AI Providers used by DEON
Last updated: November 7, 2025
This page provides transparency about the AI service providers ("AI Providers") integrated into DEON.
DEON GmbH & Co. KG (“DEON”) cooperates with carefully selected AI providers to offer optional AI-supported functions within the DEON platform.
These providers process user input data and generated outputs only when AI functions are explicitly enabled (opt-in) by users or their organizations.
DEON ensures that all processing complies with the EU General Data Protection Regulation (GDPR) and, where applicable, the EU Artificial Intelligence Act (Regulation (EU) 2024/1689).
Current AI Provider
OpenAI, L.L.C.
Headquarters:
OpenAI, L.L.C.
3180 18th Street
San Francisco, CA 94110
United States
Purpose of Processing:
When AI features are enabled in DEON, user-provided inputs (e.g., text or images) are securely transferred to OpenAI's API to generate or transform content (e.g., summaries, text generation, translations, or suggestions).
Processing occurs solely to provide the requested output.
DEON and OpenAI do not use this data to train AI models or for other independent purposes.
Legal basis:
– Art. 6 (1) (a) GDPR – Consent (activation of AI functions by user or organization)
– Art. 28 GDPR – Processor relationship between DEON and OpenAI
– Art. 46 GDPR – Transfer to a third country based on EU standard contractual clauses (SCCs)
Location of Processing:
Data may be processed in the United States and within the European Economic Area (EEA), depending on OpenAI's server infrastructure.
Safeguards for data transfers:
– OpenAI has concluded the EU Standard Contractual Clauses (2021/914/EU) with DEON to ensure an adequate level of data protection.
– Additional organizational and technical measures (encryption, access control, deletion protocols) are implemented.
– OpenAI is subject to US law; however, transfers are secured in accordance with Art. 46 GDPR through the SCCs.
– Further details can be found in OpenAI's privacy policy: https://openai.com/privacy
Data storage:
OpenAI only temporarily stores data transmitted via its API for the purpose of abuse monitoring and error correction (as specified in OpenAI's documentation).
DEON does not store AI inputs or outputs beyond what is necessary to provide the requested result.
Data Protection Responsibilities
- Controller: DEON GmbH & Co. KG, Ella-Kay-Str. 22c, 10405 Berlin, Germany
- Processor: OpenAI, L.L.C., USA
- Supervisory Authority: Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI)
Friedrichstr. 219, 10969 Berlin, Germany
https://www.datenschutz-berlin.de
Future AI Providers
DEON may add or replace AI providers (e.g., European or open-source models like Mistral AI).
Each provider is listed on this page with the same transparency regarding:
- Company details,
- Purpose of processing,
- Country of processing,
- Safeguards for international transfers (SCCs or adequacy decisions) and
- Information on data storage.
Users and organizations always retain control over the opt-in/opt-out functionality in DEON.
No data is sent to an AI provider unless AI features are actively enabled.
Contact
In case of questions regarding data protection and AI processing in DEON, please contact:
datenschutz@deon.de