One AI assistant — as a widget, in your apps, and via APIStart your free trial
Kyros
Chat widget
Embeddable AI chat for any website
Video avatar bot
Real-time talking avatar
Knowledge base
Grounded answers with sources
Interactive cards
In-chat forms & actions
Compare models
Compare models side by side
Moderation
PII & content guardrails
Customer support
Deflect repetitive tickets
Sales & lead gen
Qualify visitors & capture leads
Internal knowledge
One place for team answers
E-commerce
Insurance
Law firms
Healthcare
Blog
Guides & best practices
Glossary
AI terms explained
Templates
Ready-made cards & assistants
Case studies
Results from real teams
Documentation
Embed, API & more
Integrations
Connect your tools
Pricing
Sign inStart free
  1. Home
  2. Glossary
  3. GDPR & AI

Glossary

GDPR & AI

What the General Data Protection Regulation means for AI assistants.

The GDPR (General Data Protection Regulation) governs how personal data may be processed in the EU. For AI assistants it is highly relevant: as soon as a chatbot talks to real users, it processes personal data — often in every message. Principles such as legal basis, purpose limitation, data minimisation, transparency and the rights of data subjects therefore apply.

What matters most with AI

Four points are decisive for AI assistants: EU hosting to avoid third-country transfers; a data processing agreement (DPA) with the provider; controlled retention that doesn’t store data longer than necessary; and the protection of personal data (PII) that users carelessly type into a chat box.

GDPR & AI at Kyros

Kyros is built for the DACH market from the ground up: EU-hosted, German-first and available bilingually. Moderationwithholds personal data before it reaches the model or gets stored; retention is configurable (default 30 days, disabled or a custom period); an audit log with 21 action types provides traceability; and the chat widget ships with a GDPR-worded privacy panel. You’ll find details on the GDPR page and in the article GDPR-compliant AI chatbots.

Frequently asked question

As soon as an AI assistant talks to users, it processes personal data and falls under the GDPR. What matters is EU hosting, a data processing agreement, controlled retention and PII protection. Kyros provides these building blocks: EU-hosted, with PII moderation, configurable retention and a privacy panel in the widget.

AI that keeps privacy in mind.

14-day free trial. No credit card. EU-hosted.

Start for freeSee GDPR details
Kyros

Build AI assistants grounded in your content and deploy them anywhere — widget, apps, API. From the DACH region.

Product
  • Chat widget
  • Video avatar bot
  • Knowledge base
  • Interactive cards
  • Compare models
  • Moderation
  • Pricing
Solutions
  • Customer support
  • Sales & lead gen
  • Internal knowledge
Industries
  • E-commerce
  • Insurance
  • Law firms
  • Healthcare
Resources
  • Blog
  • Glossary
  • Templates
  • Case studies
  • Documentation
  • Integrations
Company
  • About
  • Careers
  • Partner program
  • Contact
  • Book a demo
Trust & legal
  • Security
  • GDPR
  • Imprint
  • Privacy
  • Terms
© 2026 omniratio UG
Hosted in the EU · German & English