Rasa
Open-source conversational AI framework for building enterprise chatbots and voice assistants
About Rasa
Rasa was founded in 2016 and is one of the most widely adopted open-source frameworks for building conversational AI—chatbots, voice assistants, and AI agents that handle customer interactions. The framework has been downloaded millions of times and is used by enterprises including Deutsche Telekom, Airbus, and the WHO. Rasa's core framework is open-source under the Apache 2.0 licence, meaning organisations can deploy it entirely on their own infrastructure with full source code access. This is a critical differentiator for European enterprises: unlike cloud-based chatbot platforms, Rasa allows complete data sovereignty—all conversation data, user interactions, and AI model training stays on the customer's own servers. The company has a dual corporate structure: Rasa Technologies GmbH in Berlin (Germany) and Rasa Technologies Inc in San Francisco (USA). The R&D team is primarily based in Berlin, with additional offices in London, Paris, and Belgrade. This dual incorporation means that while the technology has strong European roots, the US entity introduces CLOUD Act considerations. Rasa raised $30 million in Series C funding in February 2024, with total funding of approximately $83.8 million from investors including Andreessen Horowitz, Accel, PayPal Ventures, and German VC 468 Capital. Rasa Pro is the commercial offering with enterprise features including analytics, fine-tuning tools, and professional support. The Developer Edition is free for up to 1,000 conversations per month. For the self-hosted open-source version, there is no cost and no data ever leaves the customer's environment. For European businesses building conversational AI, Rasa's self-hosting capability provides maximum data control—making it suitable for regulated industries where conversation data must remain on-premise.
TrustKit Score Breakdown
?76% StrongPricing
FreemiumFree tierQuick Facts
Frequently Asked Questions
Is Rasa GDPR compliant?
Rasa has a TrustKit compliance score of 76% (Strong). Data Residency: Open-source framework deployable on any infrastructure. Self-hosted option means data never leaves customer's environment. No cloud dependency for core functionality.. Legal Jurisdiction: Dual incorporation: Rasa Technologies GmbH (Germany) and Rasa Technologies Inc (USA). German R&D but US entity introduces CLOUD Act considerations. Self-hosted deployments mitigate jurisdiction risks..
Where does Rasa store data?
Rasa hosts data in: Customer-controlled (self-hosted); Rasa does not host customer data. Open-source framework deployable on any infrastructure. Self-hosted option means data never leaves customer's environment. No cloud dependency for core functionality.
Does Rasa train on user data?
Rasa: Self-hosted — customer controls all data. Self-hosted architecture gives customers complete control over data retention. Rasa does not access or host customer data. Open-source code allows full audit of data handling.
What certifications does Rasa hold?
No certifications have been confirmed for Rasa yet. Controls aligned with ISO 27002. Supports GDPR and HIPAA compliance. No formal ISO 27001 or SOC 2 certifications listed. Self-hosted model shifts certification burden to customer.