Dia and the GDPR: AI training, data location and DPA

Trains on your data unless you switch it off.

Yes, unless you opt out: the Terms of Use license lets Dia use your content and outputs to develop and improve Dia, including to train its models. Opt-out is in Settings > Privacy. Its AI partners are contractually barred from training.

Vendor's wording: “to enable Browser to provide, maintain, develop and improve Dia, including to train our models. If you want to opt-out from our use of your User Content to train our models, you may do so in the privacy section of your account settings.”

Source: diabrowser.comUser Content licenceSecond source: diabrowser.comChecked on 19 October 2026

You can switch the training off.

Settings > Privacy > 'Share content data to help improve Dia' (switch it off). Organizations can disable content sharing for everyone.

Vendor's wording: “You can disable this by going to Settings → Privacy → Share content data to help improve Dia.”

Source: diabrowser.comFAQ: Which AI models do you useSecond source: diabrowser.comChecked on 19 October 2026

United States: Dia is hosted and operated in the US; chats, history and files are encrypted and stored locally on the device by default.

Vendor's wording: “Dia is hosted and operated in the United States (“U.S.”) through The Browser Company and its service providers.”

Source: diabrowser.comInternational transfersChecked on 19 October 2026

Not listed.

No listing found for search term 'Browser Company'

Source: dataprivacyframework.govSearch 'Browser Company' returned 'Query returned no results'Checked on 19 October 2026

Shared content data is kept 30 days, not tied to the account, then deleted; deleting an account removes associated data within 30 days. Chats, files and history are stored locally and can be cleared by the user.

Vendor's wording: “If you choose to share content data with Dia, it is not associated with your account and deleted from our servers after 30 days.”

Source: diabrowser.comFAQ: What if I want to delete my chats, files, or history?Checked on 19 October 2026

SOC 2 Type II (1 certification) covering security, confidentiality and privacy for calendar year 2025; report issued 2026. Not HIPAA-compliant.

Vendor's wording: “The Browser Company completed a SOC 2 Type II examination for Dia covering security, confidentiality, and privacy for calendar year 2025.”

Source: diabrowser.comFAQ: Has Dia completed a SOC 2 Type II audit?Checked on 19 October 2026

Yes, through device management: admins can disable AI features on specific websites and turn off content sharing for the whole organisation. Presented as For Work features; not tied to this self-serve plan.

Vendor's wording: “Yes. Dia supports MDM controls that let you disable all AI-powered features on specific websites.”

Source: diabrowser.comDoes Dia offer AI security controls?Checked on 19 October 2026