Claude vs. innoGPT: data protection per plan

not publicly documented (the Consumer Terms and Privacy Policy do not mention a DPA; according to the Privacy Policy, Anthropic Ireland Limited is the controller for users in the EEA/UK/CH)

not publicly documented (the Consumer Terms and Privacy Policy do not mention a DPA; according to the Privacy Policy, Anthropic Ireland Limited is the controller for users in the EEA/UK/CH)

not publicly documented (the Consumer Terms and Privacy Policy do not mention a DPA; according to the Privacy Policy, Anthropic Ireland Limited is the controller for users in the EEA/UK/CH)

yes: Commercial Terms section C: "Data submitted through the Services will be processed in accordance with the Anthropic Data Processing Addendum ('DPA'), which is incorporated into these Terms by reference." (Anthropic Ireland Limited is the contracting party where the customer is established in the EEA, Switzerland or the UK)

yes: Commercial Terms section C: "Data submitted through the Services will be processed in accordance with the Anthropic Data Processing Addendum ('DPA'), which is incorporated into these Terms by reference." (Anthropic Ireland Limited is the contracting party where the customer is established in the EEA, Switzerland or the UK)

yes: Commercial Terms section C: "Data submitted through the Services will be processed in accordance with the Anthropic Data Processing Addendum ('DPA'), which is incorporated into these Terms by reference." (Anthropic Ireland Limited is the contracting party where the customer is established in the EEA, Switzerland or the UK)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

yes (DPA under Art. 28 GDPR according to T&Cs § 9 and the page for persons bound by professional secrecy; in addition a confidentiality undertaking as a contributing person under § 203(4) StGB); contract texts not publicly reviewed

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

Consumer Terms (Effective 2025-10-08): "We may use Materials to provide, maintain, and improve the Services and to develop other products and services, including training our models, unless you opt out of training through your account settings. Even if you opt out, we will use Materials for model training when: (1) you provide Feedback to us regarding any Materials, or (2) your Materials are flagged for safety review". Privacy Center (2026-03-16): chats and coding sessions are used if users allow it, in the case of safety flagging or with an express opt-in. Incognito chats: "are not used to improve Claude, even if you have enabled Model Improvement in your Privacy Settings". The pricing page shows "Model training: Opt-out" for Free, Pro and Max. According to the Privacy Center, this also applies to Claude Code for accounts on these plans.

Consumer Terms (Effective 2025-10-08): "We may use Materials to provide, maintain, and improve the Services and to develop other products and services, including training our models, unless you opt out of training through your account settings. Even if you opt out, we will use Materials for model training when: (1) you provide Feedback to us regarding any Materials, or (2) your Materials are flagged for safety review". Privacy Center (2026-03-16): chats and coding sessions are used if users allow it, in the case of safety flagging or with an express opt-in. Incognito chats: "are not used to improve Claude, even if you have enabled Model Improvement in your Privacy Settings". The pricing page shows "Model training: Opt-out" for Free, Pro and Max. According to the Privacy Center, this also applies to Claude Code for accounts on these plans.

Consumer Terms (Effective 2025-10-08): "We may use Materials to provide, maintain, and improve the Services and to develop other products and services, including training our models, unless you opt out of training through your account settings. Even if you opt out, we will use Materials for model training when: (1) you provide Feedback to us regarding any Materials, or (2) your Materials are flagged for safety review". Privacy Center (2026-03-16): chats and coding sessions are used if users allow it, in the case of safety flagging or with an express opt-in. Incognito chats: "are not used to improve Claude, even if you have enabled Model Improvement in your Privacy Settings". The pricing page shows "Model training: Opt-out" for Free, Pro and Max. According to the Privacy Center, this also applies to Claude Code for accounts on these plans.

Privacy Center (2026-08-18): "By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models." Exceptions according to the same source: express feedback (thumbs up/down) or other express permission. Commercial Terms: "Anthropic may not train models on Customer Content from Services." Pricing page Team: "No model training on your content by default".

