Activepieces and the GDPR: AI training, data location and DPA

Says it doesn't train on your data.

No, per the vendor's security page: automations, runs, documents and prompts never train a model. Marketing claim only; the privacy policy and terms could not be read.

Vendor's wording: “Your automations, runs, documents and prompts never train a model, ours or anyone else's.”

Source: activepieces.comAdopt with confidence > Never training dataChecked on 19 October 2026

Germany (Frankfurt) on the vendor's cloud by default.

Vendor's wording: “Our cloud runs in Frankfurt by default”

Source: activepieces.comChoose where it runsChecked on 19 October 2026

EU hosting available.

Yes on the vendor's cloud (Frankfurt by default, other regions on request); self-hosting is also offered. Not stated whether other regions are open to the Team plan.

Vendor's wording: “Our cloud, hosted in the EUFrankfurt by default, other regions on request.”

Source: activepieces.comChoose where it runsChecked on 19 October 2026

Not listed.

No listing found for search term 'Activepieces'

Source: dataprivacyframework.govSearch 'Activepieces' returned 'Query returned no results'Checked on 19 October 2026

Kept only as long as you choose, per the security page; no fixed period or post-cancellation deletion period given.

Vendor's wording: “Your automations, runs, files, documents and connections, kept only as long as you choose.”

Source: activepieces.comAdopt with confidence > What we keepChecked on 19 October 2026

One named: SOC 2 Type 2, plus a penetration test from early 2026; reports are in the trust center.

Vendor's wording: “SOC 2 Type 2 and a penetration test from early 2026, with the reports in the trust center.”

Source: activepieces.comAdopt with confidence > Outside auditorsChecked on 19 October 2026