---
title: "AI Tools: Compliance Guides for German Companies — Compound Law"
description: "Legal requirements for popular AI tools in Germany. ChatGPT, Copilot, Midjourney, and more - what you need to know before deploying."
image: "https://compound.law/assets/images/og-image-en.webp"
source: "https://compound.law/en-DE/tools/"
language: "en"
---

Tool Library

# AI Tools: Compliance Guides for German Companies

Legal requirements for popular AI tools in Germany. ChatGPT, Copilot, Midjourney, and more - what you need to know before deploying.

82 tools documented

## Popular Tools

[![Adobe Firefly GDPR compliance guide for German businesses](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/adobe-firefly/)

[Tool](https://compound.law/en-DE/tools/adobe-firefly/)

### [Adobe Firefly GDPR Compliance: What German Businesses Need to Know](https://compound.law/en-DE/tools/adobe-firefly/)

[Adobe Firefly GDPR compliance for German companies: enterprise DPA, US data transfers, AI training settings, and sub-processor review.](https://compound.law/en-DE/tools/adobe-firefly/)

[![AI tools for lawyers Germany BRAO GDPR professional secrecy compliance](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/ai-tools-lawyers-germany/)

[Tool](https://compound.law/en-DE/tools/ai-tools-lawyers-germany/)

### [AI APIs for Law Firms in Germany: BRAO, GDPR & Secrecy Guide](https://compound.law/en-DE/tools/ai-tools-lawyers-germany/)

[Can lawyers in Germany use AI tools like Claude or ChatGPT? BRAO §43a, GDPR Art. 28, and BRAK guidance explained — with a 7-point compliance checklist.](https://compound.law/en-DE/tools/ai-tools-lawyers-germany/)

[![Airtable GDPR compliance guide for German companies](https://compound.law/assets/images/tools/tools_2.webp)](https://compound.law/en-DE/tools/airtable/)

[Tool](https://compound.law/en-DE/tools/airtable/)

### [Airtable and GDPR: DPA, Data Residency, and Compliance for German Companies](https://compound.law/en-DE/tools/airtable/)

[Airtable is GDPR-compliant on Enterprise plans with a signed DPA. Here is what German businesses must check before using Airtable for personal data.](https://compound.law/en-DE/tools/airtable/)

## All Tools

### [Anthropic API and GDPR: DPA, EU Data Residency & Compliance Guide](https://compound.law/en-DE/tools/anthropic-api/)

[Anthropic API GDPR compliance: DPA availability, EU data residency options, training data opt-out, and how to build GDPR-compliant products with Claude.](https://compound.law/en-DE/tools/anthropic-api/)

### [Anthropic Data Processing Addendum: Where to Find the Official DPA](https://compound.law/en-DE/tools/anthropic-data-processing-addendum/)

[Where to find Anthropic's official Data Processing Addendum, who can access it, and what EU buyers should verify before accepting Claude terms.](https://compound.law/en-DE/tools/anthropic-data-processing-addendum/)

### [Anthropic DPA: GDPR Article 28 Guide for German Companies](https://compound.law/en-DE/tools/anthropic-dpa/)

[Anthropic offers a DPA for Claude Enterprise and the Claude API. German companies should still verify SCCs, subprocessors, retention, and Article 28 GDPR fit.](https://compound.law/en-DE/tools/anthropic-dpa/)

### [Anthropic SCCs: GDPR Data Transfer Guide for Module 2 and 3](https://compound.law/en-DE/tools/anthropic-scc/)

[Anthropic's EU SCCs (Module 2 and 3) are included in their DPA automatically. Find out which module applies and what else is required for GDPR compliance.](https://compound.law/en-DE/tools/anthropic-scc/)

### [Asana DPA: GDPR Data Processing Agreement for German Companies](https://compound.law/en-DE/tools/asana-dpa/)

[Asana includes a DPA on all paid plans. German companies must verify EU data residency, subprocessors, and BetrVG before processing personal data in Asana.](https://compound.law/en-DE/tools/asana-dpa/)

### [Asana GDPR Compliance: DPA, Data Residency, and What EU Teams Need to Know](https://compound.law/en-DE/tools/asana-ai/)

[Asana's EU data residency: customer data is stored in the EU on Enterprise and Enterprise+ plans only. DPA/SCCs explained for German teams.](https://compound.law/en-DE/tools/asana-ai/)

### [Atlassian GDPR Compliance Germany: DPA, Data Residency, and DSGVO Review](https://compound.law/en-DE/tools/atlassian/)

[Atlassian provides a GDPR Article 28 DPA. For Jira and Confluence: configure EU data residency, assess sub-processors, check works council requirements.](https://compound.law/en-DE/tools/atlassian/)

