“Thought. Done.” For its AI offerings, STRATO also uses the tagline: “What used to take hours, AI does for you in minutes.”
STRATO offers domains, email, website builders, online stores, WordPress hosting, servers, cloud storage, and security products. In the SmartWebsite builder, AI can generate an initial website, including design, images, and text. Text optimization, image generation, and an AI SEO assistant complement the classic drag-and-drop editing.
STRATO
What used to take hours, AI can now do for you in minutes.
Location: Germany ⓘ STRATO GmbH, 7 Otto-Ostrowski-Straße, 10249 Berlin, Germany.
SmartWebsite Plus Basic features plus significantly more subpages, AI text generator and optimizer, AI SEO assistant, and marketingRadar.
SmartWebsite Pro Plus features, larger page quota, and rankingCoach for advanced search engine optimization.
Smart AI Phone Assistant Unlimited Monthly cancellable AI phone service with unlimited calls, call forwarding, appointment booking, and advanced API integration. Other AI Email Assistant Optional add-on for STRATO plans that include an email account; includes drafts, summaries, replies, rephrasing, and translations.
WordPress Hosting with AI Setup WordPress hosting with AI-assisted initial setup of websites and content.
SmartWebshop E-commerce packages with website/shop creation and integrated AI support for setup and content.
V-Server for LLM Hosting Virtual servers for independent operation of small and medium-sized open-source language models.
Dedicated Servers for LLM Hosting Dedicated hardware for larger models, custom AI services, agents, and controlled enterprise applications.
OpenClaw and n8n Hosting Server offerings for self-hosted AI agents and workflow automation.
STRATO is a German provider of web hosting, domain names, email, cloud storage, servers, websites, and online stores. The platform is designed for individuals, as well as self-employed professionals and businesses, who want to establish an online presence or set up a hosting infrastructure.
With SmartWebsite, STRATO integrates generative AI directly into its website builder. Users describe their project, select themes and design guidelines, and receive an initial website draft. The AI can generate text and images and suggest SEO titles and meta descriptions. The website can then be further edited in the classic editor.
Target audience
STRATO is designed for individuals, clubs, self-employed professionals, small businesses, agencies, and organizations with basic to moderate web needs. SmartWebsite is particularly well-suited for users who need a professional website quickly but lack programming or design skills.
Technical teams can also use web hosting, virtual servers, dedicated servers, and cloud storage. However, these products are distinct from the built-in SmartWebsite AI features.
Outstanding features
The most important AI feature is the generator for complete website designs. It combines page structure, design, images, and text. It is complemented by a text generator, a text optimizer, and an SEO assistant.
Another notable feature is the integration of standard hosting services: domain registration, SSL, email, and web hosting are all included directly in the website package. This means that the created website does not need to be exported to another hosting provider and set up there.
Key Areas of Application
STRATO is used for company websites, portfolios, club websites, blogs, landing pages, small online stores, WordPress websites, domain management, email, and hosting. The AI primarily assists with the setup and content creation for new websites.
Other areas of application include the creation of SEO metadata, the drafting of page content, and the generation of relevant images. SmartWebsite is not intended for internal knowledge search, complex data analysis, or autonomous business agents.
Usage & Notes
The service is accessed via a web browser. After selecting a plan, the user answers questions about their industry, the purpose of the design, and their design preferences. The AI generates an initial draft, which is then manually adjusted and published.
