Data

Missive and the GDPR: AI training, data location and DPA

Productive: Says it doesn't train on your data. EU hosting not documented · DPA on request.

Vendor: Heliom Inc. (Missive)Writing and emailChecked on How we check

Verdict

Is Missive GDPR compliant?

Productive

Business

Says it doesn't train on your data

EU hosting not documented · DPA on request

Price: $24 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Missive train on your data?

Trains on your data by default?

Vendor says

Says it doesn't train on your data.

No, per Missive's AI page: it says it does not train on your emails (marketing page, not the privacy policy)

Vendor's wording: “Every AI request is routed through your chosen provider. Missive doesn't train on your emails, ever.”

Source: missiveapp.comAI assistant page > Your AI, your wayChecked on

Location

Where does Missive store your data?

Where data is stored by default

Checked

United States: GDPR page lists AWS (servers, file hosting) and Crunchy Data (databases) with US location

Vendor's wording: “Servers, file hosting, compute, transactional emails, secrets management”

Source: missiveapp.comMissive and GDPR > SubprocessorsChecked on

Contract

Does Missive sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes, on request: customers ask privacy@missiveapp.com for a data processing addendum

Vendor's wording: “Our users can request a data processing addendum with us by contacting privacy@missiveapp.com.”

Source: missiveapp.comMissive and GDPR > Data Processing AgreementChecked on

Processors

Who else handles Missive data?

Sub-processors (companies that handle the data for them)

Checked

Published.

Yes, public on the GDPR page (https://missiveapp.com/gdpr): 12 entries, 12 companies; AI provider listed: Anthropic (customer support)

Vendor's wording: “here is the complete list of providers who come in direct contact with our users’ personal data:”

Source: missiveapp.comMissive and GDPR > SubprocessorsChecked on

EU–US Data Privacy Framework

Checked

Not listed.

No listing found for search term 'Heliom'

Source: dataprivacyframework.govSearch 'Heliom' returned 'Query returned no results'Checked on

Retention

How long does Missive keep your data?

How long data is kept

Checked

No fixed period: data stays on Missive's servers while used; users can delete their account and personal data themselves at any time; AI page says Missive does not store emails sent to AI providers

Vendor's wording: “Users have the right to access, correct and delete their personal data at any time.”

Source: missiveapp.comPrivacy Policy > Your rightsChecked on

Security

Which certifications and admin controls does Missive have?

Security certifications

Checked

SOC 2 Type II (report on request) plus Google's mandatory security assessment; 1 named certification

Vendor's wording: “Missive has achieved SOC 2 Type II compliance, a widely recognized auditing standard for service providers”

Source: missiveapp.comSecurity > External audit > SOC 2 Type II ComplianceChecked on

Admin controls for AI

Checked

Yes: AI works only once an organization admin adds an AI provider in Settings > AI; only admins can add or manage providers

Vendor's wording: “Only organization admins can add or manage AI providers, and every provider is linked to the organization”

Source: missiveapp.comAI > Overview > Two ways to connectChecked on

The vendor doesn't say: EU hosting, price.

Alternatives

Missive alternatives that don't train on your data

Other writing and email tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Gmail with Gemini

    Google Workspace Business Standard · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Google Translate in Google Workspace

    Business Standard · €13.60 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • LanguageTool

    Team · €56.90 / user / yr

    Doesn't train on your dataData in the EU by default · DPA on request

    ✓✓✓✓✓

  • Azure Translator

    S1 pay as you go · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓?✓

  • Hunter

    Growth · See details

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✕

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices