Lighthouse

AI revenue management and business intelligence for hospitality and travel

ASReview

Open-source AI-powered systematic review tool for academic researchers

Lighthouse

Strong

20/25

ASReview

Strong

21/25

Score Breakdown

DimensionLighthouseASReview

Data Residency

Where is your data stored and processed?

Lighthouse: Data hosted on AWS with EU region configuration for European customers. Belgian incorporation means primary data governance is under EU law. Appropriate for European hotel groups with GDPR obligations on guest and revenue data.

ASReview: Fully local application with no cloud dependency. All data stays on the researcher's machine. Dutch university origin ensures EU-aligned development practices.

4/5

Data hosted on AWS with EU region configuration for European customers. Belgian incorporation means primary data governance is under EU law. Appropriate for European hotel groups with GDPR obligations on guest and revenue data.

5/5

Fully local application with no cloud dependency. All data stays on the researcher's machine. Dutch university origin ensures EU-aligned development practices.

Legal Jurisdiction

Which laws govern the company and your data?

Lighthouse: Incorporated in Belgium under Belgian and EU law. GDPR applies as a matter of corporate law, not just contractual obligation. EU incorporation with no US parent company. No CLOUD Act exposure. Strong EU sovereignty story for the hospitality sector.

ASReview: Dutch public university (Utrecht University) under full EU/GDPR jurisdiction. Strongest possible EU legal framework. Not subject to US CLOUD Act.

5/5

Incorporated in Belgium under Belgian and EU law. GDPR applies as a matter of corporate law, not just contractual obligation. EU incorporation with no US parent company. No CLOUD Act exposure. Strong EU sovereignty story for the hospitality sector.

5/5

Dutch public university (Utrecht University) under full EU/GDPR jurisdiction. Strongest possible EU legal framework. Not subject to US CLOUD Act.

Data Retention & Training

Is your data used for model training?

Lighthouse: Customer hotel data is not used for cross-customer model training without consent. GDPR-compliant data processing agreements available under Article 28. Configurable data retention aligned with hospitality operational requirements.

ASReview: No cloud component. All data stored locally on the user's device. Complete user control over data retention and deletion. No external data transmission.

4/5

Customer hotel data is not used for cross-customer model training without consent. GDPR-compliant data processing agreements available under Article 28. Configurable data retention aligned with hospitality operational requirements.

5/5

No cloud component. All data stored locally on the user's device. Complete user control over data retention and deletion. No external data transmission.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Lighthouse: Holds ISO 27001 certification. Appropriate baseline for a hospitality technology platform. SOC 2 Type II would strengthen the posture for hotel groups with enterprise procurement requirements.

ASReview: Academic open-source project without commercial security certifications. Source code publicly auditable. University maintains institutional security standards.

3/5

Holds ISO 27001 certification. Appropriate baseline for a hospitality technology platform. SOC 2 Type II would strengthen the posture for hotel groups with enterprise procurement requirements.

2/5

Academic open-source project without commercial security certifications. Source code publicly auditable. University maintains institutional security standards.

Regulatory Fit

Suitability for regulated industries and professional services

Lighthouse: Excellent fit for European hotel operators subject to GDPR and national data protection authorities. Belgian legal jurisdiction and EU data hosting provide a credible compliance posture. Good alignment with hospitality-specific data governance requirements.

ASReview: Excellent fit for regulated research environments. Local-only processing eliminates data transfer concerns. Used by healthcare researchers and institutions with strict data governance requirements.

4/5

Excellent fit for European hotel operators subject to GDPR and national data protection authorities. Belgian legal jurisdiction and EU data hosting provide a credible compliance posture. Good alignment with hospitality-specific data governance requirements.

4/5

Excellent fit for regulated research environments. Local-only processing eliminates data transfer concerns. Used by healthcare researchers and institutions with strict data governance requirements.

Total Score

20/25

21/25

Best For

Lighthouse

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (Dutch DPA (Autoriteit Persoonsgegevens)); privacy-conscious teams who need strong data retention controls; organisations that need self-hosted or on-premise deployment; teams on a tight budget.

ASReview

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (ICO, APD (Belgium)); privacy-conscious teams who need strong data retention controls; enterprises requiring SSO integration.

Detailed Comparison

ASReview vs Lighthouse: Trust & Compliance Comparison

ASReview (ASReview, NL) scores 21/25 overall with a Silver (Strong) trust badge. Open-source AI-powered systematic review tool for academic researchers. Lighthouse (Lighthouse, BE) scores 20/25 with a Silver (Strong) trust badge. AI revenue management and business intelligence for hospitality and travel.

Dimension-by-Dimension Breakdown

#### Data Residency

ASReview leads with 5/5 vs 4/5.

●ASReview (5/5): Fully local application with no cloud dependency. All data stays on the researcher's machine. Dutch university origin ensures EU-aligned development practices.

●Lighthouse (4/5): Data hosted on AWS with EU region configuration for European customers. Belgian incorporation means primary data governance is under EU law. Appropriate for European hotel groups with GDPR obligations on guest and revenue data.

#### Legal Jurisdiction

Both score equally at 5/5.

●ASReview (5/5): Dutch public university (Utrecht University) under full EU/GDPR jurisdiction. Strongest possible EU legal framework. Not subject to US CLOUD Act.

●Lighthouse (5/5): Incorporated in Belgium under Belgian and EU law. GDPR applies as a matter of corporate law, not just contractual obligation. EU incorporation with no US parent company. No CLOUD Act exposure. Strong EU sovereignty story for the hospitality sector.

#### Data Retention & Training

ASReview leads with 5/5 vs 4/5.

●ASReview (5/5): No cloud component. All data stored locally on the user's device. Complete user control over data retention and deletion. No external data transmission.

●Lighthouse (4/5): Customer hotel data is not used for cross-customer model training without consent. GDPR-compliant data processing agreements available under Article 28. Configurable data retention aligned with hospitality operational requirements.

#### Certifications

Lighthouse leads with 3/5 vs 2/5.

●ASReview (2/5): Academic open-source project without commercial security certifications. Source code publicly auditable. University maintains institutional security standards.

●Lighthouse (3/5): Holds ISO 27001 certification. Appropriate baseline for a hospitality technology platform. SOC 2 Type II would strengthen the posture for hotel groups with enterprise procurement requirements.

#### Regulatory Fit

Both score equally at 4/5.

●ASReview (4/5): Excellent fit for regulated research environments. Local-only processing eliminates data transfer concerns. Used by healthcare researchers and institutions with strict data governance requirements.

●Lighthouse (4/5): Excellent fit for European hotel operators subject to GDPR and national data protection authorities. Belgian legal jurisdiction and EU data hosting provide a credible compliance posture. Good alignment with hospitality-specific data governance requirements.

Certifications at a Glance

Certification	ASReview	Lighthouse
ISO 27001	No	Yes

Overall Verdict

ASReview and Lighthouse are closely matched on trust and compliance, with scores of 21/25 and 20/25 respectively. The right choice depends on your specific regulatory requirements and existing technology stack.

Frequently Asked Questions

Which is better for EU compliance, Lighthouse or ASReview?

Lighthouse has a TrustKit score of 20/25 while ASReview scores 21/25. ASReview currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Lighthouse and ASReview compare on data residency?

Lighthouse scores 4/5 for data residency (Data hosted on AWS with EU region configuration for European customers. Belgian incorporation means primary data governance is under EU law. Appropriate for European hotel groups with GDPR obligations on guest and revenue data.), while ASReview scores 5/5 (Fully local application with no cloud dependency. All data stays on the researcher's machine. Dutch university origin ensures EU-aligned development practices.).

Are Lighthouse and ASReview GDPR compliant?

Both tools are assessed across five compliance dimensions. Lighthouse has a regulatory fit score of 4/5 and ASReview scores 4/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool