Data

Proton Lumo and the GDPR: AI training, data location and DPA

Professional: Says it doesn't train on your data. Data in the EU (vendor says) · DPA on request.

Vendor: ProtonAssistantsChecked on How we check

Verdict

Is Proton Lumo GDPR compliant?

Professional

Business

Says it doesn't train on your data

Data in the EU (vendor says) · DPA on request

Price: €11.99 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Proton Lumo train on your data?

Trains on your data by default?

Vendor says

Says it doesn't train on your data.

No (vendor statement): the business page promises to prevent AI training on your data, and the DPA lists no training purpose. Feedback a user chooses to send may be shared with ETH Zurich and EPFL to train the Apertus models

Source: proton.meFeature listSecond source: proton.meChecked on

Location

Where does Proton Lumo store your data?

EU hosting on this plan

Vendor says

Data in the EU (vendor says).

Europe by default (vendor statement); Switzerland has an EU adequacy decision

Source: proton.me'Operate under European protection'Second source: proton.meChecked on

Contract

Does Proton Lumo sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes. DPA (last modified 10 Feb 2026) forms part of the contract under Proton's terms; Lumo is not named, but the DPA covers Proton services generally

Source: proton.mePreamble and definitionsChecked on

Processors

Who else handles Proton Lumo data?

Sub-processors (companies that handle the data for them)

Checked

Published.

Named in the Lumo privacy policy: Zendesk (US), Stripe (US), PayPal group (US, Singapore), Chargebee (US), Atlassian (EU, US, UK); web-search partners not named

Source: proton.meProcessors sectionSecond source: proton.meChecked on

EU–US Data Privacy Framework

Checked

EU or Swiss vendor.

Not applicable (Swiss vendor, Proton AG)

Source: proton.meController sectionChecked on

Security

Which certifications and admin controls does Proton Lumo have?

Security certifications

Vendor says

Proton's ISO 27001 and SOC 2 certifications back Lumo, per Proton; Lumo is described as supporting GDPR and HIPAA compliance

Source: proton.meSection 'Certified and compliant'Second source: proton.meChecked on

Admin controls for AI

Checked

Limited. Lumo for Business adds 'administrative tools to manage your team's access'; no organisation-wide switches for individual AI features are described

Source: proton.meFAQ comparing Lumo Plus and Lumo for BusinessSecond source: proton.meChecked on

Price

What does Proton Lumo cost?

Price, as shown in Germany

Checked

€11.99 / user / mo.

EUR 11.99 per user/month billed yearly (EUR 143.88); EUR 14.99 monthly; 'taxes may apply'

Source: proton.meLumo Professional card, Monthly/Yearly toggleChecked on

The vendor doesn't say: data location, retention.

Alternatives

Proton Lumo alternatives that don't train on your data

Other assistants tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Langdock

    Business · €29.00 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Microsoft 365 Copilot

    Business add-on · €18.20 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • nele.ai

    usage-based credit subscription · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Gemini in Google Workspace

    Business Standard · €13.60 / user / mo

    Doesn't train on your dataLimited EU hosting · DPA in the terms

    ✓–✓✓✓

  • Gemini Notebook

    Workspace Business Standard (+1) · €13.60 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices