Home / Graphic design & design / Penpot
Kaleidos Subsidiary SL (Spain)Penpot
Open-source design and prototyping platform for designers and developers, built on open standards (CSS, HTML, SVG, JSON), with an official MCP server so AI agents can read and edit designs.
Shared spot4of 18 professional tools with a GDPR profileOur summary of what the provider itself publishes about your data: whether the data is stored in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is based in the NL or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure in graphic design & design
GDPR: Good
- Provider based in the EU
- Publishes certification/GDPR safeguards
PriceFree; Unlimited from $7 per editor/mofree (Professional); Unlimited $7 per editor/mo (max $175/mo); Enterprise $25 per member/mo; Private Server $50,000/year
Free trialYes
Based inSpainEU
ModelNot publicno proprietary language model; open MCP server that lets you connect an AI client or LLM of your choice (according to the provider). Open source and self-hostable, so the data can stay on your own server. Spanish company (EU). Data processing agreement (DPA) under the GDPR, with no planned transfer outside the EU; the security page mentions Penpot 'SOC 2 Compatible' (no completed audit stated) and 'GDPR compliant with DPA' (according to the provider).
Last checked: 7 November 2026 · How we check
Is this your tool? Fill in missing detailsWhat it does
UI design with CSS Grid and Flex layouts
Interactive prototypes and wireframes
Design tokens, components and libraries
Open MCP server for AI agents
Connect any agent or LLMInspect code: CSS, HTML, SVG, JSON
Self-hosting (open source)
Similar in graphic design & design
Figmafree (Starter)
Bynderon request
Frontifyon request (monthly pricing model…
CELUMon request
Uizardfree
Framerfree ($0, 500 AI credits)Penpot compared
Underlying model
GDPR check for graphic design & design no proprietary language model; open MCP server that lets you connect an AI client or LLM of your choice (according to the provider). Open source and self-hostable, so the data can stay on your own server. Spanish company (EU). Data processing agreement (DPA) under the GDPR, with no planned transfer outside the EU; the security page mentions Penpot 'SOC 2 Compatible' (no completed audit stated) and 'GDPR compliant with DPA' (according to the provider). Many tools build on a large model from, for example, OpenAI or Anthropic. If in doubt, ask for the data processing agreement: it states where your data goes.
Questions about Penpot
- Which AI model does Penpot use?
- The maker of Penpot does not disclose which AI model sits underneath. No proprietary language model; open MCP server that lets you connect an AI client or LLM of your choice (according to the provider). Open source and self-hostable, so the data can stay on your own server. Spanish company (EU). Data processing agreement (DPA) under the GDPR, with no planned transfer outside the EU; the security page mentions Penpot 'SOC 2 Compatible' (no completed audit stated) and 'GDPR compliant with DPA' (according to the provider).
- How much does Penpot cost?
- free (Professional); Unlimited $7 per user/month (max $175/month); Enterprise $25 per member/month; Private Server $50,000/year. Check the current price on the provider's website; prices often change.
- Who is Penpot for?
- Penpot is aimed at graphic design & design and IT & software development. It suits work such as image and vector creation: generating and editing concepts, illustrations, icons and variants (remove background, extend, upscale, vectorise), UI and web design: turning text prompts and sketches into wireframes, prototypes and code, and managing design systems, brand management: centrally managing brand guidelines, logos and image libraries, automatic tagging and checking against brand rules.
- What should I watch out for with AI in graphic design & design?
- When it comes to AI imagery, pay attention to two things: rights and data. Rights: with Recraft, images from the free plan of Recraft itself are not licensed for commercial use, and only the paid plans give you full ownership. Adobe says it trains its Firefly models on licensed material and public domain content, not on user content. Data: with Kittl, training on your content is switched on by default in the Starter and Professional plans (the administrator can turn it off), while it is off in Organization and Enterprise. CELUM (Berlin) states in its privacy policy that data is also processed outside Europe, including in Canada and the US. If you want to keep your brand files within the EU: Frontify offers hosting in Frankfurt, Bynder on AWS Frankfurt and Figma on Azure in the EU. Penpot can be self-hosted. Do not upload client material under NDA to a free account, and record in your quote whether and how you use AI.
Every Friday: what changed in AI for graphic design & design
New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.