Leexi and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. The DPA prohibits any AI model training on customer audio, transcripts and summaries, by Leexi or by third parties, and imposes this on its AI sub-processors.

Vendor's wording: “No Personal Data of the Client, whether raw data (audio or video recordings), transcribed data or derived data (summaries, chapters, follow-up tasks, translations, analyses), is used, in any form or for any purpose whatsoever, for AI Model Training”

Source: leexi.aiArticle 7 - Prohibition on using personal data to train AI modelsChecked on 19 October 2026

European Union: AWS France (Paris) primary, Ireland for backup and disaster recovery.

Vendor's wording: “France (Paris, eu-west-3, primary region) and Ireland”

Source: leexi.aiAnnex 2, 1. Amazon Web Services EMEA SARLChecked on 19 October 2026

EU hosting available.

Yes, EU by default for every plan; customers can also switch hosting to Scaleway (French cloud) as an option.

Vendor's wording: “Switch to Scaleway, a French cloud service (by default: AWS France)”

Source: leexi.aiModulesChecked on 19 October 2026

DPA in the terms.

Yes. The DPA takes effect when the client subscribes online, including a free trial (no signature needed) and prevails over other terms on data protection.

Vendor's wording: “entered into between the client and Leexi on the date on which the Client subscribes online to the Services, including in the context of a free trial.”

Source: leexi.aiPreambleChecked on 19 October 2026

Published.

Yes. DPA Annex 2 lists 10 sub-processors; the live list is on the trust centre (trust.leexi.ai, needs a browser). AI/model providers: Microsoft Azure OpenAI (EU), Mistral AI; speech: Gladia, ElevenLabs.

Vendor's wording: “Leexi keeps the list of its Sub-processors up to date on the dedicated page of its trust center”

Source: leexi.aiArticle 8.2 and Annex 2Checked on 19 October 2026

EU or Swiss vendor.

Not applicable (EU-based vendor, Leexi SA, Brussels, Belgium)

Vendor's wording: “Avenue Herrmann-Debroux 2, 1160 Brussels (Auderghem), Belgium”

Source: leexi.aiTitle pageChecked on 19 October 2026

Recordings: kept 2 years by default, configurable down to 1 day, or 'Never keep recordings'. Transcripts and summaries: 1 day to 2 years as set. Raw media deleted once processed. Contract end: deleted within 30 days. Pricing lists retention policy under the paid Governance module.

Vendor's wording: “processed audio and video recordings are retained by default for two (2) years from the date of each conversation, with a configurable minimum of one (1) day”

Source: leexi.aiArticle 14.1 and 14.2Checked on 19 October 2026

ISO 27001:2022 (1 certification named); GDPR compliance is also claimed.

Vendor's wording: “security measures form part of its ISO 27001:2022 certification, the scope of which covers”

Source: leexi.aiArticle 10.2Checked on 19 October 2026

€39 / user / mo.

€39 per licence per month on the yearly toggle (shown next to a struck-through €49 monthly rate), annual invoice, excl. VAT

Vendor's wording: “Greater productivity for teams 39€/month49€ Per licence per month. Annual invoice, excl. VAT.”

Source: leexi.aiOur plans: BusinessChecked on 19 October 2026