Is DeepSeek safe for work?
High risk · 81DeepSeek (Hangzhou DeepSeek Artificial Intelligence) · AI assistants · facts (medium-confidence)
DeepSeek is high-risk for default at-work use (81/100): it trains on your data unless you opt out.
81
High risk
Watch out: The hosted DeepSeek app and API store user prompts and personal data on servers in the People's Republic of China (subject to Chinese law) and use inputs to train models by default. This is a major governance risk that has led to government bans and restrictions in Italy, South Korea, Australia, and multiple US federal agencies.
Data and compliance facts
- Trains on consumer-tier data
- Opt-out
- Trains on business-tier data
- Unverified
- Training opt-out available
- Yes
- SOC 2 Type II
- Unverified
- ISO 27001
- Unverified
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- No
- HIPAA BAA
- No
- EU data residency
- No
- SSO / SAML
- Unverified
- Data retention
- No fixed period stated; personal data is retained 'for as long as necessary to provide our Services,' e.g. for as long as the user maintains an account, per the privacy policy.
Why it scores 81 out of 100
- +24Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.
- +27GDPR DPA. A Data Processing Addendum for EU/UK personal data.
- +17HIPAA BAA. A Business Associate Agreement, required for protected health information.
- +13EU data residency. Whether data can be kept in the EU.