DeutschlandGPT vs. Grok: data protection per plan
DeutschlandGPT (4 plans) and Grok (6 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | DeutschlandGPT | Grok |
|---|---|---|
| Provider based in | DeutschlandGPT GmbH, Gabriele-Münter-Straße 3, 82110 Germering, Germany | SpaceXAI LLC, 1450 Page Mill Rd, Palo Alto, CA 94304, USA |
| Plans recorded | 4 | 6 |
| Hosting | EU option: all 4 plans | US only: Free, Plus / Premium / Super / Ultramixed: Grok Teams, Grok Enterprise, API, API with Zero Data Retention |
| Training on inputs | no: all 4 plans | opt-out available: Free, Plus / Premium / Super / Ultrano: Grok Teams, Grok Enterprise, API, API with Zero Data Retention |
| DPA | yes: all 4 plans | no: Free, Plus / Premium / Super / Ultrayes: Grok Teams, Grok Enterprise, API, API with Zero Data Retention |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: DeutschlandGPT Business vs. Grok Grok Teams
| Feature | DeutschlandGPTBusiness (incl. Business 5×) | GrokGrok Teams (grok.com; documentation: 'Grok Business') |
|---|---|---|
| yes | yes | |
| Details: DPA available | yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector) Provider’s DPA | yes: Enterprise FAQ: 'if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service'; the Grok Business guide refers, for team workspaces, to the 'Terms of Service - Enterprise', which according to their preamble also apply to purchases by 'online purchase confirmation'. The DPA (effective 2026-09-22) provides for the processing of personal data only via the ZDR API. Provider’s DPA |
| no | no | |
| Details: Training on inputs | Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan. | Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide (as of 2026-10-10): team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service' (link to the Enterprise terms). Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train. |
| differs by plan | EU option | mixed |
| Details: Data residency | DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated). | The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. The pricing page mentions data residency only in the Enterprise section; EU region not documented. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | DPA Annex I: conversation histories… | Enterprise terms: User Content is deleted… |
| Details: Data retention | DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center. | Enterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: Teams with 'Custom Chat data retention'. |
| differs by plan | 24 EUR/user/mo… (further prices in the details) | from 30 USD/user/mo |
| Details: Price | Pricing page (as of 2026-10-18, excl. VAT): Business EUR 24 per user/month or EUR 20 with annual billing (EUR 240/year/user); Business 5× EUR 120 or EUR 100 annually (EUR 1,200/year/user); any number of users; 7-day free trial for the self-employed and teams of up to 20 users. API and usage-based features billed by consumption, token prices per model on the API page (e.g. Mistral Large 3 EUR 0.75 input / EUR 2.25 output per 1 million tokens; VAT not stated there). Monthly price of Business 5× taken from the page script of the price display. | from 30 USD per user per month ('$30+/user/month'; seat types combinable), excl. taxes (pricing page) |
| yes | yes | |
| Details: AI features included | yes (all AI models, Cowork, Code, meeting transcription, central user management, SAML SSO, SCIM, white-labelling with logo/name, configurable deletion periods, professional secrecy mode under § 203 StGB self-activatable at no extra cost; workflows, Cowork, Code and API additionally billed by usage; Business 5× with five times the quota) | yes (according to the Teams comparison table: Grok Chat, Imagine, video generation, Build, API access, Grok Bot, Cursor agent, pooled usage, team management, central billing, team-wide privacy settings, custom chat retention, SAML/OIDC SSO, combinable seat types; self-service by card. Business guide: connectors to Google Drive, Outlook, SharePoint, Teams, Salesforce, among others) |
| 7 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- DeutschlandGPT Businessyes
- Grok Grok Teamsyes
- DeutschlandGPT Business
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPAGrok Grok Teamsyes: Enterprise FAQ: 'if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service'; the Grok Business guide refers, for team workspaces, to the 'Terms of Service - Enterprise', which according to their preamble also apply to purchases by 'online purchase confirmation'. The DPA (effective 2026-09-22) provides for the processing of personal data only via the ZDR API.
