The DPA governs the processing of personal data by justReporting GmbH Wirtschaftsprüfungsgesellschaft on behalf of customers using ReportingGPT (Art. 28 GDPR / § 28 DSGVO).
A DPA is available for all paid plans (Starter, Pro, Team, Enterprise). Free plan users process data without a formal DPA – we recommend upgrading if a DPA is required for your organisation.
Our primary sub-processor for AI inference is Amazon Web Services (AWS) – specifically AWS Bedrock, hosted in Frankfurt (eu-central-1). AWS operates under their own DPA with standard contractual clauses. A full sub-processor list is included in the DPA.
Report data is retained for the duration of the subscription plus a 30-day deletion window following account closure. Export artefacts are available for download at any time. On request, data can be deleted earlier.
Note: Different retention periods may apply to different document types under applicable law (e.g., § 257 HGB for business records, up to 10 years). We recommend reviewing your own obligations.
We believe in data sovereignty. Your data belongs to you, not to us. Switching away from ReportingGPT should be as easy as switching to it.
Send us your company name and plan – we respond within 2 business days.
Request DPA via emailFor Enterprise customers, custom DPA clauses are available.