Find Your Tool in 6 Steps
Result: 155

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 155
Research Images Video Music Agent Business Marketing Website API

"Built to make you extraordinarily productive, Cursor is the best way to code with AI."

Cursor is an AI-powered development environment for software development with agents, autocomplete, CLI, cloud agents, and code review features.

Officially, Cursor is positioned as a tool that enables developers to delegate tasks to agents, write code faster, and work in parallel across multiple environments. More recent releases add, among other things, an agent-centric interface, parallel multitasking with subagents, canvases, and automations.Cursor – Anysphere

Built to make you extraordinarily productive, Cursor is the best way to code with AI

7.6/10 Good
Free Free use without a credit card, limited agent requests and limited tab completion. Subscription Pro Extended agent limits, access to frontier models, MCPs, Skills, Hooks, and Cloud Agents.

Pro+ Everything in Pro plus significantly more usage for OpenAI, Claude, and Gemini models.

Ultra Everything in Pro plus very high usage and priority access to new features.

Teams Everything in Pro plus shared chats, Commands and Rules, centralized billing, usage analytics, org-wide Privacy Mode, RBAC, and SAML/OIDC SSO. Other Enterprise Pooled Usage, Invoice/PO Billing, SCIM, AI Code Tracking API, Audit Logs, granular admin/model controls, Priority Support, and Account Management.

Bugbot Separate code review/bug detection offering with Pro, Teams, and Enterprise options.
– (0)

Link

GDPR: Partly For users in the EU/EEA, use that is conditionally GDPR-compliant is documented, but not as a simple standard SaaS offering with EU data residency. Positive aspects include a published privacy policy, a Data Processing Addendum, a published list of subprocessors on the Trust Portal, documented data subject rights, and a clear “no training/zero data retention” path via “Privacy Mode.” On the negative side, according to the privacy policy, Anysphere processes personal data on servers in various jurisdictions, including the U.S., and data for EEA users may be transferred to U.S. servers or other countries outside the EEA/UK. The website does not specify an explicit EU data residency or an EU/EEA data center for the main SaaS environment. The best-documented way to achieve greater GDPR compliance is therefore to use “Privacy Mode” in conjunction with a DPA; for Cloud Agents, there is also a self-hosted infrastructure option, but it does not replace the entire Cursor Cloud, as inference and planning continue to run via the Cursor Cloud.
Positive
Privacy policy available; DPA/AVV available; subprocessors are listed at trust.cursor.com/subprocessors; data subject rights for users are described; 'Privacy Mode' is documented, including 'zero data retention' by providers and a statement that customer data will not be used by Cursor for training; SOC 2 Type II is mentioned on the security page; for Cloud Agents, there is a self-hosted option on the user’s own infrastructure.
Negative
The website does not specify guaranteed EU/EEA data residency for the standard SaaS offering. According to the Privacy Policy, processing takes place on servers in various jurisdictions, including the U.S.; for EEA users, data may be transferred to U.S. servers or other countries outside the EEA/UK. A specific server location in the EU/EEA, a dedicated EU data center, or ISO 27001 certification are not specified on the website. The self-hosted agent option is only a partial solution because planning and inference still run through Cursor Cloud.
Server Location
The website does not specify a specific EU/EEA server location. The Privacy Policy only states that personal data is processed on servers in various jurisdictions, including the U.S., and that for users in the EEA, data may be transferred to U.S. servers or other countries outside the EEA/UK. No EU data residency is specified on the website.

Link

“Truly usable and practical AI”

Tencent Hunyuan is Tencent Cloud’s AI model family. It includes text models, reasoning models, vision, video understanding, image generation, translation, 3D generation, and open-source models. Tencent positions Hunyuan for content creation, mathematics, code, dialogue, enterprise scenarios, and multimodal workflows.Tencent Hunyuan / Tencent HY

LLM “Truly usable and practical AI”

3.9/10 Insufficient
Free Free Resource Package / Test Quota
Upon initial activation of Tencent HY Text Generation Global, a one-time free test quota is provided as a Resource Package; after it is used up or expires, postpaid activation is required. Other Token Postpaid / Pay-as-you-go API billing based on token consumption for Hunyuan text functions; billing via Tencent Cloud according to usage and with postpaid enabled.

Tencent HY 3D Global Separate product for 3D generation from text, image, or sketch with its own billing and API/cloud usage.

Enterprise / Tencent Cloud Agreements Individual cloud, contractual, and compliance setups are possible via Tencent Cloud; specific terms and data regions must be reviewed contractually.
– (0)

Link

GDPR: Unclear On the specified product page for Tencent Hunyuan itself, there is no reliable information on EU data residency, a Hunyuan-specific AVV/DPA module, a contractual exclusion of AI training with customer data, or an EU/EEA-specific hosting option. While the Tencent Cloud website does contain general privacy and DPA documents as well as a European contact for the EEA/Switzerland, the information available on the website does not allow a clear conclusion that Tencent Hunyuan can be used in a GDPR-compliant manner throughout the entire EU/EEA area.
Positive
The website documents a general privacy policy for Tencent Cloud, a general Data Processing and Security Agreement, and European regions such as Frankfurt. In addition, for users in the EEA/Switzerland, Tencent Cloud Europe B.V. in the Netherlands is named as the responsible entity for the privacy policy.
Negative
The website does not specify the following for Tencent Hunyuan itself: the specific server location of the service, guaranteed EU data residency, Hunyuan-specific subprocessors, a Hunyuan-specific AVV/DPA annex, a documented on-prem/self-hosting option in the product documentation, or a clear statement that prompts, uploads, or outputs are not used to train general models.
Server location
For Tencent Cloud in general, regions are documented, including 'Europe (Frankfurt)'. For Tencent Hunyuan itself, no specific server or data center location is stated on the website.

Link

"Build Production-Ready AI Agents."

Dify is a platform for AI agents, RAG, visual workflows, chatbots, and no-code AI applications. Teams can develop, test, deploy, monitor, and integrate LLM apps into existing systems via APIs or plugins.Dify

Build Production-Ready AI Agent.

7.6/10 Good
Free Sandbox Free cloud test environment with limited AI credits and core features.

Community Edition Open-source self-hosting with agents, workflows, RAG, APIs, and plugins. Subscription Professional Cloud workspace with extended usage scope, higher storage, logs, and team features.

Team Larger team workspace with more users, capacities, and advanced features.

Enterprise Customized infrastructure, security, support, and governance solution. Other Dify Premium on AWS One-click deployment as an AWS AMI in your own VPC with branding and enterprise options.

Your own model providers Direct connection of your own API keys for OpenAI, Anthropic, Google, local models, and additional providers.
– (0)

Link

GDPR: Yes For the EU/EEA area, Dify can be assessed as usable in the best available usage path in a GDPR-compliant manner, because the website on the one hand mentions self-hosting or enterprise deployment in controlled environments and on the other hand describes data protection mechanisms on the SaaS/enterprise side such as Privacy Policy, SCC-based third-country transfers, as well as Data Processing Agreements. For the standard SaaS variant, however, the situation remains less ideal, because the Privacy Policy mentions US servers and also refers to processing in the USA, EEA, and China; therefore, the positive assessment is primarily sustainable via the self-hosted/on-premise or controlled deployment path.
Positive
Positive aspects are the GDPR compliance stated on the website, the reference to comprehensive Data Processing Agreements, the mention of Standard Contractual Clauses for transfers from the EEA/Switzerland to third countries not considered adequate, an EU representative in Ireland, as well as the clearly documented deployment options with 'on-premise, public cloud, VPC' and a self-hosted/open-source offering.
Negative
A negative aspect is that the standard Privacy Policy for cloud/website operation mentions US servers and also describes processing in the USA and China. A specific EU/EEA-exclusive server location for Dify SaaS, an explicit EU data residency commitment, a publicly discoverable subprocessor list, and a clearly findable statement on opting out of general AI training are not specified on the website.
Server location
The Privacy Policy states that website servers are located in the USA and that data may be processed or stored in regions where LangGenius, affiliated companies, or service providers have facilities, including the USA, Australia, Canada, China, and the EEA. A specific EU data center for the SaaS is not specified on the website.

Link

“The secure AI ecosystem to boost your creativity and productivity.”

Mindverse is a German all-in-one AI platform for text, research, images, audio, video, internal knowledge bases, assistants, and automated workflows. It provides various AI models through a single interface and is designed for individual users, teams, and businesses. Higher-tier plans enable custom agents, processes, integrations, and team management.Mindverse

The secure AI ecosystem to boost your creativity and productivity

5.8/10 Limited
Free Trial Access / Start for Free Trial access with time or feature limitations; the current pricing page does not clearly indicate whether a permanent, free full plan is available. Subscription Content Suite Lite AI chatbot, text editor, document upload, and AI editing with a limited monthly request quota.

Content Suite Basic Text and image generation with an expanded request quota and limited AI image requests.

Content Suite Premium More extensive use with fair-use text generation and an increased image quota.

Content Suite Premium Plus Highest Content Suite quota, fair-use text generation, more images, and prioritized support.

Studio Starter AI chat, images, video, and Canva, unlimited internal knowledge, unlimited custom assistants, and Standard and Advanced models.

Studio Pro Starter features plus Expert and Sovereign models, custom agents, custom processes, and more than 500 integrations.