### [AWS Bedrock DPA and GDPR in Germany: What Legal Should Review](https://compound.law/en-DE/tools/aws-bedrock/)

[AWS Bedrock DPA, GDPR, model-provider terms, and EU hosting checks for German legal and procurement teams.](https://compound.law/en-DE/tools/aws-bedrock/)

### [Azure OpenAI GDPR: Yes — With Microsoft DPA and German Regions](https://compound.law/en-DE/tools/azure-openai/)

[Yes — with the Microsoft DPA signed and EU residency in Germany North or West Central. Your data is not used for training; check AI Act class and works council.](https://compound.law/en-DE/tools/azure-openai/)

### [Canva DPA: Yes, for Teams & Enterprise Plans](https://compound.law/en-DE/tools/canva-ai/)

[Canva provides a DPA for Teams and Enterprise plans. GDPR guide: AI training data opt-out, data residency, and sub-processor checks for Germany.](https://compound.law/en-DE/tools/canva-ai/)

### [ChatGPT Enterprise GDPR & DPA: Compliance Guide for German Companies 2026](https://compound.law/en-DE/tools/chatgpt-enterprise/)

[Is ChatGPT Enterprise GDPR compliant? OpenAI DPA, EU data residency, SOC 2, AI Act obligations, and works council requirements for German companies.](https://compound.law/en-DE/tools/chatgpt-enterprise/)

### [Claude Business, Team & Enterprise: Which Plan Includes a GDPR DPA?](https://compound.law/en-DE/tools/claude-business-gdpr/)

[There is no Claude Business plan. Anthropic offers Pro, Team, and Enterprise — this guide shows which tier includes a GDPR DPA for companies in Germany.](https://compound.law/en-DE/tools/claude-business-gdpr/)

### [Claude Code Data Privacy: GDPR, DPA & No Training Policy](https://compound.law/en-DE/tools/claude-code-gdpr/)

[Claude Code's data privacy policy: no training on your code by default, GDPR DPA included via Anthropic API, zero data retention for Enterprise.](https://compound.law/en-DE/tools/claude-code-gdpr/)

### [Claude Data Processing Agreement (DPA): GDPR Guide for Germany](https://compound.law/en-DE/tools/claude-dpa/)

[Anthropic provides a Data Processing Agreement for Claude Enterprise and API. What the Claude data processing agreement covers — and when it's enough for GDPR.](https://compound.law/en-DE/tools/claude-dpa/)

### [Claude Enterprise for Law Firms and Legal Teams](https://compound.law/en-DE/tools/claude-enterprise-legal-teams/)

[Claude Enterprise for law firms and legal teams: contract review, due diligence, and compliance drafting with GDPR and bar association considerations.](https://compound.law/en-DE/tools/claude-enterprise-legal-teams/)

### [Claude Enterprise GDPR Compliance: A Checklist for Companies in Germany](https://compound.law/en-DE/tools/claude-enterprise-gdpr/)

[Deploy Claude Enterprise in GDPR compliance: a 7-step checklist for German companies covering DPA, third-country transfers, DPIA, and usage policies.](https://compound.law/en-DE/tools/claude-enterprise-gdpr/)

### [Claude Enterprise GDPR: DPA Yes, EU Residency No by Default](https://compound.law/en-DE/tools/claude-enterprise/)

[Yes — Anthropic's DPA applies to Claude Enterprise. But EU data residency is not included by default; EU-only processing needs Bedrock or Vertex AI.](https://compound.law/en-DE/tools/claude-enterprise/)

### [Claude Enterprise Germany: GDPR, DPA, SCCs & EU Hosting Guide](https://compound.law/en-DE/tools/claude-enterprise-germany/)

[Can German companies use Claude Enterprise under GDPR? Covers DPA/AVV, SCCs, EU hosting options, data residency, and a compliance checklist before rollout.](https://compound.law/en-DE/tools/claude-enterprise-germany/)

### [Claude GDPR: Which Claude Plans Work for Germany in 2026](https://compound.law/en-DE/tools/claude-gdpr/)

[Claude GDPR in Germany depends on plan tier, DPA coverage, transfer setup, and rollout controls. This guide separates consumer plans from business options.](https://compound.law/en-DE/tools/claude-gdpr/)

### [Claude Pro GDPR Compliance: Not for Business, Team vs Enterprise](https://compound.law/en-DE/tools/claude-pro-privacy/)

[Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.](https://compound.law/en-DE/tools/claude-pro-privacy/)

### [Claude Team Germany: GDPR, DPA & Pricing for Businesses](https://compound.law/en-DE/tools/claude-team/)

[Does Claude Team include a DPA? Yes — automatically, under GDPR Article 28. Entry-level compliance for teams from 5 users at around €25/user/month.](https://compound.law/en-DE/tools/claude-team/)

### [Claude Team Plan DPA & GDPR Compliance Guide](https://compound.law/en-DE/tools/claude-team-gdpr/)

[Yes — Claude Team has a DPA under Article 28 GDPR. Covers what Team includes, EU data residency limits, and when to upgrade to Enterprise.](https://compound.law/en-DE/tools/claude-team-gdpr/)

### [Claude Team vs Enterprise: Plan Comparison for German Businesses](https://compound.law/en-DE/tools/claude-team-vs-enterprise/)

[Claude Team (\~€25/user/month) vs Claude Enterprise: features, GDPR compliance, and which plan fits your business in Germany.](https://compound.law/en-DE/tools/claude-team-vs-enterprise/)

### [Claude Team vs Enterprise: Which Plan Is GDPR-Compliant for Your Team?](https://compound.law/en-DE/tools/claude-business/)

[Choosing between Claude Team and Enterprise? Both include a GDPR DPA — but SSO, Zero-Data-Retention, and audit logs only come with Enterprise.](https://compound.law/en-DE/tools/claude-business/)

### [Claude ZDR: What It Covers, Who Qualifies, How to Get It](https://compound.law/en-DE/tools/claude-zdr/)

[Claude ZDR is available for the Anthropic API and Claude Code. See which plans qualify, what's excluded, and how to request enablement for your organization.](https://compound.law/en-DE/tools/claude-zdr/)

### [Cohere and GDPR: Is Cohere GDPR-Compliant for EU Enterprise Use?](https://compound.law/en-DE/tools/cohere/)

[Cohere offers a DPA and EU data residency options, making it a strong GDPR-compliant alternative for enterprise AI deployments in Germany.](https://compound.law/en-DE/tools/cohere/)

### [Copy.ai: What German Companies Need to Know](https://compound.law/en-DE/tools/copy-ai/)

[How to use Copy.ai in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/copy-ai/)

### [Cursor DPA: Where to Find It and Which Plan German Teams Need](https://compound.law/en-DE/tools/cursor/)

[Cursor publishes its DPA at cursor.com/terms/dpa — but the GDPR-safe baseline for German teams is Teams or Enterprise, Privacy Mode, plus SCC transfer review.](https://compound.law/en-DE/tools/cursor/)

### [Cursor DPA: Yes — What the Anysphere Data Processing Agreement Covers](https://compound.law/en-DE/tools/cursor-dpa/)

[Yes, Cursor offers a DPA at cursor.com/terms/dpa. What the Cursor data processing agreement covers under GDPR Art. 28 — and how German buyers should review it.](https://compound.law/en-DE/tools/cursor-dpa/)

### [DALL-E: What German Companies Need to Know](https://compound.law/en-DE/tools/dall-e/)

[How to use DALL-E in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/dall-e/)

### [Datadog GDPR Compliance & DPA Guide for German Companies](https://compound.law/en-DE/tools/datadog-ai/)

[Datadog is GDPR compliant — it signs a DPA under GDPR Art. 28, supports EU data residency in Frankfurt, and includes SCCs. Full guide for German teams.](https://compound.law/en-DE/tools/datadog-ai/)

### [Does Airtable Have a DPA? Yes — Enterprise Only. GDPR Guide for Germany](https://compound.law/en-DE/tools/airtable-ai/)

[Yes — but only on Enterprise plans. German companies also need SCC checks, sub-processor review, and data-residency clarity before deploying Airtable.](https://compound.law/en-DE/tools/airtable-ai/)

### [Does Canva Offer a DPA? Yes — Canva DPA Guide for Germany](https://compound.law/en-DE/tools/canva-dpa/)

[Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.](https://compound.law/en-DE/tools/canva-dpa/)

### [Does ElevenLabs Offer a DPA? Yes — ElevenLabs DPA Guide for Germany](https://compound.law/en-DE/tools/elevenlabs-dpa/)

[Yes — ElevenLabs publishes a Data Processing Addendum at elevenlabs.io/dpa. What the ElevenLabs DPA covers clause by clause under Article 28 GDPR.](https://compound.law/en-DE/tools/elevenlabs-dpa/)

### [Figma DPA: Does Figma Have a Data Processing Agreement for GDPR?](https://compound.law/en-DE/tools/figma-ai/)

[Figma offers a DPA for Organization and Enterprise plans. Learn what German companies must check before using Figma and Figma AI under GDPR.](https://compound.law/en-DE/tools/figma-ai/)

