plus and access to the paid-plan features.

Generative Plan for daily use of generative models; according to the Help Center, particularly relevant when Plus/Max credits are quickly used up through regular video generation.

Enterprise Customized enterprise offering with private/secure workflows, SOC 2/ISO alignment, GDPR compliance, Context Engine, Custom Agents, Eval & Quality, Parallel Generation, Data Isolation, Audit Trails, Access Controls, IP protection, and a no-training commitment. Other Credits Credits are the internal currency for media clips, videos, generative models, and AI features; downloads/exports do not consume credits, and according to the Help Center, unused credits do not roll over to the next month.

redit Add-ons If credits are used up, users can, according to the Help Center, purchase one-time credit add-ons or switch to a higher plan.

Third-party models Paid Plans include access to many image, video, audio, and music models; model and agent pricing may change and is partly based on provider pricing.

invideo Studio Separate classic video editor with a timeline/template workflow; not identical to invideo AI.
– (0)

Link

GDPR: No For the European region, the website does not document a reliable basis for use that is fully GDPR-compliant. Although invideo states “GDPR Compliant” on its homepage and refers to “SOC 2 & ISO Aligned,” the website lacks verifiable information regarding EU data residency, specific server or data center locations within the EU/EEA, an accessible Data Processing Agreement (DPA), and a list of subprocessors. Additionally, the privacy policy permits global data transfers to third parties and to countries outside the user’s country of residence. Consequently, the website’s documentation does not demonstrate compliance for EU/EEA users.
Positive
The website includes a privacy policy, information on data subject rights, options to delete account data and certain biometric data, as well as a marketing statement indicating “GDPR Compliant” and “SOC 2 & ISO Aligned.” The website also describes the use of TLS/SSL for data transmission and encrypted backups.
Negative
The website does not specify a specific Data Processing Agreement (DPA), a list of subprocessors, an EU/EEA server location, EU data residency, on-premises or self-hosting options, or an opt-out from general AI training. The Terms of Service also state that users grant invideo the right to use AI-based output to improve AI security measures, technologies, products, and services. The Privacy Policy further provides for global transfers to third parties and to countries outside the user’s country of residence.
Server Location
Not specified on the website. The Privacy Policy mentions global transfers and processing worldwide, but does not specify a specific server or data center location in the EU/EEA.

Link

"Your medical AI assistant."

Tandem is an AI-powered medical assistant for doctors, therapists, nurses, and healthcare facilities.

The tool supports the preparation, documentation, and follow-up of treatment appointments, creates medical notes and documents in seconds, suggests suitable diagnosis and procedure codes, and allows editing via voice input. According to the website, Tandem supports over 50 specialties and integrations with more than 100 medical systems.Tandem Health

Your medical AI assistant

7.2/10 Good
Free For clinicians who want to integrate Tandem into their workflow without commitment; includes unlimited note generation, limited custom templates, inviting up to two colleagues, and limited daily Pro Actions. Subscription Pro – unlimited note and document generation, unlimited Pro Actions and personalization, 1-click transfer to 100+ medical systems, unlimited templates, clinician-led support.

Enterprise – everything in Pro plus custom integrations, onboarding/training/rollout, prioritized support, enterprise authentication, and detailed usage reports. Other Enterprise For larger practices and care organizations; includes everything in Pro plus custom EHR integrations, full onboarding, training & rollout, priority support, enterprise authentication, and detailed usage reports.

Custom Integrations Custom integrations into medical record systems if a system is not yet supported.
– (0)

Link

GDPR: Partly The website contains several strong indications for GDPR-compliant use in the EU/EEA region: Tandem describes itself as a processor for customer data, refers to a data processing agreement, states that the processing and storage of patient data take place exclusively in European data centers, and explains that patient data are not used to train AI models. However, the publicly accessible website does not provide specific server countries/data center providers, a publicly viewable list of subprocessors, or a publicly accessible DPA text. As a result, use from an EU/EEA perspective appears plausibly well safeguarded, but is not documented with complete transparency.
Positive
Positive aspects include the explicit statements that all patient data are processed and stored in Europe, that no audio recordings are stored, that patient data are not used for AI training, and that Tandem is certified according to ISO 27001 and ISO 13485. In addition, the privacy policy describes its role as a processor and refers to a DPA.
Negative
A negative aspect is that the website does not provide any specific public information on individual server locations or countries, no publicly available list of subprocessors, and no directly viewable DPA content. Likewise, no on-premise, self-hosting, or clearly documented private cloud option was indicated on the website.
Server location
The website states that patient data are processed and stored exclusively in European data centers, or that all data remain within the EU. A specific country, specific data center, or specific hosting provider is not stated on the website.

Link

“Automate AI Workflows, Agents, and Apps”

Zapier is a no-code/low-code automation platform that enables workflows (“Zaps”) to be connected between SaaS tools, forms, spreadsheets, chatbots, and AI functions.

Zapier currently brings together Zaps, Tables, Forms, and Zapier MCP in a shared AI orchestration platform, positioning itself not only as a traditional integration service but also as a platform for AI workflows, agents, and chatbots.Zapier

Automate AI Workflows, Agents, and Apps

7.7/10 Good
Free Zaps, Tables, and Forms, limited Tasks, Two-Step Zaps, and Zapier Copilot with daily limits. Subscription Professional Multi-step Zaps, Premium Apps, Webhooks, Support, AI Fields, and Conditional Form Logic. Team Multi-user plan with Shared Zaps, folders, Shared App Connections, SAML SSO, and Premier Support. Other Enterprise Unlimited Users, advanced admin rights, App Controls, VPC Peering, annual task limits, Observability, and Technical Account Manager.