Studio Team Team sharing, role-based access, shared credit wallet, teams, and shared knowledge, assistants, agents, and processes. Other AI Credits Monthly credit for chat, models, images, videos, and other features; additional usage depends on the model.

Custom / Enterprise Custom AI environment with chat and voice bots, knowledge management, agents, workflows, API, integrations, branding, your own domain, and custom hosting.
– (0)

Link

GDPR: Partly The website includes a privacy policy, names a data controller in Germany, and refers to data processors as well as potential transfers from the EU to third countries via standard contractual clauses. For the standard web application, hosting via AWS is specified with “Processing location: Germany.” At the same time, the website does not provide a publicly accessible subpage for the Data Processing Agreement (DPA), a publicly viewable list of subprocessors, a clear statement regarding the exclusion of AI training using customer data, or a reliable description of on-premises, self-hosting, or private cloud options. For use throughout the EU/EEA, GDPR-compliant use is therefore not clearly established by default, but only subject to certain conditions and following additional clarification with the provider.
Positive
Positive aspects include the existing privacy policy, the explicit inclusion of the EU and EEA in the legal text, the specified processing location of Germany for AWS in the web privacy policy, and several product pages featuring statements such as “Developed and hosted in Germany” and “GDPR-compliant”. Furthermore, it is explained that external entities may be designated as data processors and that a current list of these parties can be requested from the provider.
Negative
A negative point is that the website does not mention a publicly accessible process for concluding a Data Processing Agreement (DPA), does not link to a published list of subprocessors, and contains no clear assurance that prompts, uploads, chat histories, or outputs will not be used to train general models, and there is no robust documentation regarding EU data residency for all product areas. Furthermore, the TurboGPT privacy policy found on the domain indicates that data processing for an app also takes place in the U.S. via OpenRouter and Composio; this argues against a blanket “EU-only” classification for the entire ecosystem.
Server Location
The general web privacy policy lists “Processing location: Germany” for AWS. Product pages additionally state “Developed and hosted in Germany.” However, the TurboGPT privacy policy published on the same domain states: Firebase in the EU, OpenRouter in the United States, Composio in the United States, and Apple worldwide. A uniform server location for the entire tool is therefore not consistently or fully specified on the website.

Link

Midjourney is an AI tool for generating images and, by now, also short videos from text and image prompts.

Midjourney is an AI image generator with a web and Discord interface that translates text, reference images, and style prompts into high-quality visuals. Today, the tool covers not only classic text-to-image, but also image references, style references, Character/Omni References, moodboards, Describe functions, editor workflows, and short image-to-video animations. Particularly striking is the strong creative controllability through personalization and visual references. Important for professional use: Commercial use is generally permitted, but its suitability for data protection and enterprise use can only be rated as limited due to US-based storage, training-related concerns, and limited business administration.Midjourney

community-funded research lab … building the most beautiful AI models in the world

3.9/10 Insufficient
Subscription Basic Plan: Entry into image generation with limited Fast GPU time; no Relax Mode, no Stealth Mode.

Standard Plan: More Fast GPU time, unlimited image generation in Relax Mode, HD video possible in Fast Mode.

Pro Plan: More Fast GPU time, Stealth Mode, more simultaneous image/video prompts, Relax Mode for images and SD video.

Mega Plan: Highest official tier with maximum Fast GPU time and the highest parallelization limits within the standard plans. Other Annual Billing Annual payment with a discount compared to monthly payment.

Fast/Relax Mode Usage depends, depending on the plan, on fast GPU time and Relax Mode.

Stealth Mode Included only in Pro and Mega; is intended to keep images/videos private, but does not apply in open/shared rooms.
– (0)

Link

GDPR: No The information documented on the website does not demonstrate full GDPR compliance for users in the EU/EEA. On a positive note, Midjourney addresses EEA/EU-related issues in its privacy policy and specifies standard contractual clauses for data transfers. At the same time, the website explicitly states that the personal data processed by Midjourney is stored on servers in the United States. The website does not specify an EU data residency, EU/EEA data centers, a Data Processing Agreement (DPA), subprocessors, or an on-premises/self-hosting option. Additionally, the website states that data generated from the use of the service may be used to train the models.
Positive
Privacy policy available; separate notices for the EEA/EU, Switzerland, and the UK are provided; Standard Contractual Clauses for transfers from the EEA/EU context are mentioned; deletion of accounts and data is described; non-essential cookies are to be used only with explicit consent.
Negative
The website states that personal data is stored on Midjourney servers in the U.S. The website does not specify an EU data residency or an EU/EEA hosting option. A Data Processing Agreement (DPA) is not mentioned on the website. Subprocessors are not listed on the website. The privacy policy and training documentation explicitly state that data generated from the use of the service and user data may be relevant for training or for training machine learning algorithms; an opt-out option for general model training is not provided on the website. On-premises, self-hosting, or private cloud options are not listed on the website.
Server Location
As stated on the website: personal data processed by Midjourney is stored on Midjourney servers in the United States. EU/EEA server locations or EU data residency are not specified on the website.

Link

"Gen AI With The Control You Need."

Paradigm is an enterprise GenAI platform from LightOn for private LLMs, enterprise search, RAG, document analysis, and knowledge work. The platform can be operated in a sovereign European cloud, private cloud, on-premises, or air-gapped environment.LightOn Paradigm

Gen AI With The Control You Need.

7.3/10 Good
Free LightOn API Starter
Free entry for API tests and initial OCR, extraction, and retrieval applications. Subscription API Business API usage for productive teams with business support and usage-based scaling.

Paradigm SaaS Seat-based enterprise AI with chat, RAG, enterprise search, permissions, and integrations.

Enterprise Custom deployment with SLA, SSO, SCIM, governance, private cloud, or on-premises. Other On-Premise / Air Gap Operation entirely within your own infrastructure for classified or regulated data.

Hybrid Deployment Local data storage combined with sovereign European GPU resources.

Professional Services Implementation, data connectivity, model integration, retrieval optimization, and customer-specific use cases.
– (0)

Link

GDPR: Yes LightOn Paradigm can overall be assessed as usable in a GDPR-compliant manner for users in the EU/EEA based on the provider's website, because LightOn explicitly offers on-premise, hybrid, and SaaS operating models with sovereign European cloud infrastructure, and for on-premise it even states that compute and data remain on the customer's infrastructure. In addition, the legal texts refer to GDPR compliance, DPA/AVV agreements with customers, and safeguards for international transfers. The assessment is based on the best available usage path in the EU/EEA, not only a possible standard SaaS setup.
Positive
Positive aspects are the clearly documented deployment options on-premise, hybrid, and SaaS on sovereign European cloud infrastructure. For hybrid, it states that data remains on-premise and only European cloud GPUs are used for inference. In the legal texts, LightOn identifies itself as a data processor for customer data and refers to a DPA/AVV concluded with the customer. In addition, there is a dedicated GDPR compliance page with data subject rights, protective measures, storage limitation, and information on international transfers.
Negative
Negative or limiting is that the specific server/data center location for Paradigm SaaS is not identified down to the country/data center level. The privacy policy only states that most processing directly controlled by LightOn takes place in France or in the EU and that some processing by subprocessors may take place in various locations. According to the website, a complete subprocessor list is only available upon request. Furthermore, an explicit general "no training on any customer content" is not comprehensively documented on the website for every usage scenario; training is explicitly excluded for feedback content transmitted to LightOn, while chat/support data is in some cases mentioned for service improvement or machine learning in the website/support context.
Server location
The website does not name a single specific Paradigm data center. The privacy policy states that most processing directly controlled by LightOn takes place in France or in the EU; further processing by subprocessors may occur in various locations. For the product page, SaaS is described as 'entirely hosted on sovereign European cloud infrastructure', hybrid with 'sovereign European cloud GPUs', and on-premise with data and compute on customer infrastructure.

Link

"Turn any idea into stunning images and cinematic video"

BasedLabs is an AI platform for creating and editing images, videos, and in some cases also audio/voice content.

Officially, the platform advertises, among other things, an AI Image Generator, AI Video Generator, Face Swap, Voice Changer, Video Editor, YouTube Video Editor, community/feed features, as well as an API for using models in your own applications. The focus is clearly on creator, social media, advertising, and content workflows.BasedLabs AI

Turn any idea into stunning images and cinematic video

3.3/10 Insufficient
Free Free AI tools and credits via platform/community; exact limits may vary. Other Starter One-time credit purchase for tests, images, and short videos.

Creator More credits for regular creator use.

Pro More credits, bonus credits, and more professional use.

Studio High credit volume for high-volume production.

Enterprise / API Enterprise pricing, API access, and custom solutions available.
– (0)

Link

GDPR: No Although the website contains a privacy policy that refers to GDPR rights for EU users, it does not demonstrate, from the perspective of the EU/EEA, that its use is fully or reliably GDPR-compliant. The website lacks specific information regarding EU/EEA data residency, server locations/data centers, a data processing agreement (DPA), a list of subprocessors, and a contractually guaranteed exclusion of training with user data. Additionally, the website lists BasedLabs AI, Inc. in Delaware, USA, with its principal place of business in San Diego, which typically leads EU/EEA users to expect cross-border data processing without the relevant safeguards being sufficiently documented on the website.
Positive
Positively noted are a publicly accessible privacy policy, explicit references to GDPR rights for EU users, a contact point for data protection inquiries, and an enterprise-level note regarding “SOC 2-compliant infrastructure” and encryption.
Negative
A major negative is that the website does not specify a concrete EU/EEA server location, does not guarantee EU data residency, no Data Processing Agreement (DPA) can be found, no subprocessors are disclosed, and no clear opt-out or contractual exclusion for AI training using user inputs, uploads, or outputs is documented. Furthermore, according to the Terms of Service, the platform is operated by a U.S. company.
Server Location
Not specified on the website. The Terms of Service only state that BasedLabs AI, Inc. is registered in Delaware, USA, and has its principal place of business in San Diego; specific server or data center locations or EU/EEA hosting are not mentioned.

Link

“Boost visibility in Google, ChatGPT, and beyond.”

Surfer is an SEO and AI visibility platform for planning, creating, optimizing, and monitoring content.

The product combines Content Editor, Topical Map, Content Audit, SERP Analyzer, Audit, as well as AI visibility tracking for systems such as ChatGPT, Perplexity, Google AI Overview, Google AI Mode, and Gemini. In addition, it includes AI writing features, internal linking, integrations, and team/workspace functions.Surfer

Boost visibility in Google, ChatGPT, and beyond

7.1/10 Good
Free Free tools such as Chrome Extension, AI Writing Tools, AI Detector, Humanizer, and courses; no fully featured permanently free version of the Surfer platform. Subscription Discovery Getting started with content creation and optimization, limited documents, page tracking, AI SEO guidelines, Surfy, and Humanizer.

Standard Unified SEO workflow, more documents, AI visibility tracking, AI prompts, integrations, brand knowledge, 1-click content optimization, and team collaboration.

Pro Everything in Standard plus more AI prompt tracking, multiple brand workspaces, internal linking, content ideas, coverage gap, templates, custom voices, and cannibalization report.

Peace of Mind Everything in Pro plus more unlimited optimization, more AI visibility tracking, API access, and VIP/scale features. Other Enterprise Customized packages with SSO, Enterprise Security, Advisory, Legal Onboarding Assistance, Early Access, Custom Limits, White-Label, Priority Support, and Team Onboarding.

AI Credits / Top-ups Additional AI credits can be added to active subscriptions.
– (0)

Link

GDPR: Partly Surfer documents on its own website a GDPR reference, customer privacy notices, and an integrated AVA/DPA through acceptance of the customer clause. For users throughout the EU/EEA, this is positive. At the same time, Surfer lists processing locations for hosting and several subprocessors as 'EU / United States', 'United States', or 'Global' and explicitly permits transfers outside the EEA based on appropriate safeguards. A binding EU data residency only within the EU/EEA, an exclusively European server location, or an on-premise/self-hosting option is not stated on the website. Therefore, GDPR-compliant use in the EU/EEA appears possible only under certain conditions, not as clearly and comprehensively demonstrated.
Positive
There is a general privacy policy, a customer privacy policy, and a DPA provision on the website. The customer privacy policy states that customers enter into a Data Processing Agreement by accepting the clause, that Surfer provides support with Art. 28 / Art. 32 matters, enables audits, and publishes a list of subprocessors with processing locations. Surfer identifies itself as a Polish company and expressly refers to the GDPR.
Negative
For the actual hosting, Surfer lists Google Cloud Platform with processing location 'EU / United States' and Cloudflare with 'Global'. According to the list, several other subprocessors process data in the United States or globally. Surfer expressly reserves the right to transfer data outside the EEA. Fixed EU data residency, exclusive EU/EEA hosting, an opt-out from AI training for user inputs, as well as on-premise/self-hosting are not stated on the website.
Server location
According to the subprocessor list: Google Cloud Platform for hosting, data processing, storage, and backups with processing location 'EU / United States'; Cloudflare for CDN, security, and data transmission with processing location 'Global'. A specific single data center or an exclusively EU/EEA data center is not stated on the website.

Link

"Language. Quality. Performance." as well as "The AI manufactory that writes in your voice."

newsrooms positions itself as an AI-powered content platform for high-quality communication.

According to the official description, the tool transforms sources into "publication-ready content," learns the writing style of users or the brand, and offers, among other things, Image Studio, File Processing, Research Agent, and Research Assistant, as well as focus areas such as SEO, GEO & GAIO. The platform is clearly aimed at professional content, PR, marketing, and editorial teams.Newsrooms

The AI manufactory that writes in your voice

7.2/10 Good
Subscription The app homepage mentions a free trial period or a free trial account with standardized Communication Tasks and curated newsroom language styles.

⚠️ No confirmed information available – as of 30/04/2026. Publicly visible offering/product segments include Enterprise, MyNewsroom, Industry Solution, Startups, Journalists, and Agency Services; I could not reliably find a verifiable public list of all subscription tiers with their feature scope.
– (0)

Link

GDPR: Yes The provider's website documents several key points for GDPR-compliant use within the EU/EEA: The service is presented as 'fully GDPR-compliant', hosting takes place exclusively on European servers, there is an 'EU-only processing option' for model processing, according to the website customer data is not used to train external models, and tiered security models are offered up to and including an on-premise solution. For the assessment, the best usage path documented on the website was taken into account, not just the standard SaaS variant.
Positive
Positively documented are EU hosting, storage exclusively on European servers, an EU-only processing option for inference, a documented exclusion of training external models with customer data, ISO/IEC 27001:2022 certification, as well as an on-premise option. From an EU/EEA perspective, these points clearly support a well-usable data-sovereign operating model.
Negative
No specific countries or data center locations within the EU/EEA were stated on the publicly accessible website. Likewise, no publicly viewable details on subprocessors were found on the website. A DPA/AVV is mentioned in the terms and conditions, but the specific DPA page or its content was not directly viewable via the search results.
Server location
The website states that newsrooms.ai is hosted 'exclusively on European servers' and that data does not leave the EU. Specific countries, cities, or data centers are not specified on the website.

Link

"AI-first coding in your natural language"

Gemini Code Assist is Google's AI-powered coding assistant for the entire software development lifecycle. It supports code completion, generation, chat, testing, debugging, and documentation in IDEs and—in the Business editions—additionally in various Google Cloud interfaces such as BigQuery, Cloud Run, Firebase, or Apigee.Gemini Code Assist

AI-first coding in your natural language

4.5/10 Limited
Free No-cost tier for individual developers; suitable for code completion, chat, and coding assistance in supported development environments. Subscription Gemini Code Assist Standard Monthly or annual user licenses; includes professional coding assistance, IDE support, Gemini CLI, code completion, chat, smart actions, and enterprise data privacy framework.

Gemini Code Assist Enterprise Advanced enterprise version with enterprise features such as code customization, metrics/observability, private codebase contexts, enterprise access controls, and stronger governance. Other Google Developer Program Gemini Code Assist is also available through the Google Developer Program; exact features depend on the respective program status.

Custom Quote / Google Cloud For larger organizations, individual Google Cloud offers, billing via Google Cloud, and the Pricing Calculator may be relevant.
– (0)

Link

GDPR: Unclear On the specified website, it is clear that Gemini Code Assist addresses security and data protection concerns for business customers. Specifically mentioned are a data governance policy, a commitment not to use customer code, inputs, or generated recommendations for training shared models or for product development, as well as several certifications. However, for a robust GDPR assessment across the entire EU/EEA region, key information is missing from the website itself, such as specific EU/EEA data residency, designated server locations/data centers, a directly accessible Data Processing Agreement (DPA) on this domain, and subprocessors. Therefore, GDPR compliance cannot be conclusively verified based on this domain alone.
Positive
Positive aspects include the statements on the website regarding “Enterprise security and privacy,” the data governance policy, the exclusion of training shared models with customer data, and the mentioned certifications SOC 1/2/3 and ISO/IEC 27001, 27017, 27018, and 27701. Additionally, Gemini CLI is described on the website as open source.
Negative
On the negative side, the website does not list any specific EU/EEA server locations, does not explicitly state EU data residency for Gemini Code Assist, does not directly name a Data Processing Agreement (DPA) on this domain, and does not list any subprocessors. The website also does not specify an on-premises or self-hosting option for the complete solution.
Server Location
Not specified on the website. No specific server locations or EU/EEA data centers for Gemini Code Assist are mentioned.

Link

“Automate AI Workflows, Agents, and Apps”

Zapier is a no-code/low-code automation platform that enables workflows (“Zaps”) to be connected between SaaS tools, forms, spreadsheets, chatbots, and AI functions.

Zapier currently brings together Zaps, Tables, Forms, and Zapier MCP in a shared AI orchestration platform, positioning itself not only as a traditional integration service but also as a platform for AI workflows, agents, and chatbots.Zapier

Automate AI Workflows, Agents, and Apps

7.7/10 Good
Free Zaps, Tables, and Forms, limited Tasks, Two-Step Zaps, and Zapier Copilot with daily limits. Subscription Professional Multi-step Zaps, Premium Apps, Webhooks, Support, AI Fields, and Conditional Form Logic. Team Multi-user plan with Shared Zaps, folders, Shared App Connections, SAML SSO, and Premier Support. Other Enterprise Unlimited Users, advanced admin rights, App Controls, VPC Peering, annual task limits, Observability, and Technical Account Manager.

