Data

Intercom and the GDPR: AI training, data location and DPA

Essential with Fin: Trains on your data, with no documented way to stop it. EU hosting available · DPA in the terms.

Vendor: IntercomSales, marketing and supportChecked on How we check

Verdict

Is Intercom GDPR compliant?

Essential with Fin

Business

Trains on your data, with no documented way to stop it

EU hosting available · DPA in the terms

Price: $29 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Intercom train on your data?

Trains on your data by default?

Checked

Trains on your data, with no documented way to stop it.

Yes: the Terms license customer data to provide and improve the services, including Intercom AI model training; no opt-out found in the terms read. Third-party AI providers may not train on customer data

Source: intercom.comTerms of Service s.3.2 (effective 8 Sep 2026)Second source: intercom.comChecked on

Location

Where does Intercom store your data?

Where data is stored by default

Checked

United States unless the workspace uses EU or Australian data hosting

Source: intercom.comDefault and regional sectionsChecked on

EU hosting on this plan

Checked

EU hosting available.

Yes: EU data hosting in Dublin, with Fin and other AI features processed in the EU (Microsoft, Google, OpenAI); plan eligibility not stated

Source: intercom.comHelp article (14 May 2026)Second source: intercom.comChecked on

Contract

Does Intercom sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes. The DPA is incorporated by reference into the Terms of Service; customers outside the US contract with Intercom's Dublin entity

Source: intercom.comTerms of Service s.3.1 and parties clauseChecked on

Processors

Who else handles Intercom data?

Sub-processors (companies that handle the data for them)

Checked

14 listed.

Public. Default (US) hosting: 14 entries, all USA, incl. OpenAI, Anthropic, Google, Microsoft, ElevenLabs and Cartesia; EU hosting: a separate list with AI processing in the EU

Source: intercom.comUS, EU and Australia sectionsChecked on

EU–US Data Privacy Framework

Checked

On the list.

Active (Intercom, Inc.; EU-US, Swiss-US, UK Extension)

Source: dataprivacyframework.govSearch 'Intercom'Checked on

Retention

How long does Intercom keep your data?

How long data is kept

Checked

Data is kept for the contract. Deletion on request within 30 days; otherwise automatic deletion 180 days after the contract ends; backups are deleted after 14 days

Source: intercom.comSection 10 'Return or Deletion of Customer Personal Data'Checked on

Security

Which certifications and admin controls does Intercom have?

Security certifications

Checked

SOC 2 Type II, ISO 27001, ISO 27701 and ISO 42001; Fin AI Agent is separately AIUC-1 certified

Source: intercom.comSection 'Enterprise security and privacy, for one shared system'Checked on

Admin controls for AI

Checked

Partly. Admins switch individual inbox AI features on or off under Settings > AI & Automation > Inbox AI, and Fin answers only where it is set live; smart reply suggestions cannot be turned off

Source: intercom.comInstructions 'To enable Inbox AI features…' and the Smart replies FAQChecked on

The vendor doesn't say: switch-off, price.

Alternatives

Intercom alternatives that don't train on your data

Other sales, marketing and support tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Pipedrive

    Growth · €39 / user / mo

    Says it doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Attio

    Pro · €74 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

  • Dynamics 365 Sales

    Professional · €56.30 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓?✓

  • folk

    Standard · €22 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✕

  • GetResponse Email Marketing

    Marketer · €44.28 / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices