Can I get a signed DPA / AVV?

Yes. We sign a standard German GDPR DPA (Auftragsverarbeitungsvertrag) on request - reach out from /sales. The text is the standard form most customer DPOs already know, no surprise clauses; we also accept your own paperwork if your legal team prefers their template. Reply time is within a working day. Most teams under 50 seats don't need one (the standard plan terms cover the legal posture); larger setups get a short signed addendum alongside.

How do I export my data?

Account settings → export. Returns a JSON archive containing every record you own, every file you uploaded, and the relevant audit-log entries. No support ticket, no waiting period, no fee. Same export shape works on every plan.

How do I delete my account?

Account settings → delete. Confirms once, then removes records, files, embeddings, and audit-log entries within 30 days. Stripe payment metadata stays as long as German tax law requires it (10 years), in line with §147 AO; everything else is gone.

Who are your subprocessors?

Two: Stripe (payment processing only, transferred under the EU-US Data Privacy Framework) and our transactional mail relay (EU-hosted). Neither sees your records. The full list and what each one is allowed to touch lives at /privacy and /security.

Does Grants use Google Analytics or Meta Pixel?

No. No third-party analytics at all. Device + session metrics live in our own Postgres + Redis. The cookie banner that GA / Meta require doesn't apply because we don't load them - one fewer dialog between a visitor and the page they came for.

Grants

Assess Directory Programmes Fairs

Compare

Grants: the GDPR-friendly alternative to Ayming

Plain-language privacy notice, standard German GDPR DPA available on request, self-serve export + delete.

GDPR alternative

Ayming

Consultancy

Finn GlasCo-Founder + Engineering

·May 15, 2026·

1 min read

GDPR isn't a checkbox - it's a posture. If you're moving off Ayming because their AVV / DPA is opaque, Grants is what a clean alternative looks like: subprocessor list of two (Stripe + mail relay), self-serve export + delete from account settings, and a standard German GDPR DPA on request when your procurement team needs one.

At a glance

Ayming is a serious, decades-old management consultancy with 1,600 consultants across 14 countries and 15,000+ active clients. For a complex multi-million Horizon EIC or BMBF Verbundprojekt where the documentation burden is genuinely enormous, hiring Ayming is rational - their compliance depth pays off at that scale. For an EXIST Gründerstipendium, IGP, or KMU innovativ application under €500k, the math rarely works: the success fee (typically 10%+) exceeds what an unfunded founding team can sensibly cede, and you still do most of the writing yourself. Grants keeps the cap-table whole, hands you the structure + reviewer-language coaching the consultancy would have charged for, and lets you learn how to write these applications - knowledge that pays off on every future submission. Ayming wins on enterprise complexity; Grants wins on startup economics.

GDPR posture

GDPR is a posture, not a checkbox

Three things matter under GDPR for a tool like this: (1) lawful basis for processing, (2) data subject rights (export, delete, port), and (3) the auftragsverarbeitungsvertrag / DPA chain. Grants treats them as engineering invariants, not legal optics. Lawful basis is the contract you sign with us. Subject rights are self-serve from your account settings - no support ticket required. The subprocessor list has two entries (Stripe + mail relay). A standard German GDPR DPA is available on request from /sales whenever your procurement team needs one - we don't charge for it and don't gate it behind a plan tier. Where Ayming sits on each of these is the rest of this page.

Grants vs Ayming: GDPR comparison

	Ours Grants	Theirs Ayming
Senior compliance experts on staff
Success-fee model		10%+ typical
Software subscription pricing
Multi-country tax structure advisory
EXIST / EXIST Forschungstransfer / IGP / KMU innovativ depth
Founders write the document (learning + control)
EU funding programme depth (Horizon, Marie Curie, ERC)
Hosted in Germany		EU-wide

When to pick which

Pick Grants when

Your total grant is under €1M and a 10%+ success fee would consume your living-cost runway.

You want to keep learning how grant applications work - the next four programmes will use similar criteria.

Cap-table cleanliness matters because you're heading into a seed round.

Pick Ayming when

You're applying to Horizon EIC at €17.5M or a multi-million BMBF Verbundprojekt where documentation depth genuinely justifies a partner.

You're a mid-sized established company with no in-house grant capacity and a multi-country footprint.

You need international tax-structure advice alongside the funding application.

GDPR questions

What customer data-protection teams typically ask before signing a DPA.

Start with Grants

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Finn Glas

Co-Founder + Engineering

Finn is one of the Co-Founders. He owns the engineering side, the infrastructure, and most of the late-night fixes that ship before anyone notices.

finn.glas at aicuflow dot comLinkedIn Website