Task Tiers / Pay-as-you-go / Agents Billing based on task quotas; additional AI-/Agents-/MCP usage depending on plan and consumption.
– (0)

Link

GDPR: Partly Zapier documents key privacy components for the European region, including a privacy policy, a Data Processing Addendum with SCCs for EU data, EU/UK representatives, and a subprocessor list. For AI features, there is an opt-out from model training; for Enterprise customers, this is automatically enabled. At the same time, the subprocessor list names predominantly US-based locations for deployment-relevant providers and AI providers, and the website does not specify general EU data residency for the standard SaaS version. This makes GDPR-compliant use in the EU/EEA appear realistic only under conditions such as use of a DPA/SCCs, transfer assessment, and careful configuration, but not as a clearly and comprehensively documented default situation.
Positive
Positive aspects include the available privacy documentation, the DPA with SCCs for EU data, the designation of EU/UK representatives, the published subprocessor list, the statement that AI subprocessors may not use customer data for model training, as well as the opt-out from AI training for customer content.
Negative
Negative is that the website does not specify general EU data residency for Zapier as a SaaS. In the subprocessor list, the named infrastructure, cloud, and AI providers are predominantly listed as being located in the USA. On-premise or true self-hosting of the overall platform is not indicated on the website.
Server location
The website does not specify an EU/EEA server location for the standard SaaS deployment. The subprocessor list names AWS, Google, OpenAI, Anthropic, Microsoft, Pinecone, Redis, Datadog, Heroku, Vercel, and others, among others, as being located in the USA. General EU data residency is not specified on the website.

Link

Command A is Cohere’s most powerful enterprise LLM for real business tasks such as tool use, retrieval-augmented generation, agents, and multilingual workflows.

The model has 111 billion parameters, supports 23 languages, features a 256k context window, and according to Cohere is designed for a comparatively low inference footprint.Command A

LLM “Our largest, most performant model, ideal for building enterprise agents with a low compute footprint.” - “Max performance, minimal compute”

7.5/10 Good
Free Yes, limited. Publicly primarily API/enterprise use; free trial or evaluation access may depend on the contract/account. Other API Usage Model access via the Cohere API, usage-based billing by model and tokens.

Enterprise / Private Deployment VPC, on-premises, or air-gapped deployment for companies with strict data protection, security, and data residency requirements.

North / Compass / Embed / Rerank Complementary Cohere products for agents, enterprise search, embeddings, and retrieval
– (0)

Link

GDPR: Partly From an EU/EEA perspective, GDPR-compliant use is possible, but this has not been generally demonstrated for standard SaaS. Positive aspects include a published privacy policy, a DPA/AVV available upon request, an opt-out option for model training, zero data retention for enterprise customers, and private deployments in which, according to the website, Cohere does not receive any prompts or generated content. At the same time, the website does not specify a concrete EU/EEA server location for the SaaS version; furthermore, the website refers to international data transfers and, in the Trust Center, to subprocessors located in the U.S., among other places. Therefore, its use in the EU/EEA is generally viable under certain conditions—particularly via private deployment, VPC, or a third-party cloud with independent data control—but not solely based on the standard SaaS documentation.
Positive
The following are confirmed: a privacy policy is available; a DPA/AVV for SaaS is provided upon request; an opt-out option for training is available in the dashboard; zero data retention for Enterprise is available upon request; several private deployment models, including on-premises and VPC; according to its website, Cohere does not process customer prompts or generated content for private and third-party deployments; ISO 27001, ISO 42001, and SOC 2 Type II are mentioned.
Negative
Negative or limiting aspects include: The website does not specify a concrete EU/EEA server location or a specific EU data center for the standard SaaS offering; explicit EU data residency for Cohere SaaS is not indicated on the pages reviewed; Subprocessors listed in the Trust Center are located, among other places, in the U.S.; the privacy policy describes international data transfers across jurisdictions. As a result, significant compliance verification efforts remain necessary for pure SaaS use within the EU/EEA.
Server Location
The website does not specify a specific server location or data center in the EU or EEA for the Cohere SaaS. Instead, it mentions flexible deployment options for on-premises, VPC, third-party cloud, and “meeting strict data residency needs.” The Trust Center lists subprocessors with locations in the U.S., among other places. For applicant data, the website states that processing takes place in Canada and the U.S.; for product/SaaS data, no specific EU server location was mentioned on the pages found.

Link

“When something feels off, Buoy it”

Buoy Health is a U.S. digital health/AI tool for symptom checking, initial clinical assessment, triage, and care navigation.

End users can enter symptoms via chat/quiz and receive possible causes, guidance on urgency, and recommendations for next steps in care. In addition, Buoy offers clinically editorially supervised health content, disease-specific AI quizzes, as well as an API for integration into apps, websites, and patient portals.Buoy Health

When something feels off, Buoy it

3.4/10 Insufficient
Free Free to use; account creation is free according to the Help Center. Includes AI-powered symptom checking, clinical guidance, and indications of possible next steps. Other Buoy API / Enterprise Programs Symptom-checking and triage engine for integration into websites, apps, or organizational programs; demo/contract model for organizations.

Third-Party Services / Care Navigation Buoy can direct users to third-party providers, health services, or care pathways; availability and terms depend on the respective partner.
– (0)

Link

GDPR: No Although the website includes a privacy policy and general security information, it does not provide any reliable details regarding EU/EEA data residency, EU data centers, data processing agreements (DPAs), subprocessors, or a GDPR-specific processing framework. On the contrary, the privacy policy explicitly states that Buoy is operated from the United States and that data processing is subject to U.S. law. For users throughout the EU/EEA, the website therefore does not demonstrate fully GDPR-compliant use.
Positive
Positive aspects include a publicly accessible privacy policy, references to technical and organizational security measures such as encryption, firewalls, identity management, and intrusion prevention/detection, as well as a mentioned HITRUST certification. In addition, Buoy describes options for filing complaints and contacting the company via email.
Negative
A particular negative factor for an EU/EEA GDPR assessment is that the website describes Buoy as being controlled and offered in the U.S., and the privacy policy explicitly states that U.S. law—and not the law of other jurisdictions—applies. Furthermore, the Terms of Service state that users must be located in the U.S. to use the services. The website does not specify EU server locations, EU data residency, SCCs/transfer mechanisms, AVV/DPA, a list of subprocessors, the option to opt out of AI training for general models, or on-premises/self-hosting options.
Server Location
Not specified on the website. The Privacy Policy merely states that Buoy is controlled and offered from the United States; specific server or data center locations in the EU/EEA are not mentioned.

Link

“The ultimate AI-powered camera control for filmmakers & creators” / Platform for AI video, image, audio, supercomputer, MCP/CLI, Marketing Studio, Cinema Studio, and AI Influencer.

Higgsfield AI is a creative platform for generative images, videos, ads, UGC, AI influencers, storyboards, VFX presets, camera movements, character consistency, and marketing content. The platform brings together many leading models and proprietary workflows in a single interface.Higgsfield.AI

The ultimate AI-powered camera control for filmmakers & creators

3.9/10 Insufficient
Free The official website advertises “Try Free”; specific permanently free limits were not fully confirmed in the publicly readable pricing content. Subscription Individual / Single Plans Higgsfield uses a credit-based model for image, video, and premium generations. The currently binding names and limits of the individual plans could not be fully verified on the dynamic pricing page during research access; the official pricing page is the authoritative source.

Team Plan Shared workspace for creative teams with collaboration on prompts, visuals, and videos; designed for joint production and team workflows.

Enterprise Enterprise offering with SOC-2-aligned security, SSO, custom integrations, audit logs, and SLA support according to the enterprise page; specific terms and privacy details must be requested. Other Credits Generations consume Credits depending on model, resolution, length, and function; according to the official MCP page, MCP uses the same Credit system as the Higgsfield platform.

MCP / CLI / API Use of Higgsfield generations via external agents or developer/automation access; API limits and restrictions may be set by Higgsfield.

Enterprise / Custom Individual workflows, integrations, security requirements, and volume needs via Enterprise sales; no fully verified publicly standardized pricing/performance scheme.
– (0)

Link

GDPR: Unclear The website includes a privacy policy with a section for European users in the EEA/UK, including EU/EEA representatives and information on international data transfers. However, for a robust assessment of GDPR compliance throughout the EU/EEA, the website lacks key information regarding data protection authorities (DPAs), subprocessors, EU data residency, specific server/data center locations, self-hosting, and a contractually guaranteed exclusion of AI training. Therefore, compliance for EU/EEA users as a whole can only be assessed as unclear.
Positive
The website includes a privacy policy, an explicit notice for European users in the EEA/UK, specified legal bases, data subject rights, and an EU/EEA representative in France. It also mentions that content can be deleted and that account content is typically removed within certain timeframes.
Negative
The website does not specify a Data Processing Agreement (DPA), a list of subprocessors, specific EU/EEA data centers or EU data residency, an on-premises/self-hosting option, a clear opt-out from AI training for prompts, uploads, or outputs, nor does it list relevant certifications such as ISO 27001 or SOC 2. The privacy policy also mentions international transfers to the U.S. or other locations.
Server Location
Not specifically stated on the website. The privacy policy only states that personal data may be transferred to the U.S. or other locations; specific server or data center locations within the EU/EEA are not mentioned.

