Data

Qonto and the GDPR: AI training, data location and DPA

Smart: Doesn't train on your data. EU hosting not documented · no DPA.

Vendor: Qonto SADocuments, HR and financeChecked on How we check

Verdict

Is Qonto GDPR compliant?

Smart

Business

Doesn't train on your data

EU hosting not documented · no DPA

Price: €19 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Qonto train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Qonto's AI-at-Qonto terms say Qonto does not train the models behind its AI agents (Google and Anthropic do) and collects no data for model training. The privacy policy adds no generative-AI training beyond what delivering the service needs.

Vendor's wording: “Qonto does not train the AI models and therefore does not source or collect data for model training purposes.”

Source: qonto.pactsafe.ioArtificial intelligence at Qonto v3.0 (effective 4 May 2026), section 6 Our Qonto AI Agents; privacy policy v7.0 AI paragraphChecked on

Location

Where does Qonto store your data?

Where data is stored by default

Checked

France and Germany (EU), on Amazon AWS servers.

Vendor's wording: “auf den Servern unseres Anbieters zur Datenspeicherung (Amazon AWS) in Frankreich und Deutschland (Europäische Union)”

Source: qonto.pactsafe.ioDatenschutzbestimmungen v7.0, section 7 'Wo speichern wir Ihre Informationen?'Checked on

Contract

Does Qonto sign a data processing agreement?

Data processing agreement (DPA)

Checked

No DPA.

No separate DPA for the account. Qonto states it processes customer data as an independent data controller, not as a processor.

Vendor's wording: “Qonto handelt bei der Verarbeitung der Daten seiner Kunden als unabhängiger Datenverantwortlicher. Wir verarbeiten Ihre Daten für unsere eigenen Zwecke”

Source: qonto.pactsafe.ioDatenschutzbestimmungen v7.0, section 1 (Hinweis)Checked on

Processors

Who else handles Qonto data?

EU–US Data Privacy Framework

Checked

EU or Swiss vendor.

Not applicable (EU-based vendor, Qonto SA, Paris)

Vendor's wording: “Qonto (Qonto SA), rue de Navarin, 75009 Paris, SIREN 819 489 626”

Source: qonto.pactsafe.ioDatenschutzbestimmungen v7.0, page footerChecked on

Retention

How long does Qonto keep your data?

How long data is kept

Checked

Account and transaction data is kept for 5 years after the account is closed, as financial law requires. Debt-collection data is kept up to 5 years after the case closes.

Vendor's wording: “Wir werden Ihre Daten für 5 Jahre nach der Schließung Ihres Kontos”

Source: qonto.pactsafe.ioDatenschutzbestimmungen v7.0, section 5 (retention for account and transaction data)Checked on

Price

What does Qonto cost?

Price, as shown in Germany

Checked

€19 / mo.

€19 per month excluding VAT on annual billing (€228 per year). Monthly billing is also available.

Vendor's wording: “€19 /month (excl. VAT)* Billed annually at €228”

Source: qonto.comPricing page, Smart plan cardChecked on

The vendor doesn't say: EU hosting, sub-processors, certifications, admin controls.

Alternatives

Qonto alternatives that don't train on your data

Other documents, hr and finance tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • iLovePDF

    Premium · €5 / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Pleo

    Build · €14 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Teamtailor

    subscription by quote · Quote only

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Tellent Recruitee

    Advance · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Candis

    Basis · From €389 / mo

    Doesn't train on your dataNo EU hosting · DPA in the terms

    ✓✕✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices