GDPR, AI Act & data security
Frida reads your customer emails to build your sales overview. That is why data protection, human control and AI transparency are not features for us — they are the foundation.
Hosting and storage in the EU — Germany/Finland
AI Act transparency — users know when AI is making suggestions
Disclosed sub-processors and transfer basis — no hidden links
Your emails are never used to train AI models
Fictional example — always check Frida’s suggestions against the original email.
Quote for a strategy programme — Nordlys
Hi Louise. The quote is DKK 150,000 excluding VAT for four workshops. We have proposed starting on 5 October. Could you get back to us once you have reviewed it?
Read the quote and see what the customer is being asked to answer.
The DKK 150,000 quote excluding VAT is waiting for a reply. A 5 October start is a proposal.
The deal brings together the quote and the planned follow-up. Its timing needs to fit your agreement with the customer.
Hi Louise. Have you had a chance to review the quote for the strategy programme? Please let me know if you have questions about the scope or schedule. Best regards, Jonas
See what still needs the customer’s answer and why the deal needs attention. Open the source email or deal from here.
The email does not prove: That the customer read or accepted the quote. Other conversations may change the picture.
A prepared example of Frida’s suggestions — not an analysis of your inbox.
Explore the full demo →Frida is built with GDPR from the start. Hosting and storage run on EU servers, and email AI processing happens at a disclosed US-based sub-processor under the EU-US Data Privacy Framework and standard contractual clauses.
Every sub-processor we use is listed openly in our privacy policy. Email AI processing happens at a US-based sub-processor — always under the EU-US Data Privacy Framework and standard contractual clauses, and your data is never used to train models.
The AI Act is partly about transparency, responsible use and human control. Frida is built around one principle: users should know when AI is making suggestions, and nothing leaves the inbox without approval.
GDPR is not only about where data lives. It is about control. Frida makes it clear what is processed, why it is processed and how you can have it deleted.
Frida is developed by a Danish company under EU law. We built the product for businesses that take their customers’ trust seriously — because our own product depends on exactly that trust.
Comparison
Many AI tools are excellent — but customer emails are personal data, and the difference lies in the paperwork and the defaults. Always check the terms yourself.
Yes — listed in the privacy policy.
Often unclear on free tiers.
Hosting in the EU, AI processing in the US under EU-US DPF — all disclosed.
Often undisclosed, typically US.
Never.
Often the default unless you opt out.
AI suggestions are shown as AI suggestions, and the user stays in control.
Varies — especially in generic tools.
You — every message requires your approval.
Varies.
Full deletion on request.
Varies — check the terms.
FAQ
Yes — when processing is necessary to provide the service, data processing is limited, sub-processors are disclosed, transfers are safeguarded and the user stays in control. Frida is built around those principles.
No. Your data is used to deliver the service to you — drafting replies and building your overview. It is never used to train models.
Hosting and storage are in the EU. The email AI processing itself happens at a US-based sub-processor under the EU-US Data Privacy Framework and standard contractual clauses — all sub-processors are disclosed in the privacy policy.
The list is published at app.fridaapp.io/subprocessors with location and transfer basis, and changes are announced there. The data processing agreement is annex 1 to the terms: app.fridaapp.io/dpa.
Frida is built with AI Act transparency and human control: users know when Frida is making AI suggestions, and drafts or replies are not sent without approval. We continuously document AI purposes, providers and risks so the product can follow the relevant requirements as they come into force.
Yes. You can request full deletion at any time, and deletion follows our published retention policy.
Frida is a CRM for Outlook for small B2B businesses where the person who sells also delivers. Frida finds the sales opportunities in your Outlook conversations, keeps them up to date and prepares the follow-up. You type nothing in, and nothing is sent before you have read it.
Yes. Frida is built around Outlook and Microsoft 365, so you keep working from the inbox you already use.
No. Frida prepares drafts and suggestions, but the user stays in control and approves messages before they are sent.
CRM for Outlook for small B2B businesses
Frida finds the sales opportunities in your Outlook conversations, keeps them up to date and prepares the follow-up. You type nothing in, and nothing is sent before you have read it.
