Agentic Memory Vendor Radar für DE/EU
Eine Due-Diligence-Landkarte für Anbieter und Architekturbausteine rund um agentisches Unternehmensgedächtnis.
AI-Agenten kaufen heißt nicht nur Software kaufen. Es heißt entscheiden, wo Unternehmensgedächtnis entsteht. Dieses Radar bewertet deshalb keine Anbieter nach „gut“ oder „schlecht“. Es zeigt, welche Schicht eines agentischen Unternehmensgedächtnisses ein Anbieter besetzt und welche DE/EU-Fragen vor Pilot oder Einkauf geklärt werden müssen.
Stand der öffentlichen Quellen: 2026-05-17. Keine Rechtsberatung. Keine Kaufempfehlung. Eine Due-Diligence-Landkarte.
PDF herunterladen
Statische Fassung zum Teilen, Zitieren und Weiterleiten.
PDFDie Einschätzung basiert auf öffentlich zugänglichen Anbieterquellen: Produktseiten, Dokumentation, Trust- und Security-Seiten, Datenblätter, Whitepaper und öffentlich auffindbare rechtliche Hinweise. Vendor-Aussagen wurden nicht als unabhängige Audits behandelt. Unverifizierbare Punkte bleiben als offene Prüfpunkte markiert.
Anbieter-Cards
Work-AI Platform
Microsoft
Microsoft 365 Copilot / Copilot Studio
Primary fit: M365 default work context, Microsoft Graph, Copilot activity history, agents
DE/EU reading: Strong for existing M365 governance, but high default lock-in risk; Anthropic models out of EU Data Boundary per Microsoft page
Portability notes: Exports exist for some activity history, but semantic portability of agent memory/evals/workflows unclear
- Maturity
- 4
- Works council
- high
- Risk
- medium
Offene Prüfpunkte: Copilot Studio agent traces; export of agent memory; subprocessor details; Betriebsrat implications for user activity history
Google Gemini Enterprise
Primary fit: Workspace and cross-suite enterprise AI, agents, connectors, NotebookLM Enterprise
DE/EU reading: Interesting if Google Cloud governance is strong; less natural default in M365-heavy DE companies
Portability notes: Portability of agents, indexed data, traces and memories unclear
- Maturity
- 3
- Works council
- medium-high
- Risk
- medium
Offene Prüfpunkte: DPA/subprocessors; exact EU residency; export of agent designer logs; connector data handling
Glean
Glean Work AI Platform
Primary fit: Enterprise search, Enterprise Graph, Personal Graph, Work AI agents
DE/EU reading: Strong platform, strong lock-in potential; relevant where enterprise search is strategic
Portability notes: Portability of Enterprise Graph, Personal Graph, agent traces and feedback unclear
- Maturity
- 4
- Works council
- high
- Risk
- medium-high
Offene Prüfpunkte: Trust Center details; DPA; subprocessor list; export semantics for graphs and personal context
Sovereign AI / RAG / IDP / Agents
deepset
Haystack / Haystack Enterprise Platform
Primary fit: Controlled RAG, IDP, agents, Text-to-SQL, open-source foundation
DE/EU reading: Strong DE/EU candidate due sovereignty positioning and deployment flexibility
Portability notes: High potential portability via open-source Haystack and modular architecture, but project-specific
- Maturity
- 4
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: Detailed enterprise DPA/subprocessors; export of platform configs/evals/traces; concrete EU hosting commitments
LLM Observability / Evals
Langfuse
Langfuse
Primary fit: Tracing, prompt management, evaluation, metrics, audit, retention/masking/deletion
DE/EU reading: Very strong DE/EU control layer, especially self-hosted or EU region
Portability notes: Good due OSS/self-hosting; trace/eval export still needs technical validation
- Maturity
- 4
- Works council
- high if personenbezogene traces
- Risk
- low-medium
Offene Prüfpunkte: Exact export formats; enterprise audit logs; Betriebsrat template for traces and feedback
Braintrust
Braintrust
Primary fit: Tracing, evals, prompts, scorers, human review, datasets, exports
DE/EU reading: Strong option where traces/evals must remain in customer cloud/region; control plane metadata and telemetry still require review
Portability notes: Docs include exports, datasets, API/SDK/CLI and self-hosted data plane; exact export formats still need technical validation
- Maturity
- 3
- Works council
- high if personenbezogene traces
- Risk
- low-medium
Offene Prüfpunkte: DPA/subprocessor/public security reports; EU fully hosted region; telemetry defaults; export formats; remote access procedures
Arize
Arize Phoenix / AX
Primary fit: Phoenix OSS, evals, observability, AI agent reliability
DE/EU reading: Phoenix OSS/self-hosting is a strong control pattern for DE/EU traces; Arize AX/Phoenix Cloud enterprise terms still need trust/legal review
Portability notes: OSS/OpenInference/OpenTelemetry orientation improves control; cloud export and enterprise retention need validation
- Maturity
- 3
- Works council
- high if personenbezogene traces
- Risk
- low-medium for self-hosted Phoenix; medium for cloud
Offene Prüfpunkte: Arize AX Trust/Security/DPA; EU region; subprocessors; cloud retention; enterprise support terms
Galileo
Galileo
Primary fit: AI observability, evals, agent reliability, Protect
DE/EU reading: Functionally relevant observability/evals layer; public docs showed security navigation but detailed security pages returned 404 in this pass
Portability notes: Unknown
- Maturity
- 2
- Works council
- high if personenbezogene traces
- Risk
- medium-high
Offene Prüfpunkte: Correct security docs; DPA; EU region; subprocessors; self-host/BYOC; export; retention; access-control docs fetchable URL
LLM Observability / Evals / Agent Platform
LangChain
LangSmith
Primary fit: Agent tracing, evals, monitoring, deployment, SmithDB
DE/EU reading: Powerful but DE/EU depends heavily on BYOC/self-hosting; US cloud otherwise sensitive
Portability notes: Self-host/BYOC improves control; portability of traces/evals needs review
- Maturity
- 3
- Works council
- high if cloud with personenbezogene traces
- Risk
- medium
Offene Prüfpunkte: EU region availability; DPA; subprocessor; export formats; self-host contractual model
Search / Observability / Context Engineering
Elastic
Elasticsearch / Elastic AI
Primary fit: Open search, hybrid retrieval, logs, workflows, model-agnostic AI stack
DE/EU reading: Strong infrastructure candidate where existing Elastic skills exist; not a complete memory solution
Portability notes: Strong data ownership if self-managed; product-specific agent artifacts need review
- Maturity
- 4
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: Exact licensing; cloud region; agent builder data; export of workflows and traces
Vector DB / Hybrid Search
Weaviate
Weaviate Cloud / Weaviate Agents
Primary fit: Vector/hybrid search, RAG, agentic AI, dedicated cloud/BYOC
DE/EU reading: EU-based vendor; good retrieval building block, not full memory
Portability notes: Index/data export and schema portability need technical validation
- Maturity
- 3
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: DPA/subprocessors; EU region; agent products maturity; export semantics
Vector DB
Pinecone
Pinecone Vector Database
Primary fit: Vector database for RAG and semantic retrieval
DE/EU reading: Strong vector component; US vendor; not full memory
Portability notes: Portability of embeddings/index metadata must be designed by customer
- Maturity
- 3
- Works council
- medium
- Risk
- medium
Offene Prüfpunkte: EU region specifics; DPA/subprocessors; export/rebuild process for indexes
Qdrant
Qdrant Vector Database
Primary fit: Vector database, RAG, recommendation, agentic use cases
DE/EU reading: Strong control story for Hybrid/Private Cloud because customer controls infrastructure and storage; Managed Cloud still needs region/subprocessor review
Portability notes: Better than many SaaS-only vector stores if self-hosted or private cloud; export/rebuild of collections, payloads and vectors still project-owned validation
- Maturity
- 3
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: Managed Cloud EU regions and subprocessors; concrete DPA terms; collection export/rebuild procedure; inference feature data handling
Knowledge Graph
Neo4j
Neo4j Graph Database / Aura Agent
Primary fit: Knowledge graphs, graph database, GraphRAG, relationships
DE/EU reading: Strong for relationship memory; good candidate if graph is explicit asset
Portability notes: Graph export possible in principle, but app semantics and Aura Agent artifacts need review
- Maturity
- 4
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: Aura regions; DPA/subprocessors; Aura Agent logs/export; EU deployment specifics
Knowledge Graph / Semantic AI
Graphwise
Ontotext GraphDB
Primary fit: RDF/SPARQL knowledge graph, semantic metadata, GraphRAG, MCP support
DE/EU reading: Very strong for explicit semantics and standards, good DE/EU fit to investigate
Portability notes: Strong standards portability if modeled well; implementation complexity high
- Maturity
- 4
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: Contract/security docs; EU hosting; DPA/subprocessors; managed-service terms
Semantic AI / Taxonomy / Knowledge Graph
Graphwise
PoolParty Semantic Suite
Primary fit: Taxonomies, ontologies, semantic search, GraphRAG, SharePoint integration
DE/EU reading: Strong DE/EU candidate; EU company; ISO 27001/27701 claims
Portability notes: Good semantic portability if taxonomies/ontologies owned by customer
- Maturity
- 4
- Works council
- medium
- Risk
- low-medium
Offene Prüfpunkte: Deployment models; DPA; subprocessor; export of taxonomies/ontologies/config
Document Processing / IDP
Unstructured
Unstructured Data Platform
Primary fit: Parse, chunk, embed, enrich, ETL for unstructured files
DE/EU reading: Useful document pipeline, but public security URL returned 404; not enough for low-risk DE/EU claim
Portability notes: Structured outputs/pipelines are the portability object; exact export formats, connector state and enrichment artifacts need validation
- Maturity
- 3
- Works council
- medium
- Risk
- medium-high
Offene Prüfpunkte: Trust Portal; DPA; EU region; subprocessors; retention; self-host/private deployment; export formats; connector state portability
Document Agents / Framework
LlamaIndex
LlamaParse / LlamaIndex
Primary fit: Document parsing, extraction, indexing, workflows, developer framework
DE/EU reading: Functionally strong document-agent layer; public security/legal evidence is thinner than enterprise positioning, so not a low-risk DE/EU default
Portability notes: OSS framework improves architecture portability; SaaS parsing outputs and retention/data handling must be verified before sensitive documents
- Maturity
- 3
- Works council
- medium
- Risk
- medium-high
Offene Prüfpunkte: Correct Trust Center/DPA/Privacy URLs; retention; EU region; subprocessors; VPC terms; export of parse/extract/index artifacts
Agent Memory / Temporal Graph
Zep
Zep / Graphiti
Primary fit: Agent memory, temporal knowledge graph, context engineering, facts/entities/episodes
DE/EU reading: Conceptually central for agent memory, but public enterprise security and regional evidence were not found in this pass; use as emerging layer, not as low-risk enterprise recommendation
Portability notes: Graphiti OSS and explicit graph primitives are promising; hosted Zep export semantics and deletion controls need validation
- Maturity
- 2
- Works council
- high if user-specific memory
- Risk
- medium-high
Offene Prüfpunkte: Security, DPA, EU region, self-hosting, deletion of user-specific memories, export semantics, subprocessors
Agent Memory
Mem0
Mem0
Primary fit: Persistent memory infrastructure for agents, memory compression, audit logs
DE/EU reading: Relevant memory layer, but Trust Center was blocked by Vercel 429 and privacy URL returned 404; do not present as fully verified for DE/EU
Portability notes: Same API across Kubernetes/private cloud/air-gapped is claimed; actual memory export format and semantic portability unverified
- Maturity
- 2
- Works council
- high if personenbezogene memory
- Risk
- medium-high
Offene Prüfpunkte: Trust Center access; privacy policy URL; DPA; EU region; subprocessors; SOC2 Type2; memory export/deletion; personenbezogene memories
Memory-first agents
Letta
Letta / Letta Code
Primary fit: Persistent agents, continual learning, model-portable memory, git-based context repositories
DE/EU reading: Technically important emerging memory-first agent concept; public enterprise compliance evidence not found; should be framed as frontier signal, not procurement candidate
Portability notes: Model-portable memories and git-based context repositories are promising, but enterprise export/audit semantics are unverified
- Maturity
- 1
- Works council
- high if deployed broadly
- Risk
- unknown
Offene Prüfpunkte: Enterprise security, DPA, data flow, hosting, audit, export, deletion, customer-controlled deployment
Agent Runtime / Memory
Anthropic
Managed Agents / Memory / Dreams
Primary fit: Managed agents, memory stores, dreams, evals, traces
DE/EU reading: High strategic relevance, but vendor-controlled memory/orchestration is the risk case
