Find Your Tool in 6 Steps
Result: 154

KIFOX - The Search Portal for AI Applications ?

Which AI tool is GDPR-compliant? Compare features, hosting, and data protection with real user reviews and an editorial score. Compare for free now.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a review and share their experience with AI applications, and can click a link to go directly to the provider’s website.

KIFOX is not an online store, but a comparison and information portal for AI applications.

Find Your Tool in 6 Steps
Results: 154
Research Images Video Music Agent Business Marketing Website API

"The first no-design creation software"

Mate is a web-based content creation software for on-brand images, graphics, animations, videos, social media assets, performance marketing creatives, and website visuals. The platform is aimed at teams that want to create content in corporate design without any design skills. AI features include Brand AI, AI Onboarding, AI Templates, AI Caption, AI Pictures, as well as AI Posts & Templates.Mate Studio

Create agency-level visuals in less than 60 seconds with AI

7.3/10 Good
Subscription Free trial / Demo
Trial option without a credit card as well as regular live demos; no permanently free production plan publicly listed.

Basic Entry-level plan with AI credits, asset storage, stock assets from Unsplash and Pexels, social media integrations, and email support.

Pro For small teams; includes Basic features plus more AI credits, more asset storage, video and audio features, custom font, multiple color schemes, scheduled social media posts, and bookable add-ons.

Business For power users and growing teams; includes Pro features plus more storage, unlimited color schemes, DAM and publishing tool integrations, full role management, approval workflow, and priority support.

Enterprise Custom offering for large teams, multiple brands, and international locations; includes Business features plus custom digital and print templates, multiple brandings, dedicated account manager, SSO, and enterprise service package. Other Add-ons Service packages, integrations, SSO options, enterprise services, and custom templates.

AI Credits Monthly AI credits depending on the plan; exact quotas vary by plan.
– (0)

Link

GDPR: Partly The website documents several data protection and hosting aspects relevant for the EU/EEA region: Mate describes itself as GDPR-compliant, offers an AVV/DPA upon request, and states hosting on AWS in European regions. This is positive for use in the EU/EEA. However, the documentation published on the website is not sufficient for a fully clear classification as 'yes', because key points are only available indirectly or only upon request: specific EU data center countries are not named, the list of subprocessors is not publicly viewable, an explicit exclusion of training with customer data is not stated on the website, and certifications such as ISO 27001 or SOC 2 are not mentioned on the website.
Positive
Positively documented are: Privacy policy available, AVV/DPA available upon request, Hosting via AWS in European regions, AES-256 encryption for data at rest as well as an external penetration test, which can be shared under NDA. In addition, Mate positions itself as a 'One European Creation platform' and 'Built with ❤️ in Europe'.
Negative
Negative or limiting is that the website states no specific server location within the EU/EEA, provides no publicly viewable subprocessor list, mentions no explicit opt-out or contractual exclusion of AI training with customer data, describes no on-prem/self-hosting option, and states no relevant certifications such as ISO 27001 or SOC 2 on the website.
Server location
The Security page states that Mate's entire infrastructure runs on Amazon AWS and is 'hosted in European regions'. A specific country or specific data center in the EU/EEA is not stated on the website.

Link

“The Ultimate AI Creative Suite for Creators Marketers Sellers”

Pollo AI is a multimodal AI creative suite for video, image, avatar, and audio creation. The platform combines Creative Studio, Marketing Studio, Commerce Studio, and Pollo Agent and offers features such as text-to-video, image-to-video, reference-to-video, AI image generator, AI voice generator, voice cloning, face swap, lip sync, UGC ads, product shots, and virtual try-on.Pollo AI

The Ultimate AI Creative Suite for Creators Marketers Sellers

4.8/10 Limited
Free Start for Free / Free Use
Get started with limited usage for initial generations; specific quotas may change. Subscription Lite Creator plan for regular use with a credit allowance and access to core image and video features; exact limits depend on checkout and promotions.

