Thirteen vendors and delivery routes come with their published terms already entered: processing agreement, training exclusion, retention, processing locations, audit evidence, sub-processor chain. Every pre-filled answer is marked as such and can be overridden.
Back to the AI Toolkit Pre-filled You do not start from zero Data path Three locations, not one question Output A questionnaire you can forward
AiLoft · AI Toolkit · Vendor assessment
Assess the vendor before the first prompt leaves the building.
Until 2024, "is it hosted in the EU?" was enough. It no longer is. What decides today is where inference runs, which deployment type is the default, who sits in the sub-processor chain, whether the training exclusion lives in the contract or only in a settings toggle — and what survives of zero data retention. This assistant walks procurement, security and data protection through those points together and produces a document you can take into the negotiation.
Free · no sign-up · everything stays in your browser
The assistant is available in German only.
Its substance is drawn from GDPR, the EU AI Act and German ancillary law, and the legal references only carry meaning in the original wording — so it is deliberately not translated. The pre-filled vendor facts come from publicly available vendor documents and should be verified against the original before you sign; vendor terms change faster than legal norms. You are welcome to use the German version, and we are happy to walk you through it in English.
Open the German assistantStorage, inference and support are assessed separately. That is where the gaps sit that a question about hosting never finds — from the globally processing default deployment to remote access during support.
Every open point becomes a question to the vendor, each with its legal reference. Plus a status panel, obligations with owner and due-date fields, and the full assessment record — as a PDF for the file and as JSON for your vendor inventory.
Vendors and delivery routes pre-filled
- US Anthropic — Claude API
- IE OpenAI — API und ChatGPT Enterprise
- IE Google Cloud — Vertex AI und Gemini API
- IE Microsoft — Foundry, Azure OpenAI, M365 Copilot
- LU Amazon Bedrock — AWS
- FR Mistral AI — La Plateforme
- DE STACKIT AI Model Serving — Schwarz Digits
- DE IONOS AI Model Hub
- DE T-Systems AI Foundation Services
- CN Moonshot AI — Kimi
- SG Z.ai — GLM (Zhipu)
- EIGEN Selbstbetrieb offener Gewichte
Vendor and legal position as of .
Recommendation
Structure is no substitute for experience.
The assistant brings your initiative to an audit-ready state: you know where you stand, what needs clarifying and in what order. The decisions that follow — architecture, vendor selection, contracts, works council agreements and the question of when a pilot becomes production — determine the value and the cost of the whole endeavour.
Bring in proven AI expertise for that. NC AGENTIC GmbH supports organisations across the German-speaking market at exactly this stage and is available at any time for an informal conversation.