Perplexity and the GDPR: AI training, data location and DPA

Trains on your data unless you switch it off.

Yes, unless you opt out: on Free, Pro and Max, AI Data Retention is on by default and Perplexity may use your data to train AI models

Source: perplexity.aiSections on data uses and 'How to Opt Out of AI Training Data Collection'Second source: perplexity.aiChecked on 18 October 2026

Doesn't train on your data.

No. Enterprise Pro and Max do not use customer data to train AI models; the DPA excludes personal data from model training

Source: perplexity.aiEnterprise FAQ on the pricing pageSecond source: perplexity.aiChecked on 17 October 2026

You can switch the training off.

Yes. Account settings > Preferences > turn off 'AI data retention'; the opt-out applies only to data collected afterwards

Source: perplexity.aiNumbered steps under 'How to Opt Out of AI Training Data Collection'Second source: perplexity.aiChecked on 18 October 2026

No DPA.

No. On consumer plans Perplexity AI, Inc. handles personal data under its privacy notice; its DPA forms part of business agreements that reference it

Source: perplexity.aiOpening paragraph ('This Privacy Notice applies to personal data Perplexity AI, Inc. … collects')Second source: perplexity.aiChecked on 18 October 2026

DPA on request.

Yes. DPA (last updated 13 Aug 2026) forms part of business agreements that reference it; counterparty Perplexity AI, Inc.; SCCs for EU and UK transfers

Source: perplexity.aiPreamble and section 11Checked on 17 October 2026

Business list only.

Public for business customers: 23 entries, all in the US, including Anthropic, OpenAI, Google Cloud, Amazon Bedrock, Microsoft Azure and xAI; the consumer privacy notice describes recipients by category

Source: trust.perplexity.aiSub-processor listSecond source: perplexity.aiChecked on 17 October 2026

On the list.

Active (Perplexity AI, Inc.; EU-US DPF and UK Extension; no Swiss-US listing shown)

Source: dataprivacyframework.govSearch 'Perplexity'Checked on 17 October 2026

23 listed.

Public. 23 entries, all US; model providers include Anthropic, OpenAI, Google Cloud, Amazon Bedrock, Microsoft Azure and xAI; 10 business days' notice for non-model sub-processors

Source: trust.perplexity.ai'1-10 of 23 results'Second source: perplexity.aiChecked on 17 October 2026

On the list.

Active (EU-US DPF and UK Extension; no Swiss-US listing shown)

Source: dataprivacyframework.govSearch 'Perplexity'Checked on 17 October 2026

Uploaded files are deleted after seven days (the conversation stays unless deleted). Admins can set session retention windows and enforce Incognito Mode under Organization Settings > Data and privacy, where configurable retention is enabled

Source: perplexity.aiSections 'Data retention' and 'Admin controls for Enterprise organizations'Checked on 17 October 2026

SOC 2 (Type 2 report) and ISO/IEC 27001:2022 (company-wide trust centre)

Source: trust.perplexity.aiTrust Center compliance tilesChecked on 17 October 2026

Not offered: Pro is a personal plan with no admin

Source: perplexity.aiIndividual tabChecked on 18 October 2026

SOC 2 (Type 2 report) and ISO/IEC 27001:2022; HIPAA gap assessment and PCI DSS SAQ A documents

Source: trust.perplexity.aiTrust Center compliance tiles and documents listChecked on 17 October 2026

Yes. Admins set file, sharing and connector permissions per role, choose the AI models and providers, can turn off public sharing, and can enforce Incognito Mode

Source: perplexity.aiSection 'Admin controls for Enterprise organizations'Second source: perplexity.aiChecked on 17 October 2026