Privacy Center (2026-08-18): "By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models." Exceptions according to the same source: express feedback (thumbs up/down) or other express permission. Commercial Terms: "Anthropic may not train models on Customer Content from Services." Pricing page Enterprise model training: "None by default".

Privacy Center (2026-08-18): "By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models." Exceptions according to the same source: express feedback (thumbs up/down) or other express permission. Commercial Terms: "Anthropic may not train models on Customer Content from Services."

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Pricing page: 'Vertraglich zugesicherter Verzicht auf Modelltraining' (translated: contractually assured waiver of model training). T&Cs § 9 and app privacy policy section 4: no use of customer data or content for training; AI providers under contracts that exclude training on customer data.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Privacy Policy (Effective 2026-09-10): "your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area ('EEA') and the UK"; Trust Center: cloud infrastructure (Google Cloud, AWS, Microsoft Azure) with location "Worldwide" for all products. A choice of region is not documented for consumer plans.

Privacy Policy (Effective 2026-09-10): "your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area ('EEA') and the UK"; Trust Center: cloud infrastructure (Google Cloud, AWS, Microsoft Azure) with location "Worldwide" for all products. A choice of region is not documented for consumer plans.

Privacy Policy (Effective 2026-09-10): "your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area ('EEA') and the UK"; Trust Center: cloud infrastructure (Google Cloud, AWS, Microsoft Azure) with location "Worldwide" for all products. A choice of region is not documented for consumer plans.

not publicly documented for claude.ai workspaces (Team/Enterprise): no choice of region documented. The Trust Center states the location "Worldwide" for the cloud infrastructure (Google Cloud, AWS, Microsoft Azure); Privacy Policy: transfer "to our servers in the US, or to other countries outside the [EEA] and the UK".

not publicly documented for claude.ai workspaces (Team/Enterprise): no choice of region documented. The Trust Center states the location "Worldwide" for the cloud infrastructure (Google Cloud, AWS, Microsoft Azure); Privacy Policy: transfer "to our servers in the US, or to other countries outside the [EEA] and the UK". The Claude Enterprise product page (q19) lists "US-only inference" among the data controls; an EU region is not mentioned there.

Claude Platform Docs (Data residency): two settings. Inference geo (parameter inference_geo): "global" (default) "Inference may run in any available geography"; "us" "Inference runs only in US-based infrastructure" (surcharge 1.1x, Claude 4.6 and newer only). Workspace geo (storage at rest and endpoint processing): "Currently, 'us' is the only available workspace geo." According to the same documentation (retrieved 2026-10-18): "Inference geo: Only 'us' and 'global' are available." and "Workspace geo: Only 'us' is currently available."; an EU region is therefore not currently offered. On Amazon Bedrock/Google Cloud, the endpoint URL or the inference profile determines the region (not part of this entry).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

As Business; in addition, according to the pricing page and the page for persons bound by professional secrecy, 'EU-Hosting in Berlin' (ISO 27001 certified) with the § 203 licence; the customer controls which models are enabled. T&Cs § 9: processing generally on servers in the EU; non-EU models only where expressly selected.

As Business; in addition, according to the pricing page, self-hosting/on-premises possible (scope not publicly documented).

• According to the Trust Center (trust.anthropic.com/subprocessors, 22 entries, retrieved 2026-10-18):
• Google Cloud Platform (cloud infrastructure; worldwide; all products)
• Amazon Web Services (cloud infrastructure; worldwide; all products)
• Microsoft Azure (cloud infrastructure; worldwide; all products)
• Cloudflare (traffic routing/CDN; worldwide, close to the customer; all products)
• Intercom (user support; USA)
• Nutun (user support; South Africa)
• Boldr (user support; Canada)
• Twilio (analytics, e-mail/SMS; USA)
• Iterable (e-mail communication; USA)
• Functional Software dba Sentry (error handling, support; USA)
• Sift (fraud/abuse detection; USA)
• Arkose Labs (fraud/abuse detection; USA)
• Brave Search (web search; USA)
• TurboPuffer (web search; USA)
• Persona (fraud detection, identity verification; USA; Free/Pro/Max only)
• Yoti (fraud detection, identity verification; UK; Free/Pro/Max only)
• Intuition Machines, Inc. (hCaptcha) (bot detection, fraud/abuse detection; worldwide; all products except Claude for Government)
• Parallel Web Systems, Inc. (web search; USA; all products except Claude for Government)
• Note: according to the Privacy Policy, Anthropic is the controller for consumers; the list nevertheless assigns these service providers to the products Claude Free/Pro/Max.

