DeutschlandGPT vs. You.com: data protection per plan

DeutschlandGPT (4 plans) and You.com (3 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.

Last updated: 18 Oct 2026 (latest review date of the tools shown)

Choose another tool Two tools from the same category open their dedicated comparison page.

Tool 1Tool 2Tool 3 (optional)

At a glance

Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.

Plan tier

All plans: each value is listed with the plans it applies to.

Overview: each value with the plans it applies to
Feature	DeutschlandGPT	You.com
Provider based in	DeutschlandGPT GmbH, Gabriele-Münter-Straße 3, 82110 Germering, Germany	SuSea, Inc., 417 Montgomery Street, Suite 800, San Francisco, CA 94104, USA
Plans recorded	4	3
Hosting	EU option: all 4 plans	US only: all 3 plans
Training on inputs	no: all 4 plans	no: all 3 plans
DPA	yes: all 4 plans	not documented: Free, Pay as you goyes: Enterprise
As of	18 Oct 2026	18 Oct 2026

Plans compared

Plan vs. planAll plans

DeutschlandGPT planYou.com plan

Plans of the same tier are preselected: the tier chosen in the tier switch, otherwise the tier of the plan you pick yourself. Plans you pick yourself stay. The address holds your selection and can be shared.

Comparison of DeutschlandGPT Enterprise vs. You.com Enterprise, one plan each, without rating
Feature	DeutschlandGPTEnterpriseTier: Enterprise · DeutschlandGPT GmbH · As of 18 Oct 2026	You.comEnterprise (custom)Tier: Enterprise · SuSea, Inc. · As of 18 Oct 2026

	yes	yes
Details: DPA available	yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector) Provider’s DPA	yes: public 'SuSea, Inc. Data Processing Addendum' (you.com/dpa, 'Last updated: December 12, 2025', linked in the footer of the pricing page); in the Trust Center, 'You.com DPA - March 2025' and 'You.com DPA - Security Addendum' are also available to view. According to its text, the DPA becomes part of the Master Subscription Agreement or another written/electronic agreement. Pricing page: 'DPA-ready'. Provider’s DPA

	no	no
Details: Training on inputs	Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.	Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. Additionally with ZDR: requests are not used for training, not sold to third parties and not sent to Google or Bing (documentation). MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5).

differs by plan	EU option	US only
Details: Data residency	DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).	Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.

	list available	list available
Details: List published	T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content) Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV Provider’s list	According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS) LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales) Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented Provider’s list

differs by plan	DPA Annex I: conversation histories…	Privacy notice: account and profile data…
Details: Data retention	DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.	Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' According to the documentation, ZDR applies to the Web Search API and Answer API and is activated by You.com on request (no self-service switch). MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'.

	custom	custom
Details: Price	Custom, prices on request (pricing page, as of 2026-10-18)	Custom (pricing page: 'Custom, Talk to our humans')
	yes	yes
Details: AI features included	yes (all Business benefits plus dedicated onboarding, white-labelling with own domain, payment by invoice, audit log, customer success manager, learning platform with certificates, chat widget billed by usage, automatic switch to budget models once the quota is used up)	yes (all APIs; according to the pricing page, custom load capacity and SLA support)

	5 sources	8 sources
Details: Sources with retrieval date	PricingPricing page, retrieved 18 Oct 2026 Terms of use, version of 13.08.2026Terms and conditions, retrieved 18 Oct 2026 Terms on data processing, version of 13.08.2026DPA, retrieved 18 Oct 2026 Trust Center, as of 12 August 2026Trust Center, retrieved 18 Oct 2026 Privacy policy, as of 12.10.2026Privacy notice, retrieved 18 Oct 2026 All details on the tool page	PricingPricing page, retrieved 18 Oct 2026 Privacy Policy (as of 2026-09-22)Privacy notice, retrieved 18 Oct 2026 Terms & Conditions (as of 2024-08-27)Terms and conditions, retrieved 18 Oct 2026 Zero Data Retention (ZDR)Documentation, retrieved 14 Oct 2026 You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report)Trust Center, retrieved 14 Oct 2026 You.com Trust Center – SubprocessorsSub-processor list, retrieved 14 Oct 2026 SuSea, Inc. Data Processing Addendum (as of 2025-12-12)DPA, retrieved 14 Oct 2026 You.com Master Services Agreement (Online), MSA v.121525 (December 2025)Terms and conditions, retrieved 18 Oct 2026 All details on the tool page