### [GitHub Copilot GDPR: DPA, IP & German Compliance Guide](https://compound.law/en-DE/tools/copilot-github/)

[Deploying GitHub Copilot in Germany? Business and Enterprise plans only. Covers DPA, GDPR compliance, Betriebsrat obligations, and IP risk for developers.](https://compound.law/en-DE/tools/copilot-github/)

### [Google Gemini Enterprise in Germany: GDPR, DPA, and Compliance Checklist](https://compound.law/en-DE/tools/gemini-enterprise/)

[Gemini Enterprise GDPR compliance for Germany: DPA availability, EU hosting, AI Act obligations, and pre-deployment checklist.](https://compound.law/en-DE/tools/gemini-enterprise/)

### [Grammarly GDPR Compliance in Germany: DPA, AVV, and Data Privacy](https://compound.law/en-DE/tools/grammarly/)

[Grammarly offers a DPA for Enterprise customers. Learn what German businesses must assess before deploying Grammarly under GDPR and DSGVO.](https://compound.law/en-DE/tools/grammarly/)

### [HubSpot Breeze AI GDPR Compliance — 2026 Guide](https://compound.law/en-DE/tools/hubspot-breeze-ai-gdpr/)

[HubSpot Breeze AI GDPR compliance: DPA check, Article 22 obligations, Breeze Intelligence & DPIA — step-by-step 2026 guide for German companies.](https://compound.law/en-DE/tools/hubspot-breeze-ai-gdpr/)

### [HubSpot Privacy in Germany: GDPR, DPA, and Works Council Risks](https://compound.law/en-DE/tools/hubspot/)

[HubSpot privacy and GDPR compliance in Germany require a DPA, transfer review, EU data hosting assessment, and works council analysis.](https://compound.law/en-DE/tools/hubspot/)

### [Hugging Face GDPR & DPA Compliance: What You Need to Know](https://compound.law/en-DE/tools/hugging-face/)

[Is Hugging Face GDPR compliant? Guide to the DPA, EU data residency, Standard Contractual Clauses, and EU AI Act obligations for Germany.](https://compound.law/en-DE/tools/hugging-face/)

### [Intercom & GDPR: Is Intercom (and Fin AI) Compliant for EU Businesses?](https://compound.law/en-DE/tools/intercom/)

[Intercom is GDPR-compliant and offers a DPA with SCCs. Learn what EU businesses must verify for Fin AI, EU data residency, sub-processors, and data retention.](https://compound.law/en-DE/tools/intercom/)

### [Is Asana GDPR Compliant? Free Plan Has No DPA — German Guide](https://compound.law/en-DE/tools/asana/)

[Asana is GDPR-compliant on all paid plans. Free plan excluded — no DPA. German guide: EU data residency, SCCs, works council rules, deployment checklist.](https://compound.law/en-DE/tools/asana/)

### [Is DeepSeek GDPR Compliant? What German Companies Need to Know](https://compound.law/en-DE/tools/deepseek/)

[Hosted DeepSeek still creates GDPR and procurement risk for German companies. Self-hosted deployments can work with EU infrastructure and proper controls.](https://compound.law/en-DE/tools/deepseek/)

### [Is Descript GDPR-Compliant? DPA Review for Germany](https://compound.law/en-DE/tools/descript/)

[GDPR compliance review for Descript in Germany: DPA analysis, voice data risks, US transfers, and AI training. Checklist for procurement teams.](https://compound.law/en-DE/tools/descript/)

### [Is ElevenLabs GDPR Compliant? DPA, Data Transfers & Germany](https://compound.law/en-DE/tools/elevenlabs/)

[ElevenLabs can support GDPR-compliant use in Germany — but only after reviewing the DPA, verifying data transfers, and assessing your use case.](https://compound.law/en-DE/tools/elevenlabs/)

### [Is Perplexity AI GDPR Compliant? Yes — on Enterprise, With a DPA](https://compound.law/en-DE/tools/perplexity/)

[Yes — but only on the Enterprise plan with a signed DPA. Free and Pro plans have no DPA, and US storage makes SCCs mandatory for German businesses.](https://compound.law/en-DE/tools/perplexity/)

### [Is Salesforce Einstein GDPR Compliant? Yes — With DPA and Hyperforce EU](https://compound.law/en-DE/tools/salesforce-einstein/)

[Yes — with the Salesforce DPA signed and Hyperforce EU configured. Then review Einstein sub-processors, AI Act risk per feature, and BetrVG co-determination.](https://compound.law/en-DE/tools/salesforce-einstein/)

### [Is Teams Copilot GDPR-Compliant? DPA & EU Data Residency Guide](https://compound.law/en-DE/tools/teams-copilot/)

[Teams Copilot offers EU data residency and a GDPR-compliant DPA. Our guide covers what German companies must verify before deploying.](https://compound.law/en-DE/tools/teams-copilot/)

