Factorial and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. Factorial says it uses pre-trained AI models, does not fine-tune or train them on customer data, and contractually bars its model providers from training on customer inputs or outputs.

Vendor's wording: “Factorial uses pre-trained AI models and does not fine-tune or train models on customer data.”

Source: trust.factorial.coTrust Center > AI > AI Training DataChecked on 19 October 2026

EU: Factorial says data is hosted and processed within the EU; the hosting provider is not named in the documents read.

Vendor's wording: “When we process your data, it is hosted in the EU and processed within the territory of the EU”

Source: factorialhr.com5. Do we share your personal data? Do we make international data transfers?Checked on 19 October 2026

No EU hosting.

EU hosting is the stated default; no separate EU setting or other region choice is described.

Vendor's wording: “When we process your data, it is hosted in the EU and processed within the territory of the EU”

Source: factorialhr.com5. Do we share your personal data? Do we make international data transfers?Checked on 19 October 2026

DPA on request.

Yes. The Data Processing Agreement is an inseparable part of the Terms; customers who need one sign it through a link Factorial provides and receive a copy signed by both parties.

Vendor's wording: “The Data Processing Agreement is an inseparable part of these Terms and Conditions”

Source: factorialhr.com10.1Checked on 19 October 2026

EU or Swiss vendor.

Not applicable (EU-based vendor, Everyday Software, S.L., Barcelona, Spain)

Vendor's wording: “EVERYDAY SOFTWARE, S.L., a Spanish company with registered office at Carrer de Llacuna, 56”

Source: factorialhr.com1.1 WelcomeChecked on 19 October 2026

A customer can ask to delete data at any time. From 30 days after cancellation takes effect, data is blocked (available only to public authorities) for 1 year, then destroyed. Download it before cancellation. Retention of AI inputs is not stated; AI providers do not retain task data per the trust centre.

Vendor's wording: “After 30 days from the effective date of cancellation of the service data will remain blocked for a period of one (1) year”

Source: factorialhr.com10.5Checked on 19 October 2026

ISO/IEC 27001:2022, SOC 2 Type 2, SOC 3 and Spain's ENS RD311/2022 High level (4 named); reports are available on request.

Vendor's wording: “ENS RD311/2022 HIGH ISO/IEC 27001:2022 SOC 2 Type 2 SOC 3”

Source: trust.factorial.coTrust Center > ComplianceChecked on 19 October 2026

From €8 / user / mo.

From €8 per user per month (German price page, 'ab 8 €'); billing basis and VAT are not shown, plans are quoted individually.

Vendor's wording: “Factorial startet ab 8 € pro Monat und User”

Source: factorialhr.deHero: Factorial startet ab 8 € pro Monat und UserChecked on 19 October 2026