Title - What is Guru? Pricing, EU Data Transfer and Best Alternatives 2026
URL - https://ainora.lt/ai-teammate/providers/guru
Last Updated: 2026-09-06

# What is Guru?

Guru (getguru.com) is a US knowledge-management platform that has repositioned from a per-seat tool into a bundled platform-plus-services engagement. It publishes no price. Its own pricing page says it is "not just a per-seat tool" and that "Your investment is tailored to your organization's scale, knowledge complexity, and AI maturity." It offers no EU hosting region, and states in its own privacy policy that EU and EEA personal data is transferred to the United States. It holds SOC 2 Type II, which Ainora does not.

Every quote below was fetched from the vendor on 2026-09-06.

Live demo of the alternative: call +1 (218) 636-0234 (Jessica, English) or +370 5 200 2620 (Lithuanian).

## Quick Decision Guide

| If you need... | Guru fits | Better alternative |
|---|---|---|
| A knowledge base with a services team attached to design it | Yes | - |
| SOC 2 Type II from your knowledge vendor | Yes | - |
| A price you can size the deal from before a call | No, none published | Dust |
| Customer data stored inside the EU or EEA | No, transferred to the United States | Ainora |
| ISO 27001 for a public-sector or regulated tender | Not claimed on any published page | - |
| Source permissions inherited for every connected system | Some sources only, and admin-connected | - |
| Voice or phone-channel AI for inbound or outbound calls | No | Ainora |
| Small EU languages (LT, LV, ET) as a first-class channel | Not stated | Ainora |
| A self-serve start without a scoping conversation | No | Dust |

## How Guru Rates

- Pricing transparency: Weak - no figure of any kind on the pricing page
- EU data residency: Weak - no customer-selectable EU region on any published page; EU and EEA personal data transferred to the United States under the EU-U.S. Data Privacy Framework
- Certifications: Mixed - SOC 2 Type II audited annually, plus Microsoft 365 Certification and Google Cloud CASA; ISO 27001 not claimed
- Permission model: Mixed - inheritance is one of two models, supported for some sources, and requires a source-system admin to connect
- Services and onboarding: Strong - solution engineers, knowledge architecture design, rollout playbook and ongoing advisory bundled into the engagement
- Channel coverage: Weak - text and knowledge surfaces only, no phone or voice channel

## What Guru sells now

From the pricing page, verbatim: "Guru is a platform and expertise solution - not just a per-seat tool."

Three named components on that page: "The Platform / AI Knowledge Layer", "The Expertise / AI & KM Strategy Team", "The Infrastructure / Enterprise Governance".

On the expertise layer: "Think of it as embedding a KM and AI strategy team into your organization. We design your knowledge architecture, configure and tune your AI agents, build your rollout playbook, and provide ongoing advisory... It's a launchpad, not an ongoing dependency."

On its own positioning: "Other platforms connect to your data and retrieve what's there - as-is. Guru structures, governs, and continuously improves your knowledge so it gets more accurate over time. ... And Guru powers your existing AI tools via MCP rather than competing with them."

Naming caution: Guru.com is a freelance marketplace. Guru Experience Co., Resource Guru, Greenlight Guru and Gurubase.ai are separate companies. Anything about self-hosting Gurubase does not apply to getguru.com.

## How much does Guru cost?

Guru publishes no price. Not a starting figure, not a range, not a per-seat rate. The sentence that stands in for one, verbatim from the pricing page on 2026-09-06:

"Your investment is tailored to your organization's scale, knowledge complexity, and AI maturity. It includes full platform access, access to a team of solution engineers, knowledge architecture design, and ongoing optimization. Our team will scope the right engagement during your first conversation."

| Source | Fetched | Sample and method | What it says | Confidence |
|---|---|---|---|---|
| getguru.com/pricing (the vendor) | 2026-09-06 | The whole page. Grep: price, pricing, invest, dollar sign, per user, seat, plan | No figure of any kind | High |
| Vendr marketplace, median | 2026-09-06 | n=167 purchases, Vendr's own anonymised transaction dataset. Fielding window and buyer-size distribution not published | "Median buyer pays $39,168 per year" and "Based on data from 167 purchases, with buyers saving 18% on average." | Medium. Buyer-side aggregated contract data, not a vendor price |
| Vendr marketplace, narrative about tiers | 2026-09-06 | Prose on a partly templated marketplace page | Describes three named per-user tiers. Guru's own live page publishes no tiers and no list price, so the two sources conflict | Not used on this page |

Where a marketplace and the vendor disagree, the vendor's live page wins. We use only the median, the sample size and the stated average saving from Vendr, and nothing else from it. If you see a per-seat Guru price quoted anywhere, ask which page it came from and on what date.

Ainora's own answer to the same question is individual pricing, scoped to the work. We do not publish a rate card either, and we are not going to criticise Guru for that. What we will say is that a buyer should get the figure in writing before the pilot, from any vendor, including us.

## Does Guru really inherit permissions from your existing systems?

The marketing page states it unconditionally. Guru's own documentation qualifies every part of that sentence. Both were fetched on 2026-09-06.

| Where Guru says it | What it says, verbatim |
|---|---|
| Marketing page, getguru.com/pricing | "Permissions are inherited from your existing systems and enforced in real time." |
| Documentation, on how many models exist | "Guru-level access - After connecting a Source, you control who can search and use that content in Guru by choosing one of two permission models." |
| Documentation, on coverage | "Inherited permissions (this is supported for some sources, for more information see here). Guru automatically respects the native access controls from your Source app." |
| Documentation, on the prerequisite | "How it works: Requires an admin from the Source system (like a Slack Admin or Google Admin) to connect the Source." |
| Documentation, on the other model | "Guru Groups - You manually assign which Guru Groups can access the Source's content. Guru connects as a single user and indexes only what that user can access. Access is controlled entirely within Guru, independent of Source app permissions." |
| Documentation, on the ceiling either way | "Source-level permissions - The person connecting the Source must have permission to access the desired content in the Source app. The content Guru can sync depends on what this connecting user can access." |

Three qualifications appear that the marketing sentence does not carry. Inheritance is one of two models, not the architecture. It is supported for some sources, not all. And it requires an admin of the source system to be the person who connects it.

The default path matters more than the exception. In the Guru Groups model, one account connects the source, Guru indexes whatever that account can reach, and an admin then decides which Guru Groups can see it. The source system's access control list is not consulted when a question is asked.

This is not a Guru-specific defect. It is the structural property of this whole category: an assistant surfaces what somebody could already technically reach, not what they were meant to see. What is Guru-specific is the distance between the two sentences.

## Where does Guru store European data?

In the United States. From the privacy policy, verbatim:

"Personal Data that you provide while in the EU or an EAA member state will be transferred to the United States. The General Data Protection Regulation permits such transfer when necessary for the performance of a contract between you and Guru, if Guru obtains your explicit consent to such transfer, or if it is in Guru's legitimate interest to transfer the Personal Data. The laws in the United States may not be as protective of your privacy as those in your location. If we transfer Personal Data from the EU, we will provide an appropriate safeguard such as binding corporate rules, standard data protection clauses, or your consent."

The spelling "EAA" is Guru's own and is reproduced exactly as served. Anyone re-checking this quote with a search for "EEA" will not find it.

From the security page: "Guru complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce." And: "Your content is stored and managed in a highly secure AWS database, separated and protected from other client content by a unique team ID."

The absence, with its method: we grepped getguru.com/security, getguru.com/privacy and getguru.com/pricing, all fetched 2026-09-06, for residen|region|us-east|Ireland|Frankfurt|hosted in. The only match across all three pages was a disaster-recovery sentence: "We copy our database daily and save it to a disaster recovery site in an entirely separate region." Guru offers no customer-selectable EU hosting region on any published page.

Relying on the Data Privacy Framework is lawful and common; it is also a policy decision your data protection officer may have already made for you. If your internal rule is that customer content stays inside the EU or EEA, Guru does not clear it at any price.

## Does Guru train AI models on your data?

Two sentences, both from the security page, both fetched 2026-09-06. Quoting either alone misrepresents the vendor.

"Your data is never used to train, nor retained by, third-party LLMs."

"Your team's AI model is unique to you and privately trained in your Guru instance based on your team's data and interactions."

So Guru does train something on customer data, a per-tenant model, while asserting that no third-party large language model is trained or retains anything. The security page adds: "Any content submitted to the third party LLM for processing is immediately removed after the output is returned ('zero day retention')". The pricing page carries the shorter versions: "Your data never trains our AI models" and "your data never trains an AI LLM."

Both things can be true at once, and a comparison table that flattens this to a single tick or cross is wrong either way. The architecture behind "privately trained" is not documented publicly.

## Retention

We publish no Guru retention default, because none is published. Guru states a minimisation principle, verbatim: "Guru will only process what it needs to deliver on its service, and will consequently minimize collection of content and restrict retentions time to the greatest extent possible" (the phrasing is Guru's). No numeric retention period and no admin retention control appears on any of the three pages fetched. Grep pattern used: retention|retain|delete|deletion|days|purge. Only that sentence, the zero-day-retention clause and backup language returned.

## Certifications and compliance, compared honestly

| Item | Guru | Ainora |
|---|---|---|
| SOC 2 Type II | Yes, audited annually. Report shared under NDA | No |
| ISO 27001 | Not claimed on security, privacy or pricing pages | No |
| Microsoft 365 Certification | Yes | No |
| Google Cloud App Security Assessment (CASA) | Yes | No |
| EU or EEA hosting region | None published. Data transferred to the United States | EU-native by design |
| Transfer mechanism relied on | EU-U.S. Data Privacy Framework, UK Extension, Swiss-U.S. DPF | Not applicable, data stays in the EU |
| Published price | No | Individual pricing |
| Phone or voice channel | No | Yes |

Ainora holds no SOC 2 report and no ISO certification of any kind. Guru is audited annually for SOC 2 Type II, covering the SOC 2 Common Criteria plus the Confidentiality and Privacy trust services criteria, and shares the report under NDA. If your procurement process requires SOC 2 from the vendor itself, Guru clears that bar and we do not.

On ISO 27001: a grep for ISO 27001|ISO27001|ISO/IEC across getguru.com/security, getguru.com/privacy and getguru.com/pricing on 2026-09-06 returned zero matches on all three pages. High confidence about those pages, medium confidence as a statement about the company, since a certificate could exist and simply not be advertised. It matters for EU public-sector and regulated tenders that name ISO 27001, where neither Guru nor Ainora would clear it.

## Pros and Cons

Pros:
- SOC 2 Type II audited annually, plus Microsoft 365 Certification and Google Cloud CASA
- Solution engineers, knowledge architecture design and a rollout playbook bundled into the engagement
- Honest about being a knowledge programme rather than a tool
- Designed to power the AI tools you already have over MCP rather than replace them
- Sensitive-data masking at ingestion, so personal, health and financial data can be redacted before it is stored, indexed or surfaced
- Inherited permissions are available for some sources, which is more than several competitors offer at all

Cons:
- No EU or EEA hosting region on any published page; European data transferred to the United States
- No published price of any kind
- ISO 27001 not claimed on its security, privacy or pricing pages
- The marketing claim that permissions are inherited and enforced in real time is qualified in three ways by Guru's own documentation
- The default permission model indexes as a single connecting user and does not consult the source access control list at query time
- No numeric retention period and no admin retention control published
- No phone or voice channel

## Verdict

Guru is the right choice for a US or global organisation that has decided knowledge management is a programme rather than a purchase, that wants solution engineers designing the architecture, and that needs SOC 2 Type II from the vendor itself. It is the wrong choice for any European buyer whose policy requires customer content to stay inside the EU or EEA, because no such region exists to move to. It is the wrong choice for a tender that names ISO 27001. And it is the wrong choice if the bottleneck is the telephone.

## Best Guru Alternatives in 2026

### 1. Ainora (recommended when European data must stay in Europe)

"Guru structures what your team already wrote down. Ainora answers the call that would otherwise have gone unanswered, then writes it down for you."

Multi-channel AI teammate, EU-native by design.

- Guru transfers EU and EEA personal data to the United States and relies on the Data Privacy Framework. Ainora keeps European data in Europe as a design decision rather than a configurable option
- Picks up inbound calls in the caller's language; Guru has no phone channel
- Multilingual including small EU languages, with mid-conversation switching
- Joins Slack and Microsoft Teams when a colleague mentions it, executes work across CRM, calendar and ticketing
- Deployment measured in days rather than quarters
- 99.9% uptime
- Ainora holds no SOC 2 report and no ISO certification. Guru holds SOC 2 Type II
- Pricing is individual and scoped to the work
- Live demo: +1 (218) 636-0234 (English), +370 5 200 2620 (Lithuanian)

