Grok vs. innoGPT: data protection per plan

no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)

no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)

yes: Enterprise FAQ: 'if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service'; the Grok Business guide refers, for team workspaces, to the 'Terms of Service - Enterprise', which according to their preamble also apply to purchases by 'online purchase confirmation'. The DPA (effective 2026-09-22) provides for the processing of personal data only via the ZDR API.

yes: Data Processing Addendum (effective 2026-09-22) is part of the Enterprise terms for business services; the DPA provides for the processing of personal data only via the ZDR API.

yes: Data Processing Addendum (effective 2026-09-22) is part of the 'Terms of Service - Enterprise', which according to a notice apply to business customers of the API and other business services; SCCs Module Two/Three. The DPA requires personal data to be processed only via the ZDR API; no personal data is to be transmitted to non-ZDR services.

yes: Data Processing Addendum (effective 2026-09-22) as part of the Enterprise terms; the DPA expressly provides for the processing of personal data only via the ZDR API. SCCs Module Two/Three (Irish law).

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); whether this applies equally to private plans is not expressly documented (the app privacy policy refers to the DPA for workspaces of organisations)

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

yes (DPA under Art. 28 GDPR according to T&Cs § 9 and the page for persons bound by professional secrecy; in addition a confidentiality undertaking as a contributing person under § 203(4) StGB); contract texts not publicly reviewed

yes according to T&Cs § 9 (DPA under Art. 28 GDPR, can be concluded digitally in the back end where the customer processes personal data of third parties); security page: DPA can be concluded in the account settings, listed for download in the Trust Center; text of the DPA not publicly reviewed

Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.

Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.

Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide (as of 2026-10-10): team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service' (link to the Enterprise terms). Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.

Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide: team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service'. Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.

API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'. Except with ZDR, SpaceXSI may use de-identified or aggregated data for any lawful purposes.

API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms: no training on User Content; with ZDR also no creation of de-identified data. With ZDR the 30-day storage does not apply; inputs and outputs are not written to disk. The documentation points out that ZDR is not recommended for most customers.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Pricing page: 'Vertraglich zugesicherter Verzicht auf Modelltraining' (translated: contractually assured waiver of model training). T&Cs § 9 and app privacy policy section 4: no use of customer data or content for training; AI providers under contracts that exclude training on customer data.

T&Cs § 9: 'the provider does not use customer data to train the AI models' (translated). App privacy policy section 4: content is not used for training; all AI providers are used under enterprise or API contracts that exclude training on customer data. Security page: neither innoGPT nor technology partners (named: Microsoft) use inputs or outputs for training. Documentation does not differentiate by plan.

Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'

Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'

The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. The pricing page mentions data residency only in the Enterprise section; EU region not documented.

The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. Pricing page (Enterprise): 'Data residency: Control where your data lives' without a region specified; EU region not documented.

Regions documentation (q3): the standard endpoint api.x.ai does not guarantee a processing region; requests may be routed between regions. Optional US endpoint us.api.x.ai: request handling, inference, moderation and stored request data in the USA (only grok-4.7 and grok-4.6, without image, video and voice APIs; Files, Collections and server-side tools may be processed outside the USA; token prices +10 %). DPA (q10): processing 'on a global basis outside Europe', including in the USA. Sub-processors in the US, one subsidiary in the UK. An EU region is not documented.

As API: global endpoint without a region guarantee, US endpoint optional (ZDR also applies there). No EU region documented.

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

T&Cs § 9: processing generally on servers in the EU; where the customer expressly selects models hosted outside the EU, the customer consents to the transfer (configurable in the settings). App privacy policy section 5: hosting location per model shown in the model selection, automatic model selection prefers EU models, administrators can switch off non-EU models. Models page: 98 models, of which 68 'EU-hosted', the rest 'Global'. Security page: servers in Frankfurt am Main (including AWS); 'the software and (most) AI models are hosted in Europe' (translated).

As Business; in addition, according to the pricing page and the page for persons bound by professional secrecy, 'EU-Hosting in Berlin' (ISO 27001 certified) with the § 203 licence; the customer controls which models are enabled. T&Cs § 9: processing generally on servers in the EU; non-EU models only where expressly selected.

As Business; in addition, according to the pricing page, self-hosting/on-premises possible (scope not publicly documented).

• Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe

• Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

• Vercel Inc. (USA): hosting and running the application; processing Frankfurt am Main (EU)
• Supabase Pte. Ltd. (Singapore, on AWS): database and file storage; processing Frankfurt am Main (EU)
• Hetzner Online GmbH (Germany): backups and redaction of personal data; processing Falkenstein (EU)
• Clerk Inc. (USA): sign-in and user management; processing USA
• API Hero Ltd (Trigger.dev, United Kingdom): background jobs; processing Frankfurt am Main (EU)
• Upstash Inc. (USA): rate limiting; processing Frankfurt am Main (EU)
• Stripe Payments Europe, Limited (Ireland): payment processing; processing EU
• Functional Software Inc. (Sentry, USA): error analysis; processing Frankfurt am Main (EU)
• PostHog Inc. (USA): product analytics; processing Frankfurt am Main (EU)
• Astrodon Inc. (USA): sending e-mail; processing USA
• LlamaIndex Inc. (USA): file processing; processing EU
• Amazon Web Services EMEA SARL: AI models; processing EU
• Google Ireland Limited (Ireland): AI models; processing EU
• Microsoft Ireland Operations, Ltd. (Ireland): AI models; processing EU (Sweden), actively selected 'global' models worldwide
• Mistral AI (France): AI models; processing EU (France)
• OpenAI Ireland Ltd (Ireland): AI models; processing EU
• Perplexity AI, Inc. (USA): AI models; processing USA
• Replicate, Inc. (USA): AI models (image generation); processing USA
• Exa Labs Inc. (USA): web search; processing USA
• Sideguide Technologies Inc. (USA): fetching web pages; processing USA
• Eleven Labs Inc. (USA): voice input and output; processing EU (Brussels)
• Pipedream Inc. (USA): third-party integrations; processing USA
• Cordnet OÜ (Featurebase, Estonia): feedback portal; processing EU
• Rewardful Inc. (Canada): affiliate programme; processing Canada
• For add-on features the customer activates (e.g. meeting assistant, code execution, learning videos), further specialised service providers, named only on request; the Trust Center counts 31 sub-processors (including Cohere, E2B, ElevenLabs)