Pro Advanced Creator plan with a larger credit/usage allowance, higher production capacity, and expanded features.

Ultra / Unlimited promotions Higher-tier plan or promotional model with expanded or temporarily unlimited model access; unlimited use may be subject to dynamic speed adjustments. Other Creative Studio AI video, text-to-video, image-to-video, video-to-video, AI video editor, AI image generator, avatars, voice, and effects.

Marketing Studio UGC videos, ads, URL-to-video, script-to-ad, Facebook, TikTok, YouTube, and Instagram video ads.

Commerce Studio Product videos, product images, virtual try-on, listing images, Amazon/Shopify/e-commerce visuals.

Pollo Agent Agentic video creation for production-ready videos, scenes, SFX, consistent characters, and automated editing.

Pollo API API access with API keys, model selection, video/image generation, task status, webhooks, and usage-based billing or top-up models.

Top-ups / Credits Additional usage packages for API or web app; specific billing depends on model, duration, resolution, and usage.
– (0)

Link

GDPR: Unclear For the EU/EEA region, GDPR compliance cannot be reliably verified based on the information available on the provider's website. It is positive that a privacy policy is available on the main domain and that the API privacy policy mentions a DPA as well as naming third-party processors for AI generation. However, key information for a reliable EU/EEA assessment is missing, in particular regarding server location/data center, EU data residency, available DPA/Data Processing Agreement text, subprocessor list with locations and relevant certifications. Therefore, no clear statement can be made regarding fully GDPR-compliant use for SaaS usage throughout the entire European region.
Positive
The website provides a general privacy policy for Pollo AI as well as a separate API privacy policy. The API privacy policy explicitly states that the use of the API services is subject to a 'Data Processing Agreement (DPA)'. In addition, the API privacy policy names several third-party providers for AI processing and describes that, depending on the model, selected inputs may be transmitted to these providers; furthermore, a choice option via model selection is described. The main privacy policy also states that uploaded images are only stored temporarily for certain functions and are automatically deleted shortly after video generation.
Negative
The website does not specify concrete server locations or data centers, EU/EEA data residency, a linked or retrievable DPA/Data Processing Agreement version, a complete subprocessor list with roles and locations, SCC/transfer information for data transfers outside the EU/EEA, a clear opt-out from general AI training, or certifications such as ISO 27001 or SOC 2. On-premise, self-hosting, or private cloud options are also not specified on the website.
Server location
Not specified on the website. No concrete information on server locations, data centers, or EU/EEA data residency was found on the main domain or in the identified API legal pages.

Link

“Automate your work.”

Make is a visual no-code/low-code automation platform for integrations, workflows, and increasingly also agentic AI processes.

Companies can use it to connect data and actions across 3,000+ apps, automate API-based processes, and incorporate AI features such as AI Agents, AI Toolkit, AI Content Extractor, AI Web Search, and MCP servers into scenarios. The product addresses both simple app automations and more complex enterprise workflows with team, governance, and hybrid connectivity.Make

Automate your work

7.4/10 Good
Free Monthly credits, visual no-code workflow builder, 3,000+ apps, router & filter, support, and a longer minimum interval. Subscription Core Everything in Free plus unlimited active scenarios, more granular scheduling, higher data limits, and the Make API.

Pro Everything in Core plus Priority Scenario Execution, Custom Variables, and Full-Text Execution Log Search.

Teams Everything in Pro plus Teams, team roles, and sharing of scenario templates. Other Enterprise Custom Functions Support, Enterprise App Integrations, 24/7 Enterprise Support, Value Engineering, Overage Protection, and Advanced Security.

Credits / AI Agents Credit-based usage for scenarios and AI automation; scope of features varies by plan.
– (0)

Link

GDPR: Partly Make provides data protection documents relevant to the EU/EEA region on its own website, including privacy notices, a DPA/AVV, a list of subprocessors, and information on the GDPR and international transfers. In addition, its documentation specifies a selectable EU data center region for organizations. At the same time, the provider is U.S.-based, refers to the EU-U.S. Data Privacy Framework and SCCs for transfers, and the website does not specify a simple on-premises or self-hosting option. Thus, GDPR-compliant use in the EU/EEA appears to be possible in principle, but only under certain conditions, such as selecting the appropriate region, signing the DPA, and reviewing the specific data flows to subprocessors and AI functions.
Positive
The website includes a DPA/AVV, a data protection page on the GDPR, a Privacy Notice, technical and organizational measures, a list of subprocessors, and information on selecting EU data centers for organizations. In addition, Make cites ISO 27001 as well as SOC 2 Type II and SOC 3 for its infrastructure and security program, respectively.
Negative
The website does not clearly guarantee comprehensive EU/EEA-exclusive processing in all cases. The documentation refers to U.S. connections and international transfers via DPF or SCCs. An on-premises/self-hosting option is not specified on the website. No clear, general commitment to a blanket opt-out from AI training for all AI functions was found on the website; only a specific note regarding Google Workspace APIs is available.
Server Location
For organizations, the website lists a selectable data center region: “European Union (EU).” The list of subprocessors published on the website specifies hosting locations in Ireland (Dublin) or Germany (Frankfurt) for European customers using AWS. In addition, the Enterprise Security page mentions a separately managed AWS environment. The website does not fully clarify whether this applies unchanged to all current product areas and AI features.

Link

"Building AI to Simulate the World"

Runway is an AI platform for generative media production with a focus on AI video, image generation, video editing, performance capture, audio/voice features, workflows, and API access.

The tool is aimed at creators, marketing teams, film/media production, agencies, developers, and companies that want to create or edit visual content with AI.Runway

Building AI to Simulate the World

6.9/10 Solid
Free Free entry with a one-time credit allocation; suitable for testing and for initial generations. Subscription Standard More monthly credits, access to core Runway apps and generative video/image features; for individuals and small teams.

Pro More credits, access to all apps, workflows, generative video models, third-party models, more storage, and advanced creative features.

Unlimited Everything in Pro plus Explore Mode for unlimited image and video generations at a relaxed speed; additionally, monthly credits for features without Explore Mode. Other Enterprise Custom enterprise offering with SSO, custom credits, configurable organization and team spaces, Advanced Security, onboarding, success program, and priority support.

Credits / Additional Credits Runway uses credits for many generation features; additional credits are available for paid plans.
– (0)

Link

GDPR: Partly For users in the EU/EEA, GDPR-compliant use of Runway is only partially demonstrable. Positive aspects include a published privacy policy with a section for the EEA, an expressly incorporated DPA for Enterprise customers, a published subprocessor reference, SOC 2 Type II evidence, as well as contractual assurances for Enterprise customers that 'Customer Content' is not used as training data. Negative aspects are that the website does not specify EU data residency or concrete EU/EEA data center locations for standard SaaS use, while the privacy policy expressly refers to transfers to the USA and other countries. This means that privacy-compliant use appears more feasible via the Enterprise route with a DPA and contractual safeguards, but not clearly and straightforwardly for all usage variants.
Positive
The website includes a privacy policy with EEA relevance, a DPA incorporated into the Enterprise terms, a reference to subprocessors, SOC 2 Type II, private default visibility for uploaded assets, and for Enterprise the contractual statement that 'Customer Content' may not be used as training data for the services. In addition, Enterprise admins can disable third-party models; according to the FAQ, Runway then does not send any data to these model providers.
Negative
No concrete EU/EEA server location is specified on the website. EU data residency is not stated. The privacy policy expressly mentions international transfers to the USA and other countries. On-premise, self-hosting, or local operating options are not specified on the website. An ISO 27001 certification is not stated; it is only described that elements from ISO 27001 and NIST are incorporated into the security program.
Server location
Not specifically stated on the website. Several physically separate data centers are mentioned for redundancy, but without specifying countries or regions. The privacy policy also states that Runway is based in the USA and that information may be transferred to the USA and other countries.

Link