Task Tiers / Pay-as-you-go / Agents Billing based on task quotas; additional AI-/Agents-/MCP usage depending on plan and consumption.
– (0)

Link

GDPR: Partly Zapier documents key privacy components for the European region, including a privacy policy, a Data Processing Addendum with SCCs for EU data, EU/UK representatives, and a subprocessor list. For AI features, there is an opt-out from model training; for Enterprise customers, this is automatically enabled. At the same time, the subprocessor list names predominantly US-based locations for deployment-relevant providers and AI providers, and the website does not specify general EU data residency for the standard SaaS version. This makes GDPR-compliant use in the EU/EEA appear realistic only under conditions such as use of a DPA/SCCs, transfer assessment, and careful configuration, but not as a clearly and comprehensively documented default situation.
Positive
Positive aspects include the available privacy documentation, the DPA with SCCs for EU data, the designation of EU/UK representatives, the published subprocessor list, the statement that AI subprocessors may not use customer data for model training, as well as the opt-out from AI training for customer content.
Negative
Negative is that the website does not specify general EU data residency for Zapier as a SaaS. In the subprocessor list, the named infrastructure, cloud, and AI providers are predominantly listed as being located in the USA. On-premise or true self-hosting of the overall platform is not indicated on the website.
Server location
The website does not specify an EU/EEA server location for the standard SaaS deployment. The subprocessor list names AWS, Google, OpenAI, Anthropic, Microsoft, Pinecone, Redis, Datadog, Heroku, Vercel, and others, among others, as being located in the USA. General EU data residency is not specified on the website.

Link

Command A is Cohere’s most powerful enterprise LLM for real business tasks such as tool use, retrieval-augmented generation, agents, and multilingual workflows.

The model has 111 billion parameters, supports 23 languages, features a 256k context window, and according to Cohere is designed for a comparatively low inference footprint.Command A

LLM “Our largest, most performant model, ideal for building enterprise agents with a low compute footprint.” - “Max performance, minimal compute”

7.5/10 Good
Free Yes, limited. Publicly primarily API/enterprise use; free trial or evaluation access may depend on the contract/account. Other API Usage Model access via the Cohere API, usage-based billing by model and tokens.

Enterprise / Private Deployment VPC, on-premises, or air-gapped deployment for companies with strict data protection, security, and data residency requirements.

North / Compass / Embed / Rerank Complementary Cohere products for agents, enterprise search, embeddings, and retrieval
– (0)

Link

GDPR: Partly From an EU/EEA perspective, GDPR-compliant use is possible, but this has not been generally demonstrated for standard SaaS. Positive aspects include a published privacy policy, a DPA/AVV available upon request, an opt-out option for model training, zero data retention for enterprise customers, and private deployments in which, according to the website, Cohere does not receive any prompts or generated content. At the same time, the website does not specify a concrete EU/EEA server location for the SaaS version; furthermore, the website refers to international data transfers and, in the Trust Center, to subprocessors located in the U.S., among other places. Therefore, its use in the EU/EEA is generally viable under certain conditions—particularly via private deployment, VPC, or a third-party cloud with independent data control—but not solely based on the standard SaaS documentation.
Positive
The following are confirmed: a privacy policy is available; a DPA/AVV for SaaS is provided upon request; an opt-out option for training is available in the dashboard; zero data retention for Enterprise is available upon request; several private deployment models, including on-premises and VPC; according to its website, Cohere does not process customer prompts or generated content for private and third-party deployments; ISO 27001, ISO 42001, and SOC 2 Type II are mentioned.
Negative
Negative or limiting aspects include: The website does not specify a concrete EU/EEA server location or a specific EU data center for the standard SaaS offering; explicit EU data residency for Cohere SaaS is not indicated on the pages reviewed; Subprocessors listed in the Trust Center are located, among other places, in the U.S.; the privacy policy describes international data transfers across jurisdictions. As a result, significant compliance verification efforts remain necessary for pure SaaS use within the EU/EEA.
Server Location
The website does not specify a specific server location or data center in the EU or EEA for the Cohere SaaS. Instead, it mentions flexible deployment options for on-premises, VPC, third-party cloud, and “meeting strict data residency needs.” The Trust Center lists subprocessors with locations in the U.S., among other places. For applicant data, the website states that processing takes place in Canada and the U.S.; for product/SaaS data, no specific EU server location was mentioned on the pages found.

Link

“Turn lazy prompts into great ones”

Prompt Cowboy is a web-based AI tool for optimizing prompts for ChatGPT, Claude, Gemini, and other LLMs.

According to the provider, it transforms rough ideas into clearer, more powerful prompts and, depending on the input, adds follow-up questions so the prompt can be improved with more context. The platform is aimed at individual users and teams who want to create, save, reuse, and organize prompts for team collaboration.Prompt Cowboy

Turn lazy prompts into great ones

3.7/10 Insufficient
Free Unlimited prompts with standard AI; limited access to the most powerful model; use of the results with ChatGPT, Claude, Gemini, and other tools. Subscription Individual For individuals with unlimited access to the most powerful model, Advanced Memories, reusable templates, and early access.

Team For teams with shared workflows, team usage, and access to powerful prompt optimization.
– (0)

Link

GDPR: Unclear The website does contain a privacy policy referring to the EU/UK GDPR, names the service providers used, and describes security measures as well as standard contractual clauses for international transfers. However, for a reliable assessment of full GDPR compliance across the entire EU/EEA, essential information is missing from the website, in particular a designated AVV/DPA, specific server or data center locations, documented EU data residency, and a subprocessor list. Therefore, from an EU/EEA perspective, compliance is overall only unclearly evidenced.
Positive
Positively documented are a dedicated privacy policy, the explicit mention of the EU/UK GDPR as the applicable framework, standard contractual clauses, and encryption during transmission and storage. In addition, the provider states that it does not use user data to train large language models, and names Supabase, Google Cloud, Stripe, and PostHog as key service providers on the website.
Negative
It is negative that no AVV/DPA can be found on the website, no specific server locations or EU/EEA data centers are named, and no explicit EU data residency is guaranteed. A dedicated subprocessor list with locations and roles is also missing. On-premise, self-hosting, or private cloud options are not stated on the website. Relevant certifications such as ISO 27001 or SOC 2 are also not specified there.
Server location
Not specified on the website. Only the company headquarters in Sydney, Australia, as well as service providers such as Supabase, Google Cloud, Stripe, and PostHog are mentioned; specific server/data center locations in the EU/EEA or elsewhere are not named on the website.