Portability notes: Memory stores/evals/traces portability unclear
- Maturity
- 2
- Works council
- high
- Risk
- medium-high
Offene Prüfpunkte: Enterprise availability; DPA; EU processing; memory export; eval portability; subprocessor
Cloud Document AI
Azure
Azure AI Document Intelligence
Primary fit: Document extraction, OCR, structured document AI
DE/EU reading: Relevant for document structure in Microsoft/Azure shops
Portability notes: Export structured outputs likely; pipeline ownership customer-dependent
- Maturity
- 3
- Works council
- medium
- Risk
- medium
Offene Prüfpunkte: Fetch product/security docs, data residency, DPA, model training, retention
Google Document AI
Primary fit: Document extraction and parsing
DE/EU reading: Relevant if Google Cloud already governed
Portability notes: Pipeline outputs exportable, model/data handling to verify
- Maturity
- 3
- Works council
- medium
- Risk
- medium
Offene Prüfpunkte: Fetch product/security docs, data residency, DPA, training, retention
Cloud Document AI / RAG
AWS
AWS Textract / Bedrock Knowledge Bases
Primary fit: Document extraction, managed RAG in AWS ecosystem
DE/EU reading: Relevant for AWS-heavy firms and regulated workloads
Portability notes: Customer controls depend architecture; managed service lock-in possible
- Maturity
- 3
- Works council
- medium
- Risk
- medium
Offene Prüfpunkte: Fetch product/security docs, data residency, DPA, training, retention
Work-AI / CRM Agent Platform
Salesforce
Agentforce
Primary fit: CRM-centered autonomous agents, Salesforce data/process context, Slack and Customer 360 ecosystem
DE/EU reading: Must be in scope for any enterprise vendor radar because Salesforce owns critical customer/process context; DE/EU readiness depends on Salesforce contractual setup, Hyperforce/data residency and subprocessors
Portability notes: High business-process lock-in risk if agent logic, feedback and CRM context remain inside Salesforce ecosystem
- Maturity
- 4
- Works council
- high if agents affect sales/service performance or employee workflows
- Risk
- medium-high
Offene Prüfpunkte: Trust/DPA/subprocessors; EU data residency; Agentforce traces; agent export; Data 360 semantics; Slack interaction data
Work-AI / Workflow Platform
ServiceNow
ServiceNow AI Agents
Primary fit: Workflow automation, IT/HR/CRM/service operations, AI Control Tower and process context
DE/EU reading: Important enterprise workflow layer; high relevance where ServiceNow is the system of work for IT/HR/service. Treat as process-memory platform, not just AI feature
Portability notes: Process and workflow context can become deep platform dependency; export of agent configs/traces/control tower data needs validation
- Maturity
- 4
- Works council
- high if workflows, employee service, IT performance or process mining are involved
- Risk
- medium-high
Offene Prüfpunkte: Trust/DPA/subprocessors; EU region; AI Control Tower data model; agent trace export; process mining personenbezogene Daten
Work-AI / Teamwork Platform
Atlassian
Rovo
Primary fit: Teamwork Graph, enterprise search, chat, agents, Jira/Confluence/Loom context and connected SaaS apps
DE/EU reading: Strong collaboration-memory candidate in Atlassian-heavy organizations; cloud dependency and graph/context portability are key risks
Portability notes: Teamwork Graph and connected context are likely hard to migrate semantically; export of agents/search graph/traces unclear
- Maturity
- 4
- Works council
- high if agent actions, productivity flows or collaboration analytics touch employees
- Risk
- medium
Offene Prüfpunkte: AI subprocessor details; EU data residency; graph export; Rovo agent logs; connector data handling; retention
Work-AI / ERP Process Platform
SAP
Joule / Joule Agents / SAP Business AI Platform
Primary fit: SAP process context, SAP Knowledge Graph, Business Data Cloud, Joule assistants/agents across business functions
DE/EU reading: Central for SAP-heavy enterprises because process memory sits near ERP/HCM/procurement/finance; useful in article because it proves the thesis from inside SAP, not outside
Portability notes: High semantic lock-in risk if process context, SAP Knowledge Graph grounding and agent workflows remain SAP-internal
- Maturity
- 4
- Works council
- high in HR, finance, procurement and workflow automation contexts
- Risk
- medium
Offene Prüfpunkte: DPA/subprocessors; exact Joule data retention; agent trace export; SAP Knowledge Graph portability; non-SAP connector handling
Work-AI / HCM-Finance Platform
Workday
Workday AI / Sana / Agents / Agent System of Record
Primary fit: HCM, finance and work graph/agent system in Workday context
DE/EU reading: Potentially high DE/EU relevance because HCM/employee data is sensitive; must be treated as high-governance workflow memory
Portability notes: High lock-in risk where employee, finance and agent-system records sit in Workday
- Maturity
- 3
- Works council
- high due HCM/employee-work context
- Risk
- medium-high
Offene Prüfpunkte: Trust/DPA/subprocessors; EU residency; Agent System of Record export; employee data traces; retention; works council implications
Work-AI / Knowledge Workspace
Notion
Notion AI / Agents / Enterprise Search
Primary fit: Workspace-native AI, enterprise search, custom agents, meeting notes, connected apps
DE/EU reading: Relevant for knowledge-work teams but less core-enterprise than M365/Google/Atlassian; treat as workspace memory with connector and retention risk
Portability notes: Notion pages/databases export separately from AI agents, custom agents, search index and meeting memory; semantic portability unclear
- Maturity
- 3
- Works council
- medium-high if meeting notes, agents and search expose employee work patterns
- Risk
- medium
Offene Prüfpunkte: AI subprocessor list; EU residency; custom agent export; meeting transcript retention; enterprise search index portability
AI Production Platform / Agent Runtime
Mistral AI
Mistral AI Studio
Primary fit: Agent runtime, observability, AI registry, evals, datasets, workflow telemetry, deployable AI production platform
DE/EU reading: Strong DE/EU candidate to watch because deployable-anywhere, self-hosting and European vendor context align with sovereignty needs; still needs trust/legal review
Portability notes: Page explicitly claims exportable artifacts and unified registry/version control; technical validation still needed
- Maturity
- 3
- Works council
- high if traces/workflow telemetry contain personenbezogene work data
- Risk
- low-medium
Offene Prüfpunkte: DPA/subprocessors; enterprise security certifications; EU/on-prem terms; export formats; trace retention; audit log access
Tabellarischer Anhang
| Vendor | Stack | Layer | Risk | Claim | Open checks |
|---|---|---|---|---|---|
| Microsoft | Microsoft 365 Copilot / Copilot Studio | RET;FLOW;ORCH;DOC-partial;REL-via-Graph | medium | primary-source | Copilot Studio agent traces; export of agent memory; subprocessor details; Betriebsrat implications for user activity history |
| Google Gemini Enterprise | RET;DOC-partial;FLOW;ORCH;MULTI | medium | primary-source | DPA/subprocessors; exact EU residency; export of agent designer logs; connector data handling | |
| Glean | Glean Work AI Platform | RET;REL;FLOW;ORCH | medium-high | primary-source | Trust Center details; DPA; subprocessor list; export semantics for graphs and personal context |
| deepset | Haystack / Haystack Enterprise Platform | RET;DOC;ORCH;MULTI;REL-partial;FLOW-partial | low-medium | primary-source | Detailed enterprise DPA/subprocessors; export of platform configs/evals/traces; concrete EU hosting commitments |
| Langfuse | Langfuse | FLOW | low-medium | primary-source | Exact export formats; enterprise audit logs; Betriebsrat template for traces and feedback |
| LangChain | LangSmith | FLOW;ORCH | medium | primary-source | EU region availability; DPA; subprocessor; export formats; self-host contractual model |
| Elastic | Elasticsearch / Elastic AI | RET;FLOW;ORCH-partial;MULTI-partial | low-medium | primary-source | Exact licensing; cloud region; agent builder data; export of workflows and traces |
| Weaviate | Weaviate Cloud / Weaviate Agents | RET;ORCH-partial | low-medium | primary-source | DPA/subprocessors; EU region; agent products maturity; export semantics |
| Pinecone | Pinecone Vector Database | RET | medium | primary-source | EU region specifics; DPA/subprocessors; export/rebuild process for indexes |
| Qdrant | Qdrant Vector Database | RET | low-medium | primary-source | Managed Cloud EU regions and subprocessors; concrete DPA terms; collection export/rebuild procedure; inference feature data handling |