Link

Robotics

“Cognitive Robotics – A New Era of Human-Robot Collaboration”

NEURA Robotics develops humanoid, collaborative, and cognitive robots for industry, logistics, research, service, and, in the future, the home. 4NE1 combines mobility, sensor skin, environmental perception, multimodal AI, voice interaction, and interchangeable or dexterous hands. The platform is designed for collaboration with humans and for tasks in real-world, non-fully-structured environments.NEURA Robotics

Cognitive Robotics – A New Era of Human-Robot Collaboration

3.4/10 Insufficient
Other Hardware purchases, reservations, volume discounts, customized corporate offers, pilot projects, integration, support, and project-specific configurations. Separate reservation models are available for MiPA and 4NE1.
– (0)

Link

GDPR: Unclear There is a privacy policy available on the website, and the provider identifies itself in the legal notice as the responsible entity in Germany. However, for a reliable assessment of GDPR compliance throughout the EU/EEA, the website lacks essential information on server/data center locations, EU data residency, AVV/DPA, subprocessors, opt-out from AI training, and certifications. As a result, a Europe-wide compliance assessment for the practical use of the tool is too incomplete based on the website alone.
Positive
Positively documented are a published privacy policy, the explicit reference to the GDPR, and information on data subject rights. In the legal notice, NEURA Robotics GmbH, based in Metzingen, Germany, is named as the responsible entity.
Negative
Negative is that no specific information was found on the website regarding server locations or data centers, no documented EU data residency, no AVV/DPA, no list of subprocessors, no statement about a contractual exclusion of AI training with customer data, and no relevant certifications such as ISO 27001 or SOC 2. The privacy policy also mentions Google Analytics and refers to a transfer of personal data to Google in the USA.
Server location
Not specified on the website. Server log files are mentioned in the privacy policy, but no location of the servers or data centers is stated. In addition, for Google Analytics, a transfer of personal data to Google in the USA is described.

Link

"One Voice AI Assistant. Different Ways to Use It."

Speechify is a voice AI platform that converts text into natural-sounding speech and also offers features such as Voice Typing, Voice AI Assistant, AI Podcasts, OCR scanning, as well as creator/studio features like Voice Over, Dubbing, and Voice Cloning.

The product is available as a web app, browser extension, and for iOS, Android, macOS, and Windows; there is also an API for developers.Speechify

One Voice AI Assistant. Different Ways to Use It

6.4/10 Solid
Free Basic text-to-speech features, slower listening, limited simple voices, and text-to-speech only. Subscription Premium High-quality natural voices, many languages, faster listening, Scan & Listen, AI Summaries & Chats.

Speechify Studio Separate subscription for voiceovers, creator content, podcasts, videos, dubbing, and audio production. Other API Text-to-speech API with a free tier and scalable usage plans for apps and workflows.

Enterprise / EDU Enterprise and education offerings for larger organizations, teams, and integrations.
– (0)

Link

GDPR: Partly For users in the EU/EEA region, GDPR-compliant use is only verifiable to a limited extent. The website has a privacy policy with information on data subject rights for the EEA/Switzerland/UK as well as on Standard Contractual Clauses for third-country transfers. At the same time, Speechify explicitly names the USA as the default storage location and does not provide any information on the website about EU data residency, EU data centers, or a self-hosting/on-premise option. A DPA/AVV is only indirectly discernible through Enterprise/API references, not as a publicly accessible contractual document.
Positive
Positive aspects include the existing privacy policy, the explicitly stated rights for users in the EEA, references to SCCs for data transfers outside Europe, and a note on customer-specific DPA/SLA terms in the Enterprise/API context. In addition, it is mentioned for certain local content that data is stored on the device and can be synchronized with servers.
Negative
Negative is that, according to the website, Speechify transfers submitted information to the USA, where it processes and stores it. A specific server location in the EU/EEA, EU data residency, a published subprocessor list, a clearly documented AVV/DPA page, an on-premise/self-hosting option, and a clear opt-out from AI training for general models are not indicated on the website.
Server location
The website explicitly states the USA as the storage and processing location. A specific EU/EEA data center or EU data residency is not indicated on the website.

Link

"Your AI team that's there for you around the clock."

Notion AI is the AI integrated into Notion for knowledge work, research, writing, search, and automation.

The system can use content from your own workspace, connected apps, and in some cases the web to create texts, build pages and databases, generate meeting notes, analyze PDFs/images, and automate tasks with agents.Notion AI

AI for knowledge work, research, writing, search, and automation.

7.2/10 Good
Free For individuals and personal projects; unlimited pages/blocks for solo use, basic organization, and limited team/upload features. Subscription Plus Plan For small teams; more collaboration, more guests, longer version history, and larger uploads; available for students/educators under certain conditions.

Business Plan For businesses; includes unlimited Notion AI usage, Advanced Integrations, and advanced team features. Other Enterprise Plan For larger organizations with Notion AI, SSO, SCIM, audit logs, advanced admin/security controls, and data residency options.

Notion AI / AI Agents / Ask Notion AI features are integrated or expanded depending on the plan; Enterprise offers stronger privacy and governance controls.
– (0)

Link

GDPR: Partly Notion documents GDPR-related measures, a privacy policy, a DPA/AV agreement, as well as an EU data residency option for Enterprise customers. For the EU/EEA area, privacy-compliant use is therefore generally possible, but only under conditions: EU data residency applies only to certain customer data categories and only for Enterprise with migration/setup; at the same time, Notion states that it continues to store and process all data categories in the USA and other international locations. This means that use is not consistently and automatically fully EU-local.
Positive
The website includes privacy notices, reference to a DPA/AV agreement, subprocessor information, reference to SCCs for data transfers, EU data residency with European AWS regions Frankfurt and Ireland, contractual exclusion of training by AI subprocessors, as well as certifications such as ISO 27001 and SOC 2 Type 2.
Negative
According to the website, hosting remains in the USA by default unless migration is set up. According to the website, EU data residency is limited to Enterprise and does not cover all data categories or all product areas. Notion also states that it continues to store and process data in the USA and other international locations. An on-premise or self-hosting option is not indicated on the website.
Server location
For data residency in Europe, the website names AWS regions EU-Central-1 in Frankfurt and EU-West-1 in Ireland. According to the website, a workspace remains hosted in the USA by default until a migration takes place. In addition, Notion states that it continues to store and process all data categories in the USA and other international locations.

Link

“Build exactly what you envision with AI + no-code development.”

Bubble is a no-code platform for building web and mobile apps with visual logic, a database, workflows, API integrations, and now also AI-powered app generation.

The tool is aimed at makers, startups, agencies, and companies that want to build and operate applications without traditional full-stack development. In doing so, Bubble covers development, deployment, hosting, and scaling within its own platform ecosystem.Bubble

Build exactly what you envision with AI + no-code development

6.6/10 Solid
Free Free entry point for building and testing web/mobile apps; not intended for fully productive use with your own domain. Subscription Starter For initial live apps with web app, live website, custom domain, and basic workload.

Growth For growing apps with more workload, more editor/branching options, and advanced production features.

Team For scaling teams with sub-apps, multiple app editors, more branches, more workload, and longer server logs. Other Enterprise Custom workload, choice of hosting location, customizable server, dedicated support, and individual app/mobile limits.

Add-ons Workload tiers, additional file storage, and plugin subscriptions.
– (0)

Link

GDPR: Partly Bubble documents several components relevant to GDPR compliance for the EU/EEA region: a privacy policy, a DPA/AVV, subprocessors, data transfer mechanisms for EU/EEA data, and a choice of hosting regions for isolated servers. At the same time, Bubble is a U.S.-based provider; its standard platform is cloud-based on AWS; the website does not specify a clear, general EU data residency standard for all pricing plans; and regarding the AI features, the Terms reserve the right to to use input and output for training and further developing the Bubble AI tools. Therefore, GDPR-compliant use in the EU/EEA appears plausible only under certain conditions, particularly with a sound contractual setup, an appropriate hosting region, and cautious or limited use of the AI features.
Positive
Positively noted are the company’s own DPA/AVV, the inclusion of SCCs or Data Privacy Framework mechanisms for EU/EEA-related transfers, a published list of subprocessors with update and opt-out mechanisms, as well as security certifications such as SOC 2 Type II at the Bubble level and AWS as the underlying infrastructure with ISO/IEC 27001 and SOC 2 compliance. For Enterprise, the option to select a specific AWS data center region for isolated servers is also mentioned.
Negative
A negative or limiting factor is that Bubble operates as a U.S. provider, and the website does not provide general evidence that customer data is stored or processed exclusively within the EU/EEA by default. Furthermore, the Terms explicitly state that Bubble may use input and output from the “Bubble AI Tools” for training, refinement, and further development; a clear, product-specific opt-out for AI training is not specified on the website. On-premises/self-hosting is also not described.
Server Location
Bubble lists AWS as its hosting infrastructure on the website. A specific standard server location for all customers is not specified on the website. For Enterprise, it is stated that applications can be hosted on an isolated server in a specific AWS data center region; however, the pages reviewed do not specify whether and which specific EU/EEA regions are available.

Link

“Get found. Get booked. Get paid.”

Jimdo is a platform developed in Germany for websites and small online businesses. Users can use AI to create a website with a structure, text, images, and calls to action, and then manage bookings, forms, online stores, payments, invoices, and local visibility. The AI assistant, Companion, analyzes existing Jimdo business data and suggests specific steps for optimization.Jimdo

A website that thinks along with you and helps self-employed individuals build and grow their businesses.