Link

Robotics

“Cognitive Robotics – A New Era of Human-Robot Collaboration”

NEURA Robotics develops humanoid, collaborative, and cognitive robots for industry, logistics, research, service, and, in the future, the home. 4NE1 combines mobility, sensor skin, environmental perception, multimodal AI, voice interaction, and interchangeable or dexterous hands. The platform is designed for collaboration with humans and for tasks in real-world, non-fully-structured environments.NEURA Robotics

Cognitive Robotics – A New Era of Human-Robot Collaboration

3.4/10 Insufficient
Other Hardware purchases, reservations, volume discounts, customized corporate offers, pilot projects, integration, support, and project-specific configurations. Separate reservation models are available for MiPA and 4NE1.
– (0)

Link

GDPR: Unclear There is a privacy policy available on the website, and the provider identifies itself in the legal notice as the responsible entity in Germany. However, for a reliable assessment of GDPR compliance throughout the EU/EEA, the website lacks essential information on server/data center locations, EU data residency, AVV/DPA, subprocessors, opt-out from AI training, and certifications. As a result, a Europe-wide compliance assessment for the practical use of the tool is too incomplete based on the website alone.
Positive
Positively documented are a published privacy policy, the explicit reference to the GDPR, and information on data subject rights. In the legal notice, NEURA Robotics GmbH, based in Metzingen, Germany, is named as the responsible entity.
Negative
Negative is that no specific information was found on the website regarding server locations or data centers, no documented EU data residency, no AVV/DPA, no list of subprocessors, no statement about a contractual exclusion of AI training with customer data, and no relevant certifications such as ISO 27001 or SOC 2. The privacy policy also mentions Google Analytics and refers to a transfer of personal data to Google in the USA.
Server location
Not specified on the website. Server log files are mentioned in the privacy policy, but no location of the servers or data centers is stated. In addition, for Google Analytics, a transfer of personal data to Google in the USA is described.

Link

"Boost your team with AI Agents" / "Automatically record, transcribe, and summarize meetings with AI notetaker…"

Noota is a European SaaS platform for Conversation Intelligence, AI Meeting Notes, transcription, meeting summaries, email agents, telephony, knowledge search, and recruiting/sales workflows. The tool records meetings or calls, transcribes conversations, creates structured summaries, follow-up emails, reports, and makes meeting, call, and email knowledge searchable.Noota

Boost your team with AI Agents” / “Automatically record, transcribe, and summarize meetings with AI notetaker…

7.5/10 Good
Free Free entry for individuals; includes unlimited recording & transcription, monthly AI notes minutes, limited storage, email automation, Chrome extension, as well as iOS/Android app. Subscription Pro For individuals and small teams; includes everything in Free plus more AI Notes minutes, Team Workspace up to a limited team size, unlimited integrations, and AI Agents.

Business For fast-growing companies; includes everything in Pro plus unlimited recording, paid unlimited seats, unlimited AI features, Custom Templates, Zapier & API, Analytics, and AI Infrastructure. Other Enterprise Custom offer for larger teams; includes everything from Business plus unlimited usage, payment by invoice, custom integration, SSO, dedicated support, and business telephony.

Business Telephony / Phone Add-on module for VoIP telephony, domestic calls, local numbers from multiple countries, iOS/Android calling, click-to-call in the browser, and a bring-your-phone option depending on country regulations.

API / Zapier / AI Agents Advanced automation for workflows, integrations, CRM/ATS synchronization, follow-ups, analytics, and knowledge base queries.
– (0)

Link

GDPR: Partly Noota's website documents several building blocks relevant for the EU/EEA region: explicit GDPR references, EU data centers, a data processing agreement included in the contractual framework, as well as statements that customer data is not used to train general models. At the same time, important points remain incompletely or inconsistently documented: the exact server location is described partly as EU data centers in France, Belgium, and the Netherlands, and partly as exclusively in France; a specific list of subprocessors is not provided on the website; relevant certifications are presented partly as being in preparation and partly as already existing. From the perspective of a user in the European region, GDPR-compliant use is therefore only reliably supportable under certain conditions and after conducting one's own contractual review.
Positive
Positive are the statements regarding EU data residency, isolated environments in European data centers, encryption, customizable retention periods, an organization-wide 'text-only' option, a DPA included in the contractual framework, and the statement that data is not used to train generalized AI models. An on-premise configuration is also mentioned for companies.
Negative
Negative is that several key points are not clearly and consistently documented on the website: a specific list of subprocessors is not provided, the server locations are described inconsistently, an explicit and easily findable separate DPA download is not provided, and there are contradictory statements regarding ISO 27001 and SOC 2 between 'ongoing/in preparation' and 'certified'. This leaves documentation risk for a reliable EU/EEA assessment.
Server location
The website mentions EU/European locations. The security page refers to European data centers in France, Belgium, and the Netherlands, as well as Google Cloud Platform with Google KMS. Other subpages, however, state that all data is hosted on servers in France. This confirms EU data residency, but the exact production location is described inconsistently on the website.

Link

"Language. Quality. Performance." as well as "The AI manufactory that writes in your voice."

newsrooms positions itself as an AI-powered content platform for high-quality communication.

According to the official description, the tool transforms sources into "publication-ready content," learns the writing style of users or the brand, and offers, among other things, Image Studio, File Processing, Research Agent, and Research Assistant, as well as focus areas such as SEO, GEO & GAIO. The platform is clearly aimed at professional content, PR, marketing, and editorial teams.Newsrooms

The AI manufactory that writes in your voice

7.2/10 Good
Subscription The app homepage mentions a free trial period or a free trial account with standardized Communication Tasks and curated newsroom language styles.

⚠️ No confirmed information available – as of 30/04/2026. Publicly visible offering/product segments include Enterprise, MyNewsroom, Industry Solution, Startups, Journalists, and Agency Services; I could not reliably find a verifiable public list of all subscription tiers with their feature scope.
– (0)

Link

GDPR: Yes The provider's website documents several key points for GDPR-compliant use within the EU/EEA: The service is presented as 'fully GDPR-compliant', hosting takes place exclusively on European servers, there is an 'EU-only processing option' for model processing, according to the website customer data is not used to train external models, and tiered security models are offered up to and including an on-premise solution. For the assessment, the best usage path documented on the website was taken into account, not just the standard SaaS variant.
Positive
Positively documented are EU hosting, storage exclusively on European servers, an EU-only processing option for inference, a documented exclusion of training external models with customer data, ISO/IEC 27001:2022 certification, as well as an on-premise option. From an EU/EEA perspective, these points clearly support a well-usable data-sovereign operating model.
Negative
No specific countries or data center locations within the EU/EEA were stated on the publicly accessible website. Likewise, no publicly viewable details on subprocessors were found on the website. A DPA/AVV is mentioned in the terms and conditions, but the specific DPA page or its content was not directly viewable via the search results.
Server location
The website states that newsrooms.ai is hosted 'exclusively on European servers' and that data does not leave the EU. Specific countries, cities, or data centers are not specified on the website.

Link

“Power Up Your Customer Service”

OMQ is a German B2B SaaS solution for automating customer service inquiries. The system covers self-service, chat, email, contact forms, agent assistance, and process-based automation, and works across channels with a central knowledge base. In doing so, OMQ positions itself as a GDPR-compliant solution that can be integrated quickly for companies looking to reduce support effort and shorten response times.OMQ

The AI software for automated customer service

7.0/10 Good
Subscription Starter Dynamic, self-optimizing help page for smaller businesses; includes Help Page and unlimited topics/categories.

Essential Help Page plus either Contact Form or Chatbot, process automations, unlimited topics/categories, request quota, and reports.

Business Multiple Help Pages and Contact Forms, Chatbot at ChatGPT level, email bot, more process automations, reports, and optional agent handoff.

Corporate Extensive multilingual customer service automation with multiple Help Pages, Contact Forms, Chatbots, email bots, process automations, reports, languages, data analysis, agent handoff, live chat seats, and WhatsApp integration. Other Flex Custom package with flexible modules, flexible requests, up to 32 languages, custom adaptations, optional data analysis, account management, live chat seats, and integrations.
– (0)

Link

GDPR: Yes OMQ states multiple times on its own website that use is possible in compliance with the GDPR. For the EU/EEA area, it is particularly relevant that OMQ specifies EU servers, no transfer of personal data to third countries such as the USA, hosting in Germany or in European cloud infrastructures, as well as standard data processing agreements. This documents a clearly substantiated path to GDPR-compliant use in the European area.
Positive
The website mentions, among other things, the following points: 'GDPR-compliant', 'Hosted in Germany', 'All workflows run on EU servers', 'no personal data to third countries', standard AVV/DPA, as well as 'no training on customer data'. In addition, an anonymization algorithm is described that removes personal data.
Negative
Important detailed documentation can only partially be found specifically on the website. A separately and clearly linked current privacy policy for the product, a publicly viewable subprocessor list, specific information on individual data center locations, a directly accessible AVV/DPA text, as well as detailed information on on-premise, private cloud, or self-hosting options are not stated on the website or are not specifically substantiated in the material found.
Server location
The website states hosting in Germany. In addition, 'EU servers' as well as 'secure European cloud infrastructures' are described. Another reference found mentions the main AI server region in central Sweden. Specific data centers or country lists are not stated on the website.

Link

"AI-first coding in your natural language"

Gemini Code Assist is Google's AI-powered coding assistant for the entire software development lifecycle. It supports code completion, generation, chat, testing, debugging, and documentation in IDEs and—in the Business editions—additionally in various Google Cloud interfaces such as BigQuery, Cloud Run, Firebase, or Apigee.Gemini Code Assist

AI-first coding in your natural language

4.5/10 Limited
Free No-cost tier for individual developers; suitable for code completion, chat, and coding assistance in supported development environments. Subscription Gemini Code Assist Standard Monthly or annual user licenses; includes professional coding assistance, IDE support, Gemini CLI, code completion, chat, smart actions, and enterprise data privacy framework.

Gemini Code Assist Enterprise Advanced enterprise version with enterprise features such as code customization, metrics/observability, private codebase contexts, enterprise access controls, and stronger governance. Other Google Developer Program Gemini Code Assist is also available through the Google Developer Program; exact features depend on the respective program status.

Custom Quote / Google Cloud For larger organizations, individual Google Cloud offers, billing via Google Cloud, and the Pricing Calculator may be relevant.
– (0)

Link

GDPR: Unclear On the specified website, it is clear that Gemini Code Assist addresses security and data protection concerns for business customers. Specifically mentioned are a data governance policy, a commitment not to use customer code, inputs, or generated recommendations for training shared models or for product development, as well as several certifications. However, for a robust GDPR assessment across the entire EU/EEA region, key information is missing from the website itself, such as specific EU/EEA data residency, designated server locations/data centers, a directly accessible Data Processing Agreement (DPA) on this domain, and subprocessors. Therefore, GDPR compliance cannot be conclusively verified based on this domain alone.
Positive
Positive aspects include the statements on the website regarding “Enterprise security and privacy,” the data governance policy, the exclusion of training shared models with customer data, and the mentioned certifications SOC 1/2/3 and ISO/IEC 27001, 27017, 27018, and 27701. Additionally, Gemini CLI is described on the website as open source.
Negative
On the negative side, the website does not list any specific EU/EEA server locations, does not explicitly state EU data residency for Gemini Code Assist, does not directly name a Data Processing Agreement (DPA) on this domain, and does not list any subprocessors. The website also does not specify an on-premises or self-hosting option for the complete solution.
Server Location
Not specified on the website. No specific server locations or EU/EEA data centers for Gemini Code Assist are mentioned.

Link

“Build exactly what you envision with AI + no-code development.”

Bubble is a no-code platform for building web and mobile apps with visual logic, a database, workflows, API integrations, and now also AI-powered app generation.

The tool is aimed at makers, startups, agencies, and companies that want to build and operate applications without traditional full-stack development. In doing so, Bubble covers development, deployment, hosting, and scaling within its own platform ecosystem.Bubble

Build exactly what you envision with AI + no-code development

6.6/10 Solid
Free Free entry point for building and testing web/mobile apps; not intended for fully productive use with your own domain. Subscription Starter For initial live apps with web app, live website, custom domain, and basic workload.

Growth For growing apps with more workload, more editor/branching options, and advanced production features.

Team For scaling teams with sub-apps, multiple app editors, more branches, more workload, and longer server logs. Other Enterprise Custom workload, choice of hosting location, customizable server, dedicated support, and individual app/mobile limits.

