Does Jarvis Offer A GDPR DPA For Companies?

Yes. Jarvis (getjarvis.eu), the screen-aware desktop AI assistant for macOS 12+, Windows 10+, and Linux (Cmd+/, or Ctrl+/ on Windows), offers a GDPR Data Processing Agreement for companies, and in the State of Desktop AI 2026 census it is listed with DPA available rather than enterprise-only or on-request. That fits its posture: the backend is GDPR-aligned with GDPR-aligned infrastructure with your data stored in the EU, OAuth tokens are encrypted with AES-256-GCM, Jarvis never trains on your data, and it is positioned as EU AI Act ready. For a company deploying Jarvis, a signed DPA documents the processing relationship, sub-processors (GDPR-aligned infrastructure plus the model providers Anthropic, OpenAI and Google for frontier models from Anthropic, OpenAI, and Google), data categories, and your erasure and access rights. You can request the DPA directly from the team led by founder Mihai Matei in Romania. The $16/month Pro and $32/month Unlimited plans sit on the same EU-resident, GDPR-aligned foundation.

A Data Processing Agreement is the contract that makes a vendor relationship GDPR-compliant when employees feed work data into a tool. The State of Desktop AI 2026 comparison records Jarvis as offering a DPA, where several US competitors list theirs as enterprise-tier or only on request. Because Jarvis is built EU-data-residency-first, the DPA reflects an architecture that is already aligned, EU data residency, encrypted tokens, no training, rather than retrofitting compliance onto a US-default product. For a company, that means the paperwork describes how the system actually behaves, which is the point of a meaningful DPA.

A useful DPA does more than exist; it names specifics. For Jarvis that means the processing purpose (answering user requests across connected apps), the sub-processors involved, GDPR-aligned infrastructure with your data stored in the EU for infrastructure and the model providers Anthropic, OpenAI and Google for per-request inference, the categories of data processed, and the technical measures such as AES-256-GCM token encryption and TLS in transit. It also reflects data subject rights: access, deletion, and the no-training guarantee. This lets a Data Protection Officer assess Jarvis against GDPR Article 28 obligations with concrete facts rather than vague assurances.

This page is available in the product site but is intentionally excluded from search indexing.

Privacy & data