AI providers: training, data in the EU and a data processing agreement
Short answer
For each AI service, the catalogue shows whether it trains on company data, whether data can be held in the EU, whether there is a data processing agreement and whether it can use custom connectors such as GoalCube. Free and personal plans are not suitable for company personal data. The catalogue was checked on a set date; check the provider's own pages before you choose.
| Service | Plans | Trains on your data? | Data in the EU? | Data processing agreement? | Custom connectors? |
|---|---|---|---|---|---|
| ChatGPT OpenAI, USA | Business (formerly Team) and Enterprise | No. The company's data is not used for training by default. | Enterprise only: new workspaces can have data stored and processed in the EU. Not Business. | Yes. The data processing agreement is part of the contract (OpenAI Ireland for EU customers). | Yes. Custom connectors through developer mode; an administrator switches it on. |
| Claude Anthropic, USA | Team and Enterprise | No. Data is not used for training unless the company says yes itself. | No. Data is stored in the USA; there is no EU storage to choose. | Yes. The data processing agreement is automatically part of the commercial terms. | Yes. An owner adds custom connectors for the whole organisation. |
| Microsoft 365 Copilot Microsoft, USA | Add-on for Microsoft 365 for business | No. Prompts, replies and the company's data are not used for training. | Yes, within the EU Data Boundary. But new EU customers may have requests processed outside the EU at peak times (flex routing), which can be switched off. | Yes. Covered by Microsoft's product terms and data processing agreement. | Yes, through agents in Copilot Studio. Licence requirement not confirmed. |
| Vibe (formerly Le Chat) Mistral AI, France | Pro, Team and Enterprise | Pro and Team: yes by default; an administrator must switch it off. Enterprise: no. | Servers in the EU (Sweden). Some features may send data outside the EU; only Enterprise can switch this off. | Yes. Whether it covers Pro and Team is not confirmed. | Yes. An administrator can add custom connectors. |
| Gemini in Google Workspace Google, USA | Workspace Business and Enterprise | No. Workspace data and prompts are not used for training without permission. | Storage and processing in the EU only with Enterprise Plus or the Data Regions add-on. Business: storage only. | Yes. An administrator must accept it in the Admin console if it is not already in the agreement. | Not confirmed for Gemini in Workspace. |
Checked 9 October 2026. Free and personal plans (ChatGPT Free/Plus, Claude Free/Pro, the Gemini app, Vibe Free) have no data processing agreement and may train on data. They are not suitable for the company's personal data.
How to use the catalogue
This is the real system with fictitious data. Try the walkthroughs in the articles to click through.
- Use the catalogue to choose the approved tools for your AI policy.
- Use only business plans with a data processing agreement for company data.
- With GoalCube, the real names never leave the EU, whichever service you use. The rest of the GDPR still applies.
The catalogue is also in GoalCube under AI providers, with links to the providers' sources.
Screens recorded from GoalCube 0.26.0 on 22 October 2026 with fictitious data.