What is GDPRchat and who's behind it
GDPRchat is a full-featured AI assistant built on a European technology stack. The project is backed by the Danish company FRITS AI ApS based in Copenhagen, founded by solo entrepreneur Frits Lyneborg. It launched in July 2026 and immediately caught the attention of tech media including Cybernews.
This isn't another startup building its own language model from scratch. GDPRchat is more of a security layer on top of existing European models — specifically, it uses models from French Mistral AI (Mistral Large for chat, Mistral Small for everyday tasks), Chinese Qwen 3.5 for code and diagram generation, and German FLUX from Black Forest Labs for image generation. All of these models run exclusively on servers in the EU — namely in data centers of Germany's Hetzner (ISO 27001) and on Scaleway infrastructure in Paris.
Three layers of privacy protection
The most interesting thing about GDPRchat isn't the AI itself, but the three-layer personal data protection that none of the major players offer:
First layer — infrastructure. All computation takes place on European soil under GDPR jurisdiction. Unlike OpenAI (US) or Anthropic (US), GDPRchat is not subject to the US CLOUD Act, which allows American authorities to access data stored with US companies regardless of where it physically resides.
Second layer — browser-side PII filter. Before your query even leaves your device, a browser-based detection system runs checking for 124+ types of personal data — names, emails, phone numbers, IBANs, national ID numbers, payment card and passport numbers across all 27 EU member states. Anything the filter catches is never sent to the server. An extended version with 200+ detection patterns is also available.
Third layer — automatic deletion. Conversations you don't star are automatically deleted after 8 days of inactivity. Shared chat links expire after 30 days. GDPRchat uses no analytics tools, tracking pixels, or advertising cookies. That's why you won't even find an annoying cookie banner on the site — they have nothing to track.
What GDPRchat can do
Functionally, it's a full-featured AI assistant with over 20 built-in tools:
- Chat and answering questions — powered by Mistral Large from Paris servers
- Code, diagram, and interactive app generation — via Qwen 3.5
- Image generation — German FLUX model from Black Forest Labs
- Document analysis (PDF, text files) — again Mistral Large
- Voice transcription — via the Voxtral Mini model from Mistral AI
- Web search — via Brave Search API (queries are stripped of all identifiers)
- Running Python code in a sandboxed environment
Mobile apps are available for iOS and Android, and developers can use the API. Business customers get team workspaces, priority support, and a pre-prepared DPA (Data Processing Agreement) that can be downloaded as a public PDF — another thing you won't find by default with ChatGPT or Claude.
Comparison with competitors: ChatGPT, Claude, and Mistral Le Chat
How does GDPRchat stack up against the main competitors?
| Factor | GDPRchat | ChatGPT | Claude | Mistral Le Chat |
|---|---|---|---|---|
| Headquarters | Denmark | USA | USA | France |
| Data in EU | ✅ 100% | ❌ (except enterprise) | ❌ | ✅ |
| Trains on data | Never | Free: yes; Pro: optional | Pro: no; Free: unclear | Free: yes; Pro: no |
| Auto-delete chats | ✅ (default 8 days) | ❌ | ❌ | ❌ |
| PII filter | ✅ built-in | ❌ | ❌ | ❌ |
| Public DPA | ✅ free to download | Enterprise only | Enterprise only | API only |
| Free tier | 3,000 credits + 160/day | Yes (limited) | Yes (limited) | Yes |
| Paid version | from €9.99/month | $20/month | $20/month | €14.99/month |
Price and availability in Czechia
GDPRchat is available in all EU countries including the Czech Republic. The basic version is free — you get 3,000 welcome credits (roughly 40 queries) and 160 credits daily. The paid version starts at €9.99 per month (about 250 CZK) and offers more credits, team features, and priority support. Payments are processed through the Dutch payment gateway Mollie, so all financial transactions also remain within the EU.
The user interface is currently in English — Czech localization is not yet available. GDPRchat does support language switching, however, so a Czech translation may be just a matter of time. For Czech companies and institutions that need an AI assistant while also meeting strict GDPR requirements (typically healthcare, banking, government), it's an exceptionally interesting choice even without Czech. Invoicing with a Czech VAT number is handled through the VIES system — companies with a valid EU VAT number can apply reverse charge.
Who GDPRchat makes sense for
GDPRchat is not a performance competitor to GPT-5.5 or Claude Opus 4.8 — model-wise, it's essentially a "rebadged" Mistral Large, which lags behind the top US and Chinese models in benchmarks. Its added value lies elsewhere: in legal certainty. If you work with personal data, sensitive corporate data, or are subject to regulation, GDPRchat solves a problem that you'd otherwise handle with complex DPA addendums, enterprise contracts, and legal consultations with American alternatives.
For the average Czech user who just wants to chat with an AI, ChatGPT (available in Czech, more powerful) or Mistral Le Chat (European, also free) remain more practical choices. But for companies, government offices, and institutions that need auditable GDPR compliance without legal risks, GDPRchat is currently the furthest ahead.
Broader context: Europe is building its own AI ecosystem
GDPRchat doesn't arrive in a vacuum. In 2026 alone, the European AI scene has significantly strengthened — France has Mistral AI with a valuation exceeding 6 billion euros, Germany hosts Black Forest Labs (creators of the FLUX image generation model), and the European Commission has launched the AI Factories program, which includes the Czech AI hub in Ostrava. At the same time, the first phase of the EU AI Act has been in effect since February 2025, setting rules for deploying artificial intelligence in sensitive areas.
GDPRchat fits into this picture as a proof of concept: it shows that a full-featured AI assistant can be built purely on European infrastructure, with European models, and in full compliance with European legislation. It's not a technological miracle, but a pragmatic answer to the question more and more European companies are asking: How can we use AI without losing control over our data?
Is GDPRchat really 100% European? What about Brave search?
Yes, with one exception. Web search uses the Brave Search API, whose servers are in the US. However, GDPRchat strips queries of all identifiers (IP address, user ID) before sending them — so Brave has no idea who's asking. All AI models, infrastructure, and payments remain exclusively within the EU.
Can GDPRchat replace ChatGPT for regular Czech users?
It depends on your priorities. ChatGPT is more powerful, supports Czech, and has a broader ecosystem (plugins, GPT Store). GDPRchat sacrifices some performance in favor of privacy — if it's critical to you that no one processes or retains your data, it's the better choice. For most everyday tasks (writing texts, explaining concepts, basic coding), the performance is perfectly sufficient.
What happens if I accidentally paste sensitive data into GDPRchat?
The standard PII filter running directly in your browser catches 124+ types of personal data (names, emails, phone numbers, IBANs, national ID numbers, card numbers) and blocks them from being sent to the server. If the filter misses something, you can manually delete the conversation at any time — plus it will be automatically deleted after 8 days of inactivity. GDPRchat also never uses your conversations for model training.