Aleph Alpha vs. Grok: data protection per plan
Aleph Alpha (1 plan) and Grok (6 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Aleph Alpha | Grok |
|---|---|---|
| Provider based in | Speyerer Straße 14, 69115 Heidelberg, Germany | SpaceXAI LLC, 1450 Page Mill Rd, Palo Alto, CA 94304, USA |
| Plans recorded | 1 | 6 |
| Hosting | EU option: PhariaAI | US only: Free, Plus / Premium / Super / Ultramixed: Grok Teams, Grok Enterprise, API, API with Zero Data Retention |
| Training on inputs | not documented: PhariaAI | opt-out available: Free, Plus / Premium / Super / Ultrano: Grok Teams, Grok Enterprise, API, API with Zero Data Retention |
| DPA | not documented: PhariaAI | no: Free, Plus / Premium / Super / Ultrayes: Grok Teams, Grok Enterprise, API, API with Zero Data Retention |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Aleph Alpha PhariaAI vs. Grok Grok Enterprise
| Feature | Aleph AlphaPhariaAI (licence/contract, no public plan) | GrokGrok Enterprise |
|---|---|---|
| differs by plan | not publicly documented | yes |
| Details: DPA available | not publicly documented (no public DPA text; the privacy notices cover only the website, no product/customer contract; when retrieved on 2026-10-18 the documentation link "Data privacy" leads to the website privacy notices, and the support portal is accessible only after logging in) | yes: Data Processing Addendum (effective 2026-09-22) is part of the Enterprise terms for business services; the DPA provides for the processing of personal data only via the ZDR API. Provider’s DPA |
| differs by plan | not publicly documented | no |
| Details: Training on inputs | not publicly documented: The privacy notices apply to the website aleph-alpha.com. Regarding customer data in PhariaAI operation, there is no statement on training on the platform, documentation or press release pages. The platform page states: "You retain full control over your data and processes." (translated) (no statement on training). Kolibri training data: according to the press release of 2026-10-05, checked against a blocklist of more than 4.5 million URLs; this concerns the origin of the model training data, not customer data. Technical Report on Kolibri (q13): "we redact PII from all training sources" (likewise concerns model training data, not customer data). | Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide: team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service'. Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train. |
| differs by plan | EU option | mixed |
| Details: Data residency | Platform page: "Available on-premise, air-gapped or in a sovereign SaaS solution" (translated); models are provided "in sovereign cloud, hybrid and on-premises environments" (translated). Press release 2025-05-26: PhariaAI-as-a-Service on STACKIT (Schwarz Group), "hosted entirely on European infrastructure". PhariaAI launch 2024-08-26: "available as SAAS solutions or on-premise in the customers' own datacenter"; hybrid execution (on-prem + cloud) possible. Specific data centre locations per operating model, and whether any operating mode runs exclusively in Germany: not publicly documented. Note: when retrieved on 2026-10-14, the model page (q9) contains the statement "Ownership, development and supply chain lie entirely in Germany and the EU" (translated) and "Confidential data always remains with the customer" (translated) (no information on data centre locations); the previously recorded wording "No foreign jurisdiction has access" (translated) is no longer contained there. Release notes PhariaAI v1.260900.0 (2026-09-03, q14): "Availability: On-premise and hosted". Technical Report (q13) on model training (not on customer operation): "train it on infrastructure in Germany and Finland". | The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. Pricing page (Enterprise): 'Data residency: Control where your data lives' without a region specified; EU region not documented. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | not publicly documented | Enterprise terms: User Content is deleted… |
| Details: Data retention | not publicly documentedfor SaaS operation. For self-hosted operation, according to the Shared Responsibility Model (q12): the customer is responsible for protecting data "at rest and residing outside the core PhariaAI application", backups and log management. Aleph Alpha is responsible for encrypting data in transit within the core application. Aleph Alpha does not state a retention period. | Enterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: 'Custom Chat data retention'. Business guide: Enterprise with custom retention rules. |
| differs by plan | not publicly documented | custom |
| Details: Price | not publicly documented (no public plan; contact via "Contact sales" (translated)) | Custom (pricing page: 'Custom', contact sales; payment by invoice/bank transfer only in the Enterprise plan) |
| yes | yes | |
| Details: AI features included | yes (PhariaAI stack according to the documentation: PhariaAssistant, PhariaStudio, PhariaOS, PhariaCatch; models including Kolibri, available since 2026-10-03) | yes (as Teams; additionally, according to the pricing page, SCIM, audit logs and service accounts, spend controls, group settings, purchase on invoice, custom rate limits, dedicated infrastructure, 'Data residency', among others) |
| 10 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by plan
- Aleph Alpha PhariaAInot publicly documented
- Grok Grok Enterpriseyes
- Aleph Alpha PhariaAI
not publicly documented (no public DPA text; the privacy notices cover only the website, no product/customer contract; when retrieved on 2026-10-18 the documentation link "Data privacy" leads to the website privacy notices, and the support portal is accessible only after logging in)
Grok Grok Enterpriseyes: Data Processing Addendum (effective 2026-09-22) is part of the Enterprise terms for business services; the DPA provides for the processing of personal data only via the ZDR API.
Provider’s DPA
Training
- differs by plan
- Aleph Alpha PhariaAInot publicly documented
- Grok Grok Enterpriseno
- Aleph Alpha PhariaAI
not publicly documented: The privacy notices apply to the website aleph-alpha.com. Regarding customer data in PhariaAI operation, there is no statement on training on the platform, documentation or press release pages. The platform page states: "You retain full control over your data and processes." (translated) (no statement on training). Kolibri training data: according to the press release of 2026-10-05, checked against a blocklist of more than 4.5 million URLs; this concerns the origin of the model training data, not customer data. Technical Report on Kolibri (q13): "we redact PII from all training sources" (likewise concerns model training data, not customer data).
Grok Grok EnterpriseEnterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide: team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service'. Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.
Hosting
- differs by plan
- Aleph Alpha PhariaAIEU option
- Grok Grok Enterprisemixed
- Aleph Alpha PhariaAI
Platform page: "Available on-premise, air-gapped or in a sovereign SaaS solution" (translated); models are provided "in sovereign cloud, hybrid and on-premises environments" (translated). Press release 2025-05-26: PhariaAI-as-a-Service on STACKIT (Schwarz Group), "hosted entirely on European infrastructure". PhariaAI launch 2024-08-26: "available as SAAS solutions or on-premise in the customers' own datacenter"; hybrid execution (on-prem + cloud) possible. Specific data centre locations per operating model, and whether any operating mode runs exclusively in Germany: not publicly documented. Note: when retrieved on 2026-10-14, the model page (q9) contains the statement "Ownership, development and supply chain lie entirely in Germany and the EU" (translated) and "Confidential data always remains with the customer" (translated) (no information on data centre locations); the previously recorded wording "No foreign jurisdiction has access" (translated) is no longer contained there. Release notes PhariaAI v1.260900.0 (2026-09-03, q14): "Availability: On-premise and hosted". Technical Report (q13) on model training (not on customer operation): "train it on infrastructure in Germany and Finland".
Grok Grok EnterpriseThe privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. Pricing page (Enterprise): 'Data residency: Control where your data lives' without a region specified; EU region not documented.
Sub-processors
- Aleph Alpha PhariaAIlist available
- Grok Grok Enterpriselist available
- Aleph Alpha PhariaAI
- not publicly documented (no list published). Named as infrastructure partner for PhariaAI-as-a-Service: STACKIT (Schwarz Group), press release 2025-05-26.
Grok Grok Enterprise- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
Retention
- differs by plan
- Aleph Alpha PhariaAInot publicly documented
- Grok Grok EnterpriseEnterprise terms: User Content is deleted…
- Aleph Alpha PhariaAInot publicly documentedfor SaaS operation. For self-hosted operation, according to the Shared Responsibility Model (q12): the customer is responsible for protecting data "at rest and residing outside the core PhariaAI application", backups and log management. Aleph Alpha is responsible for encrypting data in transit within the core application. Aleph Alpha does not state a retention period.Grok Grok EnterpriseEnterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: 'Custom Chat data retention'. Business guide: Enterprise with custom retention rules.
Price
- differs by plan
- Aleph Alpha PhariaAInot publicly documented
- Grok Grok Enterprisecustom
- Aleph Alpha PhariaAI
not publicly documented (no public plan; contact via "Contact sales" (translated))
Grok Grok EnterpriseCustom (pricing page: 'Custom', contact sales; payment by invoice/bank transfer only in the Enterprise plan)
- Aleph Alpha PhariaAIyes
- Grok Grok Enterpriseyes
- Aleph Alpha PhariaAI
yes (PhariaAI stack according to the documentation: PhariaAssistant, PhariaStudio, PhariaOS, PhariaCatch; models including Kolibri, available since 2026-10-03)
Grok Grok Enterpriseyes (as Teams; additionally, according to the pricing page, SCIM, audit logs and service accounts, spend controls, group settings, purchase on invoice, custom rate limits, dedicated infrastructure, 'Data residency', among others)
Evidence
- Aleph Alpha PhariaAI10 sources
- Grok Grok Enterprise6 sources
- Aleph Alpha PhariaAI
- Privacy notice aleph-alpha.com (website) (German)Privacy notice, retrieved 18 Oct 2026
- Platform (Aleph Alpha)Product page, retrieved 18 Oct 2026
- Press release: Aleph Alpha launches PhariaAI (2024-08-26)Press release, retrieved 7 Oct 2026
- Press release: Partnership with STACKIT, PhariaAI-as-a-Service (2025-05-26)Press release, retrieved 7 Oct 2026
- Press release: Aleph Alpha releases Kolibri (2026-10-05) (German)Press release, retrieved 7 Oct 2026
- Model overview (Aleph Alpha)Product page, retrieved 18 Oct 2026
- PhariaAI documentation (HOME)Documentation, retrieved 18 Oct 2026
- PhariaAI Installation Guide: Shared responsibility modelDocumentation, retrieved 14 Oct 2026
- Technical Report: Kolibri: A Sovereign European Model on the Pareto Frontier (PDF, 2026-10)Technical report, retrieved 18 Oct 2026
- PhariaAI Release Notes v1.260900.0 (2026-09-03)Documentation, retrieved 18 Oct 2026
Grok Grok Enterprise- Grok Business / Enterprise User GuideDocumentation, retrieved 18 Oct 2026
- Pricing: Compare PlansPricing page, retrieved 18 Oct 2026
- Terms of Service - Enterprise (Last Updated 2026-08-14)Terms and conditions, retrieved 18 Oct 2026
- SpaceXSI Data Processing Addendum (effective 2026-09-22)DPA, retrieved 14 Oct 2026
- SpaceXSI Subprocessor ListSub-processor list, retrieved 14 Oct 2026
- FAQ - EnterpriseDocumentation, retrieved 18 Oct 2026
| Feature | Aleph Alpha | Grok |
|---|---|---|
| differs by tool | not publicly documentedonly plan |
|
| Details: DPA available |
|
|
| differs by tool | not publicly documentedonly plan |
|
| Details: Training on inputs |
|
|
| differs by tool | EU optiononly plan |
|
| Details: Data residency |
|
|
| list availableonly plan | list availableall 6 plans | |
| Details: List published |
|
|
| differs by tool | not publicly documentedonly plan |
|
| Details: Data retention |
|
|
| differs by tool | not publicly documentedonly plan |
|
| Details: Price |
|
|
| yesonly plan | yesall 6 plans | |
| Details: AI features included |
|
|
| 10 sources | 13 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- Aleph Alphanot publicly documentedonly plan
- Grok
- noFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- yesGrok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise, API (usage-based, global endpoint), API with Zero Data Retention (team setting)
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)
not publicly documented (no public DPA text; the privacy notices cover only the website, no product/customer contract; when retrieved on 2026-10-18 the documentation link "Data privacy" leads to the website privacy notices, and the support portal is accessible only after logging in)
Grok- Free (consumer: grok.com, apps, X)
no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)
- Grok Teams (grok.com; documentation: 'Grok Business')
yes: Enterprise FAQ: 'if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service'; the Grok Business guide refers, for team workspaces, to the 'Terms of Service - Enterprise', which according to their preamble also apply to purchases by 'online purchase confirmation'. The DPA (effective 2026-09-22) provides for the processing of personal data only via the ZDR API.
Provider’s DPA - Grok Enterprise
yes: Data Processing Addendum (effective 2026-09-22) is part of the Enterprise terms for business services; the DPA provides for the processing of personal data only via the ZDR API.
Provider’s DPA - API (usage-based, global endpoint)
yes: Data Processing Addendum (effective 2026-09-22) is part of the 'Terms of Service - Enterprise', which according to a notice apply to business customers of the API and other business services; SCCs Module Two/Three. The DPA requires personal data to be processed only via the ZDR API; no personal data is to be transmitted to non-ZDR services.
Provider’s DPA - API with Zero Data Retention (team setting)
yes: Data Processing Addendum (effective 2026-09-22) as part of the Enterprise terms; the DPA expressly provides for the processing of personal data only via the ZDR API. SCCs Module Two/Three (Irish law).
