Legal requirements for popular AI tools in Germany. ChatGPT, Copilot, Midjourney, and more - what you need to know before deploying.
81 tools documented
Adobe Firefly GDPR compliance for German companies: enterprise DPA, US data transfers, AI training settings, and sub-processor review.
Can lawyers in Germany use AI tools like Claude or ChatGPT? BRAO §43a, GDPR Art. 28, and BRAK guidance explained — with a 7-point compliance checklist.
Airtable is GDPR-compliant on Enterprise plans with a signed DPA. Here is what German businesses must check before using Airtable for personal data.
Anthropic API GDPR compliance: DPA availability, EU data residency options, training data opt-out, and how to build GDPR-compliant products with Claude.
Where to find Anthropic's official Data Processing Addendum, who can access it, and what EU buyers should verify before accepting Claude terms.
Anthropic offers a DPA for Claude Enterprise and the Claude API. German companies should still verify SCCs, subprocessors, retention, and Article 28 GDPR fit.
Anthropic's EU SCCs (Module 2 and 3) are included in their DPA automatically. Find out which module applies and what else is required for GDPR compliance.
Asana includes a DPA on all paid plans. German companies must verify EU data residency, subprocessors, and BetrVG before processing personal data in Asana.
Asana offers a DPA and EU data residency on Enterprise plans. Here is what German companies need to verify before using Asana under GDPR.
Atlassian provides a GDPR Article 28 DPA. For Jira and Confluence: configure EU data residency, assess sub-processors, check works council requirements.
AWS Bedrock DPA, GDPR, model-provider terms, and EU hosting checks for German legal and procurement teams.
Yes — with the Microsoft DPA signed and EU residency in Germany North or West Central. Your data is not used for training; check AI Act class and works council.
Canva provides a DPA for Teams and Enterprise plans. GDPR guide: AI training data opt-out, data residency, and sub-processor checks for Germany.
Is ChatGPT Enterprise GDPR compliant? OpenAI DPA, EU data residency, SOC 2, AI Act obligations, and works council requirements for German companies.
There is no Claude Business plan. Anthropic offers Pro, Team, and Enterprise — this guide shows which tier includes a GDPR DPA for companies in Germany.
Claude Code's data privacy policy: no training on your code by default, GDPR DPA included via Anthropic API, zero data retention for Enterprise.
Anthropic provides a Data Processing Agreement for Claude Enterprise and API. What the Claude data processing agreement covers — and when it's enough for GDPR.
Claude Enterprise does not include EU data residency. GDPR-compliant EU hosting requires AWS Bedrock Frankfurt or Vertex AI EU. Guide for German businesses.
Claude Enterprise for law firms and legal teams: contract review, due diligence, and compliance drafting with GDPR and bar association considerations.
Deploy Claude Enterprise in GDPR compliance: a 7-step checklist for German companies covering DPA, third-country transfers, DPIA, and usage policies.
Yes — Anthropic's DPA applies to Claude Enterprise. But EU data residency is not included by default; EU-only processing needs Bedrock or Vertex AI.
Can German companies use Claude Enterprise under GDPR? Covers DPA/AVV, SCCs, EU hosting options, data residency, and a compliance checklist before rollout.
Claude GDPR in Germany depends on plan tier, DPA coverage, transfer setup, and rollout controls. This guide separates consumer plans from business options.
Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.
Does Claude Team include a DPA? Yes — automatically, under GDPR Article 28. Entry-level compliance for teams from 5 users at around €25/user/month.
Yes — Claude Team has a DPA under Article 28 GDPR. Covers what Team includes, EU data residency limits, and when to upgrade to Enterprise.
Claude Team (~€25/user/month) vs Claude Enterprise: features, GDPR compliance, and which plan fits your business in Germany.
Choosing between Claude Team and Enterprise? Both include a GDPR DPA — but SSO, Zero-Data-Retention, and audit logs only come with Enterprise.
Claude ZDR is available only on qualified Anthropic API and Claude Code enterprise paths. Learn scope, exclusions, retention exceptions, and procurement steps.
Cohere offers a DPA and EU data residency options, making it a strong GDPR-compliant alternative for enterprise AI deployments in Germany.
How to use Copy.ai in Germany. GDPR, AI Act, and compliance requirements.
Cursor publishes its DPA at cursor.com/terms/dpa — but the GDPR-safe baseline for German teams is Teams or Enterprise, Privacy Mode, plus SCC transfer review.
How to use DALL-E in Germany. GDPR, AI Act, and compliance requirements.
Datadog is GDPR compliant — it signs a DPA under GDPR Art. 28, supports EU data residency in Frankfurt, and includes SCCs. Full guide for German teams.
DeepL DPA: Art. 28 scope, SCCs, AWS subprocessor, retention — and how to get it.
Yes — but only on Enterprise plans. German companies also need SCC checks, sub-processor review, and data-residency clarity before deploying Airtable.
Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.
Figma offers a DPA for Organization and Enterprise plans. Learn what German companies must check before using Figma and Figma AI under GDPR.
