AI providers

Whether the big AI services train on your data, and whether data stays in the EU. Use it when you choose tools for the policy. Checked 9/10/2026. How to

Free and personal plans (ChatGPT Free/Plus, Claude Free/Pro, the Gemini app, Vibe Free) have no data processing agreement and may train on data. They are not suitable for the company's personal data.

ChatGPT · OpenAI, USA

Business (formerly Team) and Enterprise

Does it train on your data?
✓ No. The company's data is not used for training by default.
Data in the EU?
Partial Enterprise only: new workspaces can have data stored and processed in the EU. Not Business.
Data processing agreement?
✓ Yes. The data processing agreement is part of the contract (OpenAI Ireland for EU customers).
Works with GoalCube (connector)?
✓ Yes. Custom connectors through developer mode; an administrator switches it on.
Sources

Claude · Anthropic, USA

Team and Enterprise

Does it train on your data?
✓ No. Data is not used for training unless the company says yes itself.
Data in the EU?
✗ No. Data is stored in the USA; there is no EU storage to choose.
Data processing agreement?
✓ Yes. The data processing agreement is automatically part of the commercial terms.
Works with GoalCube (connector)?
✓ Yes. An owner adds custom connectors for the whole organisation.
Sources

Microsoft 365 Copilot · Microsoft, USA

Add-on for Microsoft 365 for business

Does it train on your data?
✓ No. Prompts, replies and the company's data are not used for training.
Data in the EU?
Partial Yes, within the EU Data Boundary. But new EU customers may have requests processed outside the EU at peak times (flex routing), which can be switched off.
Data processing agreement?
✓ Yes. Covered by Microsoft's product terms and data processing agreement.
Works with GoalCube (connector)?
✓ Yes, through agents in Copilot Studio. Licence requirement not confirmed.
Sources

Vibe (formerly Le Chat) · Mistral AI, France

Pro, Team and Enterprise

Does it train on your data?
Partial Pro and Team: yes by default; an administrator must switch it off. Enterprise: no.
Data in the EU?
Partial Servers in the EU (Sweden). Some features may send data outside the EU; only Enterprise can switch this off.
Data processing agreement?
✓ Yes. Whether it covers Pro and Team is not confirmed.
Works with GoalCube (connector)?
✓ Yes. An administrator can add custom connectors.
Sources

Gemini in Google Workspace · Google, USA

Workspace Business and Enterprise

Does it train on your data?
✓ No. Workspace data and prompts are not used for training without permission.
Data in the EU?
Partial Storage and processing in the EU only with Enterprise Plus or the Data Regions add-on. Business: storage only.
Data processing agreement?
✓ Yes. An administrator must accept it in the Admin console if it is not already in the agreement.
Works with GoalCube (connector)?
? Not confirmed for Gemini in Workspace.
Sources

Good to know

  • All the American providers are covered by US law (CLOUD Act), even when data is stored in the EU. Mistral is the only European one.
  • The terms change often. Check the provider's page before you choose.
  • With GoalCube Personal data, the AI sees pseudonyms instead of names and numbers, whichever provider you use. The real personal data stays with GoalCube in the EU.

The terms change often. Not legal advice.