GDPR Chatbot: 9 Best GDPR-Compliant Chat Platforms (2026)

Key takeaways: which GDPR chat platform fits which job

What does GDPR require from a chat or chatbot platform?

1. A signed DPA. Article 28 says processing by a processor must be governed by a contract. A vendor that cannot produce one is not deployable. The clauses to check are set out in what to look for in a chatbot DPA.

2. A transfer mechanism. Any processor outside the EU needs SCCs or an equivalent safeguard under Chapter V. EU hosting removes the transfer question for storage. It does not remove it for US subprocessors.

3. DSAR handling. You answer access and erasure requests within one month, and the vendor has to help. The procedure is covered in how to handle a chatbot data subject request.

4. Breach notice. Under Article 33 the processor tells you without undue delay. You then have 72 hours to tell the supervisory authority.

5. A named subprocessor list. You need to know which companies touch the data and in which country.

How these GDPR chat platforms were ranked

1. Where chat data is processed. EU storage by default ranks above an EU region on request, and both rank above US processing for a buyer with a residency clause.

2. DPA access. A published DPA that applies to every plan ranks above a DPA signed only on the top plan.

3. Transfer mechanism. SCCs, the EU-U.S. Data Privacy Framework, and a named Article 27 representative each count.

4. Entry price for the compliant setup. The price that matters is the plan where the GDPR feature you need starts.

5. Fit for the job. A live chat inbox, a helpdesk, a flow builder, and a content-trained AI chatbot solve different problems.

The 9 best GDPR-compliant chat and chatbot platforms for 2026

1. Crisp: best for EU data residency

Key features

• Customer data stored on EU servers: messaging in the Netherlands, plugins in Germany

• Live chat, shared inbox, email, knowledge base, and AI in one workspace

• AI features run on Mirage, a service Crisp says it owns and operates

• Flat price per workspace with seats included

• DPA with a named list of data processors

Pros

• EU storage is the default on every plan, with no add-on and no sales call

• A French contracting entity governed by EU law

• Per-workspace pricing: 10 seats on Essentials cost $95 per month in total

• Free plan with 2 seats

Cons

• Relay servers in the US, UK, and Singapore handle connections and keep connection logs (IP address, date, user agent, source website)

• Subprocessors named by Crisp include Cloudflare, DigitalOcean, and Stripe, so review the DPA list

• AI usage is metered: $5 of AI credits on Mini, $25 on Essentials, $75 on Plus

• Fewer content sources for AI training than SiteGPT

Pricing

2. SiteGPT: best for AI answers from your own content under SCCs

Key features

• SCCs for EU, EEA, and UK transfers, named in the privacy policy

• Article 27 representatives appointed for the EU and the UK

• A public subprocessor list naming 15 providers and the country of each

• DSAR contact at privacy@sitegpt.ai with a stated one-month response time

• A completed SOC 2 Type II examination, listed on the security page

• Training on 12+ sources: websites, sitemaps, files, YouTube, GitHub, Google Drive, Notion, Dropbox, OneDrive, SharePoint, Box, and help centers

• Human escalation with team notifications on every plan

• 95+ languages

Pros

• The transfer mechanism, the representatives, and the subprocessors are all public, so a DPO can check them before any call

• Deeper content training than any live chat tool on this list

• Conversations and leads are kept until you delete them, so retention is in your hands

• Flat pricing with no per-seat or per-resolution fee

• Chat integrations from Growth: Slack, Crisp, Messenger, Google Chat, Freshdesk Messaging, and Zoho SalesIQ. Zendesk starts on Scale.

Cons

• No EU data residency and no regional hosting option. The subprocessor list names no EU-based provider.

• A signed DPA is executed on the Enterprise plan only. Every other plan runs on the baseline data processing terms in the Terms and Conditions.

• The DPA page is a generator form, so the full contract text is not published in advance

• The security page lists a GDPR assessment by DPLMC International. Treat it as supporting evidence. It is not a certification under GDPR Articles 42 and 43.

• Starter has 1 chatbot, 1 team member, and no chat integrations

• The 7-day trial requires a credit card

• No Intercom or HubSpot integration today. WhatsApp is a paid add-on ($39 a month billed yearly)

Pricing

"SiteGPT makes it easy & intuitive to get your chatbot setup & working in no time at all - anyone can do it." Verified user, G2

3. Tidio: best for online stores that want live chat plus AI

Key features

• Data processed mainly on EEA servers

• Participation in the EU-U.S. Data Privacy Framework, plus SCCs and the UK IDTA

• DPA and SCCs available for e-signature on request, per the Tidio FAQ

• Live chat, help desk, Flows automation, and the Lyro AI agent

• Free plan with 50 billable conversations and 10 seats

• 7-day trial with no credit card

Pros

• EEA processing by default at a low entry price

• Three transfer mechanisms named in one policy

• A free plan that is usable for a small store

• 1,962 G2 reviews, the third-largest review count on this list

Cons

• The contract is with a US entity, so "EU hosted" does not mean no US transfer

• Lyro AI is a separate add-on from $32.50 per month for 50 conversations, billed annually

• The Plus plan starts at $300 per month plus usage fees

• Tidio's FAQ says it does not currently offer HIPAA compliance documentation, so it is not an option for patient data. Teams that handle patient data can see which vendors sign a BAA, and on which plan, in HIPAA compliant chatbots

Pricing

4. Fin, formerly Intercom: best for an AI agent on top of a shared inbox

Key features

• Regional hosting in the US, the EU (AWS Dublin), or Australia (AWS Sydney)

• A published DPA that incorporates SCCs and relies on the EU-U.S. Data Privacy Framework

• Fin AI Agent priced per outcome

• Inbox, tickets, and help center in one product

• 14-day trial with no credit card

Pros

• A real EU region in Dublin for customers who get it in their contract

• The DPA text is public

• Mature inbox and reporting

Cons

• US hosting is the default. The help article says regional hosting is available to customers on a contract.

