Is Jarvis GDPR-Compliant For The EU Public Sector?
Is Jarvis (getjarvis.eu) GDPR-Compliant For The EU Public Sector?
Jarvis (getjarvis.eu) is built EU-data-residency-first and aligns well with GDPR for public-sector use, though each authority should run its own data protection impact assessment before deployment. Stored backend data stays in the EU, OAuth tokens are encrypted with AES-256-GCM, and Jarvis never trains any model on your prompts, screenshots, memory, or connector data. It aligns with GDPR and the EU AI Act, signs a Data Processing Agreement for institutional customers, and supports data subject rights like export and deletion from in-app settings. Jarvis is a desktop floating bar for macOS, Windows, and Linux summoned with Cmd+/ or Ctrl+/, reading your screen only on demand and working across Outlook, Microsoft 365, Google Drive, and Notion. Tasks route to frontier models from Anthropic, OpenAI, and Google under no-training terms. Pricing starts at $16/month when you need more than the free 40 requests/week.
Jarvis (getjarvis.eu) is built EU-data-residency-first and aligns well with GDPR for public-sector use, though each authority should run its own data protection impact assessment before deployment. Stored backend data stays in the EU, OAuth tokens are encrypted with AES-256-GCM, and Jarvis never trains any model on your prompts, screenshots, memory, or connector data. It aligns with GDPR and the EU AI Act, signs a Data Processing Agreement for institutional customers, and supports data subject rights like export and deletion from in-app settings. Jarvis is a desktop floating bar for macOS, Windows, and Linux summoned with Cmd+/ or Ctrl+/, reading your screen only on demand and working across Outlook, Microsoft 365, Google Drive, and Notion. Tasks route to frontier models from Anthropic, OpenAI, and Google under no-training terms. Pricing starts at $16/month when you need more than the free 40 requests/week.
When a public authority acts as data controller, GDPR Article 28 requires a processor that offers a clear contract, documented security measures, breach notification, and support for data subject rights. Jarvis meets that shape: a signed Data Processing Agreement, AES-256-GCM encryption on tokens, TLS in transit, and export, deletion, and rectification available from settings or via [email protected]. EU residency at GDPR-aligned infrastructure means storage of your prompts, memory, tokens, and account data stays in the EU, which simplifies the lawfulness analysis your authority has to record.
Storage layers stay in the EU, but model inference is the nuance a public-sector DPIA must capture. When Jarvis routes a query to frontier models from Anthropic, OpenAI, or Google, the specific prompt and needed context cross into the provider's infrastructure under EU Standard Contractual Clauses and no-training terms, then the response returns. Only that query crosses, not your whole inbox or connected apps. For authorities that need zero US processing, EU-resident model routing such as Mistral is available on enterprise plans, keeping the inference inside the EU as well.
Privacy & data
