Tool Library

AI Tools: Compliance Guides for German Companies

Legal requirements for popular AI tools in Germany. ChatGPT, Copilot, Midjourney, and more - what you need to know before deploying.

81 tools documented

All Tools

Anthropic API and GDPR: DPA, EU Data Residency & Compliance Guide

Anthropic API GDPR compliance: DPA availability, EU data residency options, training data opt-out, and how to build GDPR-compliant products with Claude.

Anthropic Data Processing Addendum: Where to Find the Official DPA

Where to find Anthropic's official Data Processing Addendum, who can access it, and what EU buyers should verify before accepting Claude terms.

Anthropic DPA: GDPR Article 28 Guide for German Companies

Anthropic offers a DPA for Claude Enterprise and the Claude API. German companies should still verify SCCs, subprocessors, retention, and Article 28 GDPR fit.

Anthropic SCCs: GDPR Data Transfer Guide for Module 2 and 3

Anthropic's EU SCCs (Module 2 and 3) are included in their DPA automatically. Find out which module applies and what else is required for GDPR compliance.

Asana DPA: GDPR Data Processing Agreement for German Companies

Asana includes a DPA on all paid plans. German companies must verify EU data residency, subprocessors, and BetrVG before processing personal data in Asana.

Asana GDPR Compliance: DPA, Data Residency, and What EU Teams Need to Know

Asana offers a DPA and EU data residency on Enterprise plans. Here is what German companies need to verify before using Asana under GDPR.

Atlassian GDPR Compliance Germany: DPA, Data Residency, and DSGVO Review

Atlassian provides a GDPR Article 28 DPA. For Jira and Confluence: configure EU data residency, assess sub-processors, check works council requirements.

AWS Bedrock DPA and GDPR in Germany: What Legal Should Review

AWS Bedrock DPA, GDPR, model-provider terms, and EU hosting checks for German legal and procurement teams.

Azure OpenAI GDPR: Yes — With Microsoft DPA and German Regions

Yes — with the Microsoft DPA signed and EU residency in Germany North or West Central. Your data is not used for training; check AI Act class and works council.

Canva DPA: Yes, for Teams & Enterprise Plans

Canva provides a DPA for Teams and Enterprise plans. GDPR guide: AI training data opt-out, data residency, and sub-processor checks for Germany.

ChatGPT Enterprise GDPR & DPA: Compliance Guide for German Companies 2026

Is ChatGPT Enterprise GDPR compliant? OpenAI DPA, EU data residency, SOC 2, AI Act obligations, and works council requirements for German companies.

Claude Business, Team & Enterprise: Which Plan Includes a GDPR DPA?

There is no Claude Business plan. Anthropic offers Pro, Team, and Enterprise — this guide shows which tier includes a GDPR DPA for companies in Germany.

Claude Code Data Privacy: GDPR, DPA & No Training Policy

Claude Code's data privacy policy: no training on your code by default, GDPR DPA included via Anthropic API, zero data retention for Enterprise.

Claude Data Processing Agreement (DPA): GDPR Guide for Germany

Anthropic provides a Data Processing Agreement for Claude Enterprise and API. What the Claude data processing agreement covers — and when it's enough for GDPR.

Claude Enterprise EU Data Residency: EU Hosting Options and GDPR Guide

Claude Enterprise does not include EU data residency. GDPR-compliant EU hosting requires AWS Bedrock Frankfurt or Vertex AI EU. Guide for German businesses.

Claude Enterprise for Law Firms and Legal Teams

Claude Enterprise for law firms and legal teams: contract review, due diligence, and compliance drafting with GDPR and bar association considerations.

Claude Enterprise GDPR Compliance: A Checklist for Companies in Germany

Deploy Claude Enterprise in GDPR compliance: a 7-step checklist for German companies covering DPA, third-country transfers, DPIA, and usage policies.

Claude Enterprise GDPR: DPA Yes, EU Residency No by Default

Yes — Anthropic's DPA applies to Claude Enterprise. But EU data residency is not included by default; EU-only processing needs Bedrock or Vertex AI.

Claude Enterprise Germany: GDPR, DPA, SCCs & EU Hosting Guide

Can German companies use Claude Enterprise under GDPR? Covers DPA/AVV, SCCs, EU hosting options, data residency, and a compliance checklist before rollout.

Claude GDPR: Which Claude Plans Work for Germany in 2026

Claude GDPR in Germany depends on plan tier, DPA coverage, transfer setup, and rollout controls. This guide separates consumer plans from business options.

Claude Pro GDPR Compliance: Not for Business, Team vs Enterprise

Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.

Claude Team Germany: GDPR, DPA & Pricing for Businesses

Does Claude Team include a DPA? Yes — automatically, under GDPR Article 28. Entry-level compliance for teams from 5 users at around €25/user/month.

Claude Team Plan DPA & GDPR Compliance Guide

Yes — Claude Team has a DPA under Article 28 GDPR. Covers what Team includes, EU data residency limits, and when to upgrade to Enterprise.

