Grok vs. Gemini Notebook: data protection per plan

no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)

no (DPA is part of the Enterprise terms for business customers; consumer use is subject to the Consumer terms)

yes: Enterprise FAQ: 'if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service'; the Grok Business guide refers, for team workspaces, to the 'Terms of Service - Enterprise', which according to their preamble also apply to purchases by 'online purchase confirmation'. The DPA (effective 2026-09-22) provides for the processing of personal data only via the ZDR API.

yes: Data Processing Addendum (effective 2026-09-22) is part of the Enterprise terms for business services; the DPA provides for the processing of personal data only via the ZDR API.

yes: Data Processing Addendum (effective 2026-09-22) is part of the 'Terms of Service - Enterprise', which according to a notice apply to business customers of the API and other business services; SCCs Module Two/Three. The DPA requires personal data to be processed only via the ZDR API; no personal data is to be transmitted to non-ZDR services.

yes: Data Processing Addendum (effective 2026-09-22) as part of the Enterprise terms; the DPA expressly provides for the processing of personal data only via the ZDR API. SCCs Module Two/Three (Irish law).

no (the Google Terms of Service and the Google Privacy Policy apply; no DPA)

no (the Google Terms of Service and the Google Privacy Policy apply; no DPA)

yes (as a core service under the Workspace contract including the Cloud Data Processing Addendum)

yes (Generative AI Service under the Google Cloud contract; Cloud Data Processing Addendum)

Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.

Privacy policy (as of 2026-10-11) and Europe Addendum (effective 2026-08-24): User Content and feedback are used for training and improving the models on the basis of legitimate interests; objection possible in the settings (reference to the Consumer FAQ). Security FAQ: 'improve the model' toggle in the data controls. Training summary Grok 4.7: interactions with Grok may be used for training 'subject to privacy settings, controls, user requests, opt-outs'.

Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide (as of 2026-10-10): team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service' (link to the Enterprise terms). Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.

Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'; SpaceXSI may use de-identified or aggregated data except with ZDR. Business guide: team workspaces with 'Privacy guarantees as outlined in SpaceXSI's terms of service'. Enterprise FAQ: 'we do not use your business data, including inputs (prompts) or outputs (answers), for training our models'; in some cases SpaceXSI offers free credits in exchange for permission to train.

API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms (as of 2026-08-14): SpaceXSI does not use User Content to train foundation models, LLMs or other AI systems, 'subject to disclosures to Customer and Customer-controlled user settings'. Except with ZDR, SpaceXSI may use de-identified or aggregated data for any lawful purposes.

API documentation (Security FAQ): 'SpaceXSI never trains on your API inputs or outputs without your explicit permission.' Enterprise terms: no training on User Content; with ZDR also no creation of de-identified data. With ZDR the 30-day storage does not apply; inputs and outputs are not written to disk. The documentation points out that ZDR is not recommended for most customers.

Help 'Privacy and Terms of Use': 'The content in Gemini Notebook will not be used to directly train our foundational AI models, unless you choose to provide feedback.' With thumbs up/down feedback, prompts, sources, uploads and outputs are reviewed by trained teams and used to improve products and machine-learning technologies. Data that Gemini Notebook shares with other Google services (e.g. the Gemini app) is used according to their notices, 'including for product improvement'.

Plans page: 'Your data is protected, and is not used to train Gemini Notebook unless you provide feedback.' With feedback, the full context (queries, uploads, responses) may be reviewed. Help 'Privacy and Terms of Use': no direct use for training the foundational models without feedback; data shared with other Google services is used according to their notices, including for product improvement.

Workspace Privacy Hub: 'your uploads, queries and the model's responses in Gemini Notebook will not be reviewed by human reviewers, and will not otherwise be used to train generative AI models.' Help: no human review and no training even with thumbs up/down feedback.

Plans page (Upgrading via Google Cloud): 'all files, chats and model outputs won't be reviewed by human reviewers or used to improve generative AI models.'

Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'

Europe Addendum (13.3): 'We process all of your personal information in the United States, where we maintain our primary data centers.'

The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. The pricing page mentions data residency only in the Enterprise section; EU region not documented.

The privacy policy does not apply to data processed for business customers. DPA (q10): processing 'on a global basis outside Europe', including in the USA; sub-processors in the US, one subsidiary in the UK. Pricing page (Enterprise): 'Data residency: Control where your data lives' without a region specified; EU region not documented.

Regions documentation (q3): the standard endpoint api.x.ai does not guarantee a processing region; requests may be routed between regions. Optional US endpoint us.api.x.ai: request handling, inference, moderation and stored request data in the USA (only grok-4.7 and grok-4.6, without image, video and voice APIs; Files, Collections and server-side tools may be processed outside the USA; token prices +10 %). DPA (q10): processing 'on a global basis outside Europe', including in the USA. Sub-processors in the US, one subsidiary in the UK. An EU region is not documented.

As API: global endpoint without a region guarantee, US endpoint optional (ZDR also applies there). No EU region documented.

Gemini Notebook Enterprise documentation (comparison table): with the personal Gemini Notebook, users cannot specify data residency ('Users can't specify'). Google LLC is certified under the EU-U.S. Data Privacy Framework (Google Privacy Policy, Data transfer frameworks). Google Privacy Policy (Data transfer frameworks): 'We maintain servers around the world and your information may be processed on servers located outside of the country where you live.' A storage location specific to Gemini Notebook is not documented.

As Standard: data residency cannot be selected for personal accounts (Enterprise documentation); Google LLC certified under the EU-U.S. Data Privacy Framework. Google Privacy Policy (Data transfer frameworks): 'We maintain servers around the world and your information may be processed on servers located outside of the country where you live.' A storage location specific to Gemini Notebook is not documented.

not publicly documented: Workspace Privacy Hub: 'Your organization's file sharing and data region settings do not apply to data in Gemini Notebook.' Workspace Admin Help 'Data covered by data regions': Data Regions are not supported for Gemini Notebook. The pages do not name a storage location. Sources added from Drive are stored as a copy with the Gemini Notebook data.

Enterprise documentation: data stays in the customer's Google Cloud project; Gemini Notebook Enterprise is available in the 'eu' and 'us' multi-regions and 'global', with data residency commitments for storage (at rest) and ML processing depending on the location; for data in the EU, licences from an 'eu' subscription are required. Google recommends 'global' if there are no regulatory reasons for a region.

• Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe

• Europe Addendum (q8): service providers as per the sub-processor page (q11, see API plan); Brave Software, Inc. receives parts of the inputs for search results; payment processing by Google Payments, Apple Pay and Stripe

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• According to the sub-processor list (q11): AWS, Google Cloud, Oracle (cloud infrastructure), Vercel (web hosting), MongoDB, Inc. (cloud database), Cloudflare and Hive (content delivery), LiveKit (real-time media), Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, Okta, Twilio, Wiz, WorkOS, Zendesk (services and support), Sentry (error monitoring), Stripe and PayPal (Braintree) (payments), SpaceXSI affiliates (cloud infrastructure), each located in the US
• SpaceXSI subsidiary (services and support): located in the UK (q11)

• not publicly documented (no sub-processor list for consumer services; feedback is reviewed by 'specially trained teams')

• not publicly documented (no sub-processor list for consumer services)

• Google Workspace Third-Party Subprocessors (applies to all Workspace core services, i.e. also Gemini Notebook): including Accenture, Cognizant, EPAM, Deloitte, GlobalLogic for technical support with processing in, among others, the US, India, Canada, Japan, Romania and Bulgaria

• Google Cloud Subprocessors list (for Google Cloud services; an allocation specific to Gemini Notebook is not shown there)

0 USD (pricing page)

Plus 8 USD; Premium 30 USD; Super 100 USD; Ultra 200 USD per month, each excl. taxes; subscriptions are sold via X Subscription Corp. and include X features (pricing page). The Consumer FAQ still names 'SuperGrok' and 'SuperGrok Heavy'.

from 30 USD per user per month ('$30+/user/month'; seat types combinable), excl. taxes (pricing page)

Custom (pricing page: 'Custom', contact sales; payment by invoice/bank transfer only in the Enterprise plan)

Per 1M tokens, in USD, below / from 200k prompt tokens (pricing page): grok-4.7 and grok-4.6 input 2.00 USD / 4.00 USD, cache 0.50 USD / 1.00 USD, output 6.00 USD / 12.00 USD; grok-4.5 input 2.00 USD / 4.00 USD, cache 0.30 USD / 0.60 USD, output 6.00 USD / 12.00 USD; grok-4.3 and grok-4.20 variants input 1.25 USD / 2.50 USD, cache 0.20 USD / 0.40 USD, output 2.50 USD / 5.00 USD; grok-build-0.1 input 1.00 USD / 2.00 USD, cache 0.20 USD / 0.40 USD, output 2.00 USD / 4.00 USD. Tools: web search, code execution, file search 5 USD per 1,000 calls each; X search 5 USD per 1,000 posts or 10 USD per 1,000 profiles; Collections search 2.50 USD per 1,000 calls. US endpoint 10 % surcharge.

As API (ZDR surcharge not stated in the documentation)

EUR 0 with a Google Account (subscriptions page gemini.google, German version)

Google AI Plus EUR 4.99/month; Google AI Pro EUR 21.99/month; Google AI Ultra EUR 99.99/month (5x the limits of AI Pro) or EUR 219.99/month (20x) (subscriptions page gemini.google, German version, as of 2026-10-18); Gemini Notebook is included in the subscriptions

Per user/month with monthly billing, excl. taxes: Business Starter EUR 6.80; Business Standard EUR 13.60; Business Plus EUR 21.10; introductory discounts for new customers (Workspace pricing page, German version, as of 2026-10-18). Enterprise editions via sales.

USD 9 per licence per month, minimum 15 licences, 30-day trial (Google Cloud product page); monthly or annual subscriptions, up to 5,000 licences per subscription (licensing documentation; the documentation states a 14-day trial)

yes (limited chat, agent, image and Build usage according to the pricing page)

yes (from Plus: Grok Chat, Voice, Imagine, Build, API access and Cursor; from Premium: Grok Bot, latest models, video and image generation, 4x usage compared with Plus; Super/Ultra with 15x and 50x usage respectively compared with Plus)

yes (according to the Teams comparison table: Grok Chat, Imagine, video generation, Build, API access, Grok Bot, Cursor agent, pooled usage, team management, central billing, team-wide privacy settings, custom chat retention, SAML/OIDC SSO, combinable seat types; self-service by card. Business guide: connectors to Google Drive, Outlook, SharePoint, Teams, Salesforce, among others)

yes (as Teams; additionally, according to the pricing page, SCIM, audit logs and service accounts, spend controls, group settings, purchase on invoice, custom rate limits, dedicated infrastructure, 'Data residency', among others)

yes (models grok-4.7, grok-4.6, grok-4.5, grok-4.3, grok-4.20, grok-build-0.1; tools such as web and X search, code execution; image, video and voice APIs)

yes (as API; without functions that require storage: Files, Collections, Batch API, stateful Responses API, among others)

yes (notebooks with own sources, chat, audio and video overviews, mind maps, reports, flashcards, infographics, slides; 100 notebooks and 50 sources per notebook)

yes (as Standard with higher limits and premium features: Plus 200 notebooks/100 sources, Pro 500/300, Ultra 500/500 or 600; earlier access to features, advanced sharing, with Pro/Ultra removal of the visible watermark)

yes (Gemini Notebook as a Workspace core service; Business Starter with standard access, Business Standard and Plus with extended access and higher limits per edition)

yes (Gemini Notebook with at least the same limits as the consumer version, additionally DOCX/PPTX/XLSX sources, sign-in via Cloud Identity or external IdP, VPC Service Controls, IAM, CMEK, audit logs, API)