neuroflash
neuroflash (Essential / Pro / Enterprise)
Provider: neuroflash GmbH · Based in: Wulfsdorfer Weg 100, 22359 Hamburg, Germany · Provider website
- Plans
- 3
- Sources
- 8
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 7 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- mixed: all 3 plans
- Training on inputs
- no: all 3 plans
- DPA
- not publicly documented: Essential, Proyes: Enterprise
- Provider
- neuroflash GmbH
- Based in
- Wulfsdorfer Weg 100, 22359 Hamburg, Germany; Local Court (Amtsgericht) Hamburg, HRB 117450 (q4)
Values from 3 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare neuroflash
Compare with another toolCompared plan by plan with other tools in the category Writing & translation:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | EssentialCompare neuroflash Essential with another tool | ProCompare neuroflash Pro with another tool | EnterpriseCompare neuroflash Enterprise with another tool |
|---|---|---|---|
| differs by plan | 42 EUR/mo | 84 EUR/user/mo | custom |
| Details: Price | 42 EUR per month with annual payment, excl. VAT; 7-day free trial; according to the FAQ, monthly plans also exist (cancellable after the first month with one month's notice), no monthly price is shown (pricing page, as of 2026-10-18) | 84 EUR per user/month with annual payment, excl. VAT; 7-day free trial; according to the FAQ, monthly plans also exist, no monthly price is shown (pricing page, as of 2026-10-18) | Custom (pricing page: 'Custom', contact sales; as of 2026-10-18) |
| yes | yes | yes | |
| Details: AI features included | yes (text generation with Basic models according to the pricing page GPT-6 Luna, Gemini 3.5 Flash-Lite, Mistral Medium 3.1; images; target audiences/Digital Twins: 1 target audience with 6 twins; 25,000 credits/day according to the pricing page and terms and conditions No. 11.3.1) | yes (250,000 credits/day per user according to the pricing page and terms and conditions No. 11.3.1; premium models including GPT-6 Sol, Claude Sonnet 5, Claude Opus 5.5, Gemini 3.1 Pro; 3 target audiences with 10 twins each; team features, API/MCP access according to the pricing page) | yes (premium AI models, SSO, unlimited target audiences, dedicated Customer Success Manager according to the pricing page; 250,000 credits/day per user according to terms and conditions No. 11.3.1) |
| differs by plan | not publicly documented | not publicly documented | yes |
| Details: DPA | not publicly documented (no DPA document linked on the pages retrieved; the Enterprise page mentions a 'Custom-DPA' only for the Enterprise plan) | not publicly documented (no DPA document linked on the pages retrieved; the Enterprise page mentions a 'Custom-DPA' only for the Enterprise plan) | yes (Enterprise page: 'In the Enterprise plan: dedicated server, SSO, Custom-DPA' (translated); document not public) |
| no | no | no | |
| Details: Training on inputs | Pricing page (FAQ): 'We process your content exclusively to provide the service. No disclosure to third parties, no training of our models with your data.' (translated) Enterprise page: 'Your creative data is not used for training purposes.' (translated) Help centre ('Are you GDPR compliant?'): data is 'used exclusively to fulfil our service and improve our service' (translated); 'Only the input and output of our AI is sent to OpenAI to fulfil our service' (translated); it states that it has been agreed with OpenAI 'that this data does not flow into the language models' (translated). No corresponding statement is documented for the other integrated AI providers (e.g. Anthropic, Google, Mistral). The documentation does not differentiate by plan. | Pricing page (FAQ): 'We process your content exclusively to provide the service. No disclosure to third parties, no training of our models with your data.' (translated) Enterprise page: 'Your creative data is not used for training purposes.' (translated) Help centre ('Are you GDPR compliant?'): data is 'used exclusively to fulfil our service and improve our service' (translated); 'Only the input and output of our AI is sent to OpenAI to fulfil our service' (translated); it states that it has been agreed with OpenAI 'that this data does not flow into the language models' (translated). No corresponding statement is documented for the other integrated AI providers (e.g. Anthropic, Google, Mistral). The documentation does not differentiate by plan. | Pricing page (FAQ): 'We process your content exclusively to provide the service. No disclosure to third parties, no training of our models with your data.' (translated) Enterprise page: 'Your creative data is not used for training purposes.' (translated) Help centre ('Are you GDPR compliant?'): data is 'used exclusively to fulfil our service and improve our service' (translated); 'Only the input and output of our AI is sent to OpenAI to fulfil our service' (translated); it states that it has been agreed with OpenAI 'that this data does not flow into the language models' (translated). No corresponding statement is documented for the other integrated AI providers (e.g. Anthropic, Google, Mistral). The documentation does not differentiate by plan. |
| Help centre: generated or uploaded images… | Help centre: generated or uploaded images… | Help centre: generated or uploaded images… | |
| Details: Data retention | Help centre: generated or uploaded images are 'stored for 30 days from the date of creation or upload' (translated) and permanently deleted thereafter. Privacy policy Section XVII: storage of personal data for the duration of the business relationship, statutory retention periods of two to ten years; third parties engaged store data for as long as necessary for the respective assignment. Deletion on request by email possible (help centre). Retention period for text inputs, chats and documents: not publicly documented. | Help centre: generated or uploaded images are 'stored for 30 days from the date of creation or upload' (translated) and permanently deleted thereafter. Privacy policy Section XVII: storage of personal data for the duration of the business relationship, statutory retention periods of two to ten years; third parties engaged store data for as long as necessary for the respective assignment. Deletion on request by email possible (help centre). Retention period for text inputs, chats and documents: not publicly documented. | Help centre: generated or uploaded images are 'stored for 30 days from the date of creation or upload' (translated) and permanently deleted thereafter. Privacy policy Section XVII: storage of personal data for the duration of the business relationship, statutory retention periods of two to ten years; third parties engaged store data for as long as necessary for the respective assignment. Deletion on request by email possible (help centre). Retention period for text inputs, chats and documents: not publicly documented. According to the pricing page, Enterprise contracts have individual terms. |