Provider’s DPA
- PhariaAI (licence/contract, no public plan)
Training
- differs by tool
- Aleph Alphanot publicly documentedonly plan
- Grok
- opt-out availableFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- noGrok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise, API (usage-based, global endpoint), API with Zero Data Retention (team setting)
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)
not publicly documented: The privacy notices apply to the website aleph-alpha.com. Regarding customer data in PhariaAI operation, there is no statement on training on the platform, documentation or press release pages. The platform page states: "You retain full control over your data and processes." (translated) (no statement on training). Kolibri training data: according to the press release of 2026-10-05, checked against a blocklist of more than 4.5 million URLs; this concerns the origin of the model training data, not customer data. Technical Report on Kolibri (q13): "we redact PII from all training sources" (likewise concerns model training data, not customer data).
Grok- Free (consumer: grok.com, apps, X)
Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.
- Grok Teams (grok.com; documentation: 'Grok Business')
Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide (as of 2026-10-10): team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service' (link to the Enterprise terms). Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.
- Grok Enterprise
Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide: team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service'. Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.
- API (usage-based, global endpoint)
API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'. Except with ZDR, SpaceXSI may use de-identified or aggregated data for any lawful purposes.
- API with Zero Data Retention (team setting)
API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms: no training on User Content; with ZDR also no creation of de-identified data. With ZDR the 30-day storage does not apply; inputs and outputs are not written to disk. The documentation points out that ZDR is not recommended for most customers.
- PhariaAI (licence/contract, no public plan)
Hosting
- differs by tool
- Aleph AlphaEU optiononly plan
- Grok
- US onlyFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- mixedGrok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise, API (usage-based, global endpoint), API with Zero Data Retention (team setting)
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)
Platform page: "Available on-premise, air-gapped or in a sovereign SaaS solution" (translated); models are provided "in sovereign cloud, hybrid and on-premises environments" (translated). Press release 2025-05-26: PhariaAI-as-a-Service on STACKIT (Schwarz Group), "hosted entirely on European infrastructure". PhariaAI launch 2024-08-26: "available as SAAS solutions or on-premise in the customers' own datacenter"; hybrid execution (on-prem + cloud) possible. Specific data centre locations per operating model, and whether any operating mode runs exclusively in Germany: not publicly documented. Note: when retrieved on 2026-10-14, the model page (q9) contains the statement "Ownership, development and supply chain lie entirely in Germany and the EU" (translated) and "Confidential data always remains with the customer" (translated) (no information on data centre locations); the previously recorded wording "No foreign jurisdiction has access" (translated) is no longer contained there. Release notes PhariaAI v1.260900.0 (2026-09-03, q14): "Availability: On-premise and hosted". Technical Report (q13) on model training (not on customer operation): "train it on infrastructure in Germany and Finland".
Grok- Free (consumer: grok.com, apps, X)
Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'
- Grok Teams (grok.com; documentation: 'Grok Business')
The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. The pricing page mentions data residency only in the Enterprise section; EU region not documented.
- Grok Enterprise
The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. Pricing page (Enterprise): 'Data residency: Control where your data lives' without a region specified; EU region not documented.
- API (usage-based, global endpoint)
Regions documentation (q3): the standard endpoint api.x.ai does not guarantee a processing region; requests may be routed between regions. Optional US endpoint us.api.x.ai: request handling, inference, moderation and stored request data in the USA (only grok-4.7 and grok-4.6, without image, video and voice APIs; Files, Collections and server-side tools may be processed outside the USA; token prices +10 %). DPA (q10): processing 'on a global basis outside Europe', including in the USA. Sub-processors in the US, one subsidiary in the UK. An EU region is not documented.
- API with Zero Data Retention (team setting)
As API: global endpoint without a region guarantee, US endpoint optional (ZDR also applies there). No EU region documented.
- PhariaAI (licence/contract, no public plan)
Sub-processors
- Aleph Alphalist availableonly plan
- Groklist availableall 6 plans
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)
- not publicly documented (no list published). Named as infrastructure partner for PhariaAI-as-a-Service: STACKIT (Schwarz Group), press release 2025-05-26.