Provider’s DPA
Training
- DeutschlandGPT Businessno
- Grok Grok Teamsno
- DeutschlandGPT Business
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
Grok Grok TeamsEnterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide (as of 2026-10-10): team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service' (link to the Enterprise terms). Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.
Hosting
- differs by plan
- DeutschlandGPT BusinessEU option
- Grok Grok Teamsmixed
- DeutschlandGPT Business
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
Grok Grok TeamsThe privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. The pricing page mentions data residency only in the Enterprise section; EU region not documented.
Sub-processors
- DeutschlandGPT Businesslist available
- Grok Grok Teamslist available
- DeutschlandGPT Business
- T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
- Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
- IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
- Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
- Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
- Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
- Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
- OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
- Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
- Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
- Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Grok Grok Teams- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
Retention
- differs by plan
- DeutschlandGPT BusinessDPA Annex I: conversation histories…
- Grok Grok TeamsEnterprise terms: User Content is deleted…
- DeutschlandGPT BusinessDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.Grok Grok TeamsEnterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: Teams with 'Custom Chat data retention'.
Price
- differs by plan
- DeutschlandGPT Business24 EUR/user/mo… (further prices in the details)
- Grok Grok Teamsfrom 30 USD/user/mo
- DeutschlandGPT Business
Pricing page (as of 2026-10-18, excl. VAT): Business EUR 24 per user/month or EUR 20 with annual billing (EUR 240/year/user); Business 5× EUR 120 or EUR 100 annually (EUR 1,200/year/user); any number of users; 7-day free trial for the self-employed and teams of up to 20 users. API and usage-based features billed by consumption, token prices per model on the API page (e.g. Mistral Large 3 EUR 0.75 input / EUR 2.25 output per 1 million tokens; VAT not stated there). Monthly price of Business 5× taken from the page script of the price display.
Grok Grok Teamsfrom 30 USD per user per month ('$30+/user/month'; seat types combinable), excl. taxes (pricing page)
- DeutschlandGPT Businessyes
- Grok Grok Teamsyes
- DeutschlandGPT Business
yes (all AI models, Cowork, Code, meeting transcription, central user management, SAML SSO, SCIM, white-labelling with logo/name, configurable deletion periods, professional secrecy mode under § 203 StGB self-activatable at no extra cost; workflows, Cowork, Code and API additionally billed by usage; Business 5× with five times the quota)
Grok Grok Teamsyes (according to the Teams comparison table: Grok Chat, Imagine, video generation, Build, API access, Grok Bot, Cursor agent, pooled usage, team management, central billing, team-wide privacy settings, custom chat retention, SAML/OIDC SSO, combinable seat types; self-service by card. Business guide: connectors to Google Drive, Outlook, SharePoint, Teams, Salesforce, among others)
Evidence
- DeutschlandGPT Business7 sources
- Grok Grok Teams6 sources
- DeutschlandGPT Business
- PricingPricing page, retrieved 18 Oct 2026
- Terms of use, version of 13.08.2026Terms and conditions, retrieved 18 Oct 2026
- Terms on data processing, version of 13.08.2026DPA, retrieved 18 Oct 2026
- Trust Center, as of 12 August 2026Trust Center, retrieved 18 Oct 2026
- Privacy policy, as of 12.10.2026Privacy notice, retrieved 18 Oct 2026
- AI usage limits & fair useDocumentation, retrieved 18 Oct 2026
- Platform APIProduct page, retrieved 18 Oct 2026
Grok Grok Teams- Grok Business / Enterprise User GuideDocumentation, retrieved 18 Oct 2026
- Pricing: Compare PlansPricing page, retrieved 18 Oct 2026
- Terms of Service - Enterprise (Last Updated 2026-08-14)Terms and conditions, retrieved 18 Oct 2026
- SpaceXSI Data Processing Addendum (effective 2026-09-22)DPA, retrieved 14 Oct 2026
- SpaceXSI Subprocessor ListSub-processor list, retrieved 14 Oct 2026
- FAQ - EnterpriseDocumentation, retrieved 18 Oct 2026
| Feature | DeutschlandGPT | Grok |
|---|---|---|
| differs by tool | yesall 4 plans |
|
| Details: DPA available |
|
|
| differs by tool | noall 4 plans |
|
| Details: Training on inputs |
|
|
| differs by tool | EU optionall 4 plans |
|
| Details: Data residency |
|
|
| list availableall 4 plans | list availableall 6 plans | |
| Details: List published |
|
|
| differs by tool | DPA Annex I: conversation histories…all 4 plans |
|
