Make vs. sevdesk: data protection per plan

yes (Celonis Data Processing Agreement for Make, version May 2024; DPF as the primary transfer mechanism, standard contractual clauses Module Two as fallback; SCCs for European customers additionally linked as a separate document); terms page: 'Your use of the Services is subject to the terms of the Data processing agreement' (thus applies to all plans)

yes (Celonis Data Processing Agreement for Make, version May 2024; DPF as the primary transfer mechanism, standard contractual clauses Module Two as fallback; SCCs for European customers additionally linked as a separate document); terms page: 'Your use of the Services is subject to the terms of the Data processing agreement' (thus applies to all plans)

yes (Celonis Data Processing Agreement for Make, version May 2024; DPF as the primary transfer mechanism, standard contractual clauses Module Two as fallback; SCCs for European customers additionally linked as a separate document)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)

Neither the pricing page, the security page, the privacy notice nor the DPA (version May 2024) mentions model training on customer data; likewise no statement in the help centre article 'AI providers and data zones in Make' or in the Make section of the Celonis Trust Center. Master Services Agreement for Make (March 2026), clause 6.2: licence to customer data 'solely as necessary to provide the Services'; DPA Annex 1: usage analysis only in anonymised form. Privacy notice: Google Workspace APIs are not used to train general AI/ML models. The Celonis Trust Center contains a training commitment only for the 'Celonis Platform', not for Make. Express training rules for Make: not publicly documented.

Neither the pricing page, the security page, the privacy notice nor the DPA (version May 2024) mentions model training on customer data; likewise no statement in the help centre article 'AI providers and data zones in Make' or in the Make section of the Celonis Trust Center. Master Services Agreement for Make (March 2026), clause 6.2: licence to customer data 'solely as necessary to provide the Services'; DPA Annex 1: usage analysis only in anonymised form. Privacy notice: Google Workspace APIs are not used to train general AI/ML models. The Celonis Trust Center contains a training commitment only for the 'Celonis Platform', not for Make. Express training rules for Make: not publicly documented.

as above: not publicly documented (no statement on training for Make on the pricing page, in the DPA, MSA, help centre or Trust Center).

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.

Sub-processor list (effective 2025-12-12): AWS hosting for non-Enterprise customers in Ireland or the USA; database for EU customers in Ireland; AI sub-processors: hosting in the USA (Microsoft France). Help centre 'AI providers and data zones in Make': data zones US1, US2, EU1, EU2; 'Selecting the EU1 or EU2 data zone does not automatically mean every request gets processed and stays in the EU.' Always in the USA (OpenAI): Maia, Make AI Web Search, all OpenAI models in Make's AI Provider, AI Content Extractor (image description, audio translation); always in the EU (Microsoft Azure AI services): the other AI Content Extractor functions. Own connections: EU processing guaranteed only for Microsoft Foundry, Amazon Bedrock and OpenAI-compatible endpoints, not for Anthropic, OpenAI, Google Gemini, Mistral AI, Cohere, Groq and xAI. According to the same page, some features route to the United Kingdom: Claude Sonnet 4.6 and Opus 4.6 in Make's AI Provider 'are served from a UK Bedrock region'; for further Claude models the table also lists, among others, Zurich and London for EU zones.

Sub-processor list (effective 2025-12-12): AWS hosting for non-Enterprise customers in Ireland or the USA; database for EU customers in Ireland; AI sub-processors: hosting in the USA (Microsoft France). Help centre 'AI providers and data zones in Make': data zones US1, US2, EU1, EU2; 'Selecting the EU1 or EU2 data zone does not automatically mean every request gets processed and stays in the EU.' Always in the USA (OpenAI): Maia, Make AI Web Search, all OpenAI models in Make's AI Provider, AI Content Extractor (image description, audio translation); always in the EU (Microsoft Azure AI services): the other AI Content Extractor functions. Own connections: EU processing guaranteed only for Microsoft Foundry, Amazon Bedrock and OpenAI-compatible endpoints, not for Anthropic, OpenAI, Google Gemini, Mistral AI, Cohere, Groq and xAI. According to the same page, some features route to the United Kingdom: Claude Sonnet 4.6 and Opus 4.6 in Make's AI Provider 'are served from a UK Bedrock region'; for further Claude models the table also lists, among others, Zurich and London for EU zones.

Sub-processor list: AWS hosting in Germany for Enterprise; Trust Center: infrastructure in private AWS EC2 instances (Amazon VPC), cluster across two zones. Help centre 'AI providers and data zones in Make': data zones US1, US2, EU1, EU2; 'Selecting the EU1 or EU2 data zone does not automatically mean every request gets processed and stays in the EU.' Always in the USA (OpenAI): Maia, Make AI Web Search, all OpenAI models in Make's AI Provider, AI Content Extractor (image description, audio translation); always in the EU (Microsoft Azure AI services): the other AI Content Extractor functions. Own connections: EU processing guaranteed only for Microsoft Foundry, Amazon Bedrock and OpenAI-compatible endpoints, not for Anthropic, OpenAI, Google Gemini, Mistral AI, Cohere, Groq and xAI. According to the same page, some features route to the United Kingdom: Claude Sonnet 4.6 and Opus 4.6 in Make's AI Provider 'are served from a UK Bedrock region'; for further Claude models the table also lists, among others, Zurich and London for EU zones.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.