Deploying GitHub Copilot in Germany? Business and Enterprise plans only. Covers DPA, GDPR compliance, Betriebsrat obligations, and IP risk for developers.
Gemini Enterprise GDPR compliance for Germany: DPA availability, EU hosting, AI Act obligations, and pre-deployment checklist.
Grammarly offers a DPA for Enterprise customers. Learn what German businesses must assess before deploying Grammarly under GDPR and DSGVO.
HubSpot Breeze AI GDPR compliance: DPA check, Article 22 obligations, Breeze Intelligence & DPIA — step-by-step 2026 guide for German companies.
HubSpot privacy and GDPR compliance in Germany require a DPA, transfer review, EU data hosting assessment, and works council analysis.
Is Hugging Face GDPR compliant? Guide to the DPA, EU data residency, Standard Contractual Clauses, and EU AI Act obligations for Germany.
Intercom is GDPR-compliant and offers a DPA with SCCs. Learn what EU businesses must verify for Fin AI, EU data residency, sub-processors, and data retention.
Asana is GDPR-compliant on all paid plans. Free plan excluded — no DPA. German guide: EU data residency, SCCs, works council rules, deployment checklist.
Hosted DeepSeek still creates GDPR and procurement risk for German companies. Self-hosted deployments can work with EU infrastructure and proper controls.
GDPR compliance review for Descript in Germany: DPA analysis, voice data risks, US transfers, and AI training. Checklist for procurement teams.
ElevenLabs can support GDPR-compliant use in Germany — but only after reviewing the DPA, verifying data transfers, and assessing your use case.
Yes — but only on the Enterprise plan with a signed DPA. Free and Pro plans have no DPA, and US storage makes SCCs mandatory for German businesses.
Yes — with the Salesforce DPA signed and Hyperforce EU configured. Then review Einstein sub-processors, AI Act risk per feature, and BetrVG co-determination.
Teams Copilot offers EU data residency and a GDPR-compliant DPA. Our guide covers what German companies must verify before deploying.
Is Zapier GDPR compliant for German companies? DPA, SCCs, EU data residency, and when Zapier is too risky for personal data workflows.
Yes — Zendesk can be GDPR-compliant in Germany: signed DPA, EU data residency on qualifying enterprise plans, and works council checks for agent analytics.
How to use Jasper in Germany. GDPR, AI Act, and compliance requirements.
How to use Linear AI in Germany. GDPR, AI Act, and compliance requirements.
How to use Llama in Germany. GDPR, AI Act, and compliance requirements.
Make.com offers a DPA for paid plan customers. What German companies must verify for GDPR compliance — EU data residency, sub-processors, and BetrVG.
Can German companies use Microsoft 365 under GDPR? DSK history, EU Data Boundary, DPA, DPIA, and works council obligations — complete 2026 guide.
Microsoft 365 Copilot in Germany: GDPR DPA requirements, mandatory DPIA under Art. 35, Anthropic subprocessor status, and DSK's criticism explained.
Using Midjourney for commercial work in Germany. Licensing, AI Act synthetic content rules, and copyright considerations.
How to use Miro AI in Germany. GDPR, AI Act, and compliance requirements.
Is Miro GDPR compliant? How to review the Miro DPA, manage data transfers, and use Miro lawfully in Germany.
How to use monday AI in Germany. GDPR, AI Act, and compliance requirements.
Notion DPA, GDPR compliance, EU data hosting, and AVV requirements for German companies. Practical guide for legal, privacy, and IT teams.
Yes — the OpenAI API has a DPA, and API inputs are not used for training by default. EU data residency: none — standard API traffic runs on US infrastructure.
OpenAI Whisper processes voice data. German businesses must have a DPA with OpenAI and assess lawful basis for processing speech data under GDPR.
How to use Otter.ai in Germany. GDPR, AI Act, and compliance requirements.
How to use Power BI Copilot in Germany. GDPR, AI Act, and compliance requirements.
Replit GDPR compliance review: DPA status, EU data residency, AI training opt-out, and what German companies need to do before using Replit.
How to use Runway in Germany. GDPR, AI Act, and compliance requirements.
Salesforce GDPR compliance for Germany: DPA execution, Frankfurt data residency, BSI C5 certification, and Betriebsrat requirements in 2026.
How to use Slack AI in Germany. GDPR, AI Act, and compliance requirements.
Slack GDPR compliance in Germany depends on the DPA, EU data residency options, transfer mechanisms, and how your company uses message and employee data.
How to use Stable Diffusion in Germany. GDPR, AI Act, and compliance requirements.
How to use Suno in Germany. GDPR, AI Act, and compliance requirements.
How to use Synthesia in Germany. GDPR, AI Act, and compliance requirements.
How to use Tableau AI in Germany. GDPR, AI Act, and compliance requirements.
How to use Writesonic in Germany. GDPR, AI Act, and compliance requirements.
Is Zoom AI Companion GDPR compliant in Germany? Review Zoom's DPA, AI processing, EU data residency, and the checklist for German businesses.
How to use Zoom AI in Germany. GDPR, AI Act, and compliance requirements.
We review the legal requirements and help you implement compliantly.
Get a quote