### [Is Zapier GDPR Compliant? Germany Guide 2026](https://compound.law/en-DE/tools/zapier/)

[Is Zapier GDPR compliant for German companies? DPA, SCCs, EU data residency, and when Zapier is too risky for personal data workflows.](https://compound.law/en-DE/tools/zapier/)

### [Is Zendesk GDPR Compliant in Germany? Yes — With DPA and EU Residency](https://compound.law/en-DE/tools/zendesk/)

[Yes — Zendesk can be GDPR-compliant in Germany: signed DPA, EU data residency on qualifying enterprise plans, and works council checks for agent analytics.](https://compound.law/en-DE/tools/zendesk/)

### [Jasper: What German Companies Need to Know](https://compound.law/en-DE/tools/jasper/)

[How to use Jasper in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/jasper/)

### [Linear AI: What German Companies Need to Know](https://compound.law/en-DE/tools/linear-ai/)

[How to use Linear AI in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/linear-ai/)

### [Llama: What German Companies Need to Know](https://compound.law/en-DE/tools/llama/)

[How to use Llama in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/llama/)

### [Make.com DPA: Does Make Have a Data Processing Agreement? (GDPR Guide)](https://compound.law/en-DE/tools/make/)

[Make.com offers a DPA for paid plan customers. What German companies must verify for GDPR compliance — EU data residency, sub-processors, and BetrVG.](https://compound.law/en-DE/tools/make/)

### [Microsoft 365 and GDPR: What German Companies Need to Know in 2026](https://compound.law/en-DE/tools/microsoft-365-gdpr/)

[Can German companies use Microsoft 365 under GDPR? DSK history, EU Data Boundary, DPA, DPIA, and works council obligations — complete 2026 guide.](https://compound.law/en-DE/tools/microsoft-365-gdpr/)

### [Microsoft 365 Copilot GDPR Compliance in Germany — 2026 Update](https://compound.law/en-DE/tools/copilot-microsoft-365/)

[Microsoft 365 Copilot in Germany: GDPR DPA requirements, mandatory DPIA under Art. 35, Anthropic subprocessor status, and DSK's criticism explained.](https://compound.law/en-DE/tools/copilot-microsoft-365/)

### [Midjourney: What German Companies Need to Know](https://compound.law/en-DE/tools/midjourney/)

[Using Midjourney for commercial work in Germany. Licensing, AI Act synthetic content rules, and copyright considerations.](https://compound.law/en-DE/tools/midjourney/)

### [Miro AI: What German Companies Need to Know](https://compound.law/en-DE/tools/miro-ai/)

[How to use Miro AI in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/miro-ai/)

### [Miro GDPR Compliance: DPA for German Companies](https://compound.law/en-DE/tools/miro/)

[Is Miro GDPR compliant? How to review the Miro DPA, manage data transfers, and use Miro lawfully in Germany.](https://compound.law/en-DE/tools/miro/)

### [monday AI: What German Companies Need to Know](https://compound.law/en-DE/tools/monday-ai/)

[How to use monday AI in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/monday-ai/)

### [Notion DPA and GDPR: Can German Companies Use Notion Compliantly?](https://compound.law/en-DE/tools/notion-ai/)

[Notion DPA, GDPR compliance, EU data hosting, and AVV requirements for German companies. Practical guide for legal, privacy, and IT teams.](https://compound.law/en-DE/tools/notion-ai/)

### [OpenAI API DPA: Yes — No Training by Default, EU Residency via Azure](https://compound.law/en-DE/tools/openai-api/)

[Yes — the OpenAI API has a DPA, and API inputs are not used for training by default. EU data residency: none — standard API traffic runs on US infrastructure.](https://compound.law/en-DE/tools/openai-api/)

### [OpenAI Whisper GDPR Compliance in Germany: DPA, Speech Data, and AVV Guide](https://compound.law/en-DE/tools/whisper/)

[OpenAI Whisper processes voice data. German businesses must have a DPA with OpenAI and assess lawful basis for processing speech data under GDPR.](https://compound.law/en-DE/tools/whisper/)

### [Otter.ai: What German Companies Need to Know](https://compound.law/en-DE/tools/otter-ai/)

[How to use Otter.ai in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/otter-ai/)

### [Power BI Copilot: What German Companies Need to Know](https://compound.law/en-DE/tools/power-bi/)

[How to use Power BI Copilot in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/power-bi/)

### [Replit and GDPR: Is Replit Compliant for German Companies?](https://compound.law/en-DE/tools/replit/)

[Replit GDPR compliance review: DPA status, EU data residency, AI training opt-out, and what German companies need to do before using Replit.](https://compound.law/en-DE/tools/replit/)