6.7/10 Solid
Free Free monthly credit allowance, access to core platform features, web and mobile experiences, advanced models, and one-click LLM integration. Subscription Standard Free features plus private projects, a larger monthly credit allowance, the ability to purchase additional credits, GitHub integration, and task forking.

Pro Standard features plus a large context window, advanced reasoning, system prompt editing, custom AI agents, high-performance computing, a higher credit allowance, and prioritized support.

Enterprise Custom enterprise plan with higher usage limits, SSO, domain capture, shared workspaces, role-based access control, audit logs, managed hosting, onboarding, and enterprise support. Other Credits Consumption units for AI agents, development steps, and platform usage; the standard plan allows you to purchase additional credits.

GitHub Code Export Full synchronization and transfer of the generated code to your own GitHub repository.

Managed Hosting Hosting, monitoring, authentication, database, and deployment can be provided within the platform.

Enterprise Cloud Deployment Custom deployment within the company’s cloud and governance environment; technical and regional details available upon request.

Integrations and MCP More than 100 integrations, payment providers, APIs, and MCP connections for external systems and workflows.
– (0)

Link

GDPR: Yes Jimdo is a German company (Jimdo GmbH, Hamburg) and explicitly promotes itself on its own website as GDPR-compliant: “GDPR-compliant data protection and security built in from day one.” The infrastructure runs on AWS data centers within the EU; a Data Processing Agreement (DPA) has been an automatic part of the Terms of Service since February 2022; subprocessors are documented; and international transfers are safeguarded via Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework. For German users, this makes GDPR-compliant use possible without any significant additional effort.
Positive
Explicit commitment to the GDPR on the homepage; servers located exclusively in the EU (AWS EU); DPA automatically included in the Terms of Service (no separate agreement required); public list of subprocessors with legal bases (SCCs, EU-U.S. DPF); Headquarters in Germany (Hamburg); dedicated data protection contact address ([email protected]); technical and organizational measures (TOMs) documented.
Negative
No evidence of Jimdo’s own ISO 27001 or SOC 2 certification on the website (only a reference to AWS security practices); No explicit statement regarding the option to opt out of AI training found on the website; no self-hosting or on-premises option available; users are entirely reliant on Jimdo’s cloud infrastructure.
Server Location
AWS data centers within the European Union (explicitly documented at legal.jimdo.com/hc/en-us/articles/20332078550676). No specific country or data center is named, but EU data residency is confirmed. No international data transfers for the core infrastructure.

Link

"Your finances. Under control." / "Here is your AI tax advisor"

Accountable is a tax, accounting, invoicing, and banking app for self-employed people in Germany. The integrated AI tax advisor answers tax questions, takes the user's personal Accountable situation into account according to the provider, and assists with receipt recognition, expense categorization, tax checks, and tax returns.Accountable – AI tax advisor

Your finances. Under control. / Here is your AI tax advisor

6.4/10 Solid
Free Free entry into e-invoicing via smartphone, a linked bank account, unlimited ZUGFeRD and XRechnungen, limited expense booking and business account features. No full-fledged AI tax advisor access apparent as a core service. Subscription Invoices Plus Includes everything from Free plus web access for income, unlimited e-invoices on smartphone and laptop, quotes, installment invoices, recurring invoices, as well as limited AI tax advisor access.

Accounting For complete bookkeeping and expense management; includes web and mobile access, multiple bank accounts, unlimited expense booking, tax overview, small business year-end closing features, and limited AI tax advisor access.

Taxes Includes accounting and invoicing tools plus VAT advance return, annual financial statements, income tax/EÜR/trade tax/annual VAT return, and significantly expanded AI tax advisor access.

Max Highest Accountable tier with advanced tax and support features, personal onboarding, tax coach access, extended tax guarantee, and unlimited AI tax advisor access. Other Tax advisor services
Separate tax advisory services such as consultations with certified tax advisors, income tax returns, or support during tax audits; not identical to the AI tax advisor.
– (0)

Link

GDPR: Partly Based on the information found on the website, use in compliance with the GDPR within the EU/EEA is generally possible, but this is not fully and clearly documented. Positive aspects include a published privacy policy, a data controller based in the EU (in Brussels), references to servers in Frankfurt, and general statements regarding transfers to third countries pursuant to Art. 44 et seq. of the GDPR. At the same time, the website lacks information regarding data processing agreements (DPAs), subprocessors, a specific EU data residency for all processing activities, and a clear contractual exclusion of the use of user-provided data for AI training. Therefore, from an EU/EEA perspective, the use of the service should be classified as subject to conditions rather than clearly substantiated.
Positive
A privacy policy was found, along with the designation of Accountable SA in Brussels as the data controller, a note that Accountable’s servers are located in Frankfurt, as well as statements regarding encrypted transmission, encrypted backups, privately controlled servers, and compliance with third-country rules pursuant to Art. 44 et seq. of the GDPR.
Negative
The following are not specified or cannot be found on the website: a Data Processing Agreement (DPA), a list of subprocessors, a reliable statement regarding EU data residency for all data flows, a clear opt-out or exclusion of AI training using user data, or relevant certifications such as ISO 27001 or SOC 2.
Server Location
The website states that Accountable’s servers for the AI tax advisor are located in Frankfurt. Additionally, the Help Center refers to a private, secure server that is fully controlled by Accountable. Comprehensive, centralized documentation regarding infrastructure and data residency for all services and subcontractors is not provided on the website.

Link

Llama is Meta's family of generative foundation models for text and, in part, image/text understanding.

Meta positions Llama as a flexibly deployable model series that can be fine-tuned, distilled, and deployed “anywhere”; this includes self-hosting, private cloud, and hosting through partners. Llama 4 brings native multimodality, while Llama 3.x continues to address important text, coding, translation, and agent use cases.Meta Llama

LLM “Industry Leading, Open-Source AI”

3.9/10 Insufficient
Free Llama model weights / Download Llama models can be downloaded, fine-tuned, distilled, and self-hosted under the Meta license; infrastructure costs for self-hosting are incurred separately.

Meta Llama API Preview / Waitlist The Llama API is officially positioned via waitlist/login; I could not reliably substantiate a permanently freely usable public API free version with guaranteed limits. Other Managed Llama API API access to current Llama models, API key, playground, SDKs, OpenAI-like integration, tool calling, and models such as Llama 4 Maverick/Scout according to the official Llama API page.

Self-hosting / own cloud / edge Operation of the model weights on your own infrastructure, with cloud providers, or locally; suitable for data protection, cost control, and individual optimization.

Cloud provider / third-party hosting Llama models are available through various cloud and inference providers; data protection, pricing, and server locations then depend on the respective provider.

Fine-tuning / distillation / Llama Stack Customization and integration into your own AI architectures, depending on the model license, infrastructure, and technical setup.
– (0)

Link

GDPR: Unclear I cannot reliably perform the requested evaluation based on web search results from www.llama.com because the available web search tool did not return any results from that domain. Since only information from www.llama.com may be used and no third-party sources are permitted, a reliable assessment is not possible on this basis.
Positive
Not specified on the website.
Negative
Privacy policy, server locations, Terms of Service/Data Protection Agreement, subprocessors, EU data residency, opt-out from AI training, and certifications could not be verified via the domain search.
Server location
Not specified on the website.

Link

“Power Up Your Customer Service”

OMQ is a German B2B SaaS solution for automating customer service inquiries. The system covers self-service, chat, email, contact forms, agent assistance, and process-based automation, and works across channels with a central knowledge base. In doing so, OMQ positions itself as a GDPR-compliant solution that can be integrated quickly for companies looking to reduce support effort and shorten response times.OMQ

The AI software for automated customer service

7.0/10 Good
Subscription Starter Dynamic, self-optimizing help page for smaller businesses; includes Help Page and unlimited topics/categories.

Essential Help Page plus either Contact Form or Chatbot, process automations, unlimited topics/categories, request quota, and reports.

Business Multiple Help Pages and Contact Forms, Chatbot at ChatGPT level, email bot, more process automations, reports, and optional agent handoff.

Corporate Extensive multilingual customer service automation with multiple Help Pages, Contact Forms, Chatbots, email bots, process automations, reports, languages, data analysis, agent handoff, live chat seats, and WhatsApp integration. Other Flex Custom package with flexible modules, flexible requests, up to 32 languages, custom adaptations, optional data analysis, account management, live chat seats, and integrations.
– (0)

Link

GDPR: Yes OMQ states multiple times on its own website that use is possible in compliance with the GDPR. For the EU/EEA area, it is particularly relevant that OMQ specifies EU servers, no transfer of personal data to third countries such as the USA, hosting in Germany or in European cloud infrastructures, as well as standard data processing agreements. This documents a clearly substantiated path to GDPR-compliant use in the European area.
Positive
The website mentions, among other things, the following points: 'GDPR-compliant', 'Hosted in Germany', 'All workflows run on EU servers', 'no personal data to third countries', standard AVV/DPA, as well as 'no training on customer data'. In addition, an anonymization algorithm is described that removes personal data.
Negative
Important detailed documentation can only partially be found specifically on the website. A separately and clearly linked current privacy policy for the product, a publicly viewable subprocessor list, specific information on individual data center locations, a directly accessible AVV/DPA text, as well as detailed information on on-premise, private cloud, or self-hosting options are not stated on the website or are not specifically substantiated in the material found.
Server location
The website states hosting in Germany. In addition, 'EU servers' as well as 'secure European cloud infrastructures' are described. Another reference found mentions the main AI server region in central Sweden. Specific data centers or country lists are not stated on the website.

