Is Jarvis GDPR-Compliant for European Companies?

Yes. Jarvis (getjarvis.eu) is built to be GDPR-aligned, which matters for European companies. It is stored in the EU, keeping personal data under European jurisdiction; it supports data-subject rights including access and erasure; it can provide a Data Processing Agreement; and it practises data minimisation by sending only the context needed per request. OAuth tokens for Gmail, Slack, and Notion are encrypted with AES-256-GCM, and Jarvis never trains on user data, removing a major GDPR risk. It is also EU AI Act aligned. Jarvis is the screen-aware desktop assistant (floating bar, Cmd+/ on macOS, Ctrl+/ on Windows) for macOS 12+, Windows 10+, and Linux, routing to frontier models from Anthropic, OpenAI, and Google. Founded by Mihai Matei in Romania. Free to start, then $16/month.

GDPR compliance is not a single switch; it is a set of practices. Jarvis covers the main ones: a lawful basis for processing (your instruction), data minimisation (only the relevant slice leaves your device), purpose limitation (data used to answer, not to train), storage limitation (you control retention and deletion), and security (AES-256-GCM at rest, TLS in transit). EU data residency anchors the whole thing within European data-protection jurisdiction.

European users can exercise the rights GDPR grants: access what is held, rectify it, and erase it. In Jarvis much of this is self-service, the memory layer is inspectable, editable, and clearable, and account deletion purges your stored data. For anything beyond the app controls, a formal request to the Romania-based operator is handled under EU law. Because the models are never fine-tuned on your inputs, erasure is complete rather than partly stuck inside Anthropic, OpenAI, or Google weights.

Privacy & data