Security

GDPR Compliance

AI Price Index is operated by towebu GmbH, based in Berlin, Germany. We are fully subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) and the German Federal Data Protection Act (BDSG).

We process minimal personal data. This website does not require registration, login, or any form of account creation. The only personal data processing occurs through server logs and Google Analytics, as detailed in our Privacy Policy.

Data Minimization

In accordance with Art. 5(1)(c) GDPR, we follow the principle of data minimization:

• No user accounts or personal profiles
• No collection of names, email addresses, or payment information
• No tracking beyond anonymized Google Analytics
• No third-party advertising or ad trackers
• No social media tracking pixels

Technical Security Measures

We implement appropriate technical and organizational measures pursuant to Art. 32 GDPR:

• Encryption in transit — All connections to aipriceindex.com are encrypted via TLS/HTTPS
• Secure headers — We use security headers including Content-Security-Policy, X-Content-Type-Options, and Strict-Transport-Security
• No user data storage — We do not store personal data in databases or file systems
• Regular updates — Server software and dependencies are kept up to date

Third-Party Services

EU AI Act (Regulation 2024/1689)

The European Artificial Intelligence Act entered into force on August 1, 2024, with transparency obligations applicable from August 2, 2026, and full enforcement of high-risk system requirements from August 2, 2026.

AI Price Index is an informational website that compares and displays AI product pricing. We do not develop, deploy, or provide AI systems as defined under Art. 3 of the AI Act. Our role is limited to aggregating publicly available pricing information.

Where user-facing content on this website is generated or assisted by AI tools, we will clearly label it in accordance with Art. 50 transparency obligations. Our editorial and pricing data is human-curated.

Digital Services Act (Regulation 2022/2065)

The Digital Services Act (DSA) establishes obligations for online intermediary services operating in the EU. As a website that hosts user-submitted links and comments, we act as a hosting service provider under Art. 6 DSA.

In compliance with the DSA, we provide:

• Point of contact (Art. 12) — [email protected] for authorities, users, and recipients of our service
• Terms of service (Art. 14) — Our Terms and Conditions describe content moderation policies and restrictions
• Notice and action (Art. 16) — We provide a mechanism for reporting illegal content. Reports can be sent to [email protected]
• Transparency (Art. 15) — We do not use automated content moderation or recommendation algorithms

NIS2 Directive (Directive 2022/2555)

The NIS2 Directive strengthens cybersecurity requirements across the EU for essential and important entities. As a small enterprise operating an informational website, aipriceindex.com does not fall within the scope of NIS2-designated sectors (Annexes I and II). Nevertheless, we align with NIS2 cybersecurity best practices including encryption in transit, regular software updates, and incident response procedures.

Cookie Policy

We only use cookies that are strictly necessary for analytics purposes. No advertising or marketing cookies are used. See our Privacy Policy for the complete cookie list.

Responsible Disclosure

If you discover a security vulnerability on our website, please report it responsibly by emailing us at [email protected]. We appreciate your help in keeping our website secure.

Contact