Add-ons Workload tiers, additional file storage, and plugin subscriptions.
– (0)

Link

GDPR: Partly Bubble documents several components relevant to GDPR compliance for the EU/EEA region: a privacy policy, a DPA/AVV, subprocessors, data transfer mechanisms for EU/EEA data, and a choice of hosting regions for isolated servers. At the same time, Bubble is a U.S.-based provider; its standard platform is cloud-based on AWS; the website does not specify a clear, general EU data residency standard for all pricing plans; and regarding the AI features, the Terms reserve the right to to use input and output for training and further developing the Bubble AI tools. Therefore, GDPR-compliant use in the EU/EEA appears plausible only under certain conditions, particularly with a sound contractual setup, an appropriate hosting region, and cautious or limited use of the AI features.
Positive
Positively noted are the company’s own DPA/AVV, the inclusion of SCCs or Data Privacy Framework mechanisms for EU/EEA-related transfers, a published list of subprocessors with update and opt-out mechanisms, as well as security certifications such as SOC 2 Type II at the Bubble level and AWS as the underlying infrastructure with ISO/IEC 27001 and SOC 2 compliance. For Enterprise, the option to select a specific AWS data center region for isolated servers is also mentioned.
Negative
A negative or limiting factor is that Bubble operates as a U.S. provider, and the website does not provide general evidence that customer data is stored or processed exclusively within the EU/EEA by default. Furthermore, the Terms explicitly state that Bubble may use input and output from the “Bubble AI Tools” for training, refinement, and further development; a clear, product-specific opt-out for AI training is not specified on the website. On-premises/self-hosting is also not described.
Server Location
Bubble lists AWS as its hosting infrastructure on the website. A specific standard server location for all customers is not specified on the website. For Enterprise, it is stated that applications can be hosted on an isolated server in a specific AWS data center region; however, the pages reviewed do not specify whether and which specific EU/EEA regions are available.

Link

“Automate your work.”

Make is a visual no-code/low-code automation platform for integrations, workflows, and increasingly also agentic AI processes.

Companies can use it to connect data and actions across 3,000+ apps, automate API-based processes, and incorporate AI features such as AI Agents, AI Toolkit, AI Content Extractor, AI Web Search, and MCP servers into scenarios. The product addresses both simple app automations and more complex enterprise workflows with team, governance, and hybrid connectivity.Make

Automate your work

7.4/10 Good
Free Monthly credits, visual no-code workflow builder, 3,000+ apps, router & filter, support, and a longer minimum interval. Subscription Core Everything in Free plus unlimited active scenarios, more granular scheduling, higher data limits, and the Make API.

Pro Everything in Core plus Priority Scenario Execution, Custom Variables, and Full-Text Execution Log Search.

Teams Everything in Pro plus Teams, team roles, and sharing of scenario templates. Other Enterprise Custom Functions Support, Enterprise App Integrations, 24/7 Enterprise Support, Value Engineering, Overage Protection, and Advanced Security.

Credits / AI Agents Credit-based usage for scenarios and AI automation; scope of features varies by plan.
– (0)

Link

GDPR: Partly Make provides data protection documents relevant to the EU/EEA region on its own website, including privacy notices, a DPA/AVV, a list of subprocessors, and information on the GDPR and international transfers. In addition, its documentation specifies a selectable EU data center region for organizations. At the same time, the provider is U.S.-based, refers to the EU-U.S. Data Privacy Framework and SCCs for transfers, and the website does not specify a simple on-premises or self-hosting option. Thus, GDPR-compliant use in the EU/EEA appears to be possible in principle, but only under certain conditions, such as selecting the appropriate region, signing the DPA, and reviewing the specific data flows to subprocessors and AI functions.
Positive
The website includes a DPA/AVV, a data protection page on the GDPR, a Privacy Notice, technical and organizational measures, a list of subprocessors, and information on selecting EU data centers for organizations. In addition, Make cites ISO 27001 as well as SOC 2 Type II and SOC 3 for its infrastructure and security program, respectively.
Negative
The website does not clearly guarantee comprehensive EU/EEA-exclusive processing in all cases. The documentation refers to U.S. connections and international transfers via DPF or SCCs. An on-premises/self-hosting option is not specified on the website. No clear, general commitment to a blanket opt-out from AI training for all AI functions was found on the website; only a specific note regarding Google Workspace APIs is available.
Server Location
For organizations, the website lists a selectable data center region: “European Union (EU).” The list of subprocessors published on the website specifies hosting locations in Ireland (Dublin) or Germany (Frankfurt) for European customers using AWS. In addition, the Enterprise Security page mentions a separately managed AWS environment. The website does not fully clarify whether this applies unchanged to all current product areas and AI features.

Link

"Your finances. Under control." / "Here is your AI tax advisor"

Accountable is a tax, accounting, invoicing, and banking app for self-employed people in Germany. The integrated AI tax advisor answers tax questions, takes the user's personal Accountable situation into account according to the provider, and assists with receipt recognition, expense categorization, tax checks, and tax returns.Accountable – AI tax advisor

Your finances. Under control. / Here is your AI tax advisor

6.4/10 Solid
Free Free entry into e-invoicing via smartphone, a linked bank account, unlimited ZUGFeRD and XRechnungen, limited expense booking and business account features. No full-fledged AI tax advisor access apparent as a core service. Subscription Invoices Plus Includes everything from Free plus web access for income, unlimited e-invoices on smartphone and laptop, quotes, installment invoices, recurring invoices, as well as limited AI tax advisor access.

Accounting For complete bookkeeping and expense management; includes web and mobile access, multiple bank accounts, unlimited expense booking, tax overview, small business year-end closing features, and limited AI tax advisor access.

Taxes Includes accounting and invoicing tools plus VAT advance return, annual financial statements, income tax/EÜR/trade tax/annual VAT return, and significantly expanded AI tax advisor access.