### [Runway: What German Companies Need to Know](https://compound.law/en-DE/tools/runway/)

[How to use Runway in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/runway/)

### [Salesforce and GDPR: What German Companies Need to Know in 2026](https://compound.law/en-DE/tools/salesforce/)

[Salesforce GDPR compliance for Germany: DPA execution, Frankfurt data residency, BSI C5 certification, and Betriebsrat requirements in 2026.](https://compound.law/en-DE/tools/salesforce/)

### [Slack AI: What German Companies Need to Know](https://compound.law/en-DE/tools/slack-ai/)

[How to use Slack AI in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/slack-ai/)

### [Slack GDPR Compliance in Germany: DPA, EU Residency, Key Requirements](https://compound.law/en-DE/tools/slack/)

[Slack GDPR compliance in Germany depends on the DPA, EU data residency options, transfer mechanisms, and how your company uses message and employee data.](https://compound.law/en-DE/tools/slack/)

### [Stable Diffusion: What German Companies Need to Know](https://compound.law/en-DE/tools/stable-diffusion/)

[How to use Stable Diffusion in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/stable-diffusion/)

### [Suno: What German Companies Need to Know](https://compound.law/en-DE/tools/suno/)

[How to use Suno in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/suno/)

### [Synthesia GDPR: Training, DPA & German Compliance Facts](https://compound.law/en-DE/tools/synthesia/)

[No — Synthesia does not train on customer content. GDPR-usable for German firms: Art. 28 DPA and EU storage in Ireland. What to verify before rollout.](https://compound.law/en-DE/tools/synthesia/)

### [Tableau AI: What German Companies Need to Know](https://compound.law/en-DE/tools/tableau/)

[How to use Tableau AI in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/tableau/)

### [Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)](https://compound.law/en-DE/tools/claude-eu-hosting/)

[Where is Claude hosted? No EU residency by default; EU path is Bedrock/Vertex AI](https://compound.law/en-DE/tools/claude-eu-hosting/)

### [Writesonic: What German Companies Need to Know](https://compound.law/en-DE/tools/writesonic/)

[How to use Writesonic in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/writesonic/)

### [Zoom AI Companion GDPR Compliance for German Businesses](https://compound.law/en-DE/tools/zoom/)

[Is Zoom AI Companion GDPR compliant in Germany? Review Zoom's DPA, AI processing, EU data residency, and the checklist for German businesses.](https://compound.law/en-DE/tools/zoom/)

### [Zoom AI: What German Companies Need to Know](https://compound.law/en-DE/tools/zoom-ai/)

[How to use Zoom AI in Germany. GDPR, AI Act, and compliance requirements.](https://compound.law/en-DE/tools/zoom-ai/)

## Deploying an AI tool at work?

We review the legal requirements and help you implement compliantly.

[Get a quote](https://compound.law/en-DE/quote/)