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 4 plans | yesall 6 plans | |
| Details: AI features included |
|
|
| 8 sources | 13 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- DeutschlandGPTyesall 4 plans
- Grok
- noFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- yesGrok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise, API (usage-based, global endpoint), API with Zero Data Retention (team setting)
- DeutschlandGPT
- Free
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA - Pro (incl. Pro 5×)
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA - Business (incl. Business 5×)
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA - Enterprise
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA
Grok- Free (consumer: grok.com, apps, X)
no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)
- Grok Teams (grok.com; documentation: 'Grok Business')
yes: Enterprise FAQ: 'if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service'; the Grok Business guide refers, for team workspaces, to the 'Terms of Service - Enterprise', which according to their preamble also apply to purchases by 'online purchase confirmation'. The DPA (effective 2026-09-22) provides for the processing of personal data only via the ZDR API.
Provider’s DPA - Grok Enterprise
yes: Data Processing Addendum (effective 2026-09-22) is part of the Enterprise terms for business services; the DPA provides for the processing of personal data only via the ZDR API.
Provider’s DPA - API (usage-based, global endpoint)
yes: Data Processing Addendum (effective 2026-09-22) is part of the 'Terms of Service - Enterprise', which according to a notice apply to business customers of the API and other business services; SCCs Module Two/Three. The DPA requires personal data to be processed only via the ZDR API; no personal data is to be transmitted to non-ZDR services.
Provider’s DPA - API with Zero Data Retention (team setting)
yes: Data Processing Addendum (effective 2026-09-22) as part of the Enterprise terms; the DPA expressly provides for the processing of personal data only via the ZDR API. SCCs Module Two/Three (Irish law).
Provider’s DPA
- Free
Training
- differs by tool
- DeutschlandGPTnoall 4 plans
- Grok
- opt-out availableFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- noGrok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise, API (usage-based, global endpoint), API with Zero Data Retention (team setting)
- DeutschlandGPT
- Free
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
- Pro (incl. Pro 5×)
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
- Business (incl. Business 5×)
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
- Enterprise
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
Grok- Free (consumer: grok.com, apps, X)
Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.
- Grok Teams (grok.com; documentation: 'Grok Business')
Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide (as of 2026-10-10): team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service' (link to the Enterprise terms). Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.
- Grok Enterprise
Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide: team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service'. Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.
- API (usage-based, global endpoint)
API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'. Except with ZDR, SpaceXSI may use de-identified or aggregated data for any lawful purposes.
- API with Zero Data Retention (team setting)
API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms: no training on User Content; with ZDR also no creation of de-identified data. With ZDR the 30-day storage does not apply; inputs and outputs are not written to disk. The documentation points out that ZDR is not recommended for most customers.
- Free
Hosting
- differs by tool
- DeutschlandGPTEU optionall 4 plans
- Grok
- US onlyFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- mixedGrok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise, API (usage-based, global endpoint), API with Zero Data Retention (team setting)
- DeutschlandGPT
- Free
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
- Pro (incl. Pro 5×)
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
- Business (incl. Business 5×)
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
- Enterprise
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
Grok- Free (consumer: grok.com, apps, X)
Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'
- Grok Teams (grok.com; documentation: 'Grok Business')
The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. The pricing page mentions data residency only in the Enterprise section; EU region not documented.
- Grok Enterprise
The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. Pricing page (Enterprise): 'Data residency: Control where your data lives' without a region specified; EU region not documented.