Contract / DPA

: DeutschlandGPT Enterpriseyes; You.com Enterpriseyes; DeutschlandGPT Enterprise
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA
You.com Enterprise
yes: public 'SuSea, Inc. Data Processing Addendum' (you.com/dpa, 'Last updated: December 12, 2025', linked in the footer of the pricing page); in the Trust Center, 'You.com DPA - March 2025' and 'You.com DPA - Security Addendum' are also available to view. According to its text, the DPA becomes part of the Master Subscription Agreement or another written/electronic agreement. Pricing page: 'DPA-ready'.
Provider’s DPA

Training

: DeutschlandGPT Enterpriseno; You.com Enterpriseno; DeutschlandGPT Enterprise
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
You.com Enterprise
Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. Additionally with ZDR: requests are not used for training, not sold to third parties and not sent to Google or Bing (documentation). MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5).

Hosting

differs by plan: DeutschlandGPT EnterpriseEU option; You.com EnterpriseUS only; DeutschlandGPT Enterprise
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
You.com Enterprise
Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.

Sub-processors

: DeutschlandGPT Enterpriselist available; You.com Enterpriselist available; DeutschlandGPT Enterprise
T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Provider’s list
You.com Enterprise
According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS)
LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser
Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales)
Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing
In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented
Provider’s list

Retention

differs by plan: DeutschlandGPT EnterpriseDPA Annex I: conversation histories…; You.com EnterprisePrivacy notice: account and profile data…; DeutschlandGPT EnterpriseDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
You.com EnterprisePrivacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' According to the documentation, ZDR applies to the Web Search API and Answer API and is activated by You.com on request (no self-service switch). MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'.

Price

: DeutschlandGPT Enterprisecustom; You.com Enterprisecustom; DeutschlandGPT Enterprise
Custom, prices on request (pricing page, as of 2026-10-18)
You.com Enterprise
Custom (pricing page: 'Custom, Talk to our humans')
: DeutschlandGPT Enterpriseyes; You.com Enterpriseyes; DeutschlandGPT Enterprise
yes (all Business benefits plus dedicated onboarding, white-labelling with own domain, payment by invoice, audit log, customer success manager, learning platform with certificates, chat widget billed by usage, automatic switch to budget models once the quota is used up)
You.com Enterprise
yes (all APIs; according to the pricing page, custom load capacity and SLA support)

Evidence

: DeutschlandGPT Enterprise5 sources; You.com Enterprise8 sources; DeutschlandGPT Enterprise
PricingPricing page, retrieved 18 Oct 2026
Terms of use, version of 13.08.2026Terms and conditions, retrieved 18 Oct 2026
Terms on data processing, version of 13.08.2026DPA, retrieved 18 Oct 2026
Trust Center, as of 12 August 2026Trust Center, retrieved 18 Oct 2026
Privacy policy, as of 12.10.2026Privacy notice, retrieved 18 Oct 2026
All details on the tool page
You.com Enterprise
PricingPricing page, retrieved 18 Oct 2026
Privacy Policy (as of 2026-09-22)Privacy notice, retrieved 18 Oct 2026
Terms & Conditions (as of 2024-08-27)Terms and conditions, retrieved 18 Oct 2026
Zero Data Retention (ZDR)Documentation, retrieved 14 Oct 2026
You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report)Trust Center, retrieved 14 Oct 2026
You.com Trust Center – SubprocessorsSub-processor list, retrieved 14 Oct 2026
SuSea, Inc. Data Processing Addendum (as of 2025-12-12)DPA, retrieved 14 Oct 2026
You.com Master Services Agreement (Online), MSA v.121525 (December 2025)Terms and conditions, retrieved 18 Oct 2026
All details on the tool page

Comparison of DeutschlandGPT vs. You.com by feature, without rating
Feature	DeutschlandGPTDeutschlandGPT GmbH · 4 plans · As of 18 Oct 2026	You.comSuSea, Inc. · 3 plans · As of 18 Oct 2026

differs by tool	yesall 4 plans	not publicly documentedFree (Web Search API via MCP), Pay as you go (API) yesEnterprise (custom)
Details: DPA available	Free yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector) Provider’s DPA Pro (incl. Pro 5×) yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector) Provider’s DPA Business (incl. Business 5×) yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector) Provider’s DPA Enterprise yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector) Provider’s DPA	Free (Web Search API via MCP) not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA. Enterprise (custom) yes: public 'SuSea, Inc. Data Processing Addendum' (you.com/dpa, 'Last updated: December 12, 2025', linked in the footer of the pricing page); in the Trust Center, 'You.com DPA - March 2025' and 'You.com DPA - Security Addendum' are also available to view. According to its text, the DPA becomes part of the Master Subscription Agreement or another written/electronic agreement. Pricing page: 'DPA-ready'. Provider’s DPA Pay as you go (API) not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA.