• Billing, support, usage metadata, and monitoring data may leave the EU region

• Two meters run at once: seats and $0.99 per outcome

Pricing

5. Zendesk: best for large helpdesks that need an EU region

Key features

• EEA hosting through the Data Center Location add-on

• Binding Corporate Rules approved by the Irish Data Protection Commission in 2017

• SOC 2 Type II, ISO 27001, ISO 27018, and ISO 27701, listed on Zendesk's privacy and data protection page

• Ticketing, messaging, help center, and AI agents in one suite

Pros

• The widest choice of hosting regions on this list

• The add-on is free once you are on the right plan

• A deep certification set for enterprise procurement

Cons

• The add-on is not available on Support Team or Suite Team

• Zendesk says service data may still be processed outside the chosen region as reasonably necessary

• Per-agent pricing: 10 agents on Suite Professional cost $1,150 a month, billed annually

• AI resolutions beyond the included allowance cost $2.00 each on pay-as-you-go

Pricing

6. Freshchat: best for low-cost omnichannel chat with an EU data center

Key features

• A European data center option

• A published DPA that incorporates SCCs, with a signed copy on request

• Web chat, social messengers, and SMS from the Growth plan

• Freddy AI Agent with 500 free sessions on paid plans

• A free plan for up to 10 agents

Pros

• The lowest paid entry price on this list at $19 per agent per month

• The DPA text is public

• A 14-day trial of the Enterprise plan

Cons

• Freshworks does not say on its GDPR page which plans include the choice of location, so confirm it in writing

• Freddy AI Agent costs $49 per 100 sessions after the free 500

• Freddy AI Copilot adds $29 per agent per month, billed annually

Pricing

7. Landbot: best for scripted lead flows and WhatsApp

Key features

• An EU contracting entity and European hosting on Google Cloud

• A public subprocessor list with locations

• A visual flow builder for forms, quizzes, and lead qualification

• WhatsApp numbers as a paid add-on

• AI chats included from the Starter plan

Pros

• EU company and EU hosting on every plan

• Prices are published with overage rates stated

• A free plan with 100 chats a month

Cons

• Several subprocessors sit in the US, including Airtable, dbt Labs, and Google Workspace

• AI chat allowances are small: 100 a month on Starter and 300 on Professional

• WhatsApp is a paid add-on on the Professional plan

• Built for scripted flows, so it is weaker at answering open questions from a knowledge base

Pricing

8. Chatbase: best for a published DPA on every plan

Key features

• A public DPA with SCCs for EU, UK, and Swiss transfers

• GDPR and SOC 2 Type II claims on the security page

• AI agents trained on websites and files

• A native helpdesk with human takeover on Standard and above

• A free plan with 50 message credits

Pros

• Counsel can read the DPA before any sales conversation

• The lowest annual entry price among the content-trained chatbots here: $32 a month, or $384 a year

• Voice, telephony, and helpdesk features on the higher plans

Cons

• US processing with no EU region

• Removing Chatbase branding costs $99 a month

• Credits run out fast on Hobby: 700 a month

• No Article 27 representative is named in the pages reviewed for this post

Pricing

9. Botpress: best for developers building custom flows

Key features

• A public DPA that incorporates SCCs

• VeraSafe named as EU representative in the privacy statement

• Participation in the EU-U.S. Data Privacy Framework

• A visual studio with custom code and many channels

• A statement that conversation data is not used for model training

Pros

• The contract, the representative, and the transfer mechanism are all public

• A free plan with 3 seats

• AI spend is included in paid plans: $25 a month on Plus and $150 on Team

Cons

• No self-hosted version for new deployments

• The privacy statement says end-user data is stored in the United States or other locations determined by the customer, so confirm the region for your workspace

• Plus costs $150 a month billed annually, or $1,800 a year, for 250 conversations a month

• Extra conversations cost $65 per 100 on Plus

• Needs developer time to build and maintain

Pricing

GDPR chat platforms compared: DPA, hosting, and transfer mechanism

How to choose a GDPR-compliant chat platform

Use-case cheat sheet: which GDPR chat platform for which scenario

Frequently asked questions about GDPR chat platforms

The basics

Data residency and transfers

Contracts and DPAs

Pricing

Sources

• GDPR Article 27: representatives of controllers or processors not established in the Union

• GDPR Article 28: processor

• GDPR Article 33: notification of a personal data breach

• GDPR Article 83: administrative fines

• GDPR Chapter V: transfers to third countries

• Crisp GDPR compliance status

• Crisp pricing

• SiteGPT pricing

• SiteGPT privacy policy

• SiteGPT subprocessors

• SiteGPT DPA page

• SiteGPT security page

• Tidio privacy policy

• Tidio FAQ

• Tidio pricing

• Fin regional data hosting

• Intercom Data Processing Agreement

• Intercom pricing

• Zendesk: about the Data Center Location add-on

• Zendesk privacy and data protection

• Zendesk pricing

• Freshworks GDPR page

• Freshworks Data Processing Addendum

• Freshchat pricing

• Landbot Trust Center: subprocessors

• Landbot privacy policy

• Landbot pricing

• Chatbase Data Processing Addendum

• Chatbase security

• Chatbase pricing

• Botpress Data Processing Agreement

• Botpress privacy statement

• Botpress v12 and self-hosted versions

• Botpress pricing

• G2 review pages for Crisp, SiteGPT, Tidio, Fin, Zendesk, Freshchat, Landbot, Chatbase, and Botpress

• Tidio on Capterra

• SiteGPT on Product Hunt