Google Gemini vs. innoGPT: data protection per plan

not publicly documented (Hub names the Google Terms of Service and Generative AI Prohibited Use Policy; no DPA mentioned, q1)

no for Unpaid Services (according to q3, the DPA applies to Paid Services); special case EEA/Switzerland/UK see details

not publicly documented (Hub names the Google Terms of Service and Generative AI Prohibited Use Policy; no DPA mentioned, q1)

yes (Cloud Data Processing Addendum; according to q2, the Gemini app is a Core Service for most Workspace editions)

yes (Cloud Data Processing Addendum; according to q2, the Gemini app is a Core Service for most Workspace editions)

yes (Cloud Data Processing Addendum, q2)

yes (Cloud Data Processing Addendum; according to q2, the Gemini app is a Core Service for most Workspace editions)

yes (Cloud Data Processing Addendum, q2)

yes ("Data Processing Addendum for Products Where Google is a Data Processor", q3)

yes (Cloud Data Processing Addendum, Google Cloud)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

yes (DPA under Art. 28 GDPR according to T&Cs § 9 and the page for persons bound by professional secrecy; in addition a confidentiality undertaking as a contributing person under § 203(4) StGB); contract texts not publicly reviewed

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

"Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers." (Keep Activity on). Can be switched off via "Keep Activity"; temporary chats are not used for improvement with human reviewers (q1). A difference between Free, Plus, Pro and Ultra is not documented in the Hub (same privacy notice for "Gemini Apps").

"When you use Unpaid Services, including, for example, Google AI Studio and the unpaid quota on Gemini API, Google uses the content you submit to the Services and any generated responses to provide, improve, and develop Google products ... human reviewers may read, annotate, and process your API input and output." However: "If you're in the European Economic Area, Switzerland, or the United Kingdom, the terms under 'How Google uses Your Data' in 'Paid Services' apply to all Services, including Google AI Studio and unpaid quota in the Gemini API" (q3). Pricing page: "Used to improve our products: Yes" in the Free Tier (q8).

"Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers." (Keep Activity on). Can be switched off via "Keep Activity"; temporary chats are not used for improvement with human reviewers (q1). A difference between Free, Plus, Pro and Ultra is not documented in the Hub (same privacy notice for "Gemini Apps").

"Your content is not human reviewed or otherwise used for Generative AI model training outside your domain without permission." (q2). Gemini app: "Your chats and uploaded files won't be reviewed by human reviewers or otherwise used to train generative AI models outside of your domain without your permission." (q2)

"Your content is not human reviewed or otherwise used for Generative AI model training outside your domain without permission." (q2). Gemini app: "Your chats and uploaded files won't be reviewed by human reviewers or otherwise used to train generative AI models outside of your domain without your permission." (q2)

As Workspace Business: "Your chats and uploaded files won't be reviewed by human reviewers or otherwise used to train generative AI models outside of your domain without your permission." (q2, applies to "business, education, and public sector customers")

"Your content is not human reviewed or otherwise used for Generative AI model training outside your domain without permission." (q2). Gemini app: "Your chats and uploaded files won't be reviewed by human reviewers or otherwise used to train generative AI models outside of your domain without your permission." (q2)

As Workspace Business: "Your chats and uploaded files won't be reviewed by human reviewers or otherwise used to train generative AI models outside of your domain without your permission." (q2, applies to "business, education, and public sector customers")

"When you use Paid Services, ... Google doesn't use your prompts (including associated system instructions, cached content, and files ...) or responses to improve our products, and will process your prompts and responses in accordance with the Data Processing Addendum for Products Where Google is a Data Processor." (q3). Pricing page: "Used to improve our products: No" (q8).

"Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform" (q4).

