Methodology

How an entry is created

The register documents what providers of AI tools state in their public documents about data processing and the AI Act. It does not rate them.

Review steps

  1. 01

    Primary source

    DPA, terms of use, sub-processor list, trust centre: the provider’s own documents, no blogs.

  2. 02

    Retrieval date

    Every source carries the date on which we read it, so later changes can be identified.

  3. 03

    Entry per plan

    Free, Team, Enterprise separately. Anything that could not be verified is shown as “not publicly documented”.

  4. 04

    Correction

    Providers and readers report errors with a reference. We check against the source and update the date.

Where the information comes from

What “not publicly documented” means

documented: with sourcenot publicly documented

If we could not verify a statement in any provider source (page not retrievable, only accessible after login or with JavaScript, contract only on request), it is shown visibly as such. This does not mean the matter is unproblematic. It means that we have not checked it. In addition, every entry has a list of open points.

Entries “under review”

Entries based solely on secondary sources (currently the legacy entries, as of 6–9 Sep 2026) are marked “under review”. They are only listed as documented once they have been checked against the provider’s primary sources. Depending on the configuration, they are hidden entirely.

How current the information is

Contract terms change, sometimes without notice. Every entry shows its review date and every source its retrieval date. We plan to re-check each tool quarterly. The situation may have changed between the review date and the time you read it.

No rating, no third-party influence

There are no scores, traffic lights or recommendations. The AI Act notes are marked “for review” and are not legal advice. Providers cannot buy the content or the order of an entry. The register uses no ad networks, no tracking and no provider logos.

Correction process for providers and readers

Do you think a statement is incorrect? Use the correction form to tell us:

  1. the entry and plan concerned,
  2. the statement you consider incorrect,
  3. the correct statement,
  4. the reference, ideally your DPA, your sub-processor list or your terms of use.

What happens next:

We handle reports in the order in which they arrive. We do not commit to a fixed deadline, because the review depends on whether the provider’s documents are publicly accessible.

Analysis and raw data

The classifications of all plans are summarised in the data report. It also sets out the counting rules and provides the raw data as a CSV file, one row per plan.

About this English version

The interface and page texts are translated. Free-text details taken from provider documents are shown in the original German where no translation exists yet, marked “Original text in German”. The register is maintained in German; if the versions differ, the German version applies.