- API (usage-based, global endpoint)
Regions documentation (q3): the standard endpoint api.x.ai does not guarantee a processing region; requests may be routed between regions. Optional US endpoint us.api.x.ai: request handling, inference, moderation and stored request data in the USA (only grok-4.7 and grok-4.6, without image, video and voice APIs; Files, Collections and server-side tools may be processed outside the USA; token prices +10 %). DPA (q10): processing 'on a global basis outside Europe', including in the USA. Sub-processors in the US, one subsidiary in the UK. An EU region is not documented.
- API with Zero Data Retention (team setting)
As API: global endpoint without a region guarantee, US endpoint optional (ZDR also applies there). No EU region documented.
- Free
Sub-processors
- DeutschlandGPTlist availableall 4 plans
- Groklist availableall 6 plans
- DeutschlandGPT
- Free
- T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
- Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
- IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
- Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
- Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
- Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
- Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
- OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
- Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
- Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
- Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
- Pro (incl. Pro 5×)
- T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
- Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
- IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
- Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
- Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
- Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
- Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
- OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
- Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
- Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
- Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
- Business (incl. Business 5×)
- T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
- Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
- IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
- Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
- Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
- Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
- Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
- OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
- Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
- Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
- Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
- Enterprise
- T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
- Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
- IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
- Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
- Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
- Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
- Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
- OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
- Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
- Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
- Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Grok- Free (consumer: grok.com, apps, X)
- Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe
- Grok Teams (grok.com; documentation: 'Grok Business')
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- Grok Enterprise
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- API (usage-based, global endpoint)
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- API with Zero Data Retention (team setting)
- According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
- SpaceXSI subsidiary (services and support): located in the UK (q11)
- Free
Retention
- differs by tool
- DeutschlandGPTDPA Annex I: conversation histories…all 4 plans
- Grok
- Privacy policyFree (consumer: grok.com, apps, X), Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- Enterprise terms: User Content is deleted…Grok Teams (grok.com; documentation: 'Grok Business'), Grok Enterprise
- Security FAQ: requests and responses are…API (usage-based, global endpoint)
- No storage of prompts and outputsAPI with Zero Data Retention (team setting)
- DeutschlandGPT
- FreeDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
- Pro (incl. Pro 5×)DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
- Business (incl. Business 5×)DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
- EnterpriseDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
Grok- Free (consumer: grok.com, apps, X)Privacy policy (as of 2026-10-11): retention for as long as a legitimate business interest exists; with Private Chat, conversations are deleted within 30 days; deleted conversations or deleted accounts are deleted within 30 days, except for legal, compliance or security reasons. Consumer FAQ: deleted chats and files are removed 'within standard retention windows'; account recoverable within 30 days.
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)Privacy policy (as of 2026-10-11): retention for as long as a legitimate business interest exists; with Private Chat, conversations are deleted within 30 days; deleted conversations or deleted accounts are deleted within 30 days, except for legal, compliance or security reasons. Consumer FAQ: deleted chats and files are removed 'within standard retention windows'; account recoverable within 30 days.
- Grok Teams (grok.com; documentation: 'Grok Business')Enterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: Teams with 'Custom Chat data retention'.
- Grok EnterpriseEnterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise specified in the Order Form, by self-service setting or by law. Pricing page: 'Custom Chat data retention'. Business guide: Enterprise with custom retention rules.
- API (usage-based, global endpoint)Security FAQ: requests and responses are stored encrypted for 30 days (audit/abuse review) and then automatically deleted; Files and Collections remain until deleted. Enterprise terms: User Content is deleted no later than 30 days after the end of the interaction, unless otherwise agreed, required by law or necessary for security/compliance reasons. DPA Annex 2: following a deletion request, deletion typically within 30 days.
- API with Zero Data Retention (team setting)No storage of prompts and outputs (ZDR, team-wide); according to the documentation, activation by team admins themselves in the console, where available; with an Enterprise contract, the contract governs retention. When activating, the Enterprise terms and the privacy policy must be accepted. Enterprise terms: with ZDR, User Content exists 'only transiently' to generate the response and is deleted afterwards; DPA: with the ZDR API, only the customer retains personal data.
