Can I get a signed DPA / AVV?

Yes. We sign a standard German GDPR DPA (Auftragsverarbeitungsvertrag) on request - reach out from /sales. The text is the standard form most customer DPOs already know, no surprise clauses; we also accept your own paperwork if your legal team prefers their template. Reply time is within a working day. Most teams under 50 seats don't need one (the standard plan terms cover the legal posture); larger setups get a short signed addendum alongside.

How do I export my data?

Account settings → export. Returns a JSON archive containing every record you own, every file you uploaded, and the relevant audit-log entries. No support ticket, no waiting period, no fee. Same export shape works on every plan.

How do I delete my account?

Account settings → delete. Confirms once, then removes records, files, embeddings, and audit-log entries within 30 days. Stripe payment metadata stays as long as German tax law requires it (10 years), in line with §147 AO; everything else is gone.

Who are your subprocessors?

Two: Stripe (payment processing only, transferred under the EU-US Data Privacy Framework) and our transactional mail relay (EU-hosted). Neither sees your records. The full list and what each one is allowed to touch lives at /privacy and /security.

Does Grants use Google Analytics or Meta Pixel?

No. No third-party analytics at all. Device + session metrics live in our own Postgres + Redis. The cookie banner that GA / Meta require doesn't apply because we don't load them - one fewer dialog between a visitor and the page they came for.

Grants

Assess Directory Programmes Fairs

Compare

Grants: the GDPR-friendly alternative to innoscripta

Plain-language privacy notice, standard German GDPR DPA available on request, self-serve export + delete.

GDPR alternative

innoscripta

Forschungszulage

Finn GlasCo-Founder + Engineering

·May 15, 2026·

1 min read

GDPR isn't a checkbox - it's a posture. If you're moving off innoscripta because their AVV / DPA is opaque, Grants is what a clean alternative looks like: subprocessor list of two (Stripe + mail relay), self-serve export + delete from account settings, and a standard German GDPR DPA on request when your procurement team needs one.

At a glance

innoscripta is an excellent platform if you're an established R&D-active company with payroll for technical staff and a recurring Forschungszulage claim each year. They're a Munich-headquartered SaaS with 2,500+ paying customers and an IPO in 2025 - they earned that scale by being good at the job. The job, however, is administering an ongoing R&D operation for tax-credit compliance - time tracking, audit-ready documentation, capacity planning. Grants does a different job: it gets a startup from a draft Ideenpapier to a submitted EXIST, IGP, KMU innovativ, BMBF, or Horizon application. Where innoscripta plugs into an HR/payroll system, Grants plugs into a writing workflow. Pick by job.

GDPR posture

GDPR is a posture, not a checkbox

Three things matter under GDPR for a tool like this: (1) lawful basis for processing, (2) data subject rights (export, delete, port), and (3) the auftragsverarbeitungsvertrag / DPA chain. Grants treats them as engineering invariants, not legal optics. Lawful basis is the contract you sign with us. Subject rights are self-serve from your account settings - no support ticket required. The subprocessor list has two entries (Stripe + mail relay). A standard German GDPR DPA is available on request from /sales whenever your procurement team needs one - we don't charge for it and don't gate it behind a plan tier. Where innoscripta sits on each of these is the rest of this page.

Grants vs innoscripta: GDPR comparison

	Ours Grants	Theirs innoscripta
Forschungszulage time-tracking + audit-ready compliance
EXIST / Forschungstransfer / IGP / BMBF / EU grant writing
BSFZ certification workflow
Section-structured grant editor (Ideenpapier chapters)
PTJ / reviewer-language coaching inside the editor
HR / payroll-system integration for ongoing R&D ops
Startup-stage pricing		Enterprise tier
Hosted in Germany

When to pick which

Pick Grants when

You're pre-incorporation or in your first 1-2 years and need to actually write your first EXIST, IGP, or Horizon application.

Your team is two or three founders, no HR system, no payroll integration to plug into.

You want the application's section structure, reviewer-language coaching, and the 4-week revision window handed to you.

Pick innoscripta when

You're an established mid-sized R&D-active company with engineers on payroll and a yearly Forschungszulage claim worth optimising.

Your blocker is documentation + audit defence, not application writing.

You need a platform that integrates with SAP / DATEV / Personio for time tracking and capacity planning.

GDPR questions

What customer data-protection teams typically ask before signing a DPA.

Start with Grants

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Finn Glas

Co-Founder + Engineering

Finn is one of the Co-Founders. He owns the engineering side, the infrastructure, and most of the late-night fixes that ship before anyone notices.

finn.glas at aicuflow dot comLinkedIn Website