Business + AI
BusinessDoesn't train on your data
EU hosting not documented · DPA in the terms
Price: $24 / user / mo
Data
Loom and the GDPR: AI training, data location and DPA
Business + AI: Doesn't train on your data. EU hosting not documented · DPA in the terms.
Vendor: Atlassian (Loom)Meetings and notesChecked on How we check
Verdict
Is Loom GDPR compliant?
No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.
Training
Does Loom train on your data?
Trains on your data by default?
CheckedDoesn't train on your data.
No, for now: Atlassian does not use metadata or in-app data from Loom, which has no data contribution settings yet; Atlassian says it will notify organisations when that changes. Loom AI sends transcripts (not video or audio) to OpenAI
Source: support.atlassian.comParagraph on apps without data contribution settings ('such as Loom or Bitbucket')Second source: loom.comChecked on
Location
Where does Loom store your data?
Where data is stored by default
CheckedGlobal: Atlassian app data may sit in any Atlassian AWS region unless data residency is set
Source: support.atlassian.comOpening sectionsChecked on
Contract
Does Loom sign a data processing agreement?
Data processing agreement (DPA)
CheckedDPA in the terms.
Yes. Loom is an Atlassian Cloud Product under the Atlassian Customer Agreement, and Atlassian's DPA (effective 17 Aug 2026) applies with the EU SCCs taking effect automatically
Source: atlassian.comEffective date and SCC clauseSecond source: atlassian.comChecked on
Processors
Who else handles Loom data?
Sub-processors (companies that handle the data for them)
Checked11 listed.
Public (Atlassian's list): 11 of 29 entries (10 companies) apply to Loom, including AWS, Speechmatics for transcription, Google Vertex AI and OpenAI
Source: atlassian.comEntries with 'Loom' under 'Applicable Cloud Products' (effective 15 May 2026)Second source: loom.comChecked on
EU–US Data Privacy Framework
CheckedOn the list.
Active (Atlassian, Inc.; EU-US DPF, Swiss-US DPF, UK Extension)
Source: dataprivacyframework.govSearch 'Atlassian'Checked on
Retention
How long does Loom keep your data?
How long data is kept
CheckedKept for the subscription; after the agreement ends Atlassian deletes all customer personal data in line with its documentation (no period stated in the DPA)
Source: atlassian.comSection 'Deletion and Return of Customer Personal Data'Checked on
Security
Which certifications and admin controls does Loom have?
Security certifications
CheckedISO/IEC 27001:2022 and SOC 2: Loom is listed among the relevant products on Atlassian's certification pages
Source: atlassian.comSection 'Relevant products'Second source: atlassian.comChecked on
The vendor doesn't say: EU hosting, admin controls, price.
Alternatives
Loom alternatives that don't train on your data
Other meetings and notes tools whose business plan doesn't train on your data and includes a DPA.
The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.
Tool · PlanVerdictYour five rules
- jamie
Team · €33 / user / mo
Doesn't train on your dataData in the EU by default · DPA on request
✓✓✓✓✓
- Leexi
Business · €39 / user / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
- Noota
Business · $39 / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
- tl;dv
Business (+1) · €29 / user / mo
Doesn't train on your dataData in the EU by default · DPA in the terms
✓✓✓✓✓
- Trint
Advanced · See details
Doesn't train on your dataEU hosting available · DPA on request
✓✓✓✓✓
Need something your tools can't do?
We design and build what your team is missing, around the way you already work and the data rules you set.