Is DeepSeek GDPR compliant?
NoDeepSeek (Hangzhou DeepSeek Artificial Intelligence) · AI assistants
No documented DPA found for DeepSeek. That is a gap for GDPR-regulated data until DeepSeek (Hangzhou DeepSeek Artificial Intelligence) confirms one.
What we checked
This assessment separates the consumer product from any business plan. It uses the vendor documents linked below; an unverified item is not a pass.
- Data Processing Agreement
- Not offered
- No DPA was found in DeepSeek (Hangzhou DeepSeek Artificial Intelligence)'s published materials for this service.
- EU data residency
- Not offered
- No EU-residency option was confirmed in the sources reviewed for this profile.
- Default data training
- Opt-out required
- DeepSeek's privacy policy states it uses user inputs to train and improve its machine-learning models by default, while granting users a right to opt out of having their personal data used for training.
- Business-tier training
- Not verified
- DeepSeek publishes no separate business/API privacy terms or DPA confirming a no-training default for paid API usage; third-party sources claim paid API data is excluded from training, but this is unverified against official vendor documentation.
How to make a decision
Check the precise account tier, written contract and intended data before approving DeepSeek. A security certification, DPA or setting can apply to only part of a vendor's service. Keep the source links with your supplier review and revisit them when the vendor changes its terms.
More on DeepSeek
See the full DeepSeek risk profile, with every data-handling fact and its source, or browse all rated AI tools.