GlideOS and the GDPR: AI training, data location and DPA

Trains on your data, with no documented way to stop it.

Yes, unless an opt-out exists for the account type and has been used: Glide may train AI on your content and app structure, excluding app data values that relate to an identifiable person. Whether Pro has an opt-out is not stated.

Vendor's wording: “Unless your account type grants you the ability to opt out of artificial intelligence training and you have done so, you agree that Glide has the right to use Your Content and the structure and configuration of your Applications to”

Source: glideapps.comYour ContentSecond source: glideapps.comChecked on 19 October 2026

United States: the privacy policy says the services are hosted and operated in the U.S. The subprocessor list names Cloudflare (runtime) and Neon (databases).

Vendor's wording: “The Services are hosted and operated in the United States (“U.S.”) through”

Source: glideapps.comInternational transfersSecond source: glideapps.comChecked on 19 October 2026

EU hosting not documented.

Partly: the sub-processor page says customers can configure the data region in which the AI providers operate. No EU hosting for app data is described; the privacy policy says the services are hosted in the U.S.

Vendor's wording: “Customers can configure the data region in which these providers operate and may restrict GlideOS to a specific set of providers.”

Source: glideapps.comLLM / AI SubprocessorsChecked on 19 October 2026

DPA on request.

Yes: an EU and UK Data Processing Addendum (processor form) supplements the terms; a copy for signature is sent on request to dpo@glideapps.com.

Vendor's wording: “If you'd like us to send you a copy of this DPA for signature, please email dpo@glideapps.com with the subject "Request for DPA." EU”

Source: glideapps.comTop of pageChecked on 19 October 2026

Published.

Yes: https://www.glideapps.com/legal/glide-os/subprocessors (updated 29 Sep 2026), 23 entries, 20 companies. AI providers: Anthropic, Google, OpenAI, DeepSeek, Moonshot AI, Z.ai, xAI, OpenRouter, Cloudflare Workers AI.

Vendor's wording: “GlideOS uses Third-Party providers of large language models and related AI services throughout the product, including to power the GlideOS agent and other AI-assisted”

Source: glideapps.comLLM / AI SubprocessorsChecked on 19 October 2026

Not listed.

No listing found for search term 'typeguard'

Source: dataprivacyframework.govSearch 'typeguard' returned 'Query returned no results'Checked on 19 October 2026

Unused customer data is deleted after 30 days, and data is erased automatically when you delete the app; Glide offers an export feature. Retention of AI prompts and chats is not separately stated.

Vendor's wording: “Unused Customer data is deleted after 30 days.”

Source: glideapps.comTechnical and organisational measures: limited data retention; portability and erasureSecond source: glideapps.comChecked on 19 October 2026

SOC 2 Type 2 (1 certification named).

Vendor's wording: “Yes, Glide is SOC 2 Type 2 certified.”

Source: glideapps.comFrequently asked questionsChecked on 19 October 2026

Partly: customers can restrict GlideOS to a specific set of AI providers, as the sub-processor list referenced by the DPA states. No organisation-wide switch to turn AI features off is published.

Vendor's wording: “Customers can configure the data region in which these providers operate and may restrict GlideOS to a specific set of providers.”

Source: glideapps.comLLM / AI Subprocessors sectionChecked on 20 October 2026