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": [
      "Organization",
      "LegalService"
    ],
    "@id": "https://compound.law/#organization",
    "name": "Compound Law",
    "alternateName": "Compound Law — AI Law Firm",
    "url": "https://compound.law/",
    "logo": {
      "@type": "ImageObject",
      "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png",
      "width": 1024,
      "height": 1024
    },
    "image": "https://compound.law/assets/images/og-image.webp",
    "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.",
    "foundingDate": "2026",
    "founder": [
      {
        "@type": "Person",
        "name": "Marko Bradic",
        "jobTitle": "CEO",
        "url": "https://compound.law/en-DE/tech-team/marko-bradic/",
        "sameAs": [
          "https://www.linkedin.com/in/markobradic/"
        ],
        "knowsAbout": [
          "Product strategy and development",
          "Scaling technology companies",
          "FinTech and financial services",
          "AI-powered product innovation",
          "Business operations and growth",
          "Digital transformation"
        ]
      },
      {
        "@type": "Person",
        "name": "Mohit Tilwani",
        "jobTitle": "CTO",
        "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/",
        "sameAs": [
          "https://www.linkedin.com/in/mohit-tilwani/"
        ],
        "knowsAbout": [
          "Engineering leadership and architecture",
          "Scaling high-traffic systems",
          "AI and machine learning infrastructure",
          "FinTech platform development",
          "Cloud infrastructure and DevOps",
          "Product engineering"
        ]
      },
      {
        "@type": "Person",
        "name": "Julian Jantze",
        "jobTitle": "Rechtsanwalt",
        "url": "https://compound.law/en-DE/lawyers/julian-jantze/",
        "sameAs": [
          "https://www.linkedin.com/in/julian-jantze-957b95158/"
        ],
        "knowsAbout": [
          "Corporate law and corporate governance for technology companies",
          "Employment law and HR compliance",
          "EU AI Act compliance and AI governance",
          "Employee participation models (VSOP/ESOP)",
          "Regulatory compliance for tech companies",
          "Legal operations and Legal Tech implementation"
        ]
      }
    ],
    "employee": [
      {
        "@type": "Person",
        "name": "Marko Bradic",
        "jobTitle": "CEO",
        "url": "https://compound.law/en-DE/tech-team/marko-bradic/",
        "sameAs": [
          "https://www.linkedin.com/in/markobradic/"
        ],
        "knowsAbout": [
          "Product strategy and development",
          "Scaling technology companies",
          "FinTech and financial services",
          "AI-powered product innovation",
          "Business operations and growth",
          "Digital transformation"
        ]
      },
      {
        "@type": "Person",
        "name": "Mohit Tilwani",
        "jobTitle": "CTO",
        "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/",
        "sameAs": [
          "https://www.linkedin.com/in/mohit-tilwani/"
        ],
        "knowsAbout": [
          "Engineering leadership and architecture",
          "Scaling high-traffic systems",
          "AI and machine learning infrastructure",
          "FinTech platform development",
          "Cloud infrastructure and DevOps",
          "Product engineering"
        ]
      },
      {
        "@type": "Person",
        "name": "Julian Jantze",
        "jobTitle": "Rechtsanwalt",
        "url": "https://compound.law/en-DE/lawyers/julian-jantze/",
        "sameAs": [
          "https://www.linkedin.com/in/julian-jantze-957b95158/"
        ],
        "knowsAbout": [
          "Corporate law and corporate governance for technology companies",
          "Employment law and HR compliance",
          "EU AI Act compliance and AI governance",
          "Employee participation models (VSOP/ESOP)",
          "Regulatory compliance for tech companies",
          "Legal operations and Legal Tech implementation"
        ]
      },
      {
        "@type": "Person",
        "name": "Marc Schuba",
        "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)",
        "url": "https://compound.law/en-DE/lawyers/marc-schuba/",
        "sameAs": [
          "https://www.linkedin.com/in/marcschuba/"
        ],
        "knowsAbout": [
          "IP and IT law",
          "SaaS and IT contracts, IT outsourcing",
          "Software and open-source licensing",
          "Data protection law (GDPR)",
          "AI law and the EU AI Act"
        ]
      },
      {
        "@type": "Person",
        "name": "Dr. Markus Dreißigacker",
        "jobTitle": "Rechtsanwalt",
        "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/",
        "sameAs": [
          "https://www.linkedin.com/in/markusdreissigacker"
        ],
        "knowsAbout": [
          "M&A (Due diligence, post-merger integration, IPO readiness)",
          "Corporate Law (Governance, board work, restructuring)",
          "Commercial Law (Customer contracts, supplier agreements, NDAs)",
          "IP (Trademark management, IP transfer agreements)",
          "Compliance & ESG (Global compliance programs, human rights, sustainability)",
          "Data Protection (GDPR strategy, DPO experience, privacy programs)"
        ]
      },
      {
        "@type": "Person",
        "name": "Philipp Brandt",
        "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law",
        "url": "https://compound.law/en-DE/lawyers/philipp-brandt/",
        "sameAs": [
          "https://www.linkedin.com/in/philipp-brandt-81b446a/"
        ],
        "knowsAbout": [
          "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)",
          "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)",
          "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)",
          "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)"
        ]
      }
    ],
    "address": {
      "@type": "PostalAddress",
      "addressLocality": "Berlin",
      "addressCountry": "DE"
    },
    "areaServed": [
      "Germany",
      "Austria",
      "Switzerland",
      "European Union",
      "United Kingdom",
      "United States",
      "Singapore"
    ],
    "availableLanguage": [
      "de",
      "en"
    ],
    "serviceType": [
      "AI law firm",
      "AI-native legal services",
      "legal counsel for start-ups and growth companies",
      "legal counsel for mid-sized companies and corporates",
      "Commercial Law",
      "Corporate Law",
      "Employment Law",
      "Regulatory & Compliance",
      "Intellectual Property",
      "Insolvency & Restructuring"
    ],
    "hasOfferCatalog": {
      "@type": "OfferCatalog",
      "name": "Compound Law services",
      "itemListElement": [
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Commercial Contracts",
