Comet and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No for what staff enter in Comet's assistant: the Enterprise Terms bar training on Customer Content. Browsing data falls under separate Browser Terms that do not mention training, and Perplexity's Comet privacy notice lists improving its AI models among its general data uses.

Vendor's wording: “Perplexity shall not use (or authorize third parties to use) Customer Content to train, retrain, fine-tune or otherwise improve any generative artificial intelligence models.”

Source: perplexity.ai1.3.3 Model TrainingChecked on 19 October 2026

DPA in the terms.

Yes. The Enterprise Terms incorporate Perplexity's Data Processing Addendum by reference (part of the terms, with EU standard contractual clauses).

Vendor's wording: “This Agreement incorporates by reference Perplexity’s Data Processing Addendum (“DPA”), available at https://www.perplexity.ai/hub/legal/dpa.”

Source: perplexity.ai5.1 Personal DataChecked on 19 October 2026

On the list.

Active (Perplexity AI; EU-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Perplexity AI'Checked on 19 October 2026

Input is stored until the customer deletes it or 30 days after the service ends; uploaded files are deleted after 7 days; admins can enforce Incognito Mode (sessions kept 24 hours) or set retention windows.

Vendor's wording: “will be stored until the earlier of (a) the date it is deleted by Customer through the Services’ interface and (b) the date that is thirty days after Perplexity is no longer providing the Services”

Source: perplexity.aiAnnex 1, categories of Personal DataChecked on 19 October 2026

SOC 2 Type II (1 certification named on the Enterprise page); the page also calls Perplexity GDPR and HIPAA compliant. Full list sits on the Trust Center (needs a browser).

Vendor's wording: “SOC 2 Type II Certified”

Source: perplexity.aiKeep your company’s data airtightChecked on 19 October 2026

Yes. Admins set which AI models and providers are used, and manage permissions by product, under Organization Settings > Data and privacy.

Vendor's wording: “Data Retention (including Enforce Incognito Mode), AI Model & Provider Settings, and Audit Log Settings live in a dedicated Data and privacy section under Organization Settings.”

Source: perplexity.aiAdmin controls for Enterprise organizationsChecked on 19 October 2026