Data

Gemini Notebook and the GDPR: AI training, data location and DPA

Workspace Business Standard: Doesn't train on your data. EU hosting not documented · DPA in the terms.

Vendor: GoogleAssistantsChecked on How we check

Verdict

Is Gemini Notebook GDPR compliant?

Personal account

Free

Doesn't train on your data

No EU hosting · no DPA

Price: Free

Workspace Business Standard

Business

Doesn't train on your data

EU hosting not documented · DPA in the terms

Price: €13.60 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Plans

Which Gemini Notebook plan stops the AI training?

None of the 2 plans we checked trains on your data.

Training

Does Gemini Notebook train on your data?

Trains on your data by default? · Personal account

Checked

Doesn't train on your data.

No, unless the user sends feedback: then Google may review the full interaction, including queries, uploads and responses

Source: support.google.comSection 'Learn how Gemini Notebook protects your data'Checked on

Trains on your data by default? · Workspace Business Standard

Checked

Doesn't train on your data.

No. Workspace users' uploads, queries and responses are not reviewed by humans and not used to train AI models

Source: support.google.comSection 'Learn how Gemini Notebook protects your data' (Workspace paragraph)Second source: knowledge.workspace.google.comChecked on

Location

Where does Gemini Notebook store your data?

Where data is stored by default · Personal account

Checked

Not fixed: Google maintains servers around the world and may process data outside the user's country

Source: policies.google.comSection on data transfers ('We maintain servers around the world')Checked on

EU hosting on this plan · Personal account

Checked

No EU hosting.

No region setting for personal accounts

Source: knowledge.workspace.google.comData regions article (Workspace admin only)Checked on

Contract

Does Gemini Notebook sign a data processing agreement?

Data processing agreement (DPA) · Personal account

Checked

No DPA.

No. On a personal account the Google Terms of Service and Privacy Policy apply, with Google Ireland as controller in the EEA

Source: support.google.comSection 'Learn how Gemini Notebook protects your data' (which terms apply)Second source: policies.google.comChecked on

Data processing agreement (DPA) · Workspace Business Standard

Checked

DPA in the terms.

Yes, through Workspace: the Google Workspace Terms apply to qualified editions, and uploaded files and notebooks follow the Cloud Data Processing Addendum

Source: support.google.comSection 'Learn how Gemini Notebook protects your data' (which terms apply)Second source: knowledge.workspace.google.comChecked on

Processors

Who else handles Gemini Notebook data?

Sub-processors (companies that handle the data for them) · Personal account

Checked

Published.

No list for personal accounts; the privacy policy says affiliates and trusted providers process data for Google

Source: policies.google.comSection 'For external processing'Checked on

EU–US Data Privacy Framework · Personal account

Checked

On the list.

Active (Google LLC; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Google LLC' (checked 16 Oct 2026)Checked on

Sub-processors (companies that handle the data for them) · Workspace Business Standard

Checked

14 listed.

Public as part of Workspace: 14 third-party entities (support firms) plus their affiliates and Google affiliates

Source: workspace.google.comThird-Party Subprocessors sectionChecked on

EU–US Data Privacy Framework · Workspace Business Standard

Checked

On the list.

Active (Google LLC; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Google LLC' (checked 16 Oct 2026)Checked on

Retention

How long does Gemini Notebook keep your data?

How long data is kept · Workspace Business Standard

Checked

Prompts and responses are not kept after the session ends; uploaded files and notebooks follow the CDPA deletion terms, and users can delete or export them

Source: knowledge.workspace.google.comTable 'Gemini data retention', row 'Gemini Notebook'Checked on

Security

Which certifications and admin controls does Gemini Notebook have?

Security certifications · Personal account

Checked

None. Google states Gemini Notebook does not yet support ISO, SOC or FedRAMP compliance

Source: knowledge.workspace.google.comFAQ 'Does Gemini Notebook support ISO, SOC, HIPAA, or FedRAMP compliance?'Checked on

Admin controls for AI · Personal account

Checked

Not offered: a personal account has no admin

Source: support.google.comSection 'What you need'Checked on

Security certifications · Workspace Business Standard

Checked

None. Google states Gemini Notebook does not support ISO, SOC or FedRAMP compliance and is not covered by its HIPAA BAA, unlike Gemini in Workspace apps

Source: knowledge.workspace.google.comFAQ 'Does Gemini Notebook support ISO, SOC, HIPAA, or FedRAMP compliance?'Checked on

Price

What does Gemini Notebook cost?

Price, as shown in Germany · Personal account

Checked

Free.

EUR 0 with a personal Google account; higher limits come with Google AI plans (Google AI Pro: EUR 21.99 per month)

Source: support.google.comSection 'Availability' ('available in browser to all users above the age of consent')Second source: one.google.comChecked on

Price, as shown in Germany · Workspace Business Standard

Checked

€13.60 / user / mo.

Included in Google Workspace Business Standard: EUR 13.60 per user/month with a 1-year commitment, EUR 16.20 flexible

Source: workspace.google.comBusiness Standard card (checked 16 Oct 2026)Second source: support.google.comChecked on

Alternatives

Gemini Notebook alternatives that don't train on your data

Other assistants tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Langdock

    Business · €29.00 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Microsoft 365 Copilot

    Business add-on · €18.20 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • nele.ai

    usage-based credit subscription · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Proton Lumo

    Professional · €11.99 / user / mo

    Says it doesn't train on your dataData in the EU (vendor says) · DPA on request

    ✓✓✓✓✓

  • Gemini in Google Workspace

    Business Standard · €13.60 / user / mo

    Doesn't train on your dataLimited EU hosting · DPA in the terms

    ✓–✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices