KlestKlest
KlestPLUS
Aug 10, 2025

Q: API and GDPR/EU AI

* API Credits: The allocation for Tier 4 is now active. Is there a timeframe for when users will be able to set their own quotas (e.g., instead of 50%, only 25% or, as others would like, 100% :))?

* EU AI Act: if you want to put the tool into productive use, the EU AI Act requires proof that no content is used to train the model, that the output created is commercially usable, and so on. This is all mentioned somewhere, but is there also a source that can be downloaded as a PDF, for example, and then filed in the documentation? The same question arises, of course, with regard to GDPR and PDA – here, too, a few documents are required. Have read that this is in preparation – is there a timeframe?

Founder Team
Annapurna_Qolaba

Annapurna_Qolaba

Aug 24, 2025

A: Hi Klest,

API Credits
There’s no set timeframe yet for custom quota flexibility (e.g., choosing 25%, 100%). For now, the 50% allocation is fixed as we test and gather feedback.

EU AI Act / GDPR
At Qolaba AI, we are committed to the highest standards of data privacy, ethical AI, and compliance.

Your data & training: No user content is ever used to train models. We integrate only via official enterprise APIs (OpenAI, Google, Anthropic, etc.), which prohibit API-submitted data from being used for training.

Commercial use: You retain rights to all generated content, in line with the underlying model’s terms. Outputs are fully usable for commercial purposes.

Compliance docs: We’re in the process of ISO 42001 certification. A full compliance package (EU AI Act alignment, GDPR DPA, data-handling policies, certifications) will be available in a downloadable “Trust & Compliance Center” on our site before end of 2025, pending audit completion.

Our enterprise clients like Flixbus and EXL already rely on us for GDPR-compliant solutions, and we’re formalizing this further with external audits and certifications.

Share
Helpful?
3
Log in to join the conversation
KlestPLUS

Verified purchaser

Hi Annapurna,
Thank you for your reply.

An audit ISO42001 cannot be completed within two weeks, so the timeframe until the end of the year is quite understandable.

Regarding the Quoata: You mentioned somewhere that if in doubt, we should get in touch and have the credits reversed by the API platform - I'll probably do that, as there's no way I'll get around to testing automations now