nele.ai and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. nele.ai says all available AI models contractually guarantee that customer data is not used to train future models, and that even local, dedicated models are not trained on customer data.

Vendor's wording: “All available AI models contractually guarantee that your data will not be used to train future models.”

Source: nele.aiSecurity page, 'No training data for LLMs'Checked on 19 October 2026

Germany. Inputs, chats and knowledge bases are stored only on servers in Germany.

Vendor's wording: “All data, including your inputs, chats, and knowledge bases, is stored exclusively on servers located in Germany.”

Source: nele.aiSecurity page FAQ, 'What happens to my data?'Checked on 19 October 2026

EU hosting available.

Yes. Customers choose whether AI models run on European servers, international servers, or (for some models) their own server environment. Storage is in Germany.

Vendor's wording: “You can decide whether you want to run AI models on European servers, international servers, or, for certain large language models, within your own server environment.”

Source: nele.aiSecurity page, 'Self-determination'Checked on 19 October 2026

DPA on request.

Yes. A data processing agreement (AVV) is published at nele.ai/avv and takes effect when signed or concluded electronically; technical and organisational measures are in section 6. It is published in German.

Vendor's wording: “In our DPA, we contractually define how we process and protect your data. You can find all technical and organizational measures (TOMs) in Section 6.”

Source: nele.aiSecurity page, 'Data Processing' under Data Protection StandardChecked on 19 October 2026

Published.

Yes: a list is published in the DPA annex at nele.ai/avv (German). 14 entries counted, including AI and model providers Azure OpenAI, OpenAI, Anthropic, Google Gemini, Mistral AI, Scaleway Generative APIs, Brave Search API and ElevenLabs.

Vendor's wording: “Der Auftragsverarbeiter setzt die folgenden Unterauftragsverarbeiter im Rahmen der Verarbeitung von Daten für den Auftraggeber ein:”

Source: nele.aiAVV, 'Anhang: Unterauftragsverarbeiter'Checked on 19 October 2026

EU or Swiss vendor.

Not applicable (EU-based vendor, GAL Digital GmbH, Hungen, Germany)

Vendor's wording: “GAL Digital GmbH Unter den Linden 26 35410 Hungen”

Source: nele.aiLegal NoticeChecked on 19 October 2026

The customer sets how long chats and documents are kept on the German servers and can delete them at any time. After the contract ends, the DPA requires deletion or return of personal data, at the customer's choice.

Vendor's wording: “You decide how long your chats and documents remain stored on our German servers.”

Source: nele.aiSecurity page, 'Customizable retention periods'Checked on 19 October 2026

1: ISO 27001 for its information security management system, certified by TÜV Rheinland.

Vendor's wording: “Our Information Security Management System (ISMS) is certified according to ISO 27001 by TÜV Rheinland.”

Source: nele.aiSecurity page, 'No training data for LLMs' and FAQChecked on 19 October 2026

Partly. A central admin account manages users, AI models and knowledge bases. Nothing says an admin can switch AI features off as a whole.

Vendor's wording: “Users, AI models, and knowledge bases can be conveniently managed via a central administration account.”

Source: nele.aiSecurity page FAQ, 'Simple integration and secure operation'Checked on 19 October 2026

See details.

From 10.00 EUR per month for 1,000 credits (AI volume), shared by all employees, no per-user fee; 5,000 credits 47.50 EUR, 10,000 credits 90.00 EUR. Net prices plus statutory VAT. Monthly cancellation. Knowledge-base add-on 19.95 EUR per month.

Vendor's wording: “*The prices mentioned are net prices plus statutory VAT.”

Source: nele.aiAI pricing, price configurator and footnoteChecked on 19 October 2026