	noall 4 plans	noall 3 plans
Details: Training on inputs	Free Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan. Pro (incl. Pro 5×) Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan. Business (incl. Business 5×) Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan. Enterprise Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.	Free (Web Search API via MCP) Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'. Enterprise (custom) Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. Additionally with ZDR: requests are not used for training, not sold to third parties and not sent to Google or Bing (documentation). MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5). Pay as you go (API) Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5). By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'.

differs by tool	EU optionall 4 plans	US onlyall 3 plans
Details: Data residency	Free DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated). Pro (incl. Pro 5×) DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated). Business (incl. Business 5×) DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated). Enterprise DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).	Free (Web Search API via MCP) Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented. Enterprise (custom) Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented. Pay as you go (API) Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.

	list availableall 4 plans	list availableall 3 plans
Details: List published	Free T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content) Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV Provider’s list Pro (incl. Pro 5×) T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content) Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV Provider’s list Business (incl. Business 5×) T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content) Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV Provider’s list Enterprise T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content) Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV Provider’s list	Free (Web Search API via MCP) According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS) LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales) Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented Provider’s list Enterprise (custom) According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS) LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales) Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented Provider’s list Pay as you go (API) According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS) LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales) Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented Provider’s list

differs by tool	DPA Annex I: conversation histories…all 4 plans	Privacy notice: account and profile data…all 3 plans
Details: Data retention	FreeDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center. Pro (incl. Pro 5×)DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center. Business (incl. Business 5×)DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center. EnterpriseDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.	Free (Web Search API via MCP)Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' Enterprise (custom)Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' According to the documentation, ZDR applies to the Web Search API and Answer API and is activated by You.com on request (no self-service switch). MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'. Pay as you go (API)Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'.

differs by tool	0 EURFree 19 EUR/mo… (further prices in the details)Pro (incl. Pro 5×) 24 EUR/user/mo… (further prices in the details)Business (incl. Business 5×) customEnterprise	freeFree (Web Search API via MCP) customEnterprise (custom) several tiersPay as you go (API)
Details: Price	Free EUR 0, free permanently (pricing page, as of 2026-10-18) Pro (incl. Pro 5×) Private pricing page (as of 2026-10-18, incl. VAT): Pro EUR 19 monthly or EUR 16 per month with annual billing (EUR 190/year); Pro 5× EUR 95 monthly or EUR 80 per month annually (EUR 950/year). Values for Pro 5× and annual totals taken from the page script of the price display. Business (incl. Business 5×) Pricing page (as of 2026-10-18, excl. VAT): Business EUR 24 per user/month or EUR 20 with annual billing (EUR 240/year/user); Business 5× EUR 120 or EUR 100 annually (EUR 1,200/year/user); any number of users; 7-day free trial for the self-employed and teams of up to 20 users. API and usage-based features billed by consumption, token prices per model on the API page (e.g. Mistral Large 3 EUR 0.75 input / EUR 2.25 output per 1 million tokens; VAT not stated there). Monthly price of Business 5× taken from the page script of the price display. Enterprise Custom, prices on request (pricing page, as of 2026-10-18)	Free (Web Search API via MCP) Free (pricing page) Enterprise (custom) Custom (pricing page: 'Custom, Talk to our humans') Pay as you go (API) Web Search API 5 USD per 1,000 calls; Contents API 1 USD per 1,000 pages; Answer API 5 USD per 1,000 calls; Research API per 1,000 calls: Lite 12 USD, Standard 50 USD, Deep 100 USD, Exhaustive 450 USD, Frontier 1,200 USD; Finance Research Deep 110 USD, Exhaustive 500 USD per 1,000 calls; no minimum purchase, no platform fee (pricing page, in USD); according to MSA (Online) 5.8, the fees do not include any taxes, including value-added tax ('value-added')
	yesall 4 plans	yesall 3 plans
Details: AI features included	Free yes (limited messages per day, limited special applications, projects and file/image analysis, integrations; according to the plan comparison not all AI models, no meeting transcription; workflows, Cowork, Code and API billed by usage) Pro (incl. Pro 5×) yes (all leading AI models, higher limits under the fair use policy, unlimited projects and integrations, Cowork, Code, Office and Chrome add-ins; Pro 5× with five times the quota; beyond the quota pay-as-you-go) Business (incl. Business 5×) yes (all AI models, Cowork, Code, meeting transcription, central user management, SAML SSO, SCIM, white-labelling with logo/name, configurable deletion periods, professional secrecy mode under § 203 StGB self-activatable at no extra cost; workflows, Cowork, Code and API additionally billed by usage; Business 5× with five times the quota) Enterprise yes (all Business benefits plus dedicated onboarding, white-labelling with own domain, payment by invoice, audit log, customer success manager, learning platform with certificates, chat widget billed by usage, automatic switch to budget models once the quota is used up)	Free (Web Search API via MCP) yes (Web Search via MCP server, up to 100 requests per day, without API key or account) Enterprise (custom) yes (all APIs; according to the pricing page, custom load capacity and SLA support) Pay as you go (API) yes (Web Search, Contents, Answer, Research and Finance Research API; all endpoints, SDKs and MCP)

