Find Your Tool in 6 Steps
Result: 155

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 155
Research Images Video Music Agent Business Marketing Website API

"Building AI to Simulate the World"

Runway is an AI platform for generative media production with a focus on AI video, image generation, video editing, performance capture, audio/voice features, workflows, and API access.

The tool is aimed at creators, marketing teams, film/media production, agencies, developers, and companies that want to create or edit visual content with AI.Runway

Building AI to Simulate the World

6.9/10 Solid
Free Free entry with a one-time credit allocation; suitable for testing and for initial generations. Subscription Standard More monthly credits, access to core Runway apps and generative video/image features; for individuals and small teams.

Pro More credits, access to all apps, workflows, generative video models, third-party models, more storage, and advanced creative features.

Unlimited Everything in Pro plus Explore Mode for unlimited image and video generations at a relaxed speed; additionally, monthly credits for features without Explore Mode. Other Enterprise Custom enterprise offering with SSO, custom credits, configurable organization and team spaces, Advanced Security, onboarding, success program, and priority support.

Credits / Additional Credits Runway uses credits for many generation features; additional credits are available for paid plans.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of Runway is only partially demonstrable. Positive aspects include a published privacy policy with a section for the EEA, an expressly incorporated DPA for Enterprise customers, a published subprocessor reference, SOC 2 Type II evidence, as well as contractual assurances for Enterprise customers that 'Customer Content' is not used as training data. Negative aspects are that the website does not specify EU data residency or concrete EU/EEA data center locations for standard SaaS use, while the privacy policy expressly refers to transfers to the USA and other countries. This means that privacy-compliant use appears more feasible via the Enterprise route with a DPA and contractual safeguards, but not clearly and straightforwardly for all usage variants.
Positive
The website includes a privacy policy with EEA relevance, a DPA incorporated into the Enterprise terms, a reference to subprocessors, SOC 2 Type II, private default visibility for uploaded assets, and for Enterprise the contractual statement that 'Customer Content' may not be used as training data for the services. In addition, Enterprise admins can disable third-party models; according to the FAQ, Runway then does not send any data to these model providers.
Negative
No concrete EU/EEA server location is specified on the website. EU data residency is not stated. The privacy policy expressly mentions international transfers to the USA and other countries. On-premise, self-hosting, or local operating options are not specified on the website. An ISO 27001 certification is not stated; it is only described that elements from ISO 27001 and NIST are incorporated into the security program.
Server location
Not specifically stated on the website. Several physically separate data centers are mentioned for redundancy, but without specifying countries or regions. The privacy policy also states that Runway is based in the USA and that information may be transferred to the USA and other countries.

Link

Robotics

“Empowering Every Home with Robotics”

Noetix Robotics develops compact and full-size humanoid robots for education, research, entertainment, developers, corporate demonstrations, and, in the future, private households. Bumi is positioned as a lightweight entry-level and educational robot, N2 focuses more on dynamic movement and research, and E1 on voice interaction, service, and embodied AI.Noetix Robotics

Empowering Every Home with Robotics

3.6/10 Insufficient
Other Hardware purchases, product variants such as Pro and EDU, customized sales offers, configurations for education and research, optional computing modules, as well as support and warranty services.
– (0)

Link

GDPR: No From the perspective of a user in the EU/EEA, no reliable basis for GDPR-compliant use of the offering is identifiable on the website. Although it is positive that privacy notices are available and an open-source page exists, the website explicitly states for web data processing that personal data is stored in China. At the same time, the website did not specify EU data residency, EU/EEA data centers, a DPA/AVV, a subprocessor list, or relevant certifications. In addition, for product/service use, the website refers to the applicability of the law of mainland China.
Positive
The website provides a privacy policy for the website, a separate privacy policy for products and services, cookie settings with reject/accept options, and an open-source page with SDKs and development tools. The product privacy policy also states that local rights are to remain unaffected if applicable local law differs.
Negative
For web data storage, the website explicitly names China as the storage location. For EU/EEA-relevant requirements, the website did not specify a DPA/AVV, a subprocessor list, EU data residency, EU/EEA server locations, an on-prem/self-hosting option for the overall service, a contractual exclusion of model training, or certifications such as ISO 27001 or SOC 2. In addition, the website mentions several third-party cookies and marketing trackers.
Server location
For the website, it is stated that personal data is stored in China. A specific server or data center location in the EU/EEA is not specified on the website. For the product/service policy, the website only mentions that it is governed by the law of mainland China.

Link

Alibaba Cloud Qwen is Alibaba Cloud's LLM/multimodal model family. Through Model Studio / DashScope, developers can use Qwen models via API, including text models, multimodal models, reasoning models, coding models, translation models, and open-source/open-weight variants. The API is OpenAI-compatible and can be used via different endpoints depending on the region.Alibaba Cloud Qwen API

LLM “one-stop model service platform”,

7.2/10 Good
Free Free quotas for certain models/regions; Free Quota applies only to real-time inference and not to batch calls, context cache, fine-tuning, deployment, or custom models. Other Pay-as-you-go / Model Invocation Usage-based billing by model, input/output tokens, thinking/non-thinking mode, region, and deployment mode.

Batch Calls Separate processing of large workloads; not covered by the Free Quota.

Context Cache Cache function to reduce repeated context costs; not covered by the Free Quota.

Fine-Tuning / Deployment / Custom Models Model customization and deployment of proprietary or fine-tuned models; billed separately and not covered by the Free Quota.

OpenAI-/Responses-compatible API Qwen models support OpenAI-compatible interfaces and the Responses API for agentic applications.
– (0)

Link

GDPR: Partly For use within the EU/EEA, the provider’s website offers clear building blocks for a configuration that may be more GDPR-compliant: Model Studio offers an explicit “European Union” deployment mode, in which data storage is tied to the Germany (Frankfurt) region and, according to the documentation, inference is limited to the EU. In addition, there is a published privacy policy and a Data Processing Addendum referencing the GDPR and EU Standard Contractual Clauses. At the same time, the documentation is not robust enough to warrant a fully positive assessment: A verifiable list of subprocessors was not found on the website; no explicit ISO 27001 certification for Model Studio was documented on the pages reviewed; and, according to the product pages reviewed, the service does not offer a clearly documented on-premises/self-hosting option for the commercial API. Therefore, “conditional” seems to be the most appropriate rating for the entire EU/EEA region.
Positive
Positive aspects include a separate privacy policy for Alibaba Cloud International, a published DPA, an explicit EU deployment mode for Model Studio with data storage in Germany (Frankfurt) and EU-restricted inference, as well as the statement that customer data is not used for model training. Additionally, the product documentation mentions SOC 2 for Model Studio and specifies that no conversation data is stored during direct API calls.
Negative
A negative or limiting aspect is that, while cross-border processing is addressed in the privacy and product documentation, no reliable subpage with a list was found on the website for the specific point of interest, “subprocessors.” For the Assistant API path, the documentation also mentions that conversation history is stored with no current expiration date. A clear on-premises/self-hosting option for the commercial API was not specified on the website.
Server Location
The website specifies for the “European Union” deployment mode that the associated data region is Germany (Frankfurt) and that model inference is limited to the EU. The model and pricing documentation also states that, in EU mode, endpoints and data storage are located in Germany (Frankfurt). For Global/International, however, cross-border computing paths are described.

Link

“The World’s #1 AI Home Design Tool.”

HomeDesignsAI generates new designs for interiors, exteriors, gardens, and real estate presentations based on uploaded photos. Users select the room type, style, and scope of changes; the AI then generates visual variations. Additional features include virtual staging, material changes, furniture removal, room composition, and, in some cases, 2D-to-3D or video outputs.HomeDesignsAI

The World’s #1 AI Home Design Tool

4.1/10 Limited
Free Free trial designs Limited free credits or trial access for initial design creations; a fully-featured, permanently free plan is not clearly indicated. Subscription Individual Plan Monthly design quota, more than 40 styles and room types, interior, exterior, and garden design, color and texture changes, redesign, Fill Spaces, Furniture Finder, and Design Transfer.