Grok- Free (consumer: grok.com, apps, X)
- Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe
- Grok Teams (grok.com; documentation: 'Grok Business')
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- Grok Enterprise
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- API (usage-based, global endpoint)
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- API with Zero Data Retention (team setting)
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- PhariaAI (licence/contract, no public plan)
Retention
- differs by tool
- Aleph Alphanot publicly documentedonly plan
- Grok
- Privacy policyFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- Enterprise terms: User Content is deleted…Grok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise
- Security FAQ: requests and responses are…API (usage-based, global endpoint)
- No storage of prompts and outputsAPI with Zero Data Retention (team setting)
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)not publicly documentedfor SaaS operation. For self-hosted operation, according to the Shared Responsibility Model (q12): the customer is responsible for protecting data "at rest and residing outside the core PhariaAI application", backups and log management. Aleph Alpha is responsible for encrypting data in transit within the core application. Aleph Alpha does not state a retention period.
Grok- Free (consumer: grok.com, apps, X)Privacy policy (as of 2026-10-11): retention for as long as a legitimate business interest exists; with Private Chat, conversations are deleted within 30 days; deleted conversations or deleted accounts are deleted within 30 days, except for legal, compliance or security reasons. Consumer FAQ: deleted chats and files are removed 'within standard retention windows'; account recoverable within 30 days.
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)Privacy policy (as of 2026-10-11): retention for as long as a legitimate business interest exists; with Private Chat, conversations are deleted within 30 days; deleted conversations or deleted accounts are deleted within 30 days, except for legal, compliance or security reasons. Consumer FAQ: deleted chats and files are removed 'within standard retention windows'; account recoverable within 30 days.
- Grok Teams (grok.com; documentation: 'Grok Business')Enterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: Teams with 'Custom Chat data retention'.
- Grok EnterpriseEnterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: 'Custom Chat data retention'. Business guide: Enterprise with custom retention rules.
- API (usage-based, global endpoint)Security FAQ: requests and responses are stored encrypted for 30 days (audit/abuse review) and then automatically deleted; Files and Collections remain until deleted. Enterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise agreed, required by law or necessary for security/compliance reasons. DPA Annex 2: following a deletion request, deletion typically within 30 days.
- API with Zero Data Retention (team setting)No storage of prompts and outputs (ZDR, team-wide); according to the documentation, activation by team admins themselves in the console, where available; with an Enterprise contract, the contract governs retention. When activating, the Enterprise terms and the privacy policy must be accepted. Enterprise terms: with ZDR, User Content exists 'only transiently' to generate the response and is deleted afterwards; DPA: with the ZDR API, only the customer retains personal data.
Price
- differs by tool
- Aleph Alphanot publicly documentedonly plan
- Grok
- 0 USDFree (consumer: grok.com, apps, X)
- several tiersPlus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- from 30 USD/user/moGrok Teams (grok.com; documentation: 'Grok Business')
- customGrok Enterprise
- per tokenAPI (usage-based, global endpoint)
- As APIAPI with Zero Data Retention (team setting)
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)
not publicly documented (no public plan; contact via "Contact sales" (translated))
Grok- Free (consumer: grok.com, apps, X)
0 USD (pricing page)
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
Plus 8 USD; Premium 30 USD; Super 100 USD; Ultra 200 USD per month, each excl. taxes; subscriptions are sold via X Subscription Corp. and include X features (pricing page). The Consumer FAQ still names 'SuperGrok' and 'SuperGrok Heavy'.
- Grok Teams (grok.com; documentation: 'Grok Business')
from 30 USD per user per month ('$30+/user/month'; seat types combinable), excl. taxes (pricing page)
- Grok Enterprise
Custom (pricing page: 'Custom', contact sales; payment by invoice/bank transfer only in the Enterprise plan)
- API (usage-based, global endpoint)
Per 1M tokens, in USD, below / from 200k prompt tokens (pricing page): grok-4.7 and grok-4.6 input 2.00 USD / 4.00 USD, cache 0.50 USD / 1.00 USD, output 6.00 USD / 12.00 USD; grok-4.5 input 2.00 USD / 4.00 USD, cache 0.30 USD / 0.60 USD, output 6.00 USD / 12.00 USD; grok-4.3 and grok-4.20 variants input 1.25 USD / 2.50 USD, cache 0.20 USD / 0.40 USD, output 2.50 USD / 5.00 USD; grok-build-0.1 input 1.00 USD / 2.00 USD, cache 0.20 USD / 0.40 USD, output 2.00 USD / 4.00 USD. Tools: web search, code execution, file search 5 USD per 1,000 calls each; X search 5 USD per 1,000 posts or 10 USD per 1,000 profiles; Collections search 2.50 USD per 1,000 calls. US endpoint 10 % surcharge.