	8 sources	8 sources
Details: Sources with retrieval date	PricingPricing page, retrieved 18 Oct 2026 DeutschlandGPT for private users (Pro pricing)Pricing page, retrieved 18 Oct 2026 Terms of use, version of 13.08.2026Terms and conditions, retrieved 18 Oct 2026 Terms on data processing, version of 13.08.2026DPA, retrieved 18 Oct 2026 Trust Center, as of 12 August 2026Trust Center, retrieved 18 Oct 2026 Privacy policy, as of 12.10.2026Privacy notice, retrieved 18 Oct 2026 AI usage limits & fair useDocumentation, retrieved 18 Oct 2026 Platform APIProduct page, retrieved 18 Oct 2026 All details on the tool page	PricingPricing page, retrieved 18 Oct 2026 Privacy Policy (as of 2026-09-22)Privacy notice, retrieved 18 Oct 2026 Terms & Conditions (as of 2024-08-27)Terms and conditions, retrieved 18 Oct 2026 Zero Data Retention (ZDR)Documentation, retrieved 14 Oct 2026 You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report)Trust Center, retrieved 14 Oct 2026 You.com Trust Center – SubprocessorsSub-processor list, retrieved 14 Oct 2026 SuSea, Inc. Data Processing Addendum (as of 2025-12-12)DPA, retrieved 14 Oct 2026 You.com Master Services Agreement (Online), MSA v.121525 (December 2025)Terms and conditions, retrieved 18 Oct 2026 All details on the tool page

Contract / DPA

differs by tool: DeutschlandGPTyesall 4 plans; You.com
not publicly documentedFree (Web Search API via MCP), Pay as you go (API)
yesEnterprise (custom); DeutschlandGPT
Free
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA
Pro (incl. Pro 5×)
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA
Business (incl. Business 5×)
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA
Enterprise
yes (public terms on data processing, version of 13.08.2026, based on the EU standard contractual clauses under Art. 28(7) GDPR with technical and organisational measures in Annex III and sub-processors in Annex IV; according to the terms of use section 12.4 incorporated without restriction by plan where personal data is processed on behalf of the customer; in addition a DORA supplementary agreement for the financial sector)
Provider’s DPA
You.com
Free (Web Search API via MCP)
not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA.
Enterprise (custom)
yes: public 'SuSea, Inc. Data Processing Addendum' (you.com/dpa, 'Last updated: December 12, 2025', linked in the footer of the pricing page); in the Trust Center, 'You.com DPA - March 2025' and 'You.com DPA - Security Addendum' are also available to view. According to its text, the DPA becomes part of the Master Subscription Agreement or another written/electronic agreement. Pricing page: 'DPA-ready'.
Provider’s DPA
Pay as you go (API)
not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA.

Training

: DeutschlandGPTnoall 4 plans; You.comnoall 3 plans; DeutschlandGPT
Free
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
Pro (incl. Pro 5×)
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
Business (incl. Business 5×)
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
Enterprise
Privacy policy section on Dialog/API: 'your inputs and the generated answers are not used for training AI models' (translated). Trust Center: training on customer data 'does not take place' (translated); zero data retention is stated to be agreed with all model providers ('no storage, no use for training', translated). Documentation does not differentiate by plan.
You.com
Free (Web Search API via MCP)
Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'.
Enterprise (custom)
Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. Additionally with ZDR: requests are not used for training, not sold to third parties and not sent to Google or Bing (documentation). MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5).
Pay as you go (API)
Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5). By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'.