Max Highest Accountable tier with advanced tax and support features, personal onboarding, tax coach access, extended tax guarantee, and unlimited AI tax advisor access. Other Tax advisor services
Separate tax advisory services such as consultations with certified tax advisors, income tax returns, or support during tax audits; not identical to the AI tax advisor.
– (0)

Link

GDPR: Partly Based on the information found on the website, use in compliance with the GDPR within the EU/EEA is generally possible, but this is not fully and clearly documented. Positive aspects include a published privacy policy, a data controller based in the EU (in Brussels), references to servers in Frankfurt, and general statements regarding transfers to third countries pursuant to Art. 44 et seq. of the GDPR. At the same time, the website lacks information regarding data processing agreements (DPAs), subprocessors, a specific EU data residency for all processing activities, and a clear contractual exclusion of the use of user-provided data for AI training. Therefore, from an EU/EEA perspective, the use of the service should be classified as subject to conditions rather than clearly substantiated.
Positive
A privacy policy was found, along with the designation of Accountable SA in Brussels as the data controller, a note that Accountable’s servers are located in Frankfurt, as well as statements regarding encrypted transmission, encrypted backups, privately controlled servers, and compliance with third-country rules pursuant to Art. 44 et seq. of the GDPR.
Negative
The following are not specified or cannot be found on the website: a Data Processing Agreement (DPA), a list of subprocessors, a reliable statement regarding EU data residency for all data flows, a clear opt-out or exclusion of AI training using user data, or relevant certifications such as ISO 27001 or SOC 2.
Server Location
The website states that Accountable’s servers for the AI tax advisor are located in Frankfurt. Additionally, the Help Center refers to a private, secure server that is fully controlled by Accountable. Comprehensive, centralized documentation regarding infrastructure and data residency for all services and subcontractors is not provided on the website.

Link

Robotics

Optimus is Tesla’s humanoid robotics platform designed for physical tasks in factories and, in the future, in homes. Tesla is developing software for balance, navigation, perception, and physical interaction. The robot is not currently available for purchase by the general public.Tesla

general-purpose, bipedal, autonomous humanoid robot

3.4/10 Insufficient
– (0)

Link

GDPR: Unclear From the perspective of the EU/EEA region, no reliable GDPR compliance can be demonstrated for the AI/robotics offering presented at https://www.tesla.com/AI. Tesla's website does provide a general privacy policy and notices for the EEA/UK/Switzerland, including a controller in the Netherlands and standard contractual clauses for international transfers. However, for the specific AI/Optimus offering, the website contains no specific information on EU data residency, server/data center locations, DPA/AVV, subprocessors, self-hosting, or a clear exclusion of training with user content. Therefore, the documentation is too incomplete for an EU/EEA-wide compliance assessment.
Positive
General privacy notices are available. For individuals in the EEA/UK/Switzerland, Tesla designates Tesla International B.V. in the Netherlands as the controller and refers to standard contractual clauses for international data transfers. Tesla also names privacy rights and options for controlling certain data sharing.
Negative
For the specific tool or the AI/Optimus page, the website provides no specific information on EU/EEA hosting, data center locations, DPA/AVV, subprocessors, certifications, on-prem/self-hosting, or a contractually clear no-training path. The privacy notices also explicitly refer to possible transfers to the USA and other countries.
Server location
Not specified on the website. The general privacy policy only states that information may be transferred to Tesla in the USA and to other countries; specific server or data center locations for the AI/Optimus offering are not mentioned.

Link

"Ask, Chat, Create and More"

Meta AI is a generative AI assistant from Meta for chat, research, recommendations, image/video creation, file analysis, shopping, local recommendations, and voice interactions.
It is integrated into Meta products such as WhatsApp, Messenger, Instagram, Facebook, the standalone app, meta.ai, and Meta AI Glasses.
Since April 2026, according to Meta, Meta AI has been powered by Muse Spark, the first model in a new model family from Meta Superintelligence Labs.Meta AI

Your personal AI assistant

3.3/10 Insufficient
Free Free use as a personal AI assistant for answers, recommendations, image/file understanding, voice/text, creative content, and use across Meta apps.
– (0)

Link

GDPR: Unclear No reliable documentation regarding the privacy policy, Terms of Service/Data Processing Agreement, subprocessors, EU data residency, server locations, on-premises/self-hosting, or certifications for Meta AI could be found on the provider’s website at the specified domain using the web search tool. The pages found on meta.ai and its associated subpages primarily led to login prompts in the tool, without disclosing the requested compliance information. Consequently, the necessary primary documentation is missing from the provider’s domain to assess usability throughout the entire EU/EEA region.
Positive
It has been confirmed that an official “Meta AI” service is operated under the provider’s domain. Furthermore, no reliable compliance documentation was available via the domain using the search query.
Negative
Not specified on the website or not found via the web search tool on the domain: specific GDPR commitments for the EU/EEA, Terms of Service/Privacy Policy, list of subprocessors, EU data residency, server/data center locations, self-hosting/on-premises options, opt-out from general AI training for this tool’s use, and relevant certifications.
Server Location
Not specified on the website.

Link

“The secure AI ecosystem to boost your creativity and productivity.”

Mindverse is a German all-in-one AI platform for text, research, images, audio, video, internal knowledge bases, assistants, and automated workflows. It provides various AI models through a single interface and is designed for individual users, teams, and businesses. Higher-tier plans enable custom agents, processes, integrations, and team management.Mindverse

The secure AI ecosystem to boost your creativity and productivity

5.8/10 Limited
Free Trial Access / Start for Free Trial access with time or feature limitations; the current pricing page does not clearly indicate whether a permanent, free full plan is available. Subscription Content Suite Lite AI chatbot, text editor, document upload, and AI editing with a limited monthly request quota.

Content Suite Basic Text and image generation with an expanded request quota and limited AI image requests.

Content Suite Premium More extensive use with fair-use text generation and an increased image quota.

Content Suite Premium Plus Highest Content Suite quota, fair-use text generation, more images, and prioritized support.

Studio Starter AI chat, images, video, and Canva, unlimited internal knowledge, unlimited custom assistants, and Standard and Advanced models.

Studio Pro Starter features plus Expert and Sovereign models, custom agents, custom processes, and more than 500 integrations.

Studio Team Team sharing, role-based access, shared credit wallet, teams, and shared knowledge, assistants, agents, and processes. Other AI Credits Monthly credit for chat, models, images, videos, and other features; additional usage depends on the model.

Custom / Enterprise Custom AI environment with chat and voice bots, knowledge management, agents, workflows, API, integrations, branding, your own domain, and custom hosting.
– (0)

Link

GDPR: Partly The website includes a privacy policy, names a data controller in Germany, and refers to data processors as well as potential transfers from the EU to third countries via standard contractual clauses. For the standard web application, hosting via AWS is specified with “Processing location: Germany.” At the same time, the website does not provide a publicly accessible subpage for the Data Processing Agreement (DPA), a publicly viewable list of subprocessors, a clear statement regarding the exclusion of AI training using customer data, or a reliable description of on-premises, self-hosting, or private cloud options. For use throughout the EU/EEA, GDPR-compliant use is therefore not clearly established by default, but only subject to certain conditions and following additional clarification with the provider.
Positive
Positive aspects include the existing privacy policy, the explicit inclusion of the EU and EEA in the legal text, the specified processing location of Germany for AWS in the web privacy policy, and several product pages featuring statements such as “Developed and hosted in Germany” and “GDPR-compliant”. Furthermore, it is explained that external entities may be designated as data processors and that a current list of these parties can be requested from the provider.
Negative
A negative point is that the website does not mention a publicly accessible process for concluding a Data Processing Agreement (DPA), does not link to a published list of subprocessors, and contains no clear assurance that prompts, uploads, chat histories, or outputs will not be used to train general models, and there is no robust documentation regarding EU data residency for all product areas. Furthermore, the TurboGPT privacy policy found on the domain indicates that data processing for an app also takes place in the U.S. via OpenRouter and Composio; this argues against a blanket “EU-only” classification for the entire ecosystem.
Server Location
The general web privacy policy lists “Processing location: Germany” for AWS. Product pages additionally state “Developed and hosted in Germany.” However, the TurboGPT privacy policy published on the same domain states: Firebase in the EU, OpenRouter in the United States, Composio in the United States, and Apple worldwide. A uniform server location for the entire tool is therefore not consistently or fully specified on the website.

Link

Llama is Meta's family of generative foundation models for text and, in part, image/text understanding.

Meta positions Llama as a flexibly deployable model series that can be fine-tuned, distilled, and deployed “anywhere”; this includes self-hosting, private cloud, and hosting through partners. Llama 4 brings native multimodality, while Llama 3.x continues to address important text, coding, translation, and agent use cases.Meta Llama

LLM “Industry Leading, Open-Source AI”

3.9/10 Insufficient
Free Llama model weights / Download Llama models can be downloaded, fine-tuned, distilled, and self-hosted under the Meta license; infrastructure costs for self-hosting are incurred separately.

Meta Llama API Preview / Waitlist The Llama API is officially positioned via waitlist/login; I could not reliably substantiate a permanently freely usable public API free version with guaranteed limits. Other Managed Llama API API access to current Llama models, API key, playground, SDKs, OpenAI-like integration, tool calling, and models such as Llama 4 Maverick/Scout according to the official Llama API page.

Self-hosting / own cloud / edge Operation of the model weights on your own infrastructure, with cloud providers, or locally; suitable for data protection, cost control, and individual optimization.

Cloud provider / third-party hosting Llama models are available through various cloud and inference providers; data protection, pricing, and server locations then depend on the respective provider.

Fine-tuning / distillation / Llama Stack Customization and integration into your own AI architectures, depending on the model license, infrastructure, and technical setup.
– (0)

Link

GDPR: Unclear I cannot reliably perform the requested evaluation based on web search results from www.llama.com because the available web search tool did not return any results from that domain. Since only information from www.llama.com may be used and no third-party sources are permitted, a reliable assessment is not possible on this basis.
Positive
Not specified on the website.
Negative
Privacy policy, server locations, Terms of Service/Data Protection Agreement, subprocessors, EU data residency, opt-out from AI training, and certifications could not be verified via the domain search.
Server location
Not specified on the website.

Link

Robotics

“Empowering Every Home with Robotics”

Noetix Robotics develops compact and full-size humanoid robots for education, research, entertainment, developers, corporate demonstrations, and, in the future, private households. Bumi is positioned as a lightweight entry-level and educational robot, N2 focuses more on dynamic movement and research, and E1 on voice interaction, service, and embodied AI.Noetix Robotics

Empowering Every Home with Robotics

3.6/10 Insufficient
Other Hardware purchases, product variants such as Pro and EDU, customized sales offers, configurations for education and research, optional computing modules, as well as support and warranty services.
– (0)

Link

GDPR: No From the perspective of a user in the EU/EEA, no reliable basis for GDPR-compliant use of the offering is identifiable on the website. Although it is positive that privacy notices are available and an open-source page exists, the website explicitly states for web data processing that personal data is stored in China. At the same time, the website did not specify EU data residency, EU/EEA data centers, a DPA/AVV, a subprocessor list, or relevant certifications. In addition, for product/service use, the website refers to the applicability of the law of mainland China.
Positive
The website provides a privacy policy for the website, a separate privacy policy for products and services, cookie settings with reject/accept options, and an open-source page with SDKs and development tools. The product privacy policy also states that local rights are to remain unaffected if applicable local law differs.
Negative
For web data storage, the website explicitly names China as the storage location. For EU/EEA-relevant requirements, the website did not specify a DPA/AVV, a subprocessor list, EU data residency, EU/EEA server locations, an on-prem/self-hosting option for the overall service, a contractual exclusion of model training, or certifications such as ISO 27001 or SOC 2. In addition, the website mentions several third-party cookies and marketing trackers.
Server location
For the website, it is stated that personal data is stored in China. A specific server or data center location in the EU/EEA is not specified on the website. For the product/service policy, the website only mentions that it is governed by the law of mainland China.

Link

"Turn ideas into apps in minutes — no coding needed"

Replit is an AI-powered platform that lets you create, edit, and publish apps directly in the browser.

At its core is the Replit Agent, which writes code, sets up infrastructure, and runs tests. It also includes integrated publishing, database, storage, design, and integration features in a single interface.Replit

Turn ideas into apps in minutes — no coding needed

7.4/10 Good
Free Free entry point for creating apps, using AI integrations, and publishing the first project; suitable for learning, testing, and simple projects. Subscription Core For individuals with premium tools, Replit Agent, more resources, more credits/usage allowance, and more productive app building.

Teams / Pro / Team-oriented plans For smaller teams with collaboration, more centralized management, more resources, private deployments, and advanced control features; specific plan names may change. Other Enterprise Custom enterprise offering with SSO/SAML, SOC 2 reference, admin controls, private deployments, security review, and enterprise support.