Link

Robotics

“The future of home care is here”

Figure AI develops electrically powered humanoid robots designed to perform human tasks in industrial, logistics, and—in the future—domestic environments. Figure 02 was tested at BMW Spartanburg in a real production environment; Figure 03 is more focused on domestic use, Helix AI, safety, and mass production.Figure.AI

The future of home help is here

3.4/10 Insufficient
Other Enterprise/pilot/partner projects on request. Industrial and commercial partnerships, such as BMW and Catalyst Brands, are documented; public purchase, rental or leasing conditions are not guaranteed.
– (0)

Link

GDPR: Unclear Although the website does include a privacy policy, it is clearly geared toward U.S. states and does not demonstrate robust GDPR compliance for users throughout the EU/EEA. In particular, the website does not specify EU/EEA data residency, specific server or data center locations, a Data Processing Agreement (DPA), a list of subprocessors, on-premises or self-hosting options, or relevant certifications. The documentation is therefore too incomplete for an assessment from an EU/EEA perspective.
Positive
The website includes a separate privacy policy, a contact option at [email protected], and information indicating that Figure may, in certain cases, process personal data of end users or employees as a service provider for its clients.
Negative
The documentation available on the website refers to U.S. data protection laws and makes no specific statements regarding the GDPR for the EU/EEA. There is a lack of reliable information regarding EU data residency, mechanisms for transfers to third countries, data processing agreements (DPAs), subprocessors, the option to opt out of AI training, server locations, and security certifications.
Server Location
Not specified on the website. The only information available is that the service is operated and administered from offices in the United States.

Link

"Where knowledge begins"

Perplexity Sonar is a family of models for AI search, web-based answers, research, reasoning, and deep research. The API is particularly strong in current facts, citations, product comparisons, summaries, and research workflows.Perplexity Sonar

LLM “Where knowledge begins”

7.0/10 Good
Other Sonar Lightweight search model with web grounding for fast fact-based answers, current information, summaries, and comparisons.

Sonar Pro Advanced search with grounding for more complex questions, follow-ups, and optional Pro Search with multi-step tool use.

Sonar Reasoning Pro Reasoning model for complex, multi-step analysis and inference tasks with web context.

Sonar Deep Research Research model for comprehensive investigations across many sources, detailed reports, and deeper analyses.

Search API Separate API access for raw web search results with filters, without token-based response generation.

Embeddings API Embedding models for semantic search, RAG, retrieval, and machine learning applications.

AWS Marketplace API credits can be obtained via AWS Marketplace with consolidated billing and enterprise procurement.
– (0)

Link

GDPR: Partly For Perplexity Sonar, GDPR-compliant use in the EU/EEA is only conditionally plausible. Positively documented for the Sonar API are a strict zero-data-retention policy and the exclusion of training with customer data. At the same time, no reliable information can be found on the stated website regarding EU/EEA server locations, EU data residency, data center locations, subprocessors, or a DPA/AVV. In addition, the documentation refers to third-party models and external payment processing for parts of the platform, which creates additional review effort from an EU/EEA perspective.
Positive
The website explicitly states that the Sonar API does not store transmitted content data and does not use customer data to train the models. In addition, security attestations such as SOC 2 Type II are mentioned.
Negative
The website does not specify an EU/EEA server location, EU data residency, a DPA/AVV, a list of subprocessors, specific data centers, or on-premise/self-hosting options. For the Agent API, the documentation also mentions the use of third-party providers such as OpenAI, Anthropic, Google, and xAI, which can create additional data protection complexity.
Server location
Not specified on the website. No specific locations of servers or data centers in the EU/EEA were found on the stated domain.

Link

"Ask, Chat, Create and More"

Meta AI is a generative AI assistant from Meta for chat, research, recommendations, image/video creation, file analysis, shopping, local recommendations, and voice interactions.
It is integrated into Meta products such as WhatsApp, Messenger, Instagram, Facebook, the standalone app, meta.ai, and Meta AI Glasses.
Since April 2026, according to Meta, Meta AI has been powered by Muse Spark, the first model in a new model family from Meta Superintelligence Labs.Meta AI

Your personal AI assistant

3.3/10 Insufficient
Free Free use as a personal AI assistant for answers, recommendations, image/file understanding, voice/text, creative content, and use across Meta apps.
– (0)

Link

GDPR: Unclear No reliable documentation regarding the privacy policy, Terms of Service/Data Processing Agreement, subprocessors, EU data residency, server locations, on-premises/self-hosting, or certifications for Meta AI could be found on the provider’s website at the specified domain using the web search tool. The pages found on meta.ai and its associated subpages primarily led to login prompts in the tool, without disclosing the requested compliance information. Consequently, the necessary primary documentation is missing from the provider’s domain to assess usability throughout the entire EU/EEA region.
Positive
It has been confirmed that an official “Meta AI” service is operated under the provider’s domain. Furthermore, no reliable compliance documentation was available via the domain using the search query.
Negative
Not specified on the website or not found via the web search tool on the domain: specific GDPR commitments for the EU/EEA, Terms of Service/Privacy Policy, list of subprocessors, EU data residency, server/data center locations, self-hosting/on-premises options, opt-out from general AI training for this tool’s use, and relevant certifications.
Server Location
Not specified on the website.

Link

"Turn ideas into apps in minutes — no coding needed"

Replit is an AI-powered platform that lets you create, edit, and publish apps directly in the browser.

At its core is the Replit Agent, which writes code, sets up infrastructure, and runs tests. It also includes integrated publishing, database, storage, design, and integration features in a single interface.Replit

Turn ideas into apps in minutes — no coding needed

7.4/10 Good
Free Free entry point for creating apps, using AI integrations, and publishing the first project; suitable for learning, testing, and simple projects. Subscription Core For individuals with premium tools, Replit Agent, more resources, more credits/usage allowance, and more productive app building.

Teams / Pro / Team-oriented plans For smaller teams with collaboration, more centralized management, more resources, private deployments, and advanced control features; specific plan names may change. Other Enterprise Custom enterprise offering with SSO/SAML, SOC 2 reference, admin controls, private deployments, security review, and enterprise support.

Usage Credits / AI Billing Replit Agent uses effort-based billing; AI Integrations are bundled via Replit Credits, and Replit manages provider access and billing.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of Replit is only possible under certain conditions. Positive aspects include a published DPA with SCCs, a subprocessors list, and a documented option to host published projects in the EU. At the same time, Replit states the USA as the primary hosting location for the services, the development environments currently run in North America according to the documentation, and the website does not demonstrate continuous EU data residency for the entire platform. Therefore, use in the EU/EEA is rather only justifiable to a limited extent and with careful configuration or additional organizational measures.
Positive
The website includes a privacy policy, a DPA incorporating the Standard Contractual Clauses, a subprocessors list, documented security information, as well as an EU hosting option for published projects. In addition, Enterprise admins can enforce an EU publishing geography.
Negative
The website names the USA as the primary hosting location; the privacy policy explicitly mentions transfers to the USA and other hosting locations. According to the documentation, the development environments currently run in North America. Full EU data residency for all data processing activities of the platform is not demonstrated on the website. In addition, the website does not specify a clear, general opt-out for AI training on private content; instead, it only documents that content from public apps may be used to improve the service and also to train large language models.
Server location
According to the website, Replit primarily hosts data in Google Cloud data centers in the USA; India is also mentioned as an option. For published projects, there is a selectable publishing geography 'Europe (EU)'. According to the website, the development environments currently run in North America.

Link

"Always the best, without switching tools."

Bolt is an AI-powered builder for websites, web apps, and mobile apps. Users describe their project via prompt, and Bolt generates a working project from it in a short time.

In addition, Bolt bundles Bolt Cloud Hosting, databases, domains, authentication, file storage, analytics, and Edge Functions directly in the interface.Bolt.new

Always the best, without switching tools

6.3/10 Solid
Free Free entry point for building initial projects with limited token/usage scope. Subscription Pro / individual plans More tokens, private projects, website hosting, no Bolt branding, private sharing features, file uploads, custom domains, SEO features, databases, and AI image editing.

Teams For teams with collaborative work, higher limits, and team-oriented usage. Other Enterprise Custom offering for organizations with advanced requirements.

bolt.diy Official open-source version for local/self-hosted use with your own LLM providers such as OpenAI, Anthropic, Ollama, Gemini, Mistral, xAI, DeepSeek, Bedrock, and others.
– (0)

Link

GDPR: Partly For the EU/EEA region, GDPR-compliant use is plausible only under certain conditions. Positive aspects include the enterprise options listed on the website for deployment in a user’s own AWS/Azure tenant with full infrastructure isolation, as well as the statement that code and prompts do not leave the user’s own infrastructure. However, for standard SaaS/Bolt Cloud usage, the website lacks essential, reliable information regarding EU data residency, specific server locations within the EU/EEA, the Data Processing Agreement (DPA), and subprocessors. Therefore, there is no verifiable, fully clear GDPR approval for standard use; the best-documented option is the Enterprise/BYOK variant.
Positive
The website mentions BYOK deployment or deployment within the user’s own AWS/Azure tenant, full infrastructure isolation without shared compute, the statement “Your code and prompts never leave your infrastructure,” and SOC 2 information. In addition, the Trust page describes client-side execution as a security feature.
Negative
The website does not specify any concrete EU/EEA server locations for the standard service. Also missing are a privacy policy, an AVV/DPA, a list of subprocessors, an explicit EU data residency for Bolt Cloud, and a clear, contractually documented no-training/opt-out rule for standard use. The support documentation also mentions external platforms such as Netlify and Supabase as the basis for Bolt Cloud.
Server Location
Not specified on the website. For Bolt Cloud, only “secure, high-performance servers” and partner platforms such as Netlify and Supabase are mentioned. A specific EU/EEA data center location or a binding EU data residency requirement is not mentioned on the pages found. For Enterprise, deployment within the customer’s own AWS/Azure tenant is described; the specific location there apparently depends on the customer’s target environment.