The website operator must personally review the legal notice, privacy policy, mandatory disclosures, service descriptions, and legally relevant statements. AI-generated images and text should also be checked for factual errors, unintended similarities, and usage rights.
| Target audience | Assessment |
|---|---|
| Individuals | Yes – suitable for personal websites, blogs, email, cloud storage, and small web projects. |
| Self-employed / Freelancers | Very well suited – website, domain, email, virtual assistant, online store, and hosting can be bundled with a single provider. |
| Trades and service businesses | Very well suited – the AI phone assistant can answer calls, record information, book appointments, and forward calls. |
| SMEs | Yes – suitable for websites, e-commerce, email, servers, backups, telephony, and self-hosted AI applications. |
| Large enterprises | To a limited extent – powerful server and hosting solutions are available; complex enterprise AI governance, model management, and centralized corporate AI are not the core focus. |
| Marketing and content teams | Yes – AI website generator, image generator, text optimization, SEO assistant, and email assistant support typical communication tasks. |
| Developers / IT teams | Yes – V-servers and dedicated servers can be used for open-source LLMs, agents, n8n, and custom applications. |
| Organizations with data protection concerns | Well-suited for self-hosting – German data centers and the General Terms and Conditions (AVV) are positive factors; the integrated AI features must be reviewed separately in each case. |
Hosting & Data
1) On-prem / local hosting
Meaning: The company operates the solution on its own hardware or within its own infrastructure. In the strictest sense, not only the application runs locally, but ideally the model as well.
2) Private cloud / data center
Meaning: The solution runs in a dedicated or more clearly separated cloud environment, often with a hosting provider or hyperscaler, but in a German data center or in a particularly controlled environment.
3) EU SaaS / managed
Meaning: The provider operates the solution itself as a service. The company uses the tool as a ready-made cloud service, ideally with EU data residency.
4) Hybrid
Meaning: One part of the processing remains internal / local / in a private cloud, while another part runs in an external cloud or EU SaaS.
5) AVV / DPA
Meaning: This is the data processing agreement or Data Processing Addendum. It governs that the provider processes personal data on behalf of the customer and is bound by the customer's instructions.
6) No training
Meaning: The provider does not use your prompts, uploads, attachments, chat histories, or outputs for training or improving the general model — ideally excluded by contract.
7) Open-source / transparency path
Meaning: There is a path toward greater technical transparency and sovereignty, for example through:
- open models
- documented components
- self-hostable parts
- traceable architecture
- export / switching options
| On-prem / local hosting | ❓ |
| Private cloud / data center | ⚠️ |
| EU SaaS / Managed | ⚠️ |
| Hybrid | ❓ |
| DPA / AVV | ✅ |
| No training on customer data | ❓ |
| Open source / transparency path | ❓ |
On-prem / local hosting: indirect / not available
For the SmartWebsite/homepage builder, I could not find any on-premise or self-hosting option on the website. STRATO does offer its own server products, but not as a documented local deployment of this specific SaaS solution.
Private cloud / data center: partial
STRATO mentions several high-security data centers in Germany and within the EU, as well as selectable European locations for V-Servers. However, for the specific homepage builder, I could not find a dedicated private cloud commitment.
EU SaaS / managed: partial
The homepage builder is advertised as 'Hosted in Germany'. At the same time, for the AI components of the SmartWebsite builder, the website does not explicitly document that all processing takes place exclusively in the EU/EEA.
Hybrid: unclear
On the website, I could not find a clear description of a hybrid operation in which one part is processed locally or in a private environment and another part externally.
DPA / DPA: covered
A DPA under Art. 28 GDPR is published on the website; according to the FAQ, it applies automatically to contracts from 18.07.2022 onward, while older contracts can conclude it via customer login. The DPA annex also lists additional processors.
No training: indirect / not available
For the SmartWebsite builder, I could not find any clear contractual exclusion of the use of inputs/outputs for training purposes and no documented opt-out option. On the contrary, STRATO mentions for the Smart Telephone Assistant that pseudonymized data may be used for training purposes.
Open source / transparency path: indirect / not available
For the SmartWebsite builder, I could not find any open-source information on the website, no disclosed model components, and no documented transparency path toward self-hostable open components.
Data processing
The website documents a privacy-oriented infrastructure for STRATO with data centers in Germany and partly in the EU. For the homepage builder, this suggests a strong EU-centric hosting foundation. However, the AI-specific data processing remains only partially transparent on the website. In the DPA annex, we22 Solutions GmbH in Berlin is named as an additional processor for the website builder for development, maintenance, and support. For other AI functions of the provider, STRATO itself shows that sub-service providers may be used for hosting, speech recognition, and semantic analysis, and that transfers to the USA may also be possible. I could not find a clear, product-specific assurance of pure EU/EEA data residency for SmartWebsite.