| Neo4j | Neo4j Graph Database / Aura Agent | REL;RET-via-GraphRAG;ORCH-partial | low-medium | primary-source | Aura regions; DPA/subprocessors; Aura Agent logs/export; EU deployment specifics |
| Graphwise | Ontotext GraphDB | REL;RET;DOC-partial | low-medium | primary-source | Contract/security docs; EU hosting; DPA/subprocessors; managed-service terms |
| Graphwise | PoolParty Semantic Suite | REL;DOC;RET | low-medium | primary-source | Deployment models; DPA; subprocessor; export of taxonomies/ontologies/config |
| Unstructured | Unstructured Data Platform | DOC;RET-support | medium-high | vendor-claim | Trust Portal; DPA; EU region; subprocessors; retention; self-host/private deployment; export formats; connector state portability |
| LlamaIndex | LlamaParse / LlamaIndex | DOC;RET;ORCH-partial | medium-high | vendor-claim | Correct Trust Center/DPA/Privacy URLs; retention; EU region; subprocessors; VPC terms; export of parse/extract/index artifacts |
| Zep | Zep / Graphiti | FLOW;REL;RET | medium-high | primary-source | Security, DPA, EU region, self-hosting, deletion of user-specific memories, export semantics, subprocessors |
| Mem0 | Mem0 | FLOW;REL-partial | medium-high | trust-center-gated | Trust Center access; privacy policy URL; DPA; EU region; subprocessors; SOC2 Type2; memory export/deletion; personenbezogene memories |
| Letta | Letta / Letta Code | FLOW;ORCH | unknown | primary-source | Enterprise security, DPA, data flow, hosting, audit, export, deletion, customer-controlled deployment |
| Braintrust | Braintrust | FLOW | low-medium | primary-source | DPA/subprocessor/public security reports; EU fully hosted region; telemetry defaults; export formats; remote access procedures |
| Arize | Arize Phoenix / AX | FLOW | low-medium for self-hosted Phoenix; medium for cloud | primary-source | Arize AX Trust/Security/DPA; EU region; subprocessors; cloud retention; enterprise support terms |
| Galileo | Galileo | FLOW | medium-high | docs-claim | Correct security docs; DPA; EU region; subprocessors; self-host/BYOC; export; retention; access-control docs fetchable URL |
| Anthropic | Managed Agents / Memory / Dreams | FLOW;ORCH | medium-high | vendor-claim | Enterprise availability; DPA; EU processing; memory export; eval portability; subprocessor |
| Azure | Azure AI Document Intelligence | DOC;MULTI-partial | medium | primary-source | Fetch product/security docs, data residency, DPA, model training, retention |
| Google Document AI | DOC;MULTI-partial | medium | primary-source | Fetch product/security docs, data residency, DPA, training, retention | |
| AWS | AWS Textract / Bedrock Knowledge Bases | DOC;RET;MULTI-partial | medium | primary-source | Fetch product/security docs, data residency, DPA, training, retention |
| Salesforce | Agentforce | REL;FLOW;ORCH;RET-partial | medium-high | primary-source | Trust/DPA/subprocessors; EU data residency; Agentforce traces; agent export; Data 360 semantics; Slack interaction data |
| ServiceNow | ServiceNow AI Agents | FLOW;ORCH;REL;RET-partial | medium-high | primary-source | Trust/DPA/subprocessors; EU region; AI Control Tower data model; agent trace export; process mining personenbezogene Daten |
| Atlassian | Rovo | RET;REL;FLOW;ORCH | medium | primary-source | AI subprocessor details; EU data residency; graph export; Rovo agent logs; connector data handling; retention |
| SAP | Joule / Joule Agents / SAP Business AI Platform | REL;FLOW;ORCH;RET;DOC-partial | medium | primary-source | DPA/subprocessors; exact Joule data retention; agent trace export; SAP Knowledge Graph portability; non-SAP connector handling |
| Workday | Workday AI / Sana / Agents / Agent System of Record | REL;FLOW;ORCH;RET-partial | medium-high | primary-source | Trust/DPA/subprocessors; EU residency; Agent System of Record export; employee data traces; retention; works council implications |
| Notion | Notion AI / Agents / Enterprise Search | RET;FLOW;ORCH;DOC-partial | medium | primary-source | AI subprocessor list; EU residency; custom agent export; meeting transcript retention; enterprise search index portability |
| Mistral AI | Mistral AI Studio | FLOW;ORCH;RET;REL-partial | low-medium | primary-source | DPA/subprocessors; enterprise security certifications; EU/on-prem terms; export formats; trace retention; audit log access |