Pro Plan Significantly higher design quota, more than 80 styles and room types, as well as expanded use of design and editing features. Other Universal Credits Shared credit balance for redesign, video, virtual staging, material swap, furniture removal, and other modules; additional credits can be added. Business Add-ons Advanced tools such as material swap, paint visualizer, and other professional design features. Additional professional features, including advanced room composition and more comprehensive design tools. White-Label Widget Embeddable design interface for websites and platforms, combining interior design with usage-based billing. API Custom usage-based model for integrating design features into your own products. Enterprise Custom agreement with higher volume and the option to exclude customer data from model training.
– (0)

Link

GDPR: Unclear For the EU/EEA region, it is not clearly demonstrable based on the website documentation that the service is used in compliance with the GDPR. Positive aspects include a general privacy policy, the mention of data subjects’ rights, and an API/Enterprise notice regarding an enterprise opt-out for model training. On the negative side, the website mentions international data transfers, including to the U.S., but does not specify a concrete EU/EEA server location, EU data residency, a publicly accessible Data Processing Agreement (DPA), or a list of subprocessors. As a result, the legal and hosting situation is insufficiently documented for users in Europe.
Positive
The website includes a privacy policy with information on the data collected, data subject rights, and international data transfers. The API/Enterprise documentation mentions security measures such as AES-256 and SSL/TLS. Additionally, the API documentation specifies an Enterprise opt-out for the use of data in model training.
Negative
The website explicitly states that personal data may also be processed outside the user’s country of residence, including the United States. No specific server location or EU/EEA data center is mentioned. A publicly available Data Processing Agreement (DPA), a list of subprocessors, binding statements regarding EU data residency, and on-premises/self-hosting options are not provided on the website. Regarding the API, it also states that inputs and outputs can be used for training by default, unless a specific “Enterprise Privacy” plan applies.
Server Location
Not specifically stated on the website. The general privacy policy mentions international data transfers, including to the U.S. The API privacy policy lists AWS and Google Cloud as examples of cloud hosting providers, but without specifying a region or data center location.

Link

"The all-in-one AI application for everyone."

AnythingLLM is a local or hosted AI application for knowledge bases, RAG, team chat, document queries, and AI agents. The platform can be used as a desktop app, Docker deployment, or isolated cloud instance.AnythingLLM

The all-in-one AI application for everyone.

7.3/10 Good
Free AnythingLLM Desktop Local single-user app with local LLMs, RAG, document chat, API, and no mandatory account.

AnythingLLM Docker Free self-hosted multi-user system with RAG, agents, workspace permissions, API, and custom models. Subscription Cloud Basic Private managed instance for smaller teams and limited document volumes.

Cloud Pro Managed instance for larger teams, more documents, and extended support.

Enterprise Custom offering with on-premise support, custom domain, integrations, and SLA. Other Own infrastructure Costs for servers, storage, GPUs, model providers, backups, and security operations.

External LLM providers Usage-based costs for OpenAI, Azure, AWS, Anthropic, or other models.
– (0)

Link

GDPR: Yes For the EU/EEA region, AnythingLLM can be used in the best available usage path in a GDPR-compliant way, because the provider offers clearly documented local/offline desktop use as well as self-hosting. The website describes for Desktop that messages, chat histories, and documents remain local by default, the app can run completely offline, and telemetry can be disabled. In addition, self-hosted and on-premise options as well as Docker/cloud VM deployments are documented. The managed cloud SaaS, on the other hand, is only documented to a limited extent from a data protection perspective for the EU/EEA, because although AWS is named as the infrastructure, no EU/EEA server location, no EU data residency, no DPA/AVV, and no list of subprocessors are stated on the website.
Positive
Positive aspects are the explicitly documented local/offline use, 'everything is saved locally on your device by default', the absence of a mandatory account for Desktop, the opt-out option for telemetry, the documented complete deletion of documents in the local installation, as well as the clearly offered self-hosted, Docker, and on-premise paths.
Negative
Negative for the SaaS/cloud assessment is that no EU/EEA data center is named on the website, no EU data residency is guaranteed, no DPA/AVV can be found, no list of subprocessors is published, and no relevant certification such as ISO 27001 or SOC 2 is specified. The cloud privacy policy also mentions support/maintenance access by the team to hosted instances.
Server location
For AnythingLLM Cloud, it is only stated that data is stored and processed via 'Amazon Web Services'; a specific server/data center location in the EU/EEA is not stated on the website. Mintplex Labs Inc. is described in the Cloud Terms as being located in California, USA.

Link