Hosting

differs by tool: DeutschlandGPTEU optionall 4 plans; You.comUS onlyall 3 plans; DeutschlandGPT
Free
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
Pro (incl. Pro 5×)
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
Business (incl. Business 5×)
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
Enterprise
DPA Annex III: persistent data stored exclusively in Germany (Open Telekom Cloud of T-Systems, region eu-de, Magdeburg and Biere; in addition Hetzner Nuremberg and Falkenstein); model inference in data centres in the EU/EEA; administrative access and support only from the EU. Trust Center: AI processing including in Frankfurt (Azure EU, AWS Bedrock, OpenAI EU), Karlsruhe (IONOS, self-hosted open-source models), Dublin (AWS/Azure, alternative for Claude), Amsterdam (Google Vertex), Paris (Azure France, Mistral). According to the Trust Center, AI processing with US providers runs 'via EU subsidiaries' (translated). Provider's marketing claim (quoted only): 'provider and operator are based in Germany, hence outside US jurisdiction' (translated).
You.com
Free (Web Search API via MCP)
Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.
Enterprise (custom)
Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.
Pay as you go (API)
Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.

Sub-processors

: DeutschlandGPTlist availableall 4 plans; You.comlist availableall 3 plans; DeutschlandGPT
Free
T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Provider’s list
Pro (incl. Pro 5×)
T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Provider’s list
Business (incl. Business 5×)
T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Provider’s list
Enterprise
T-Systems International GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: yes
Hetzner Online GmbH (Germany): operation of AI models and storage of persistent data; location DE; in § 203 mode: no
IONOS SE (Germany): operation of AI models; location EU; in § 203 mode: no
Microsoft Ireland Operations Limited (Azure, Ireland): operation of AI models; location EU; in § 203 mode: yes
Amazon Web Services EMEA SARL (Luxembourg): operation of AI models; location EU; in § 203 mode: yes
Google Cloud EMEA Limited (Ireland): operation of AI models; location EU; in § 203 mode: yes
Mistral AI SAS (France): operation of AI models; location EU; in § 203 mode: no
OpenAI Ireland Ltd (Ireland): operation of AI models; location EU; in § 203 mode: no
Linkup Technologies SAS (France): web search (Search API), transmission of the search query without storage; location EU (France); in § 203 mode: yes
Functional Software, Inc. (Sentry, USA): error and crash reporting without user content; processing in the EU data centre, company seat USA; in § 203 mode: yes (without user content)
Further sub-processors only for optional additional services that the customer activates in the organisation settings (DPA section 3); these are added to Annex IV
Provider’s list
You.com
Free (Web Search API via MCP)
According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS)
LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser
Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales)
Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing
In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented
Provider’s list
Enterprise (custom)
According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS)
LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser
Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales)
Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing
In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented
Provider’s list
Pay as you go (API)
According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS)
LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser
Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales)
Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing
In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented
Provider’s list

Retention

differs by tool: DeutschlandGPTDPA Annex I: conversation histories…all 4 plans; You.comPrivacy notice: account and profile data…all 3 plans; DeutschlandGPT
FreeDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
Pro (incl. Pro 5×)DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
Business (incl. Business 5×)DPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
EnterpriseDPA Annex I: conversation histories 'configurable by the controller; by default until actively deleted by the user' (translated); files configurable in Dialog, in document folders/special applications for the term of the contract or until deletion. After the end of the contract, deletion or return (clause 10(d) of the SCCs). Database backups kept for 14 days (Annex III). Zero data retention at model providers according to the Trust Center.
You.com
Free (Web Search API via MCP)Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.'
Enterprise (custom)Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' According to the documentation, ZDR applies to the Web Search API and Answer API and is activated by You.com on request (no self-service switch). MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'.
Pay as you go (API)Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'.

