When is AI GDPR-compliant?
What matters is the legal basis, purpose limitation, data minimisation and where processing takes place. If data is transferred to providers outside the EU, additional safeguards are needed. Local or EU-hosted models avoid many of these questions from the start.