- API with Zero Data Retention (team setting)
As API (ZDR surcharge not stated in the documentation)
- PhariaAI (licence/contract, no public plan)
- Aleph Alphayesonly plan
- Grokyesall 6 plans
- Aleph Alpha
- PhariaAI (licence/contract, no public plan)
yes (PhariaAI stack according to the documentation: PhariaAssistant, PhariaStudio, PhariaOS, PhariaCatch; models including Kolibri, available since 2026-10-03)
Grok- Free (consumer: grok.com, apps, X)
yes (limited chat, agent, image and Build usage according to the pricing page)
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
yes (from Plus: Grok Chat, Voice, Imagine, Build, API access and Cursor; from Premium: Grok Bot, latest models, video and image generation, 4x usage compared with Plus; Super/Ultra with 15x and 50x usage respectively compared with Plus)
- Grok Teams (grok.com; documentation: 'Grok Business')
yes (according to the Teams comparison table: Grok Chat, Imagine, video generation, Build, API access, Grok Bot, Cursor agent, pooled usage, team management, central billing, team-wide privacy settings, custom chat retention, SAML/OIDC SSO, combinable seat types; self-service by card. Business guide: connectors to Google Drive, Outlook, SharePoint, Teams, Salesforce, among others)
- Grok Enterprise
yes (as Teams; additionally, according to the pricing page, SCIM, audit logs and service accounts, spend controls, group settings, purchase on invoice, custom rate limits, dedicated infrastructure, 'Data residency', among others)
- API (usage-based, global endpoint)
yes (models grok-4.7, grok-4.6, grok-4.5, grok-4.3, grok-4.20, grok-build-0.1; tools such as web and X search, code execution; image, video and voice APIs)
- API with Zero Data Retention (team setting)
yes (as API; without functions that require storage: Files, Collections, Batch API, stateful Responses API, among others)
- PhariaAI (licence/contract, no public plan)
Evidence
- Aleph Alpha10 sources
- Grok13 sources
- Aleph Alpha
- Privacy notice aleph-alpha.com (website) (German)Privacy notice, retrieved 18 Oct 2026
- Platform (Aleph Alpha)Product page, retrieved 18 Oct 2026
- Press release: Aleph Alpha launches PhariaAI (2024-08-26)Press release, retrieved 7 Oct 2026
- Press release: Partnership with STACKIT, PhariaAI-as-a-Service (2025-05-26)Press release, retrieved 7 Oct 2026
- Press release: Aleph Alpha releases Kolibri (2026-10-05) (German)Press release, retrieved 7 Oct 2026
- Model overview (Aleph Alpha)Product page, retrieved 18 Oct 2026
- PhariaAI documentation (HOME)Documentation, retrieved 18 Oct 2026
- PhariaAI Installation Guide: Shared responsibility modelDocumentation, retrieved 14 Oct 2026
- Technical Report: Kolibri: A Sovereign European Model on the Pareto Frontier (PDF, 2026-10)Technical report, retrieved 18 Oct 2026
- PhariaAI Release Notes v1.260900.0 (2026-09-03)Documentation, retrieved 18 Oct 2026
Grok- Pricing (developer documentation)Pricing page, retrieved 14 Oct 2026
- FAQ: SecurityDocumentation, retrieved 14 Oct 2026
- Regional EndpointsDocumentation, retrieved 18 Oct 2026
- FAQ: Grok Website / AppsDocumentation, retrieved 18 Oct 2026
- Grok Business / Enterprise User GuideDocumentation, retrieved 18 Oct 2026
- Pricing: Compare PlansPricing page, retrieved 18 Oct 2026
- SpaceXSI Privacy Policy (Last Updated 2026-10-11)Privacy notice, retrieved 18 Oct 2026
- Europe Privacy Policy Addendum (effective 2026-08-24)Privacy notice, retrieved 18 Oct 2026
- Terms of Service - Enterprise (Last Updated 2026-08-14)Terms and conditions, retrieved 18 Oct 2026
- SpaceXSI Data Processing Addendum (effective 2026-09-22)DPA, retrieved 14 Oct 2026
- SpaceXSI Subprocessor ListSub-processor list, retrieved 14 Oct 2026
- Public Summary of Training Content for Grok 4.7 (V1, 2026-09-21)Documentation, retrieved 14 Oct 2026
- FAQ - EnterpriseDocumentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Aleph Alpha compared with
Individual pages: Aleph Alpha, Grok. All tools in the category: AI assistants & search.