Price

differs by tool: DeutschlandGPT
0 EURFree
19 EUR/mo… (further prices in the details)Pro (incl. Pro 5×)
24 EUR/user/mo… (further prices in the details)Business (incl. Business 5×)
customEnterprise; You.com
freeFree (Web Search API via MCP)
customEnterprise (custom)
several tiersPay as you go (API); DeutschlandGPT
Free
EUR 0, free permanently (pricing page, as of 2026-10-18)
Pro (incl. Pro 5×)
Private pricing page (as of 2026-10-18, incl. VAT): Pro EUR 19 monthly or EUR 16 per month with annual billing (EUR 190/year); Pro 5× EUR 95 monthly or EUR 80 per month annually (EUR 950/year). Values for Pro 5× and annual totals taken from the page script of the price display.
Business (incl. Business 5×)
Pricing page (as of 2026-10-18, excl. VAT): Business EUR 24 per user/month or EUR 20 with annual billing (EUR 240/year/user); Business 5× EUR 120 or EUR 100 annually (EUR 1,200/year/user); any number of users; 7-day free trial for the self-employed and teams of up to 20 users. API and usage-based features billed by consumption, token prices per model on the API page (e.g. Mistral Large 3 EUR 0.75 input / EUR 2.25 output per 1 million tokens; VAT not stated there). Monthly price of Business 5× taken from the page script of the price display.
Enterprise
Custom, prices on request (pricing page, as of 2026-10-18)
You.com
Free (Web Search API via MCP)
Free (pricing page)
Enterprise (custom)
Custom (pricing page: 'Custom, Talk to our humans')
Pay as you go (API)
Web Search API 5 USD per 1,000 calls; Contents API 1 USD per 1,000 pages; Answer API 5 USD per 1,000 calls; Research API per 1,000 calls: Lite 12 USD, Standard 50 USD, Deep 100 USD, Exhaustive 450 USD, Frontier 1,200 USD; Finance Research Deep 110 USD, Exhaustive 500 USD per 1,000 calls; no minimum purchase, no platform fee (pricing page, in USD); according to MSA (Online) 5.8, the fees do not include any taxes, including value-added tax ('value-added')
: DeutschlandGPTyesall 4 plans; You.comyesall 3 plans; DeutschlandGPT
Free
yes (limited messages per day, limited special applications, projects and file/image analysis, integrations; according to the plan comparison not all AI models, no meeting transcription; workflows, Cowork, Code and API billed by usage)
Pro (incl. Pro 5×)
yes (all leading AI models, higher limits under the fair use policy, unlimited projects and integrations, Cowork, Code, Office and Chrome add-ins; Pro 5× with five times the quota; beyond the quota pay-as-you-go)
Business (incl. Business 5×)
yes (all AI models, Cowork, Code, meeting transcription, central user management, SAML SSO, SCIM, white-labelling with logo/name, configurable deletion periods, professional secrecy mode under § 203 StGB self-activatable at no extra cost; workflows, Cowork, Code and API additionally billed by usage; Business 5× with five times the quota)
Enterprise
yes (all Business benefits plus dedicated onboarding, white-labelling with own domain, payment by invoice, audit log, customer success manager, learning platform with certificates, chat widget billed by usage, automatic switch to budget models once the quota is used up)
You.com
Free (Web Search API via MCP)
yes (Web Search via MCP server, up to 100 requests per day, without API key or account)
Enterprise (custom)
yes (all APIs; according to the pricing page, custom load capacity and SLA support)
Pay as you go (API)
yes (Web Search, Contents, Answer, Research and Finance Research API; all endpoints, SDKs and MCP)

Evidence

: DeutschlandGPT8 sources; You.com8 sources; DeutschlandGPT
PricingPricing page, retrieved 18 Oct 2026
DeutschlandGPT for private users (Pro pricing)Pricing page, retrieved 18 Oct 2026
Terms of use, version of 13.08.2026Terms and conditions, retrieved 18 Oct 2026
Terms on data processing, version of 13.08.2026DPA, retrieved 18 Oct 2026
Trust Center, as of 12 August 2026Trust Center, retrieved 18 Oct 2026
Privacy policy, as of 12.10.2026Privacy notice, retrieved 18 Oct 2026
AI usage limits & fair useDocumentation, retrieved 18 Oct 2026
Platform APIProduct page, retrieved 18 Oct 2026
All details on the tool page
You.com
PricingPricing page, retrieved 18 Oct 2026
Privacy Policy (as of 2026-09-22)Privacy notice, retrieved 18 Oct 2026
Terms & Conditions (as of 2024-08-27)Terms and conditions, retrieved 18 Oct 2026
Zero Data Retention (ZDR)Documentation, retrieved 14 Oct 2026
You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report)Trust Center, retrieved 14 Oct 2026
You.com Trust Center – SubprocessorsSub-processor list, retrieved 14 Oct 2026
SuSea, Inc. Data Processing Addendum (as of 2025-12-12)DPA, retrieved 14 Oct 2026
You.com Master Services Agreement (Online), MSA v.121525 (December 2025)Terms and conditions, retrieved 18 Oct 2026
All details on the tool page

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.

More comparisons

DeutschlandGPT compared with

You.com compared with

Individual pages: DeutschlandGPT, You.com. All tools in the category: AI assistants & search.