Claude Team vs Enterprise: Plan Comparison for German Businesses

Claude Team (~€25/user/month) vs Claude Enterprise: features, GDPR compliance, and which plan fits your business in Germany.

Claude Team vs Enterprise: Which Plan Is GDPR-Compliant for Your Team?

Choosing between Claude Team and Enterprise? Both include a GDPR DPA — but SSO, Zero-Data-Retention, and audit logs only come with Enterprise.

Claude ZDR: Zero Data Retention for Enterprise and Claude Code

Claude ZDR is available only on qualified Anthropic API and Claude Code enterprise paths. Learn scope, exclusions, retention exceptions, and procurement steps.

Cohere and GDPR: Is Cohere GDPR-Compliant for EU Enterprise Use?

Cohere offers a DPA and EU data residency options, making it a strong GDPR-compliant alternative for enterprise AI deployments in Germany.

Copy.ai: What German Companies Need to Know

How to use Copy.ai in Germany. GDPR, AI Act, and compliance requirements.

Cursor DPA: Where to Find It and Which Plan German Teams Need

Cursor publishes its DPA at cursor.com/terms/dpa — but the GDPR-safe baseline for German teams is Teams or Enterprise, Privacy Mode, plus SCC transfer review.

DALL-E: What German Companies Need to Know

How to use DALL-E in Germany. GDPR, AI Act, and compliance requirements.

Datadog GDPR Compliance & DPA Guide for German Companies

Datadog is GDPR compliant — it signs a DPA under GDPR Art. 28, supports EU data residency in Frankfurt, and includes SCCs. Full guide for German teams.

DeepL DPA (2026): What the Data Processing Agreement Says

DeepL DPA: Art. 28 scope, SCCs, AWS subprocessor, retention — and how to get it.

Does Airtable Have a DPA? Yes — Enterprise Only. GDPR Guide for Germany

Yes — but only on Enterprise plans. German companies also need SCC checks, sub-processor review, and data-residency clarity before deploying Airtable.

Does Canva Offer a DPA? Yes — Canva DPA Guide for Germany

Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.

Figma DPA: Does Figma Have a Data Processing Agreement for GDPR?

Figma offers a DPA for Organization and Enterprise plans. Learn what German companies must check before using Figma and Figma AI under GDPR.

GitHub Copilot GDPR: DPA, IP & German Compliance Guide

Deploying GitHub Copilot in Germany? Business and Enterprise plans only. Covers DPA, GDPR compliance, Betriebsrat obligations, and IP risk for developers.

Google Gemini Enterprise in Germany: GDPR, DPA, and Compliance Checklist

Gemini Enterprise GDPR compliance for Germany: DPA availability, EU hosting, AI Act obligations, and pre-deployment checklist.

Grammarly GDPR Compliance in Germany: DPA, AVV, and Data Privacy

Grammarly offers a DPA for Enterprise customers. Learn what German businesses must assess before deploying Grammarly under GDPR and DSGVO.

HubSpot Breeze AI GDPR Compliance — 2026 Guide

HubSpot Breeze AI GDPR compliance: DPA check, Article 22 obligations, Breeze Intelligence & DPIA — step-by-step 2026 guide for German companies.

HubSpot Privacy in Germany: GDPR, DPA, and Works Council Risks

HubSpot privacy and GDPR compliance in Germany require a DPA, transfer review, EU data hosting assessment, and works council analysis.

Hugging Face GDPR & DPA Compliance: What You Need to Know

Is Hugging Face GDPR compliant? Guide to the DPA, EU data residency, Standard Contractual Clauses, and EU AI Act obligations for Germany.

Intercom & GDPR: Is Intercom (and Fin AI) Compliant for EU Businesses?

Intercom is GDPR-compliant and offers a DPA with SCCs. Learn what EU businesses must verify for Fin AI, EU data residency, sub-processors, and data retention.

Is Asana GDPR Compliant? Free Plan Has No DPA — German Guide

Asana is GDPR-compliant on all paid plans. Free plan excluded — no DPA. German guide: EU data residency, SCCs, works council rules, deployment checklist.

Is DeepSeek GDPR Compliant? What German Companies Need to Know

Hosted DeepSeek still creates GDPR and procurement risk for German companies. Self-hosted deployments can work with EU infrastructure and proper controls.

Is Descript GDPR-Compliant? DPA Review for Germany

GDPR compliance review for Descript in Germany: DPA analysis, voice data risks, US transfers, and AI training. Checklist for procurement teams.

Is ElevenLabs GDPR Compliant? DPA, Data Transfers & Germany

ElevenLabs can support GDPR-compliant use in Germany — but only after reviewing the DPA, verifying data transfers, and assessing your use case.

Is Perplexity AI GDPR Compliant? Yes — on Enterprise, With a DPA

Yes — but only on the Enterprise plan with a signed DPA. Free and Pro plans have no DPA, and US storage makes SCCs mandatory for German businesses.

Is Salesforce Einstein GDPR Compliant? Yes — With DPA and Hyperforce EU

Yes — with the Salesforce DPA signed and Hyperforce EU configured. Then review Einstein sub-processors, AI Act risk per feature, and BetrVG co-determination.

