Business
BusinessDoesn't train on your data
EU hosting not documented · DPA in the terms
Price: $25 / user / mo
Data
Circleback and the GDPR: AI training, data location and DPA
Business: Doesn't train on your data. EU hosting not documented · DPA in the terms.
Vendor: Circleback AI, Inc.Meetings and notesChecked on How we check
Verdict
Is Circleback GDPR compliant?
No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.
Training
Does Circleback train on your data?
Trains on your data by default?
CheckedDoesn't train on your data.
No. Circleback's security documentation says it does not use customer data to train models (not plan-specific).
Vendor's wording: “We do not use customer data to train models.”Source: circleback.aiSecurityChecked on
Location
Where does Circleback store your data?
Where data is stored by default
CheckedUnited States: the DPA says primary processing takes place in the US.
Vendor's wording: “Customer acknowledges that Circleback’s primary processing operations take place in the United States”Source: circleback.aiInternational TransfersChecked on
Contract
Does Circleback sign a data processing agreement?
Data processing agreement (DPA)
CheckedDPA in the terms.
Yes. A DPA is published at circleback.ai/dpa and applies automatically to customers who use the Services (click-through, no signature needed).
Vendor's wording: “By using the Services, you agree to this DPA.”Source: circleback.aiPreambleChecked on
Processors
Who else handles Circleback data?
EU–US Data Privacy Framework
CheckedOn the list.
Active (Circleback; EU-US DPF, UK Extension)
Source: dataprivacyframework.govSearch 'Circleback'Checked on
Retention
How long does Circleback keep your data?
How long data is kept
CheckedBusiness plan: workspace admins set retention separately for recordings, transcripts and all meeting data; expired data is permanently deleted. Without a setting, data stays until the customer deletes it. Recording storage 2 years on Business. Deleting an account removes all data immediately.
Vendor's wording: “When a retention period expires, that data is permanently deleted and cannot be recovered.”Source: circleback.aiData retention settingsChecked on
Security
Which certifications and admin controls does Circleback have?
Security certifications
CheckedSOC 2 Type II (1 certification named); also claims HIPAA compliance and EU-U.S. DPF certification (not security certifications).
Vendor's wording: “Circleback is SOC 2 Type II and EU-U.S. Data Privacy Framework-certified”Source: circleback.aiSecurityChecked on
The vendor doesn't say: EU hosting, sub-processors, admin controls, price.
Alternatives
Circleback alternatives that don't train on your data
Other meetings and notes tools whose business plan doesn't train on your data and includes a DPA.
The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.
Tool · PlanVerdictYour five rules
- jamie
Team · €33 / user / mo
Doesn't train on your dataData in the EU by default · DPA on request
✓✓✓✓✓
- Leexi
Business · €39 / user / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
- Noota
Business · $39 / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
- tl;dv
Business (+1) · €29 / user / mo
Doesn't train on your dataData in the EU by default · DPA in the terms
✓✓✓✓✓
- Trint
Advanced · See details
Doesn't train on your dataEU hosting available · DPA on request
✓✓✓✓✓
Need something your tools can't do?
We design and build what your team is missing, around the way you already work and the data rules you set.