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Pricing page: 'Vertraglich zugesicherter Verzicht auf Modelltraining' (translated: contractually assured waiver of model training). T&Cs § 9 and app privacy policy section 4: no use of customer data or content for training; AI providers under contracts that exclude training on customer data.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Google Privacy Policy (Effective 2026-10-12), section Data transfers: "We maintain servers around the world and your information may be processed on servers located outside of the country where you live." A Gemini-specific statement on location or a choice of region is not documented in the Gemini Apps Privacy Hub (q1). Provider: Google Ireland Limited in the EEA and Switzerland, otherwise Google LLC.

not publicly documented for Unpaid Services (for Paid Services, q3 states storage/caching "in any country in which Google or its agents maintain facilities").

Google Privacy Policy (Effective 2026-10-12), section Data transfers: "We maintain servers around the world and your information may be processed on servers located outside of the country where you live." A Gemini-specific statement on location or a choice of region is not documented in the Gemini Apps Privacy Hub (q1). Provider: Google Ireland Limited in the EEA and Switzerland, otherwise Google LLC.

not publicly documented: Workspace Admin Help "Data covered by data regions" (as of 2026-10-09) does not list Business Starter among the editions with Data Regions, so a choice of region is not available; the page does not state a storage location without a Data Regions policy (q14).

Workspace Admin Help "Data covered by data regions" (as of 2026-10-09): prompts and responses of the "Gemini app" and of "Google Workspace with Gemini" are covered data; region USA or Europe. Business Standard and Business Plus include Fundamental Data Regions: only storage (at rest) is in the selected region; processing "in use" (i.e. including Gemini processing) is not covered; this is only provided by Enterprise Data Regions (Enterprise Plus or add-on). Excluded: Gemini Notebook as well as logs and cached content (q14; likewise q2 on Gemini Notebook).

Workspace Admin Help "Data covered by data regions" (as of 2026-10-09): Education Fundamentals is not supported by Data Regions (q14); a storage location for this edition is not otherwise documented.

Workspace Admin Help "Data covered by data regions" (as of 2026-10-09): prompts and responses of the "Gemini app" and of "Google Workspace with Gemini" are covered data; region USA or Europe. Enterprise Starter and Enterprise Standard: Fundamental Data Regions (storage at rest); Enterprise Plus: Enterprise Data Regions, which also cover processing "in use" (alternatively add-on or Assured Controls). Excluded: Gemini Notebook as well as logs and cached content (q14; likewise q2 on Gemini Notebook).

Workspace Admin Help "Data covered by data regions" (as of 2026-10-09): Education Standard and Education Plus include "Data Regions for Education". This covers prompts and responses of the Gemini app and of Google Workspace with Gemini at rest (region USA or Europe), but not processing "in use" (q14). Not separately reviewed for public sector editions.

"This data may be stored transiently or cached in any country in which Google or its agents maintain facilities." (q3). An EU data residency option for the Gemini Developer API is not documented in q3.

Via jurisdictional multi-region endpoints (e.g. EU), ML processing remains in the region; data at rest remains at the selected location; the EU endpoint covers only EU Member States, not the UK/Switzerland; global endpoints are separate (q5).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

As Business; in addition, according to the pricing page and the page for persons bound by professional secrecy, 'EU-Hosting in Berlin' (ISO 27001 certified) with the § 203 licence; the customer controls which models are enabled. T&Cs § 9: processing generally on servers in the EU; non-EU models only where expressly selected.

As Business; in addition, according to the pricing page, self-hosting/on-premises possible (scope not publicly documented).

• not publicly documented (Hub names "Google's trained service providers" as human reviewers, q1; no list)

• not publicly documented

• not publicly documented (Hub names "Google's trained service providers" as human reviewers, q1; no list)

• Workspace sub-processor list (as of 2026-10-19, q7): no Gemini-specific entries; Gemini, as a Core Service, falls under the entries for "All Google Workspace Core Services and Cloud Identity Services" (activities Technical Support, Data Center Operations, Security Risk Detection, Service Maintenance; third parties and Google group companies with countries of processing): https://workspace.google.com/terms/subprocessors/

• Workspace sub-processor list (as of 2026-10-19, q7): no Gemini-specific entries; Gemini, as a Core Service, falls under the entries for "All Google Workspace Core Services and Cloud Identity Services" (activities Technical Support, Data Center Operations, Security Risk Detection, Service Maintenance; third parties and Google group companies with countries of processing): https://workspace.google.com/terms/subprocessors/

• Workspace sub-processor list (as of 2026-10-19, q7): no Gemini-specific entries; Gemini, as a Core Service, falls under the entries for "All Google Workspace Core Services and Cloud Identity Services" (activities Technical Support, Data Center Operations, Security Risk Detection, Service Maintenance; third parties and Google group companies with countries of processing): https://workspace.google.com/terms/subprocessors/

• Workspace sub-processor list (as of 2026-10-19, q7): no Gemini-specific entries; Gemini, as a Core Service, falls under the entries for "All Google Workspace Core Services and Cloud Identity Services" (activities Technical Support, Data Center Operations, Security Risk Detection, Service Maintenance; third parties and Google group companies with countries of processing): https://workspace.google.com/terms/subprocessors/

• Workspace sub-processor list (as of 2026-10-19, q7): no Gemini-specific entries; Gemini, as a Core Service, falls under the entries for "All Google Workspace Core Services and Cloud Identity Services" (activities Technical Support, Data Center Operations, Security Risk Detection, Service Maintenance; third parties and Google group companies with countries of processing): https://workspace.google.com/terms/subprocessors/

• not publicly documented for the Developer API (Google Cloud sub-processor list not reviewed)

• Google Cloud sub-processor list (q15), AI-specific entries for "All AI Solutions, Pre-Trained APIs, AI Platform/Gemini platform (formerly Vertex AI), Generative AI Services and Agentic AI Services" with the activity Data Labeling ("Human labelers apply labels to datasets submitted by Customer based on instructions provided by Customer"): Cognizant Worldwide Limited, GlobalLogic Technologies Private Limited, GlobalLogic Inc., Innodata Inc, Teleperformance Global Business Private Limited, Uber Technologies
• In addition, the entries for all Google Cloud services apply (Technical Support, Data Center Operations, etc.): https://cloud.google.com/terms/subprocessors

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

0 (Free, q6)

0 (Free Tier, input/output "Free of charge", q8)

Google AI Plus 4.99 USD/month; Google AI Pro 19.99 USD/month; Google AI Ultra from 99.99 USD/month (second tier 199.99 USD/month); US version of the subscriptions page (gemini.google/us/subscriptions). German version (q6): Plus 4.99 EUR/month; Pro 21.99 EUR/month; Ultra 99.99 EUR/month (5x usage limits) or 219.99 EUR/month (20x) (q6, retrieved 2026-10-14)

6.80 EUR per user/month with monthly billing (excl. taxes). Introductory discounts for 3 months apply to new customers (q9)

Per user/month with monthly billing (EUR, excl. taxes): Standard 13.60; Plus 21.10. Introductory discounts for 3 months apply to new customers (q9)

0 ("Free for eligible educational institutions" (translated), self-service sign-up, q17)

On request (pricing page: Enterprise via sales, q9)

Education Plus: 5.10 EUR per user per year (comparison table at the same time 'price on request' (translated)), sales; Google AI Pro for Education: 14.40 EUR per user/month with a one-year contract term or 23.04 EUR with monthly payment (q17); public sector prices not publicly documented

Usage-based per 1M tokens (Paid Tier, pricing page as of 2026-10-14), e.g. Gemini 4 Argon Standard 2.00 USD input / 10.00 USD output until 2026-11-30, from 2026-12-01 4.00 / 20.00 USD; Gemini 3.8 Flash Standard 0.75 / 3.75 USD until 2026-12-31, from 2027-01-01 1.50 / 7.50 USD; Gemini 3.8 Flash Priority 1.35 / 6.75 USD until 2026-12-31, from 2027-01-01 2.70 / 13.50 USD (q8). For other models see the pricing page.

Usage-based per 1M tokens (Agent Platform pricing page, retrieved 2026-10-18, USD; "Prices are listed in US Dollars (USD)"), e.g. Gemini 4 Argon until 2026-11-30 (promotional price via 50 % credit): input USD 2 global / USD 2.20 non-global, output USD 10 / 11; from 2026-12-01: input USD 4 / 4.40, output USD 20 / 22; Gemini 3.8 Flash introductory price USD 0.75 / 3.75 (input/output) until 2026-12-31, from 2027-01-01 USD 1.50 / 7.50 (q18). For other models, see the pricing page.

EUR 9.90 per month incl. VAT; with annual billing ('1 Monat gratis', one month free) EUR 9.08 per month; 7-day free trial without payment details (pricing page, as of 2026-10-18)

EUR 19 per month incl. VAT; with annual billing EUR 17.42 per month (pricing page, as of 2026-10-18)

EUR 34.90 per month incl. VAT for up to 5 people in a household; with annual billing EUR 31.99 per month (pricing page, as of 2026-10-18)

EUR 49.90 per month incl. VAT; with annual billing EUR 45.74 per month (pricing page, as of 2026-10-18)

Pricing page (as of 2026-10-18, excl. VAT): Business EUR 25 per user/month, with annual billing EUR 22.92; Business Max licence (higher individual premium budget, can be combined with Business licences) EUR 109 per user/month, annually EUR 99. One-off top-up packs EUR 5 to 1,000. Add-ons: PII filter from EUR 69/month, video generation per generation, audio overview 3 generations/month free, external API per token (token prices per model on the models page, e.g. gpt-5 EUR 1.29 input / EUR 10.29 output per million tokens; VAT not stated there). 7-day free trial (standard models only).

EUR 25 per user/month excl. VAT, from 20 licences, on request only (pricing page, as of 2026-10-18); according to the pricing page the trial is not yet § 203 compliant

Custom, contact sales; possible from 1,000+ users; pilot programme 3 months from EUR 8,500 (pricing page, as of 2026-10-18)

yes (Gemini app with basic usage limits, q6)

yes (Gemini models via API, Free Tier with limits)

yes (Gemini app; higher usage limits with Plus/Pro/Ultra, q6)

yes (Gemini app and Gemini in Gmail, Docs, Sheets, Slides, Meet, Drive; scope per edition, q9)

yes (Gemini app and Gemini in Gmail, Docs, Sheets, Slides, Meet, Drive; scope per edition, q9)

yes (Gemini for Education and Gemini Notebook; Gemini in Workspace only to a limited extent, q17)

yes (Gemini app and Gemini in Gmail, Docs, Sheets, Slides, Meet, Drive; scope per edition, q9)

yes (Education Plus: additionally Gemini in Docs, Sheets, Slides, Vids and Forms; add-on Google AI Pro for Education: full Gemini in Workspace access incl. Gmail, Meet, Drive, q17; according to q2, Gemini app for education and public sector customers with a Workspace agreement)

yes

yes

yes (unlimited standard messages with the 'innoGPT Standard' model; scope of premium models for this plan not stated on the pricing page)

yes (unlimited standard messages; all AI models, premium models included within a monthly budget)

yes (unlimited standard messages; all AI models within the monthly budget)

yes (everything in Personal; according to the pricing page 'Rund 3× mehr Premium als Personal' (translated: around 3× more premium than Personal); image generation, Deep Research)

yes (all features, team collaboration, SSO/SAML at extra cost, up to 1,000 users; premium models via a shared team budget; add-ons: PII filter, video generation, audio overview, external OpenAI-compatible API)

yes (main Business features according to the pricing page, 'scope growing continuously' (translated); confidentiality undertaking under § 203(4) of the German Criminal Code (StGB); activation only on request after review)

yes (organisation-wide rollout with own governance; § 203 licence possible; self-hosting/on-premises; dedicated support manager; custom SLAs)