Usage Credits / AI Billing Replit Agent uses effort-based billing; AI Integrations are bundled via Replit Credits, and Replit manages provider access and billing.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of Replit is only possible under certain conditions. Positive aspects include a published DPA with SCCs, a subprocessors list, and a documented option to host published projects in the EU. At the same time, Replit states the USA as the primary hosting location for the services, the development environments currently run in North America according to the documentation, and the website does not demonstrate continuous EU data residency for the entire platform. Therefore, use in the EU/EEA is rather only justifiable to a limited extent and with careful configuration or additional organizational measures.
Positive
The website includes a privacy policy, a DPA incorporating the Standard Contractual Clauses, a subprocessors list, documented security information, as well as an EU hosting option for published projects. In addition, Enterprise admins can enforce an EU publishing geography.
Negative
The website names the USA as the primary hosting location; the privacy policy explicitly mentions transfers to the USA and other hosting locations. According to the documentation, the development environments currently run in North America. Full EU data residency for all data processing activities of the platform is not demonstrated on the website. In addition, the website does not specify a clear, general opt-out for AI training on private content; instead, it only documents that content from public apps may be used to improve the service and also to train large language models.
Server location
According to the website, Replit primarily hosts data in Google Cloud data centers in the USA; India is also mentioned as an option. For published projects, there is a selectable publishing geography 'Europe (EU)'. According to the website, the development environments currently run in North America.

Link

"Your AI team that's there for you around the clock."

Notion AI is the AI integrated into Notion for knowledge work, research, writing, search, and automation.

The system can use content from your own workspace, connected apps, and in some cases the web to create texts, build pages and databases, generate meeting notes, analyze PDFs/images, and automate tasks with agents.Notion AI

AI for knowledge work, research, writing, search, and automation.

7.2/10 Good
Free For individuals and personal projects; unlimited pages/blocks for solo use, basic organization, and limited team/upload features. Subscription Plus Plan For small teams; more collaboration, more guests, longer version history, and larger uploads; available for students/educators under certain conditions.

Business Plan For businesses; includes unlimited Notion AI usage, Advanced Integrations, and advanced team features. Other Enterprise Plan For larger organizations with Notion AI, SSO, SCIM, audit logs, advanced admin/security controls, and data residency options.

Notion AI / AI Agents / Ask Notion AI features are integrated or expanded depending on the plan; Enterprise offers stronger privacy and governance controls.
– (0)

Link

GDPR: Partly Notion documents GDPR-related measures, a privacy policy, a DPA/AV agreement, as well as an EU data residency option for Enterprise customers. For the EU/EEA area, privacy-compliant use is therefore generally possible, but only under conditions: EU data residency applies only to certain customer data categories and only for Enterprise with migration/setup; at the same time, Notion states that it continues to store and process all data categories in the USA and other international locations. This means that use is not consistently and automatically fully EU-local.
Positive
The website includes privacy notices, reference to a DPA/AV agreement, subprocessor information, reference to SCCs for data transfers, EU data residency with European AWS regions Frankfurt and Ireland, contractual exclusion of training by AI subprocessors, as well as certifications such as ISO 27001 and SOC 2 Type 2.
Negative
According to the website, hosting remains in the USA by default unless migration is set up. According to the website, EU data residency is limited to Enterprise and does not cover all data categories or all product areas. Notion also states that it continues to store and process data in the USA and other international locations. An on-premise or self-hosting option is not indicated on the website.
Server location
For data residency in Europe, the website names AWS regions EU-Central-1 in Frankfurt and EU-West-1 in Ireland. According to the website, a workspace remains hosted in the USA by default until a migration takes place. In addition, Notion states that it continues to store and process all data categories in the USA and other international locations.

Link

Sakana Fugu: “One Model to Command Them All.” Overall, Sakana AI positions itself with “Building Frontier AI in Japan.”

Sakana AI develops frontier AI products and research projects. Fugu combines multiple external leading models behind an OpenAI-compatible API and orchestrates them dynamically for complex, multi-step tasks. Marlin is an autonomous research agent for market, technology, competitive, and regulatory analyses; Sakana Chat is a chat service based on the Namazu model family in the alpha phase.Sakana AI

One Model to Command Them All.

3.6/10 Insufficient
Subscription Standard Monthly entry-level plan for occasional API calls, smaller tests, and personal workflows; includes Fugu and Fugu Ultra.

Pro Monthly plan for regular coding, review, research, and analysis tasks; includes a higher usage allowance.

Max Monthly plan for longer, compute-intensive, and frequent multi-agent tasks. Other No permanently free production version
Credits must be purchased for API usage; an official free-tier version is not specified.

Token Plan / Pay-as-you-go Usage-based API access for production workloads and peak loads; billing based on token consumption.

Fugu Standard model focused on response speed, coding, code review, interactive work, and optional exclusion of individual model providers.

Fugu Ultra Model for demanding multi-step tasks, research, paper reproduction, patent and literature research; the full agent pool is predefined.

Enterprise Deployment Custom enterprise agreement for access, plans, and enterprise deployment; public details are unavailable.
– (0)

Link

GDPR: Unclear The website contains a privacy policy for 'Fugu', and it includes information on international data transfers, data subject rights, and a possible opt-out for training. However, for a reliable GDPR assessment across the entire EU/EEA, key information is missing from the website: a clearly specified EU/EEA server location or EU data residency, published DPA/AVV information, a subprocessor list, and specific details on certifications. In addition, the privacy policy explicitly mentions transfers to Japan and the USA. Therefore, GDPR-compliant use for EU/EEA users cannot be clearly demonstrated based on the website alone.
Positive
Positive aspects include the published privacy policy, the description of data subject rights, the reference to 'appropriate safeguards' for international transfers, and the statement that there may be an opt-out control for training/fine-tuning via account or product settings, if offered. In addition, according to the documentation, 'fugu' can restrict provider selection via the 'custom model pool', which at least suggests some degree of technical control over the disclosure to external model providers.
Negative
Negative is that the website does not guarantee an EU/EEA server location or EU data residency. Instead, the privacy policy states that personal data may be transferred to third parties outside the country of residence, including Japan and the USA. Also not specified on the website are a DPA/AVV page, a subprocessor list, on-prem/self-hosting options, and relevant certifications such as ISO 27001 or SOC 2.
Server location
No specific server/data center location for the EU/EEA is stated on the website. The privacy policy merely states that personal data may be transferred to third parties outside the country of residence, including Japan and the USA. EU data residency is not specified on the website.

Link