DeutschlandGPT vs. innoGPT: data protection per plan

yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)

yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)

yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)

yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

yes (DPA under Art. 28 GDPR according to T&Cs § 9 and the page for persons bound by professional secrecy; in addition a confidentiality undertaking as a contributing person under § 203(4) StGB); contract texts not publicly reviewed

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.

Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.

Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.

Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Pricing page: 'Vertraglich zugesicherter Verzicht auf Modelltraining' (translated: contractually assured waiver of model training). T&Cs § 9 and app privacy policy section 4: no use of customer data or content for training; AI providers under contracts that exclude training on customer data.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).

DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).

DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).

DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

As Business; in addition, according to the pricing page and the page for persons bound by professional secrecy, 'EU-Hosting in Berlin' (ISO 27001 certified) with the § 203 licence; the customer controls which models are enabled. T&Cs § 9: processing generally on servers in the EU; non-EU models only where expressly selected.

As Business; in addition, according to the pricing page, self-hosting/on-premises possible (scope not publicly documented).

• T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
• Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
• IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
• Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
• Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
• Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
• Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
• OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
• Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
• Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
• Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV

• T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
• Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
• IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
• Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
• Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
• Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
• Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
• OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
• Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
• Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
• Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV

• T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
• Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
• IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
• Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
• Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
• Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
• Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
• OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
• Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
• Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
• Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV

• T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
• Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
• IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
• Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
• Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
• Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
• Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
• OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
• Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
• Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
• Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

EUR 0, free permanently (pricing page, as of 2026-10-18)

Private pricing page (as of 2026-10-18, incl. VAT): Pro EUR 19 monthly or EUR 16 per month with annual billing (EUR 190/year); Pro 5× EUR 95 monthly or EUR 80 per month annually (EUR 950/year). Values for Pro 5× and annual totals taken from the page script of the price display.

Pricing page (as of 2026-10-18, excl. VAT): Business EUR 24 per user/month or EUR 20 with annual billing (EUR 240/year/user); Business 5× EUR 120 or EUR 100 annually (EUR 1,200/year/user); any number of users; 7-day free trial for the self-employed and teams of up to 20 users. API and usage-based features billed by consumption, token prices per model on the API page (e.g. Mistral Large 3 EUR 0.75 input / EUR 2.25 output per 1 million tokens; VAT not stated there). Monthly price of Business 5× taken from the page script of the price display.

Custom, prices on request (pricing page, as of 2026-10-18)

EUR 9.90 per month incl. VAT; with annual billing ('1 Monat gratis', one month free) EUR 9.08 per month; 7-day free trial without payment details (pricing page, as of 2026-10-18)

EUR 19 per month incl. VAT; with annual billing EUR 17.42 per month (pricing page, as of 2026-10-18)

EUR 34.90 per month incl. VAT for up to 5 people in a household; with annual billing EUR 31.99 per month (pricing page, as of 2026-10-18)

EUR 49.90 per month incl. VAT; with annual billing EUR 45.74 per month (pricing page, as of 2026-10-18)

Pricing page (as of 2026-10-18, excl. VAT): Business EUR 25 per user/month, with annual billing EUR 22.92; Business Max licence (higher individual premium budget, can be combined with Business licences) EUR 109 per user/month, annually EUR 99. One-off top-up packs EUR 5 to 1,000. Add-ons: PII filter from EUR 69/month, video generation per generation, audio overview 3 generations/month free, external API per token (token prices per model on the models page, e.g. gpt-5 EUR 1.29 input / EUR 10.29 output per million tokens; VAT not stated there). 7-day free trial (standard models only).

EUR 25 per user/month excl. VAT, from 20 licences, on request only (pricing page, as of 2026-10-18); according to the pricing page the trial is not yet § 203 compliant

Custom, contact sales; possible from 1,000+ users; pilot programme 3 months from EUR 8,500 (pricing page, as of 2026-10-18)

yes (limited messages per day, limited special applications, projects and file/image analysis, integrations; according to the plan comparison not all AI models, no meeting transcription; workflows, Cowork, Code and API billed by usage)

yes (all leading AI models, higher limits under the fair use policy, unlimited projects and integrations, Cowork, Code, Office and Chrome add-ins; Pro 5× with five times the quota; beyond the quota pay-as-you-go)

yes (all AI models, Cowork, Code, meeting transcription, central user management, SAML SSO, SCIM, white-labelling with logo/name, configurable deletion periods, professional secrecy mode under § 203 StGB self-activatable at no extra cost; workflows, Cowork, Code and API additionally billed by usage; Business 5× with five times the quota)

yes (all Business benefits plus dedicated onboarding, white-labelling with own domain, payment by invoice, audit log, customer success manager, learning platform with certificates, chat widget billed by usage, automatic switch to budget models once the quota is used up)

yes (unlimited standard messages with the 'innoGPT Standard' model; scope of premium models for this plan not stated on the pricing page)

yes (unlimited standard messages; all AI models, premium models included within a monthly budget)

yes (unlimited standard messages; all AI models within the monthly budget)

yes (everything in Personal; according to the pricing page 'Rund 3× mehr Premium als Personal' (translated: around 3× more premium than Personal); image generation, Deep Research)

yes (all features, team collaboration, SSO/SAML at extra cost, up to 1,000 users; premium models via a shared team budget; add-ons: PII filter, video generation, audio overview, external OpenAI-compatible API)

yes (main Business features according to the pricing page, 'scope growing continuously' (translated); confidentiality undertaking under § 203(4) of the German Criminal Code (StGB); activation only on request after review)

yes (organisation-wide rollout with own governance; § 203 licence possible; self-hosting/on-premises; dedicated support manager; custom SLAs)