| OpenAI Enterprise | USA, stateless API mode (no input persistence) | Standard DPA under GDPR Art. 28 + additional Data Processing Addendum (Enterprise tier) | Internal research, texts without PII, code reviews |
| Microsoft Azure OpenAI (EU region) | EU data centers (Netherlands, Germany, Sweden) | EU data storage, GDPR Art. 44 compliant, no third-country transfer | Highly sensitive data, regulated industries, finance and healthcare |
| Anthropic Claude | USA, stateless API (standard) / EU options via AWS Bedrock | Standard DPA, inputs not used for training (default) | Complex reasoning tasks, code generation, multi-agent workflows |
| On-Prem / Self-Hosted (Llama, Mistral, open source) | Your infrastructure – private cloud or own GPU servers | Maximum control, no third-party data transfer | Highest sensitivity, regulatory requirements, attorney-client privilege |