DATEV AI features vs. sevdesk: data protection per plan

not publicly documented

yes (concluded via online form with DATEV SmartCard/SmartLogin or by being stored in DATEV Einverständniserklärungen; effective 'upon confirmation of the conclusion of the contract by DATEV' (translated), DPA item 19 a)

yes (concluded via online form with DATEV SmartCard/SmartLogin or by being stored in DATEV Einverständniserklärungen; effective 'upon confirmation of the conclusion of the contract by DATEV' (translated), DPA item 19 a)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

KI-Werkstatt page: 'Some prototypes in the DATEV KI-Werkstatt use the Microsoft Azure Open AI Services' (translated); inputs are 'not passed on to OpenAI and not used to train the models' (translated). No statement for the other prototypes; therefore not substantiated for the plan as a whole.

DATEV Copilot FAQ: 'Is my data used to train the AI? No, neither Microsoft nor OpenAI use your data for training.' (translated). Copilot is a DATEV cloud service under the DATEV service descriptions for the DATEV-Cloud-Lösungen Basis (doc. no. 0904407); unlike the service descriptions for Rechnungswesen, Steuern, Personalwirtschaft and Wissen, these contain no clause on cross-customer processing for 'Intelligente DATEV-Cloud-Lösungen'. Item 3.8, however, permits DATEV to process data 'for the purpose of developing new or further developing existing DATEV products in an appropriately secured environment' (translated); according to item 3.8 this does not apply if the customer concluded the DPA without the anonymisation agreement (deletion possible under DPA item 15). An express statement on DATEV's own model training with Copilot inputs is missing.

DATEV service descriptions for the DATEV-Cloud-Lösungen Rechnungswesen (accounting), Steuern (tax) and Personalwirtschaft (payroll), each item 1.8 'Service-related cross-customer data processing' (translated) (identical wording also for Wissen [knowledge]): for 'intelligent cloud solutions' (translated), the customer instructs DATEV to use the data sets 'set up by the customer for the „Intelligente DATEV-Cloud-Lösungen“' (translated) 'in the context of new and further development, quality assurance and operation' (translated); 'For machine learning or deep learning, this training forms the basis for the systems' learning' (translated); 'for example, data of different customers of the „DATEV-Cloud-Lösungen“ are analysed together' (translated); 'Personal data may still be processed in the resulting AI models as well' (translated); special categories of personal data may also be processed. The application of the AI models remains 'exclusively a DATEV-internal process' (translated). No possibility of objection is described in item 1.8; according to its wording, the optional deletion of the anonymisation agreement (DPA item 15b) only affects items 3.7/3.8, not item 1.8. The Basis service description (Copilot) contains no item 1.8 of this kind. Payroll benchmark uses 'real, anonymised DATEV payroll records' (translated); de-identification service: data is 'analysed in the DATEV data centre' (translated) and de-identified before AI processing.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

Page: prototypes 'in a protected DATEV environment' (translated); for Azure OpenAI prototypes, inputs are 'sent as a request through the DATEV cloud-native data centre to Microsoft Azure' (translated) and processed there temporarily. Azure region not stated.

FAQ: 'DATEV Copilot uses Microsoft Azure services. The data you upload is processed in an area hosted by DATEV at Microsoft Azure in a European data centre.' (translated). Internet research (optional, permission 'Allow internet research' (translated)): according to the programme content (doc. no. 0904530), 'you transmit your data to Microsoft Corporation in the USA' (translated); 'Microsoft processes your data for its own purposes and on global servers' (translated); DATEV warns against transmitting confidential or legally protected information.

DATEV data centre/DATEV cloud according to the de-identification article and the AI overview. Help document 1000192 (as of 2026-09-18): Microsoft Ireland Operations Limited (IE) for 'DATEV Einspruchsgenerator, DATEV LEXchat AI functionalities' (translated) without transfer to a third country; transfers to a third country (USA) to Datadog, Inc. (DATEV Bankdatenservice) and Raintank, Inc./Grafana Labs (IT monitoring), among others, on the basis of the EU-U.S. DPF.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

• Microsoft Azure OpenAI Services (some prototypes)

• Microsoft Azure (AI services, European data centre, according to the Copilot FAQ)
• OpenAI models via Azure (according to the FAQ, OpenAI does not use data for training)
• Microsoft Bing (only with internet research enabled; independent processing by Microsoft)
• Service descriptions Basis item 3.4: 'DATEV Copilot: Microsoft Ireland Operations Limited' (Dublin, IE), purpose 'AI functions' (translated); otherwise help document 1000192

• Microsoft Ireland Operations Limited (Einspruchsgenerator, LEXchat AI functionalities)
• Amazon Web Services EMEA SARL (operation/hosting of DATEV products)
• Microsoft Deutschland GmbH (DATEV products, data centre services)
• Google Ireland Ltd. (DATEV platform, chatbot use)
• Datadog, Inc. (USA, DATEV Bankdatenservice, DPF)
• others according to help document 1000192

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

'The platform can be used free of charge' (translated); login via DATEV account and SmartCard/SmartLogin (as of 2026-10-18)

DATEV shop (item no. 90431): 'The prerequisite is ordering a free licence via this shop page' (translated); ordering also via the MyDATEV ordering and set-up assistant. Usage limit: rolling 2-hour window, if exceeded blocked for 2 hours (doc. no. 1049806). MyDATEV Kanzlei and LEXinform plus require a licence (as of 2026-10-18)

Billing according to the service descriptions 'in accordance with the current DATEV price list' (translated); the DATEV price list for firms is offered as a PDF download and was not evaluated (as of 2026-10-18)

EUR 0 ("permanently free", no credit card); according to the help centre applied automatically after the 14-day trial, unlimited in time; no add-ons bookable, limited support.

List price EUR 11.90 per month billed monthly, EUR 9.90 per month for 12 months (billed annually), EUR 8.90 per month for 24 months, each plus VAT; 1 user, additional users via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices.

List price EUR 25.90 per month billed monthly, EUR 22.90 per month for 12 months, EUR 19.90 per month for 24 months, each plus VAT; 1 user, more via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices.

List price EUR 34.90 per month billed monthly, EUR 30.90 per month for 12 months, EUR 27.90 per month for 24 months, each plus VAT; 1 user, more via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices.

yes

yes

yes

no (pricing page: the free plan covers 3 (e-)invoices per month, contacts, products and support material; AI-supported receipt capture and the AI agent Sevi are only listed for paid plans)

yes (AI agent Sevi in support, according to the pricing page in all three paid plans; AI-supported receipt capture and online banking reconciliation only from the Buchhaltung plan)

yes (AI-supported receipt capture reading date, amount, receipt number and supplier and suggesting the booking category; AI-supported matching of bank payments to invoices and receipts; AI agent Sevi; suggestions must be reviewed and confirmed by the user)

yes (all AI features from Buchhaltung; additionally cost centres, management accounts (BWA) and REST API)