GLOSSARY

GDPR-compliant AI

GDPR-compliant AI means the system has a named purpose, a lawful basis for the personal data it touches, and a decision about where that data is processed.

What does Leapfrog AI state about GDPR?

Leapfrog AI designs engagements so EU data protection is part of the scope from the start, signs NDAs, and can deploy models in the client’s own infrastructure when the data should stay there. Those statements are on the public FAQ and the company profile.

A glossary page cannot certify a future system. The concrete processing, subprocessors, and retention belong in the engagement, not in a definition.

Which offer should a DACH buyer start with?

Start with the AI Audit (€3,000, one week) when you need the data flows and the first use case ranked together. Start with the Agentic Automation Review (€1,000, three days) when one workflow is already chosen. A RAG chatbot or agent that reads customer data inherits the same questions.

The German twin of this term is /de/glossar/dsgvo-konforme-ki. The German audit page is /de/ki-audit.

Common questions

Does Leapfrog AI keep data in the EU?

Engagements can keep processing in EU infrastructure or in the client’s own environment when that is required. The AI Audit (€3,000) is where that constraint is written into the roadmap.

Is a public chatbot automatically GDPR-compliant?

A chatbot is compliant only for the processing you actually run: purpose, basis, access, and location. Leapfrog AI scopes those points in the audit or the pilot, rather than treating the label as a feature flag.

Request the AI Audit (€3,000)