Register · as of 18 Oct 2026

What AI tools do with your data. Documented per plan.

DPAs, training on inputs, hosting and sub-processors, as the providers document them. Every statement with source and retrieval date, without rating.

See all 78 tools Compare tools side by side

Et

Example tool

AI assistant · 3 plans

Sample view
FreeProTeam
HostingUS onlyEU optionEU option
Training on inputsopt-outnono
DPAnot documentedyesyes
Sub-processorsnot documentedListList
6 sourcesAs of 7 Oct 2026
Example data, not a real entry.

Scope of the register

Tools in the register
78
Plans recorded individually
290
Sources with retrieval date
899
Categories
7

Calculated from the dataset behind this site, as of 18 Oct 2026.

Categories

What are you looking for?

All tools

Recently checked

The entries whose sources we retrieved most recently. The date is the entry’s review date.

All categories

Directory: all 78 tools and 446 comparisons

  1. Adobe FireflyImage & design
  2. Aleph AlphaAI assistants & search
  3. Amazon Q DeveloperSoftware development
  4. Asana AIOffice & collaboration
  5. Atlassian RovoOffice & collaboration
  6. Bolt.newSoftware development
  7. Canva AIImage & design
  8. ChatGPTAI assistants & search
  9. ClaudeAI assistants & search
  10. ClickUp BrainOffice & collaboration
  11. CohereBusiness software
  12. Copy.aiWriting & translation

Per plan, not per product

Free, Team and Enterprise are often three different answers

Whether a DPA is offered, whether inputs are used for training and where processing takes place often depends on the plan. That is why every plan has its own entry in the register. On the right are three entries from the register; below, the distribution across all 290 recorded plans: counted, not rated.

Hosting / data processing
  • EU option85
  • mixed94
  • US only71
  • not publicly documented40
Training on inputs
  • no162
  • opt-out available90
  • yes19
  • not publicly documented19
DPA available
  • yes199
  • not publicly documented91

Hatched = not publicly documented. This does not mean “no”; it means it could not be verified in any provider source.

Examples from the register: the same product, three plans, different statements on hosting, training and DPAs
FreeTeam / BusinessEnterprise
ChatGPTBusiness
Hostingmixednot documented (different from the previous plan)EU option (different from the previous plan)
Training on inputsopt-outno (different from the previous plan)no
DPAnot documentedyes (different from the previous plan)yes
ClaudeTeam
Hostingmixednot documented (different from the previous plan)not documented
Training on inputsopt-outno (different from the previous plan)no
DPAnot documentedyes (different from the previous plan)yes
Google GeminiGemini app consumer FreeGemini in Google WorkspaceGemini in Google Workspace
Hostingmixednot documented (different from the previous plan)EU option (different from the previous plan)
Training on inputsopt-outno (different from the previous plan)no
DPAnot documentedyes (different from the previous plan)yes

different answer from the plan on the left

46 / 69tools with several plans give a different answer for at least one plan.

Hosting
25 of 69 tools differ between plans
Training on inputs
34 of 69 tools differ between plans
DPA
28 of 69 tools differ between plans
Hand with a fountain pen signing a contract

DPA · “Team” plan

yes

Source: provider’s DPA

Illustrative example

Every statement with a source

Check it rather than take it on trust

Behind every cell of the plan table is a link to the provider’s document and the date on which we retrieved it. You can check each statement yourself and use it for your own documentation.

  • Primary sources: DPAs, terms of use, sub-processor lists
  • Retrieval date per source, review date per entry
  • Open points are listed visibly on every page
Bright server room with racks and cable trays

Hosting per plan

EU optionmixednot documented

Where your data is stored

Hosting, third countries, sub-processors

For a data protection review, what matters is where processing takes place and who else is involved. The register lists hosting options, third-country transfers and sub-processors per plan, with a link to the provider’s list.

Filter plans with an EU option

How we check

From the primary source to the entry and back

Four recurring steps. Providers cannot buy the content or the order of an entry.

Read the full methodology

  1. Primary source

    DPA, terms of use, sub-processor list, trust centre: the provider’s own documents, no blogs.

    In the register

    DPATerms of useSub-processor listTrust centre

  2. Retrieval date

    Every source carries the date on which we read it, so later changes can be identified.

    In the register

    latest retrieval 19 Oct 2026

  3. Entry per plan

    Free, Team, Enterprise separately. Anything that could not be verified is shown as “not publicly documented”.

    In the register

    290 plans recorded individually. 150 statements on hosting, training and DPAs are not publicly documented

  4. Correction

    Providers and readers report errors with a reference. We check against the source and update the date.

    In the register

    Reference Check against the source New review date

After every correction, the review starts again at the primary source.

Team discussing something together at a laptop in an office

Who it is for

For everyone deciding on AI tools in their organisation

  • Data protection

    DPAs, third countries and sub-processors per plan, with the exact reference.

  • IT management

    Hosting options and plan differences before the licensing decision.

  • Management

    A quick, documented overview instead of marketing pages.

Questions and answers

Good to know

More about the process in the methodology.

Do you rate the tools?

No. There are no scores, traffic lights or recommendations. The register shows what providers state in their public documents, per plan and with a source. The decision is yours.

What does “not publicly documented” mean?

We could not verify the statement in any provider source, for example because the contract is only available on request. It does not mean “no”, nor does it mean that the matter is unproblematic.

How up to date is the information?

Every entry shows its review date and every source its retrieval date. Providers sometimes change their terms without notice. The provider’s current documents always take precedence.

I am a provider and have spotted an error. What should I do?

Report the entry, the plan, the correct information and the reference via the correction form. We check it against the source and update the entry if the correction is justified.

Does the register replace a data protection review?

No. It saves research time but replaces neither your own review nor legal advice. The AI Act notes on the detail pages are marked “for review”.

Are you a provider, or have you found an error?

Tell us the entry, the plan and the reference. We check it against the source and update the review date.

Report a correction Go to the register