Conclusion
For users across the entire EU/EEA area, STRATO is positively documented compared to many providers because the website documents a DPA, ISO 27001, and German or European hosting. However, for a clear classification as fully straightforward GDPR-compliant, the specific AI/SmartWebsite tool lacks sufficiently clear documentation on AI subprocessors, training use, opt-out, and exclusive EU/EEA processing. Therefore, overall, 'conditional'.
Sources
- https://www.strato.de/agb/avv/
- https://www.strato.de/faq/vertrag/fragen-zur-auftragsverarbeitungsvertrag-avv-und-der-neuen-eu-datenschutzgrundverordnung-dsgvo/
- https://www.strato.de/sicherheit/
- https://www.strato.de/ueber-uns/
- https://www.strato.de/homepage-baukasten/ai-website/
- https://www.strato.de/homepage-baukasten/
- https://www.strato.de/faq/ki-tools/smart-telefonassistent-wichtige-ergaenzung-fuer-ihre-datenschutzerklaerung/
| On-prem / local hosting | ❓ |
| Private cloud / data center | ⚠️ |
| EU SaaS / Managed | ⚠️ |
| Hybrid | ❓ |
| DPA / AVV | ✅ |
| No training on customer data | ❓ |
| Open source / transparency path | ❓ |
On-prem / local hosting: indirect / not available
For the SmartWebsite/homepage builder, I could not find any on-premise or self-hosting option on the website. STRATO does offer its own server products, but not as a documented local deployment of this specific SaaS solution.
Private cloud / data center: partial
STRATO mentions several high-security data centers in Germany and within the EU, as well as selectable European locations for V-Servers. However, for the specific homepage builder, I could not find a dedicated private cloud commitment.
EU SaaS / managed: partial
The homepage builder is advertised as 'Hosted in Germany'. At the same time, for the AI components of the SmartWebsite builder, the website does not explicitly document that all processing takes place exclusively in the EU/EEA.
Hybrid: unclear
On the website, I could not find a clear description of a hybrid operation in which one part is processed locally or in a private environment and another part externally.
DPA / DPA: covered
A DPA under Art. 28 GDPR is published on the website; according to the FAQ, it applies automatically to contracts from 18.07.2022 onward, while older contracts can conclude it via customer login. The DPA annex also lists additional processors.
No training: indirect / not available
For the SmartWebsite builder, I could not find any clear contractual exclusion of the use of inputs/outputs for training purposes and no documented opt-out option. On the contrary, STRATO mentions for the Smart Telephone Assistant that pseudonymized data may be used for training purposes.
Open source / transparency path: indirect / not available
For the SmartWebsite builder, I could not find any open-source information on the website, no disclosed model components, and no documented transparency path toward self-hostable open components.
Data processing
The website documents a privacy-oriented infrastructure for STRATO with data centers in Germany and partly in the EU. For the homepage builder, this suggests a strong EU-centric hosting foundation. However, the AI-specific data processing remains only partially transparent on the website. In the DPA annex, we22 Solutions GmbH in Berlin is named as an additional processor for the website builder for development, maintenance, and support. For other AI functions of the provider, STRATO itself shows that sub-service providers may be used for hosting, speech recognition, and semantic analysis, and that transfers to the USA may also be possible. I could not find a clear, product-specific assurance of pure EU/EEA data residency for SmartWebsite.
Conclusion
For users across the entire EU/EEA area, STRATO is positively documented compared to many providers because the website documents a DPA, ISO 27001, and German or European hosting. However, for a clear classification as fully straightforward GDPR-compliant, the specific AI/SmartWebsite tool lacks sufficiently clear documentation on AI subprocessors, training use, opt-out, and exclusive EU/EEA processing. Therefore, overall, 'conditional'.
