Amazon Q Developer vs. STACKIT AI: data protection per plan

yes (AWS Service Terms, section 1.14.1: 'These Service Terms incorporate the AWS Data Processing Addendum ("DPA"), when you use AWS Services to process Customer Data'; no exception for the Free Tier is stated there; section 50.13 additionally governs the use of Free Tier content for service improvement)

yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically)

yes (data processing agreement STACKIT Cloud Services, version 2.4.2, under Art. 28 GDPR; applies to all STACKIT Cloud Services booked under the terms of use, no product-specific annex for AI Model Serving)

FAQ and documentation 'Amazon Q Developer service improvement': in the Free Tier, content (questions, responses, generated code) may be used for service improvement, according to the documentation including 'for model training'. Service Terms 50.13: Amazon Q Content may be used to improve Amazon Q and, for that purpose, stored outside the AWS Region in use; content that does not contain personal data may also be used to train other AWS ML models. Opt-out depending on the environment: IDE/command line via the setting 'Share Amazon Q content with AWS' or 'Amazon Q: Share Content'; console/mobile app/AWS websites/chat applications via an AI services opt-out policy in AWS Organizations. Telemetry (without code) can be switched off separately. Pricing page: 'Opt-out available'.

FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.

Product page: 'your data and queries are neither stored nor used to train models' (translated). Documentation FAQ: 'We do not train any models using your data.' Service specification: apart from billing-relevant data, 'no customer data whatsoever is collected or analysed' (translated). DPA section 2.3: usage data (not content) is processed, among other things, to optimise and further develop the services and is anonymised; STACKIT may use anonymised usage data for its own purposes.

Documentation 'Data storage in Amazon Q Developer': in the Free Tier, content is stored in a US Region (console error diagnosis: US West/Oregon, everything else: US East/N. Virginia). Cross-region inference may route requests to other Regions within the geography. Service Terms 50.13.1: content used for service improvement may be stored outside the Region in use. The sub-processor list names Canada, Germany, the Netherlands and the USA as locations of the AWS entities that process Free Tier content for service improvement (only without opt-out).

Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).

Models run in region EU01 (price table and model documentation, API endpoint '...model-serving.eu01.onstackit.cloud'). Service description section 1.2: operation in STACKIT data centres in Germany and Austria (possibly further EU states in future). DPA section 2.5: processing within the EU/EEA; outside only where expressly agreed and Art. 44–49 GDPR are met.

• Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
• AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
• Amazon Bedrock (LLM inference; cross-region inference within the geography)
• The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement

• Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
• AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
• Amazon Bedrock (LLM inference; cross-region inference within the geography)
• The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement

• DPA Annex 2 (version 2.4.2), development, operations and consulting support for STACKIT Cloud Services as a whole: Anynines GmbH (DE), CGI Deutschland B.V. & Co. KG (DE), Cloud&Heat Technologies GmbH (DE), Exivity BV (NL), Freiheit.com Technologies GmbH (DE), Inovex GmbH (DE), ISD Feniqs GmbH (DE), Nextevolution GmbH (DE), Rewion GmbH (DE), Schwarz Digits Bulgaria EOOD (BG), Schwarz Digits IT KG (DE), Schwarz Digits Romania S.C.S. (RO), Schwarz IT S.L.U. (ES), SOCIAL BIGDATA COMUNICACION SL (ES)
• Which of these processors are actually used for AI Model Serving is not publicly documented; according to the documentation the model developers are only the source of the models (Hugging Face) and are not named as processors

0 USD (pricing page)

19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)

Usage-based per 1 million tokens, region EU01 (product page, as of 2026-10-18; net prices according to terms of use section 11.3), input/output: gpt-oss 20b EUR 0.15/0.25; Gemma 4 31b, gpt-oss 120b, Llama 3.3 70B Instruct FP8, Qwen3-VL 235B (Plus) and Qwen3.8 27B EUR 0.45/0.65 each; Qwen3-VL 235B A22B (Premium) EUR 1.50/1.75. Embeddings (input only): e5 mistral 7b EUR 0.02; Qwen3 VL Embedding 8B EUR 0.08. Free trial access for 30 days after manual review of the registration (no permanently free plan).

yes (50 agentic requests per month in IDE/CLI; Java upgrade transformation up to 1,000 lines of code per month; console Q&A)

yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)

yes (chat and embedding models as shared instances via an OpenAI-compatible REST API with API key; including Qwen3-VL 235B, Qwen3.8 27B, Llama 3.3 70B, gpt-oss 120b/20b, Gemma 4 31b; tool calling, image input for some models; open-source RAG template)