            "description": "Battle-tested contracts for your sales process",
            "serviceType": [
              "enterprise contracts",
              "MSA",
              "DPA",
              "sales contracts"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "International Employment",
            "description": "Compliant hiring across borders",
            "serviceType": [
              "international employment",
              "hiring abroad",
              "employment contracts"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "VSOP/ESOP Setup",
            "description": "Employee participation that actually works",
            "serviceType": [
              "VSOP",
              "ESOP",
              "employee stock options",
              "equity incentives"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Funding Round Support",
            "description": "Clean legal for your next raise",
            "serviceType": [
              "funding round",
              "term sheet",
              "SHA",
              "due diligence",
              "cap table"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Corporate Housekeeping",
            "description": "Get your legal house in order",
            "serviceType": [
              "corporate governance",
              "board resolutions",
              "shareholder register"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Data Protection & Privacy",
            "description": "GDPR compliance that doesn't slow you down",
            "serviceType": [
              "GDPR",
              "data protection",
              "privacy",
              "DPA",
              "cookies",
              "data breach response",
              "GDPR fines",
              "Art. 82 GDPR"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "AI Act Compliance",
            "description": "Navigate EU AI regulation",
            "serviceType": [
              "AI Act",
              "AI compliance",
              "AI governance",
              "EU AI regulation"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "IP & Competition",
            "description": "Protect and enforce what you've built",
            "serviceType": [
              "IP protection",
              "intellectual property",
              "trademarks",
              "trademark enforcement",
              "warning letters",
              "preliminary injunctions",
              "unfair competition",
              "software licensing",
              "open source compliance"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Fractional General Counsel",
            "description": "In-house legal without the full-time cost",
            "serviceType": [
              "fractional GC",
              "fractional general counsel",
              "outsourced legal",
              "legal retainer"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "FinTech Compliance",
            "description": "Navigate financial regulation",
            "serviceType": [
              "fintech compliance",
              "BaFin",
              "banking regulation",
              "AML",
              "KYC"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Legal Retainer",
            "description": "Predictable legal support when you need it",
            "serviceType": [
              "legal retainer",
              "legal subscription",
              "ongoing legal support"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "M&A Preparation",
            "description": "Get ready for acquisition interest",
            "serviceType": [
              "M&A preparation",
              "acquisition",
              "due diligence",
              "exit"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        },
        {
          "@type": "Offer",
          "itemOffered": {
            "@type": "Service",
            "name": "Restructuring & Insolvency",
            "description": "From the first liquidity check to the restructuring itself",
            "serviceType": [
              "restructuring",
              "insolvency",
              "StaRUG",
              "self-administration",
              "insolvency plan",
              "director liability"
            ],
            "areaServed": [
              "Germany",
              "European Union",
              "United Kingdom",
              "United States",
              "Singapore"
            ]
          }
        }
      ]
    },
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "sales",
      "email": "contact@compound.law",
      "availableLanguage": [
        "English",
        "German"
      ],
      "areaServed": [
        "DE",
        "AT",
        "CH",
        "EU",
        "GB",
        "US",
        "SG"
      ]
    },
    "email": "contact@compound.law",
    "sameAs": [
      "https://www.linkedin.com/company/compoundlawfirm",
      "https://x.com/CompoundLawFirm"
    ],
    "knowsAbout": [
      "Commercial Contracts",
      "enterprise contracts",
      "MSA",
      "DPA",
      "sales contracts",
      "International Employment",
      "international employment",
      "hiring abroad",
      "employment contracts",
      "VSOP/ESOP Setup",
      "VSOP",
      "ESOP",
      "employee stock options",
      "equity incentives",
      "Funding Round Support",
      "funding round",
      "term sheet",
      "SHA",
      "due diligence",
      "cap table",
      "Corporate Housekeeping",
      "corporate governance",
      "board resolutions",
      "shareholder register",
      "Data Protection & Privacy",
      "GDPR",
      "data protection",
      "privacy",
      "cookies",
      "data breach response",
      "GDPR fines",
      "Art. 82 GDPR",
      "AI Act Compliance",
      "AI Act",
      "AI compliance",
      "AI governance",
      "EU AI regulation",
      "IP & Competition",
      "IP protection",
      "intellectual property",
      "trademarks",
      "trademark enforcement",
      "warning letters",
      "preliminary injunctions",
      "unfair competition",
      "software licensing",
      "open source compliance",
      "Fractional General Counsel",
      "fractional GC",
      "fractional general counsel",
      "outsourced legal",
      "legal retainer",
      "FinTech Compliance",
      "fintech compliance",
      "BaFin",
      "banking regulation",
      "AML",
      "KYC",
      "Legal Retainer",
      "legal subscription",
      "ongoing legal support",
      "M&A Preparation",
      "M&A preparation",
      "acquisition",
      "exit",
      "Restructuring & Insolvency",
      "restructuring",
      "insolvency",
      "StaRUG",
      "self-administration",
      "insolvency plan",
      "director liability"
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Home",
        "item": "https://compound.law/en-DE/"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "AI Tools",
        "item": "https://compound.law/en-DE/tools/"
      }
    ]
  }
]
```