Price
- differs by tool
- DeutschlandGPT
- 0 EURFree
- 19 EUR/mo… (further prices in the details)Pro (incl. Pro 5×)
- 24 EUR/user/mo… (further prices in the details)Business (incl. Business 5×)
- customEnterprise
- Grok
- 0 USDFree (consumer: grok.com, apps, X)
- several tiersPlus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
- from 30 USD/user/moGrok Teams (grok.com; documentation: 'Grok Business')
- customGrok Enterprise
- per tokenAPI (usage-based, global endpoint)
- As APIAPI with Zero Data Retention (team setting)
- DeutschlandGPT
- Free
EUR 0, free permanently (pricing page, as of 2026-10-18)
- Pro (incl. Pro 5×)
Private pricing page (as of 2026-10-18, incl. VAT): Pro EUR 19 monthly or EUR 16 per month with annual billing (EUR 190/year); Pro 5× EUR 95 monthly or EUR 80 per month annually (EUR 950/year). Values for Pro 5× and annual totals taken from the page script of the price display.
- Business (incl. Business 5×)
Pricing page (as of 2026-10-18, excl. VAT): Business EUR 24 per user/month or EUR 20 with annual billing (EUR 240/year/user); Business 5× EUR 120 or EUR 100 annually (EUR 1,200/year/user); any number of users; 7-day free trial for the self-employed and teams of up to 20 users. API and usage-based features billed by consumption, token prices per model on the API page (e.g. Mistral Large 3 EUR 0.75 input / EUR 2.25 output per 1 million tokens; VAT not stated there). Monthly price of Business 5× taken from the page script of the price display.
- Enterprise
Custom, prices on request (pricing page, as of 2026-10-18)
Grok- Free (consumer: grok.com, apps, X)
0 USD (pricing page)
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
Plus 8 USD; Premium 30 USD; Super 100 USD; Ultra 200 USD per month, each excl. taxes; subscriptions are sold via X Subscription Corp. and include X features (pricing page). The Consumer FAQ still names 'SuperGrok' and 'SuperGrok Heavy'.
- Grok Teams (grok.com; documentation: 'Grok Business')
from 30 USD per user per month ('$30+/user/month'; seat types combinable), excl. taxes (pricing page)
- Grok Enterprise
Custom (pricing page: 'Custom', contact sales; payment by invoice/bank transfer only in the Enterprise plan)
- API (usage-based, global endpoint)
Per 1M tokens, in USD, below / from 200k prompt tokens (pricing page): grok-4.7 and grok-4.6 input 2.00 USD / 4.00 USD, cache 0.50 USD / 1.00 USD, output 6.00 USD / 12.00 USD; grok-4.5 input 2.00 USD / 4.00 USD, cache 0.30 USD / 0.60 USD, output 6.00 USD / 12.00 USD; grok-4.3 and grok-4.20 variants input 1.25 USD / 2.50 USD, cache 0.20 USD / 0.40 USD, output 2.50 USD / 5.00 USD; grok-build-0.1 input 1.00 USD / 2.00 USD, cache 0.20 USD / 0.40 USD, output 2.00 USD / 4.00 USD. Tools: web search, code execution, file search 5 USD per 1,000 calls each; X search 5 USD per 1,000 posts or 10 USD per 1,000 profiles; Collections search 2.50 USD per 1,000 calls. US endpoint 10 % surcharge.