| mixed | mixed | mixed | |
| Details: Hosting | Privacy policy Section XIII: personal data is processed/stored 'in the EU on servers in the Google Cloud Platform and at Raidboxes in Germany' (translated); AI requests in the app are processed 'in the EU and in the USA on servers of external providers' (translated) (according to the policy, US providers are DPF certified). Pricing page: 'Servers in Germany' (translated). The Enterprise page, by contrast: '100% data processing in Germany, no US servers.' (translated) | Privacy policy Section XIII: personal data is processed/stored 'in the EU on servers in the Google Cloud Platform and at Raidboxes in Germany' (translated); AI requests in the app are processed 'in the EU and in the USA on servers of external providers' (translated) (according to the policy, US providers are DPF certified). Pricing page: 'Servers in Germany' (translated). The Enterprise page, by contrast: '100% data processing in Germany, no US servers.' (translated) | Privacy policy Section XIII: personal data is processed/stored 'in the EU on servers in the Google Cloud Platform and at Raidboxes in Germany' (translated); AI requests in the app are processed 'in the EU and in the USA on servers of external providers' (translated) (according to the policy, US providers are DPF certified). Pricing page: 'Servers in Germany' (translated). The Enterprise page, by contrast: '100% data processing in Germany, no US servers.' (translated) |
| list available | list available | list available | |
| Details: Sub-processors |
|
|
|
| 6 sources | 6 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
|
Compare neuroflash Essential with another tool
Price and scope
- differs by plan
- 42 EUR/mo
42 EUR per month with annual payment, excl. VAT; 7-day free trial; according to the FAQ, monthly plans also exist (cancellable after the first month with one month's notice), no monthly price is shown (pricing page, as of 2026-10-18)
- yes
yes (text generation with Basic models according to the pricing page GPT-6 Luna, Gemini 3.5 Flash-Lite, Mistral Medium 3.1; images; target audiences/Digital Twins: 1 target audience with 6 twins; 25,000 credits/day according to the pricing page and terms and conditions No. 11.3.1)
Contract and data use
- differs by plan
- not publicly documented
not publicly documented (no DPA document linked on the pages retrieved; the Enterprise page mentions a 'Custom-DPA' only for the Enterprise plan)
- no
Pricing page (FAQ): 'We process your content exclusively to provide the service. No disclosure to third parties, no training of our models with your data.' (translated) Enterprise page: 'Your creative data is not used for training purposes.' (translated) Help centre ('Are you GDPR compliant?'): data is 'used exclusively to fulfil our service and improve our service' (translated); 'Only the input and output of our AI is sent to OpenAI to fulfil our service' (translated); it states that it has been agreed with OpenAI 'that this data does not flow into the language models' (translated). No corresponding statement is documented for the other integrated AI providers (e.g. Anthropic, Google, Mistral). The documentation does not differentiate by plan.
- Help centre: generated or uploaded images…
- Help centre: generated or uploaded images are 'stored for 30 days from the date of creation or upload' (translated) and permanently deleted thereafter. Privacy policy Section XVII: storage of personal data for the duration of the business relationship, statutory retention periods of two to ten years; third parties engaged store data for as long as necessary for the respective assignment. Deletion on request by email possible (help centre). Retention period for text inputs, chats and documents: not publicly documented.
Hosting and sharing
- mixed
Privacy policy Section XIII: personal data is processed/stored 'in the EU on servers in the Google Cloud Platform and at Raidboxes in Germany' (translated); AI requests in the app are processed 'in the EU and in the USA on servers of external providers' (translated) (according to the policy, US providers are DPF certified). Pricing page: 'Servers in Germany' (translated). The Enterprise page, by contrast: '100% data processing in Germany, no US servers.' (translated)
- list available
- Google Cloud Platform (server location EU, according to privacy policy Section XIII)
- Raidboxes (Germany, according to privacy policy Section XIII)
- Stripe, Inc. (USA, payment processing, DPF according to the privacy policy)
- External AI providers in the EU and USA: not named in the privacy policy; the help centre names OpenAI as recipient of input and output; the pricing page names available models (including OpenAI GPT, Anthropic Claude, Google Gemini, Mistral), but not the contractual partners/hosting providers
Evidence
- 6 sources
- Pricing (German)Pricing page, retrieved 18 Oct 2026
- Privacy policy (German)Privacy notice, retrieved 18 Oct 2026
- Terms and conditions (version 2026-09-15) (German)Terms and conditions, retrieved 18 Oct 2026
- EnterprisePricing page, retrieved 18 Oct 2026
- Help centre: Are you GDPR compliant?Documentation, retrieved 18 Oct 2026
- Help centre: How long are my generated images stored?Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy policy: some of the providers used are based in the USA; some of them have joined the EU-US Data Privacy Framework, otherwise neuroflash concludes standard contractual clauses (2021). According to the policy, AI providers in the USA are DPF certified. Which providers these are in detail is not publicly documented.