Is Teams Copilot GDPR-Compliant? DPA & EU Data Residency Guide

Teams Copilot offers EU data residency and a GDPR-compliant DPA. Our guide covers what German companies must verify before deploying.

Is Zapier GDPR Compliant? Germany Guide 2026

Is Zapier GDPR compliant for German companies? DPA, SCCs, EU data residency, and when Zapier is too risky for personal data workflows.

Is Zendesk GDPR Compliant in Germany? Yes — With DPA and EU Residency

Yes — Zendesk can be GDPR-compliant in Germany: signed DPA, EU data residency on qualifying enterprise plans, and works council checks for agent analytics.

Jasper: What German Companies Need to Know

How to use Jasper in Germany. GDPR, AI Act, and compliance requirements.

Linear AI: What German Companies Need to Know

How to use Linear AI in Germany. GDPR, AI Act, and compliance requirements.

Llama: What German Companies Need to Know

How to use Llama in Germany. GDPR, AI Act, and compliance requirements.

Make.com DPA: Does Make Have a Data Processing Agreement? (GDPR Guide)

Make.com offers a DPA for paid plan customers. What German companies must verify for GDPR compliance — EU data residency, sub-processors, and BetrVG.

Microsoft 365 and GDPR: What German Companies Need to Know in 2026

Can German companies use Microsoft 365 under GDPR? DSK history, EU Data Boundary, DPA, DPIA, and works council obligations — complete 2026 guide.

Microsoft 365 Copilot GDPR Compliance in Germany — 2026 Update

Microsoft 365 Copilot in Germany: GDPR DPA requirements, mandatory DPIA under Art. 35, Anthropic subprocessor status, and DSK's criticism explained.

Midjourney: What German Companies Need to Know

Using Midjourney for commercial work in Germany. Licensing, AI Act synthetic content rules, and copyright considerations.

Miro AI: What German Companies Need to Know

How to use Miro AI in Germany. GDPR, AI Act, and compliance requirements.

Miro GDPR Compliance: DPA for German Companies

Is Miro GDPR compliant? How to review the Miro DPA, manage data transfers, and use Miro lawfully in Germany.

monday AI: What German Companies Need to Know

How to use monday AI in Germany. GDPR, AI Act, and compliance requirements.

Notion DPA and GDPR: Can German Companies Use Notion Compliantly?

Notion DPA, GDPR compliance, EU data hosting, and AVV requirements for German companies. Practical guide for legal, privacy, and IT teams.

OpenAI API DPA: Yes — No Training by Default, EU Residency via Azure

Yes — the OpenAI API has a DPA, and API inputs are not used for training by default. EU data residency: none — standard API traffic runs on US infrastructure.

OpenAI Whisper GDPR Compliance in Germany: DPA, Speech Data, and AVV Guide

OpenAI Whisper processes voice data. German businesses must have a DPA with OpenAI and assess lawful basis for processing speech data under GDPR.

Otter.ai: What German Companies Need to Know

How to use Otter.ai in Germany. GDPR, AI Act, and compliance requirements.

Power BI Copilot: What German Companies Need to Know

How to use Power BI Copilot in Germany. GDPR, AI Act, and compliance requirements.

Replit and GDPR: Is Replit Compliant for German Companies?

Replit GDPR compliance review: DPA status, EU data residency, AI training opt-out, and what German companies need to do before using Replit.

Runway: What German Companies Need to Know

How to use Runway in Germany. GDPR, AI Act, and compliance requirements.

Salesforce and GDPR: What German Companies Need to Know in 2026

Salesforce GDPR compliance for Germany: DPA execution, Frankfurt data residency, BSI C5 certification, and Betriebsrat requirements in 2026.

Slack AI: What German Companies Need to Know

How to use Slack AI in Germany. GDPR, AI Act, and compliance requirements.

Slack GDPR Compliance in Germany: DPA, EU Residency, Key Requirements

Slack GDPR compliance in Germany depends on the DPA, EU data residency options, transfer mechanisms, and how your company uses message and employee data.

Stable Diffusion: What German Companies Need to Know

How to use Stable Diffusion in Germany. GDPR, AI Act, and compliance requirements.

Suno: What German Companies Need to Know

How to use Suno in Germany. GDPR, AI Act, and compliance requirements.

Synthesia: What German Companies Need to Know

How to use Synthesia in Germany. GDPR, AI Act, and compliance requirements.

Tableau AI: What German Companies Need to Know

How to use Tableau AI in Germany. GDPR, AI Act, and compliance requirements.

Writesonic: What German Companies Need to Know

How to use Writesonic in Germany. GDPR, AI Act, and compliance requirements.

Zoom AI Companion GDPR Compliance for German Businesses

Is Zoom AI Companion GDPR compliant in Germany? Review Zoom's DPA, AI processing, EU data residency, and the checklist for German businesses.

Zoom AI: What German Companies Need to Know

How to use Zoom AI in Germany. GDPR, AI Act, and compliance requirements.

Deploying an AI tool at work?

We review the legal requirements and help you implement compliantly.

Get a quote
Get a quote