• According to the Trust Center (trust.anthropic.com/subprocessors, 22 entries, retrieved 2026-10-18):
• Google Cloud Platform (cloud infrastructure; worldwide; all products)
• Amazon Web Services (cloud infrastructure; worldwide; all products)
• Microsoft Azure (cloud infrastructure; worldwide; all products)
• Cloudflare (traffic routing/CDN; worldwide, close to the customer; all products)
• Stripe (billing; USA)
• Intercom (user support; USA)
• Nutun (user support; South Africa)
• Boldr (user support; Canada)
• Twilio (analytics, e-mail/SMS; USA)
• Iterable (e-mail communication; USA)
• Functional Software dba Sentry (error handling, support; USA)
• Sift (fraud/abuse detection; USA)
• Arkose Labs (fraud/abuse detection; USA)
• Brave Search (web search; USA)
• TurboPuffer (web search; USA)
• Persona (fraud detection, identity verification; USA; Free/Pro/Max only)
• Yoti (fraud detection, identity verification; UK; Free/Pro/Max only)
• Intuition Machines, Inc. (hCaptcha) (bot detection, fraud/abuse detection; worldwide; all products except Claude for Government)
• Parallel Web Systems, Inc. (web search; USA; all products except Claude for Government)
• Note: according to the Privacy Policy, Anthropic is the controller for consumers; the list nevertheless assigns these service providers to the products Claude Free/Pro/Max.

• According to the Trust Center (trust.anthropic.com/subprocessors, 22 entries, retrieved 2026-10-18):
• Google Cloud Platform (cloud infrastructure; worldwide; all products)
• Amazon Web Services (cloud infrastructure; worldwide; all products)
• Microsoft Azure (cloud infrastructure; worldwide; all products)
• Cloudflare (traffic routing/CDN; worldwide, close to the customer; all products)
• Stripe (billing; USA)
• Intercom (user support; USA)
• Nutun (user support; South Africa)
• Boldr (user support; Canada)
• Twilio (analytics, e-mail/SMS; USA)
• Iterable (e-mail communication; USA)
• Functional Software dba Sentry (error handling, support; USA)
• Sift (fraud/abuse detection; USA)
• Arkose Labs (fraud/abuse detection; USA)
• Brave Search (web search; USA)
• TurboPuffer (web search; USA)
• Persona (fraud detection, identity verification; USA; Free/Pro/Max only)
• Yoti (fraud detection, identity verification; UK; Free/Pro/Max only)
• Intuition Machines, Inc. (hCaptcha) (bot detection, fraud/abuse detection; worldwide; all products except Claude for Government)
• Parallel Web Systems, Inc. (web search; USA; all products except Claude for Government)
• Note: according to the Privacy Policy, Anthropic is the controller for consumers; the list nevertheless assigns these service providers to the products Claude Free/Pro/Max.

• According to the Trust Center (trust.anthropic.com/subprocessors, 22 entries, retrieved 2026-10-18):
• Google Cloud Platform (cloud infrastructure; worldwide; all products)
• Amazon Web Services (cloud infrastructure; worldwide; all products)
• Microsoft Azure (cloud infrastructure; worldwide; all products)
• Cloudflare (traffic routing/CDN; worldwide, close to the customer; all products)
• Stripe (billing; USA)
• WorkOS (security, single sign-on; USA)
• Intercom (user support; USA)
• Nutun (user support; South Africa)
• Boldr (user support; Canada)
• Twilio (analytics, e-mail/SMS; USA)
• Iterable (e-mail communication; USA)
• Functional Software dba Sentry (error handling, support; USA)
• Sift (fraud/abuse detection; USA)
• Arkose Labs (fraud/abuse detection; USA)
• Brave Search (web search; USA)
• TurboPuffer (web search; USA)
• ElevenLabs (text-to-speech; USA; Claude for Work only)
• Intuition Machines, Inc. (hCaptcha) (bot detection, fraud/abuse detection; worldwide; all products except Claude for Government)
• Parallel Web Systems, Inc. (web search; USA; all products except Claude for Government)

• According to the Trust Center (trust.anthropic.com/subprocessors, 22 entries, retrieved 2026-10-18):
• Google Cloud Platform (cloud infrastructure; worldwide; all products)
• Amazon Web Services (cloud infrastructure; worldwide; all products)
• Microsoft Azure (cloud infrastructure; worldwide; all products)
• Cloudflare (traffic routing/CDN; worldwide, close to the customer; all products)
• Stripe (billing; USA)
• WorkOS (security, single sign-on; USA)
• Intercom (user support; USA)
• Nutun (user support; South Africa)
• Boldr (user support; Canada)
• Twilio (analytics, e-mail/SMS; USA)
• Iterable (e-mail communication; USA)
• Functional Software dba Sentry (error handling, support; USA)
• Sift (fraud/abuse detection; USA)
• Arkose Labs (fraud/abuse detection; USA)
• Brave Search (web search; USA)
• TurboPuffer (web search; USA)
• ElevenLabs (text-to-speech; USA; Claude for Work only)
• Intuition Machines, Inc. (hCaptcha) (bot detection, fraud/abuse detection; worldwide; all products except Claude for Government)
• Parallel Web Systems, Inc. (web search; USA; all products except Claude for Government)

• According to the Trust Center (trust.anthropic.com/subprocessors, 22 entries, retrieved 2026-10-18):
• Google Cloud Platform (cloud infrastructure; worldwide; all products)
• Amazon Web Services (cloud infrastructure; worldwide; all products)
• Microsoft Azure (cloud infrastructure; worldwide; all products)
• Cloudflare (traffic routing/CDN; worldwide, close to the customer; all products)
• Stripe (billing; USA)
• WorkOS (security, single sign-on; USA)
• Intercom (user support; USA)
• Nutun (user support; South Africa)
• Boldr (user support; Canada)
• Twilio (analytics, e-mail/SMS; USA)
• Iterable (e-mail communication; USA)
• Functional Software dba Sentry (error handling, support; USA)
• Sift (fraud/abuse detection; USA)
• Arkose Labs (fraud/abuse detection; USA)
• Brave Search (web search; USA)
• TurboPuffer (web search; USA)
• Intuition Machines, Inc. (hCaptcha) (bot detection, fraud/abuse detection; worldwide; all products except Claude for Government)
• Parallel Web Systems, Inc. (web search; USA; all products except Claude for Government)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

USD 0/month (list claude.com/pricing, as of 2026-10-14; prices excl. taxes)

USD 17/month with annual subscription (USD 200 in advance), USD 20/month with monthly billing (list claude.com/pricing, as of 2026-10-14; excl. taxes)

Max 5x: USD 100/month; Max 20x: USD 200/month; prices for web subscriptions; according to the pricing page FAQ, annual subscriptions only for Pro and Team ("Annual subscriptions are available for Pro and Team plans.") (Help Center "What is the Max plan?", q17; pricing page claude.com/pricing: "from USD 100", prices excl. taxes)

Standard seat USD 20/seat/month with annual billing, USD 25 with monthly billing; Premium seat USD 100/seat/month annually, USD 125 monthly; Team for 2 to 150 people (list claude.com/pricing, as of 2026-10-14; excl. taxes)