- Privacy policy (German) (Privacy notice), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Pricing page (FAQ): 'ISO/IEC 27001:2022 certified' (translated); Enterprise page: 'ISO 27001 certified' (translated). Certificate, scope and auditor: not publicly documented on the pages retrieved. SOC 2: not documented.
- Pricing (German) (Pricing page), retrieved 18 Oct 2026
- Enterprise (Pricing page), retrieved 18 Oct 2026
AI Act
Functions: Text generation (Editor & ChatFlash), image generation, PerformanceFlash (text evaluation), ResearchFlash, target audience simulation with 'Digital Twins' (according to the pricing page based on data from over 1 million real individuals), Brand Voice, knowledge assets, API and MCP access; choice of external language and image models (pricing page).
Provider’s statement: Enterprise page: 'GDPR-native, EU AI Act-compliant, ISO 27001 certified' (translated) (self-declaration without evidence, role statement or document). No mention of the EU AI Act on the pricing page, in the terms and conditions (version 2026-09-15) or in the privacy policy.
Classification (for review, not legal advice): For review: customer typically a deployer (Art. 3 No. 4 AI Act). Generated texts and images may touch on labelling obligations under Art. 50; according to the provider, the Digital Twin feature works with personal data and must be assessed separately under data protection law. Not legal advice.
- Pricing (German) (Pricing page), retrieved 18 Oct 2026
- Privacy policy (German) (Privacy notice), retrieved 18 Oct 2026
- Enterprise (Pricing page), retrieved 18 Oct 2026
Current notes 2026
Terms and conditions in the version of 2026-09-15 (currently valid according to the version archive; new fair use policy with credit allowances, grandfathering clause for existing contracts). The pricing page ('No disclosure to third parties', 'Servers in Germany' (translated)), the Enterprise page ('100% data processing in Germany, no US servers' (translated)) and the privacy policy (AI requests on servers of external providers in the EU and USA) stand side by side; how these relate is not explained.
Open points of the review
- No publicly accessible DPA (paths checked /de/avv, /de/dpa, /dpa: 404; terms and conditions, pricing page, legal pages and help centre do not refer to one); the Enterprise page mentions a 'Custom-DPA' only for Enterprise; unclear for Essential/Pro.
- External AI providers: only OpenAI named in the help centre (with a training exclusion); other contractual partners/hosting providers, their use for training and the data location per model not documented.
- Contradiction on data location: Enterprise page '100% data processing in Germany, no US servers' (translated) versus privacy policy Section XIII (AI requests also in the USA); not resolved.
- ISO 27001 certificate (scope, certification body, validity) not retrievable.
- Retention period of text inputs, chats and documents not documented (images only: 30 days).
- Monthly prices for Essential/Pro not shown, although monthly plans exist according to the FAQ.
- Privacy policy without a version date (the version archive covers only the terms and conditions).
Frequently asked questions
Where does neuroflash store data?
mixed (plans: Essential, Pro, Enterprise). According to the provider, as of 18 Oct 2026.
Is there a DPA for neuroflash?
not publicly documented in: Essential, Pro; yes in: Enterprise. Based on our research, as of 18 Oct 2026.
Does neuroflash use inputs for AI training?
no in: Essential, Pro, Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
Wulfsdorfer Weg 100, 22359 Hamburg, Germany; Local Court (Amtsgericht) Hamburg, HRB 117450. According to the provider, as of 18 Oct 2026.
All sources
- 01Pricing (German)Pricing page · retrieved 18 Oct 2026
- 02Privacy policy (German)Privacy notice · retrieved 18 Oct 2026
- 03Terms and conditions (version 2026-09-15) (German)Terms and conditions · retrieved 18 Oct 2026
- 04Legal notice (German)Legal notice · retrieved 14 Oct 2026
- 05EnterprisePricing page · retrieved 18 Oct 2026
- 06Help centre: Are you GDPR compliant?Documentation · retrieved 18 Oct 2026
- 07Help centre: How long are my generated images stored?Documentation · retrieved 18 Oct 2026
- 08Version archive of the terms and conditionsTerms and conditions · retrieved 18 Oct 2026
More tools in Writing & translation with an EU hosting option (in at least one plan)
- DeepL · Based in: Maarweg 165, 50825 Köln, Germany
- Google Translate · Based in: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
All tools in Writing & translation · Tools with an EU hosting option
Further reading
All tools in the category: Writing & translation. Figures across all tools: Data report.