- API with Zero Data Retention (team setting)
As API (ZDR surcharge not stated in the documentation)
- Free
- DeutschlandGPTyesall 4 plans
- Grokyesall 6 plans
- DeutschlandGPT
- Free
yes (limited messages per day, limited special applications, projects and file/image analysis, integrations; according to the plan comparison not all AI models, no meeting transcription; workflows, Cowork, Code and API billed by usage)
- Pro (incl. Pro 5×)
yes (all leading AI models, higher limits under the fair use policy, unlimited projects and integrations, Cowork, Code, Office and Chrome add-ins; Pro 5× with five times the quota; beyond the quota pay-as-you-go)
- Business (incl. Business 5×)
yes (all AI models, Cowork, Code, meeting transcription, central user management, SAML SSO, SCIM, white-labelling with logo/name, configurable deletion periods, professional secrecy mode under § 203 StGB self-activatable at no extra cost; workflows, Cowork, Code and API additionally billed by usage; Business 5× with five times the quota)
- Enterprise
yes (all Business benefits plus dedicated onboarding, white-labelling with own domain, payment by invoice, audit log, customer success manager, learning platform with certificates, chat widget billed by usage, automatic switch to budget models once the quota is used up)
Grok- Free (consumer: grok.com, apps, X)
yes (limited chat, agent, image and Build usage according to the pricing page)
- Plus / Premium / Super / Ultra (consumer: grok.com, apps, X subscription)
yes (from Plus: Grok Chat, Voice, Imagine, Build, API access and Cursor; from Premium: Grok Bot, latest models, video and image generation, 4x usage compared with Plus; Super/Ultra with 15x and 50x usage respectively compared with Plus)
- Grok Teams (grok.com; documentation: 'Grok Business')
yes (according to the Teams comparison table: Grok Chat, Imagine, video generation, Build, API access, Grok Bot, Cursor agent, pooled usage, team management, central billing, team-wide privacy settings, custom chat retention, SAML/OIDC SSO, combinable seat types; self-service by card. Business guide: connectors to Google Drive, Outlook, SharePoint, Teams, Salesforce, among others)
- Grok Enterprise
yes (as Teams; additionally, according to the pricing page, SCIM, audit logs and service accounts, spend controls, group settings, purchase on invoice, custom rate limits, dedicated infrastructure, 'Data residency', among others)
- API (usage-based, global endpoint)
yes (models grok-4.7, grok-4.6, grok-4.5, grok-4.3, grok-4.20, grok-build-0.1; tools such as web and X search, code execution; image, video and voice APIs)
- API with Zero Data Retention (team setting)
yes (as API; without functions that require storage: Files, Collections, Batch API, stateful Responses API, among others)
- Free
Evidence
- DeutschlandGPT8 sources
- Grok13 sources
- DeutschlandGPT
- PricingPricing page, retrieved 18 Oct 2026
- DeutschlandGPT for private users (Pro pricing)Pricing page, retrieved 18 Oct 2026
- Terms of use, version of 13.08.2026Terms and conditions, retrieved 18 Oct 2026
- Terms on data processing, version of 13.08.2026DPA, retrieved 18 Oct 2026
- Trust Center, as of 12 August 2026Trust Center, retrieved 18 Oct 2026
- Privacy policy, as of 12.10.2026Privacy notice, retrieved 18 Oct 2026
- AI usage limits & fair useDocumentation, retrieved 18 Oct 2026
- Platform APIProduct page, retrieved 18 Oct 2026
Grok- Pricing (developer documentation)Pricing page, retrieved 14 Oct 2026
- FAQ: SecurityDocumentation, retrieved 14 Oct 2026
- Regional EndpointsDocumentation, retrieved 18 Oct 2026
- FAQ: Grok Website / AppsDocumentation, retrieved 18 Oct 2026
- Grok Business / Enterprise User GuideDocumentation, retrieved 18 Oct 2026
- Pricing: Compare PlansPricing page, retrieved 18 Oct 2026
- SpaceXSI Privacy Policy (Last Updated 2026-10-11)Privacy notice, retrieved 18 Oct 2026
- Europe Privacy Policy Addendum (effective 2026-08-24)Privacy notice, retrieved 18 Oct 2026
- Terms of Service - Enterprise (Last Updated 2026-08-14)Terms and conditions, retrieved 18 Oct 2026
- SpaceXSI Data Processing Addendum (effective 2026-09-22)DPA, retrieved 14 Oct 2026
- SpaceXSI Subprocessor ListSub-processor list, retrieved 14 Oct 2026
- Public Summary of Training Content for Grok 4.7 (V1, 2026-09-21)Documentation, retrieved 14 Oct 2026
- FAQ - EnterpriseDocumentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
DeutschlandGPT compared with
Individual pages: DeutschlandGPT, Grok. All tools in the category: AI assistants & search.