Foxit AI Assistant and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. Foxit says it does not, and does not let its subprocessors, use customer documents, prompts or AI outputs to train or fine-tune AI models unless the customer expressly authorises it.

Vendor's wording: “Foxit does not—and does not authorize or instruct its subprocessors to—use customer documents, prompts, AI outputs, or other customer content to train or fine-tune AI or machine learning models unless the customer expressly authorizes that use.”

Source: foxit.comPurpose limitation; Use of customer contentSecond source: foxit.comChecked on 19 October 2026

For EEA, UK and Swiss customers, content is stored on a local server (Foxit servers are in the US, Germany, Canada, Australia and Japan); email and password are held in the US. AI processing on Azure runs in the same region as the request.

Vendor's wording: “For customers from the European Economic Area, the UK, Switzerland, Canada, Australia, or Japan, your information will be stored on the local server”

Source: foxit.com10. Server locationsChecked on 19 October 2026

EU hosting available.

Yes, where regional deployment is supported: cloud AI Assistant and Workspace data is routed to the customer's assigned regional instance, and regions may include the EU. Account email and password stay in the US; some provider processing can fall outside the region. No customer-facing region setting is described.

Vendor's wording: “Where regional deployment is supported, customer business data is routed to the customer's assigned regional instance and is logically isolated from business data in other regional instances.”

Source: foxit.comProcessing locations and international transfersSecond source: foxit.comChecked on 19 October 2026

Not listed.

No listing found for search term 'Foxit'

Source: dataprivacyframework.govSearch 'Foxit' returned 'Query returned no results'Checked on 19 October 2026

Documents sent to Azure AI are stored temporarily and deleted within 24 hours (Language service up to 48 hours). Chat histories are kept only as long as needed; you can choose not to store them or ask for deletion.

Vendor's wording: “such data and extracted results will be temporarily stored in Azure Storage in the same region as the request and will be deleted within 24 hours”

Source: foxit.com7.16 Azure AI ServicesSecond source: foxit.comChecked on 19 October 2026

SOC 2 Type 2 (1 certification named). The trust center also lists GDPR support, HIPAA readiness and accessibility/procurement items (TAA, Section 508, VPAT).

Vendor's wording: “Security, availability, confidentiality, and privacy trust services criteria.”

Source: foxit.comCertifications and AttestationsChecked on 19 October 2026