Is You.com safe for work?
Low risk · 21You.com · Search · facts (medium-confidence)
You.com is low-risk for default at-work use (21/100): it does not train on your data, and holds SOC 2 Type II.
21
Low risk
Watch out: You.com says it does not train models on your data and holds a SOC 2 Type 2 report, with a DPA available. It explicitly is not a HIPAA tool, and EU residency is not guaranteed, so keep PHI and EU-locked data out of it.
Data and compliance facts
- Trains on consumer-tier data
- No
- Trains on business-tier data
- No
- Training opt-out available
- Unverified
- SOC 2 Type II
- Yes
- ISO 27001
- Unverified
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- Yes
- HIPAA BAA
- No
- EU data residency
- No
- SSO / SAML
- Unverified
- Data retention
- General account and service data is kept for as long as reasonably necessary to provide the services. The Enterprise tier advertises that all queries and data can be automatically purged.
- Safer tier
- Enterprise plan (adds configurable auto-purge of queries and data and is built to accommodate a signed DPA)
Why it scores 21 out of 100
- +12HIPAA BAA. A Business Associate Agreement, required for protected health information.
- +10EU data residency. Whether data can be kept in the EU.