### 2. Dust
The transparency answer to Guru. A Paris company publishing seat prices, $30 per seat per month for a Pro seat billed monthly and $150 for a Max seat, both excluding VAT, with EU data residency on the self-serve plan. Its own gap: the DPA is Enterprise-only. https://ainora.lt/ai-teammate/providers/dust

### 3. Glean
Enterprise search first, agents layered on top. Like Guru, publishes no price: its pricing URL now returns a 301 to the homepage and no pricing page appears in its sitemap, checked 2026-09-06. https://ainora.lt/ai-teammate/providers/glean

### 4. Sana
Acquired by Workday for approximately $1.1 billion, closed 4 November 2025. Enterprise tier now sold with Workday HCM or Workday Financial Management through Flex Credits. Holds SOC 2 and ISO 27001. https://ainora.lt/ai-teammate/providers/sana

### 5. Lindy
Self-serve US agent platform, Slack-first and English-first, US data residency. https://ainora.lt/ai-teammate/providers/lindy

### 6. Relevance AI
Build-your-own agents with a self-serve interface, Sydney and San Francisco. https://ainora.lt/ai-teammate/providers/relevance-ai

## FAQ

Q: What is Guru?
A: A US knowledge-management platform that has repositioned from a per-seat tool into a bundled platform-plus-services engagement. Its pricing page, fetched 2026-09-06, says: "Guru is a platform and expertise solution - not just a per-seat tool."

Q: How much does Guru cost?
A: Guru publishes no price. Its pricing page says "Your investment is tailored to your organization's scale, knowledge complexity, and AI maturity." A grep of that page on 2026-09-06 for price, pricing, invest, dollar sign, per user, seat and plan returned no figure of any kind. The only number available is third-party: Vendr reports a median annual spend of $39,168 based on 167 purchases. That is aggregated buyer contract data, not a Guru price.

Q: Does Guru offer EU data residency?
A: No customer-selectable EU hosting region appears on any published Guru page. Its privacy page states: "Personal Data that you provide while in the EU or an EAA member state will be transferred to the United States." ("EAA" is Guru's own spelling.) It relies on the EU-U.S. Data Privacy Framework and stores content in an AWS database.

Q: Is Guru SOC 2 certified?
A: Yes. "Guru is audited annually for SOC 2, Type II, Microsoft 365 Certification and the Google Cloud App Security Assessment framework (CASA)." The audit covers the SOC 2 Common Criteria plus the Confidentiality and Privacy trust services criteria, and the report is shared under NDA. Ainora holds no SOC 2 report of any type.

Q: Is Guru ISO 27001 certified?
A: Not on any page it publishes. A grep for ISO 27001, ISO27001 and ISO/IEC across getguru.com/security, /privacy and /pricing on 2026-09-06 returned zero matches on all three. High confidence about those pages, medium confidence as a global statement. Ainora holds no ISO certification either.

Q: Does Guru inherit permissions from my existing systems?
A: Sometimes, and only if configured that way. The marketing page states it unconditionally: "Permissions are inherited from your existing systems and enforced in real time." The documentation says inheritance is one of two models, is "supported for some sources", and "Requires an admin from the Source system (like a Slack Admin or Google Admin) to connect the Source." The other model: "Guru connects as a single user and indexes only what that user can access."

Q: Does Guru train AI models on my data?
A: Both sentences are on Guru's own pages. "Your data is never used to train, nor retained by, third-party LLMs." And: "Your team's AI model is unique to you and privately trained in your Guru instance based on your team's data and interactions." A per-tenant model is trained on customer data while no third-party LLM is.

Q: Does Guru handle phone calls?
A: No. Guru is a text and knowledge product. There is no phone or voice channel.

## Sources

- Guru pricing: https://www.getguru.com/pricing
- Guru security: https://www.getguru.com/security
- Guru privacy: https://www.getguru.com/privacy
- Guru documentation, connecting sources to Guru for AI answers: https://help.getguru.com/docs/connecting-sources-to-guru-for-ai-answers
- Vendr marketplace, Guru (buyer-side aggregated contract data, n=167): https://www.vendr.com/marketplace/guru

All five fetched 2026-09-06.

## Contact

- Live demo: +1 (218) 636-0234 (English) or +370 5 200 2620 (Lithuanian)
- Book demo: https://ainora.lt/contact
- Email: info@ainora.lt
- Provider directory: https://ainora.lt/ai-teammate/providers