Link

“Automate your work.”

Make is a visual no-code/low-code automation platform for integrations, workflows, and increasingly also agentic AI processes.

Companies can use it to connect data and actions across 3,000+ apps, automate API-based processes, and incorporate AI features such as AI Agents, AI Toolkit, AI Content Extractor, AI Web Search, and MCP servers into scenarios. The product addresses both simple app automations and more complex enterprise workflows with team, governance, and hybrid connectivity.Make

Automate your work

7.4/10 Good
Free Monthly credits, visual no-code workflow builder, 3,000+ apps, router & filter, support, and a longer minimum interval. Subscription Core Everything in Free plus unlimited active scenarios, more granular scheduling, higher data limits, and the Make API.

Pro Everything in Core plus Priority Scenario Execution, Custom Variables, and Full-Text Execution Log Search.

Teams Everything in Pro plus Teams, team roles, and sharing of scenario templates. Other Enterprise Custom Functions Support, Enterprise App Integrations, 24/7 Enterprise Support, Value Engineering, Overage Protection, and Advanced Security.

Credits / AI Agents Credit-based usage for scenarios and AI automation; scope of features varies by plan.
– (0)

Link

GDPR: Partly Make provides data protection documents relevant to the EU/EEA region on its own website, including privacy notices, a DPA/AVV, a list of subprocessors, and information on the GDPR and international transfers. In addition, its documentation specifies a selectable EU data center region for organizations. At the same time, the provider is U.S.-based, refers to the EU-U.S. Data Privacy Framework and SCCs for transfers, and the website does not specify a simple on-premises or self-hosting option. Thus, GDPR-compliant use in the EU/EEA appears to be possible in principle, but only under certain conditions, such as selecting the appropriate region, signing the DPA, and reviewing the specific data flows to subprocessors and AI functions.
Positive
The website includes a DPA/AVV, a data protection page on the GDPR, a Privacy Notice, technical and organizational measures, a list of subprocessors, and information on selecting EU data centers for organizations. In addition, Make cites ISO 27001 as well as SOC 2 Type II and SOC 3 for its infrastructure and security program, respectively.
Negative
The website does not clearly guarantee comprehensive EU/EEA-exclusive processing in all cases. The documentation refers to U.S. connections and international transfers via DPF or SCCs. An on-premises/self-hosting option is not specified on the website. No clear, general commitment to a blanket opt-out from AI training for all AI functions was found on the website; only a specific note regarding Google Workspace APIs is available.
Server Location
For organizations, the website lists a selectable data center region: “European Union (EU).” The list of subprocessors published on the website specifies hosting locations in Ireland (Dublin) or Germany (Frankfurt) for European customers using AWS. In addition, the Enterprise Security page mentions a separately managed AWS environment. The website does not fully clarify whether this applies unchanged to all current product areas and AI features.

Link

“Transform your business with modern, AI-first applications.”

Microsoft Power Apps is a low-code platform for creating and deploying business applications.

The product primarily supports canvas apps and model-driven apps, can be used with little or no code, and can also be extended through custom code, components, and integrations. Typical use cases include internal line-of-business applications, mobile data capture, process-oriented business apps, and app-supported workflows based on Dataverse, Microsoft 365, and other data sources.MS Power Apps

Transform your business with modern, AI-first applications

7.4/10 Good
Free Free developer account for building and testing unlimited apps/flows, multiple developer environments, connectors, Dataverse entitlement, and limited flow runs. Subscription Power Apps Premium User license for unlimited Power Apps and Power Pages, prebuilt/custom/on-premises connectors, Dataverse entitlements, and agentic features in apps.

Power Apps Premium with minimum purchase requirement For large organizations with many users; same core features with enterprise procurement. Other Pay-as-you-go via Azure Usage-based billing for apps, Dataverse storage, and Power Platform meters via Azure Subscription.

Dataverse / AI Builder / Power Platform Add-ons Additional capacities, AI Builder, Dataverse Storage, Power Automate, and other Power Platform extensions per usage.

Per-app license No longer available for new customers since January 2, 2026; existing customers must check status and renewal.
– (0)

Link

GDPR: Partly From the perspective of a user in Europe, using MS Power Apps in compliance with the GDPR is generally possible, but it depends on specific configurations and contractual arrangements. The Microsoft website provides a DPA, information on subprocessors, data residency options for Power Platform, and the EU Data Boundary for Power Platform. At the same time, Microsoft itself points out that data can be replicated within a selected geo, that certain user actions may expose data outside the geo, and that classification within the EU Data Boundary depends on tenant and environment deployment.
Positive
Positive aspects include the published Microsoft Products and Services Data Protection Addendum (AVV/DPA), the documented subprocessor structure, the ability to choose a data location or geo for Power Platform, the EU Data Boundary for Power Platform, and documented data subject rights and export functions. For Copilot/AI features, Microsoft also documents that customer data is not used to train Microsoft or third-party models unless the customer opts in to data sharing.
Negative
A negative or limiting aspect is that GDPR-compliant use does not automatically follow from standard use. Microsoft itself describes limited exceptions for transfers outside the EU Data Boundary, the dependency on billing address, tenant geo, and environment deployment, as well as the possibility that users or connected services may expose data outside the geo. The website does not specify whether Power Apps is available as a fully local deployment as a complete product.
Server Location
Microsoft lists several global data centers and geographic locations for the Power Platform. For EU/EEA-relevant use, Microsoft specifies the EU Data Boundary with data centers in EU and EFTA countries, including Austria, Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy, the Netherlands, Norway, Poland, Spain, Sweden, and Switzerland. According to the website, the specific assignment for Dynamics 365 and Power Platform depends on the billing address as well as the deployment of the tenant and all environments within a geo location inside the EU Data Boundary.

Link

“A platform for all your company’s knowledge—search, assistant, agents.”

amber connects internal corporate systems and makes their content accessible via a central AI search. amberAI answers questions based on internal data and cites the sources used. amberAgents automates recurring, multi-step tasks and can trigger actions in other systems via interfaces.amber

A platform for all your company's knowledge – Search, Assistant, Agents

7.5/10 Good
Subscription SmartWebsite Basic Domain, SSL certificate, email accounts, limited website size, and AI website generator.

SmartWebsite Plus Basic features plus significantly more subpages, AI text generator and optimizer, AI SEO assistant, and marketingRadar.

SmartWebsite Pro Plus features, larger page quota, and rankingCoach for advanced search engine optimization.


Smart AI Phone Assistant Unlimited AI phone service with monthly cancellation option, featuring unlimited calls, call forwarding, appointment scheduling, and advanced API integration. Other AI Email Assistant Optional add-on for STRATO plans that include an email account; features drafts, summaries, replies, rephrasing, and translations.

WordPress Hosting with AI Setup WordPress hosting with AI-powered initial setup of websites and content.



SmartWebshop E-commerce packages with website/shop creation and integrated AI support for setup and content.

V-Server for LLM Hosting Virtual servers for independent operation of small and medium-sized open-source language models.

Dedicated Servers for LLM Hosting Dedicated hardware for larger models, custom AI services, agents, and controlled enterprise applications.

OpenClaw and n8n Hosting Server offerings for self-hosted AI agents and workflow automations.
– (0)

Link

GDPR: Yes The website demonstrates, for the best available user experience, a generally clear alignment with the GDPR for EU/EEA users: amber describes itself as “EU data protection compliant,” mentions “Privacy by Design & Default,” incident reporting in accordance with GDPR Articles 33 and 34, DPA documentation, hosting in Germany, and the statement that interactions are not used to improve AI models without explicit consent. For the European region, Germany as a server location within the EU/EEA is a positive factor. Limitation: A complete list of subprocessors available on the website or publicly accessible detailed documentation regarding the AVV/DPA is not provided on the website; therefore, the assessment is based on the provider’s explicit product and security statements.
Positive
Confirmed positives include hosting and processing in Germany, T Cloud data centers in Germany with virtual network isolation per customer, ISO 27001 and other mentioned security standards, a reference to the AVV/DPA, Privacy by Design, deletion upon request, and an explicit opt-in for training rather than use without consent.
Negative
A negative or incomplete aspect is that the website does not provide a freely accessible list of subprocessors or links to fully publicly available AVV/DPA details. Likewise, there is no explicit description of EU data residency outside of Germany; Germany is primarily specified. On-premises/self-hosting of the amber product itself is not clearly offered on the website.
Server Location
The website states on multiple occasions that development and processing steps take place on servers in Germany and that the platform and index run in T Cloud data centers in Germany. In the context of the EU/EEA, Germany falls within the relevant legal jurisdiction.

Link