0 USD (pricing page)

Plus 8 USD; Premium 30 USD; Super 100 USD; Ultra 200 USD per month, each excl. taxes; subscriptions are sold via X Subscription Corp. and include X features (pricing page). The Consumer FAQ still names 'SuperGrok' and 'SuperGrok Heavy'.

from 30 USD per user per month ('$30+/user/month'; seat types combinable), excl. taxes (pricing page)

Custom (pricing page: 'Custom', contact sales; payment by invoice/bank transfer only in the Enterprise plan)

Per 1M tokens, in USD, below / from 200k prompt tokens (pricing page): grok-4.7 and grok-4.6 input 2.00 USD / 4.00 USD, cache 0.50 USD / 1.00 USD, output 6.00 USD / 12.00 USD; grok-4.5 input 2.00 USD / 4.00 USD, cache 0.30 USD / 0.60 USD, output 6.00 USD / 12.00 USD; grok-4.3 and grok-4.20 variants input 1.25 USD / 2.50 USD, cache 0.20 USD / 0.40 USD, output 2.50 USD / 5.00 USD; grok-build-0.1 input 1.00 USD / 2.00 USD, cache 0.20 USD / 0.40 USD, output 2.00 USD / 4.00 USD. Tools: web search, code execution, file search 5 USD per 1,000 calls each; X search 5 USD per 1,000 posts or 10 USD per 1,000 profiles; Collections search 2.50 USD per 1,000 calls. US endpoint 10 % surcharge.

As API (ZDR surcharge not stated in the documentation)

EUR 9.90 per month incl. VAT; with annual billing ('1 Monat gratis', one month free) EUR 9.08 per month; 7-day free trial without payment details (pricing page, as of 2026-10-18)

EUR 19 per month incl. VAT; with annual billing EUR 17.42 per month (pricing page, as of 2026-10-18)

EUR 34.90 per month incl. VAT for up to 5 people in a household; with annual billing EUR 31.99 per month (pricing page, as of 2026-10-18)

EUR 49.90 per month incl. VAT; with annual billing EUR 45.74 per month (pricing page, as of 2026-10-18)

Pricing page (as of 2026-10-18, excl. VAT): Business EUR 25 per user/month, with annual billing EUR 22.92; Business Max licence (higher individual premium budget, can be combined with Business licences) EUR 109 per user/month, annually EUR 99. One-off top-up packs EUR 5 to 1,000. Add-ons: PII filter from EUR 69/month, video generation per generation, audio overview 3 generations/month free, external API per token (token prices per model on the models page, e.g. gpt-5 EUR 1.29 input / EUR 10.29 output per million tokens; VAT not stated there). 7-day free trial (standard models only).

EUR 25 per user/month excl. VAT, from 20 licences, on request only (pricing page, as of 2026-10-18); according to the pricing page the trial is not yet § 203 compliant

Custom, contact sales; possible from 1,000+ users; pilot programme 3 months from EUR 8,500 (pricing page, as of 2026-10-18)

yes (limited chat, agent, image and Build usage according to the pricing page)

yes (from Plus: Grok Chat, Voice, Imagine, Build, API access and Cursor; from Premium: Grok Bot, latest models, video and image generation, 4x usage compared with Plus; Super/Ultra with 15x and 50x usage respectively compared with Plus)

yes (according to the Teams comparison table: Grok Chat, Imagine, video generation, Build, API access, Grok Bot, Cursor agent, pooled usage, team management, central billing, team-wide privacy settings, custom chat retention, SAML/OIDC SSO, combinable seat types; self-service by card. Business guide: connectors to Google Drive, Outlook, SharePoint, Teams, Salesforce, among others)

yes (as Teams; additionally, according to the pricing page, SCIM, audit logs and service accounts, spend controls, group settings, purchase on invoice, custom rate limits, dedicated infrastructure, 'Data residency', among others)

yes (models grok-4.7, grok-4.6, grok-4.5, grok-4.3, grok-4.20, grok-build-0.1; tools such as web and X search, code execution; image, video and voice APIs)

yes (as API; without functions that require storage: Files, Collections, Batch API, stateful Responses API, among others)

yes (unlimited standard messages with the 'innoGPT Standard' model; scope of premium models for this plan not stated on the pricing page)

yes (unlimited standard messages; all AI models, premium models included within a monthly budget)

yes (unlimited standard messages; all AI models within the monthly budget)

yes (everything in Personal; according to the pricing page 'Rund 3× mehr Premium als Personal' (translated: around 3× more premium than Personal); image generation, Deep Research)

yes (all features, team collaboration, SSO/SAML at extra cost, up to 1,000 users; premium models via a shared team budget; add-ons: PII filter, video generation, audio overview, external OpenAI-compatible API)

yes (main Business features according to the pricing page, 'scope growing continuously' (translated); confidentiality undertaking under § 203(4) of the German Criminal Code (StGB); activation only on request after review)

yes (organisation-wide rollout with own governance; § 203 licence possible; self-hosting/on-premises; dedicated support manager; custom SLAs)