Self-serve: USD 20/seat/month with annual billing, minimum 20 seats, plus usage-based costs at API rates; sales-assisted: individual quote (pricing page FAQ: "You can get started self-serve or contact sales for a tailored quote."); Enterprise with annual billing only (list claude.com/pricing, retrieved 2026-10-18)

List claude.com/pricing (as of 2026-10-14), per 1M tokens: Fable 5.1 input USD 10 / output USD 50; Opus 5.5 input USD 4 / output USD 20; Sonnet 5.5 input USD 2 / output USD 10; Haiku 5.5 input USD 0.10 (prompts up to 100K) / output USD 0.50; Batch -50 %; US-only inference at 1.1x price (excl. taxes)

EUR 9.90 per month incl. VAT; with annual billing ('1 Monat gratis', one month free) EUR 9.08 per month; 7-day free trial without payment details (pricing page, as of 2026-10-18)

EUR 19 per month incl. VAT; with annual billing EUR 17.42 per month (pricing page, as of 2026-10-18)

EUR 34.90 per month incl. VAT for up to 5 people in a household; with annual billing EUR 31.99 per month (pricing page, as of 2026-10-18)

EUR 49.90 per month incl. VAT; with annual billing EUR 45.74 per month (pricing page, as of 2026-10-18)

Pricing page (as of 2026-10-18, excl. VAT): Business EUR 25 per user/month, with annual billing EUR 22.92; Business Max licence (higher individual premium budget, can be combined with Business licences) EUR 109 per user/month, annually EUR 99. One-off top-up packs EUR 5 to 1,000. Add-ons: PII filter from EUR 69/month, video generation per generation, audio overview 3 generations/month free, external API per token (token prices per model on the models page, e.g. gpt-5 EUR 1.29 input / EUR 10.29 output per million tokens; VAT not stated there). 7-day free trial (standard models only).

EUR 25 per user/month excl. VAT, from 20 licences, on request only (pricing page, as of 2026-10-18); according to the pricing page the trial is not yet § 203 compliant

Custom, contact sales; possible from 1,000+ users; pilot programme 3 months from EUR 8,500 (pricing page, as of 2026-10-18)

yes (chat, web search, file creation, code execution, Memory, Artifacts, Connectors; according to the pricing page)

yes (Free plus more usage, Claude Code, Claude Design/Slides/Docs, Research, Claude in Chrome and Microsoft 365; according to the pricing page)

yes (Pro plus 5x or 20x more usage, higher output limits, Early Access, Priority Access; new: monthly API credits for the Claude Platform of USD 100 (Max 5x) and USD 200 (Max 20x) respectively; according to the pricing page)

yes (all Claude features, more usage than Pro, Claude Code and Claude Cowork, Enterprise Search, SSO; according to the pricing page up to USD 500/month in pooled API credits)

yes (all Team features plus roles/SCIM, audit logs, Compliance API, IP allowlisting, HIPAA-ready offering; according to the pricing page)

yes (Messages API, Batch, Managed Agents and others; prices per MTok)

yes (unlimited standard messages with the 'innoGPT Standard' model; scope of premium models for this plan not stated on the pricing page)

yes (unlimited standard messages; all AI models, premium models included within a monthly budget)

yes (unlimited standard messages; all AI models within the monthly budget)

yes (everything in Personal; according to the pricing page 'Rund 3× mehr Premium als Personal' (translated: around 3× more premium than Personal); image generation, Deep Research)

yes (all features, team collaboration, SSO/SAML at extra cost, up to 1,000 users; premium models via a shared team budget; add-ons: PII filter, video generation, audio overview, external OpenAI-compatible API)

yes (main Business features according to the pricing page, 'scope growing continuously' (translated); confidentiality undertaking under § 203(4) of the German Criminal Code (StGB); activation only on request after review)

yes (organisation-wide rollout with own governance; § 203 licence possible; self-hosting/on-premises; dedicated support manager; custom SLAs)