Privatemode AI — GDPR Compliance Profile

GDPR Compliance

EU-only data residency

Inference stays in EU

Data Processing Agreement

No training on customer data

Opt-out available

Standard Contractual Clauses

Adequacy decision (HQ country)

EU OnlyNo Training

Data Handling

Regions

EU only

Privatemode states that the service is hosted in top-tier data centers within the European Union, and its security materials state prompts are decrypted only within Privatemode’s confidential-computing environment using AMD CPUs and Nvidia H100/B200 GPUs. The desktop app documentation also states it sends no data to third-party services.

Retention Policy

Website privacy policy says personal data is deleted or blocked once the purpose no longer applies, subject to legal retention periods. For the product itself, Privatemode states user data is never stored, remembered, or used for training; the desktop app stores chat history and access key locally on the user's device. Inquiry-form data is kept until deletion is requested, consent is withdrawn, or the purpose no longer applies.

Additional Details

Privatemode states its architecture ensures models cannot remember customer data or be retrained on it. Documentation says the desktop app sends no data to third-party services and stores chat history locally on device.

Sub-processors

✗Not disclosed

Certifications & EU AI Act

No certifications disclosed.

EU AI Act Status

unknown

Verification

Last verified2026-04-11

Verified byAI-assisted draft (pending review)

Pricing tierfree tier

Sources

Notes

Privatemode presents a strong privacy-by-design posture: it is operated by Edgeless Systems GmbH in Germany, says hosting and inference processing are in the EU, and states customer/API data is not stored, remembered, or used for training. However, no public DPA/AVV or public sub-processor list was found in the consulted primary sources, so those fields are conservatively set to unavailable/null.