• Amazon Web Services (hosting; location selectable: USA or Germany (Enterprise) or Ireland (others))
• MongoDB (database; EU customers Germany (Enterprise) or Ireland, non-EU customers USA)
• Supabase (database for Make and Grid; EU customers Ireland, otherwise USA)
• 84codes (execution; region as for AWS)
• AI: OpenAI OpCo (USA), Anthropic Ireland (hosting USA), Google (USA), Microsoft (France), Groq (USA)
• E2B.dev (code execution, USA)
• Cloudflare (CDN; data of European customers only via EU servers), Mixpanel (Netherlands), Rudderstack, Freshdesk (Germany) and others
• Group: Celonis SE, Celonis s.r.o. (Czech Republic, support) and others

• Amazon Web Services (hosting; location selectable: USA or Germany (Enterprise) or Ireland (others))
• MongoDB (database; EU customers Germany (Enterprise) or Ireland, non-EU customers USA)
• Supabase (database for Make and Grid; EU customers Ireland, otherwise USA)
• 84codes (execution; region as for AWS)
• AI: OpenAI OpCo (USA), Anthropic Ireland (hosting USA), Google (USA), Microsoft (France), Groq (USA)
• E2B.dev (code execution, USA)
• Cloudflare (CDN; data of European customers only via EU servers), Mixpanel (Netherlands), Rudderstack, Freshdesk (Germany) and others
• Group: Celonis SE, Celonis s.r.o. (Czech Republic, support) and others

• Amazon Web Services (hosting; location selectable: USA or Germany (Enterprise) or Ireland (others))
• MongoDB (database; EU customers Germany (Enterprise) or Ireland, non-EU customers USA)
• Supabase (database for Make and Grid; EU customers Ireland, otherwise USA)
• 84codes (execution; region as for AWS)
• AI: OpenAI OpCo (USA), Anthropic Ireland (hosting USA), Google (USA), Microsoft (France), Groq (USA)
• E2B.dev (code execution, USA)
• Cloudflare (CDN; data of European customers only via EU servers), Mixpanel (Netherlands), Rudderstack, Freshdesk (Germany) and others
• Group: Celonis SE, Celonis s.r.o. (Czech Republic, support) and others

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

• Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
• EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
• Termitel GmbH, Ettlingen (handling customer phone enquiries)
• Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
• AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)

USD 0 (1,000 credits per month; minimum interval of 15 minutes between scheduled runs)

Base tier 10,000 credits per month: with annual billing Core USD 9, Pro USD 16, Teams USD 29 per month ('Save 15 %'), with monthly billing USD 10.59, USD 18.82, USD 34.12. Higher credit tiers with monthly billing (Core/Pro/Teams per month): 20,000 credits USD 18.82/34.12/62.35; 40,000: USD 34.12/62.35/116.47; 80,000: USD 64.71/107.06/203.41; 150,000: USD 116.47/180.53/343.01; 300,000: USD 214.31/315.93/600.26; from 500,000 credits Core 'Not available' (500,000: Pro USD 482.67, Teams USD 917.06; 750,000: Pro USD 678.75, Teams USD 1,289.62). No indication whether VAT is included. All plans with 'Unlimited users' according to the pricing page; Teams additionally teams and team roles. AI surcharge: no separate AI credit; AI features via Make's AI Provider partly consume more credits.

Individual (pricing page: 'Talk to sales')

EUR 0 ("permanently free", no credit card); according to the help centre applied automatically after the 14-day trial, unlimited in time; no add-ons bookable, limited support.

List price EUR 11.90 per month billed monthly, EUR 9.90 per month for 12 months (billed annually), EUR 8.90 per month for 24 months, each plus VAT; 1 user, additional users via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices.

List price EUR 25.90 per month billed monthly, EUR 22.90 per month for 12 months, EUR 19.90 per month for 24 months, each plus VAT; 1 user, more via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices.

List price EUR 34.90 per month billed monthly, EUR 30.90 per month for 12 months, EUR 27.90 per month for 24 months, each plus VAT; 1 user, more via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices.

yes (Make AI Agents (beta), AI Toolkit, Maia, MCP server, AI Content Extractor and AI Web Search also included in the Free plan according to the pricing page; 'Make's AI Provider (all plans) or your own LLM key'; 1,000 credits per month; Make Code App not included)

yes (Make AI Agents (beta) and AI Toolkit in all plans: 'Make's AI Provider (all plans) or your own LLM key'; 10,000 credits per month in the base tier; Make Code App 2 credits per second)

yes (as above; separate AWS environment; extended log storage)

no (pricing page: the free plan covers 3 (e-)invoices per month, contacts, products and support material; AI-supported receipt capture and the AI agent Sevi are only listed for paid plans)

yes (AI agent Sevi in support, according to the pricing page in all three paid plans; AI-supported receipt capture and online banking reconciliation only from the Buchhaltung plan)

yes (AI-supported receipt capture reading date, amount, receipt number and supplier and suggesting the booking category; AI-supported matching of bank payments to invoices and receipts; AI agent Sevi; suggestions must be reviewed and confirmed by the user)

yes (all AI features from Buchhaltung; additionally cost centres, management accounts (BWA) and REST API)