ChatGPT
OpenAI · GPT-5.5
- EU hosting
- Azure OpenAI Service, EU Data Zone
- DPA
- Microsoft Online Services DPA, annex under Art. 28 GDPR
- Training
- Not used for model training
PRIVACY & EU AI ACT
AI in the real estate industry — run in a legally compliant way.
In many companies AI does not fail on the technology but on one question: are we even allowed to do this? The answer is yes — provided the deployment is right, per tool. This page shows how.
LEGALLY COMPLIANT DEPLOYMENT · PER TOOL
Recommended deployment per language model.
Each of the four language models has a deployment variant that runs productively and GDPR-compliantly in a real estate company. The table shows EU hosting, data processing and training policy per tool.
Claude
Anthropic · Opus 4.7 / Sonnet 4.6
- EU hosting
- AWS Bedrock in Frankfurt — or Anthropic with EU data processing
- DPA
- Data processing agreement (DPA) in place
- Training
- Content not used for training
Gemini
Google · 3.5 Flash / Pro
- EU hosting
- Google Vertex AI with EU data residency
- DPA
- Data processing under GDPR
- Training
- No training use of company data
Microsoft 365 Copilot
Microsoft · Multi-Model
- EU hosting
- Company Microsoft 365 environment, EU Data Boundary
- DPA
- Microsoft Online Services DPA
- Training
- Data stays in the tenant, no training use
EU AI ACT
What the EU AI Act requires of real estate companies.
Since February 2025: AI literacy obligation
Anyone using AI must be trained for it. With AIGHT Education that training is verifiable.
Since August 2025: high-risk systems
For most applications in real estate companies — text, analytics, automation — this mainly means two things: train and document. Anyone rolling AI out in a structured way takes care of both in the same move.
CSRD & ESG
Sustainability reporting — AI with traceable data lineage.
Where CSRD sustainability reports are due, AI helps prepare the figures — as long as data lineage and calculation remain traceable. AIGHT sets up automations so that every number can be traced back to its source.
Settle privacy before it becomes a blocker.
In the AI Audit & Roadmap, GDPR-compliant deployment per tool is part of the recommendation from day one.