Sources
- https://www.strato.de/agb/avv/
- https://www.strato.de/faq/vertrag/fragen-zur-auftragsverarbeitungsvertrag-avv-und-der-neuen-eu-datenschutzgrundverordnung-dsgvo/
- https://www.strato.de/sicherheit/
- https://www.strato.de/ueber-uns/
- https://www.strato.de/homepage-baukasten/ai-website/
- https://www.strato.de/homepage-baukasten/
- https://www.strato.de/faq/ki-tools/smart-telefonassistent-wichtige-ergaenzung-fuer-ihre-datenschutzerklaerung/
Strengths & weaknesses at a glance
| Strengths | Weaknesses |
|---|---|
| • Very easy to get started with, no programming knowledge required | • STRATO is not a general-purpose AI work platform. |
| • AI creates a complete initial website draft | • The AI features focus primarily on websites, content, SEO, and specific communication tasks. |
| • Traditional editing possible after AI generation | • No enterprise RAG, no internal knowledge search, and no general agent platform. |
| • Domain, hosting, SSL, and email all from a single provider | • Due to the low number of pages and limited AI features, Basic is only suitable for very small websites. |
| • German data centers for standard hosting products | • AI-generated images, text, and SEO data must be checked for accuracy, copyright compliance, and trademark requirements. |
| • ISO 27001-certified data centers | • STRATO generally cites OpenAI as a partner for AI-powered services but does not publish a complete product-specific data flow description for each Smart AI feature. |
| • Data Processing Agreement (DPA) available | • The privacy policy permits the use and training of AI with predominantly aggregated data under certain conditions; there is therefore no blanket “no-training” commitment. |
| • Suitable for small businesses and personal web projects | |
| • AI features are directly integrated into the website workflow. |
Reviews
0 reviews in total
There are no confirmed reviews for this tool yet.
Submit review
Your review will only become visible after email confirmation. This protects the portal against abuse.
Report review
Please select the reason why this review should be checked.
GDPR-compliant usage possible?
From the perspective of a user in the EU/EEA area, there are several strong building blocks on the STRATO website for GDPR-compliant use: a DPA under Art. 28 GDPR, data centers in Germany as well as EU locations for certain server products, and ISO 27001 certification. However, for the specifically advertised AI/website builder, the situation is not fully documented consistently. Positively, the website builder is advertised as hosted in Germany, and the DPA appendix for the website builder names a subprocessor in Berlin. Negatively, STRATO explicitly mentions on its own AI telephone assistant page that sub-service providers may be used for hosting, speech recognition, and semantic analysis, and that personal data may also be transferred to the USA in the process; in addition, pseudonymized data may be used for training purposes. For the SmartWebsite AI builder, I could not find on the website an equally clear exclusion of such training use, nor a product-specific statement on AI subprocessors or an opt-out option. Therefore, GDPR-compliant use appears possible only under certain conditions and after a careful product review.
Positive
Documented on the website are a DPA under Art. 28 GDPR, the automatic inclusion of the DPA for newer contracts, a documented subprocessor appendix, data centers in Germany or within the EU for parts of the portfolio, and ISO 27001 certification. For the website builder, STRATO also advertises with 'Hosted in Germany'.
Negative
For the specifically considered AI/website builder, no fully elaborated information can be found on the website regarding AI-specific subprocessors, no clear opt-out option from AI training, and no clear product-specific statement on the exclusive EU data processing of the AI components. In addition, an AI product page from STRATO about the smart telephone assistant states that data may also be transferred to the USA and that pseudonymized data may be used for training purposes. This argues against a blanket classification as fully uncomplicated GDPR-compliant for all AI functions.
Server location
For STRATO in general and the website builder, data centers in Germany are mentioned. In addition, STRATO names Germany, Spain, and France as European locations for certain V-server locations. The website does not state whether all AI processing of the SmartWebsite builder takes place exclusively in the EU or EEA.