Data

Personio and the GDPR: AI training, data location and DPA

Core: Doesn't train on your data. EU hosting available · DPA on request.

Vendor: Personio SE & Co. KGDocuments, HR and financeChecked on How we check

Verdict

Is Personio GDPR compliant?

Core

Business

Doesn't train on your data

EU hosting available · DPA on request

Price: Quote only

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Personio train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Personio does not use the customer's data, Input or Output to train or improve AI models, and the same applies to its AI providers

Source: personio.comSupplemental Terms for AI Features (version 08-2026), Section 4.1Checked on

Location

Where does Personio store your data?

Where data is stored by default

Checked

EU/EEA by contract: processing takes place only in an EU or EEA state, or a country the European Commission rates as adequate

Source: personio.comDPA Section 1.2.4Checked on

EU hosting on this plan

Checked

EU hosting available.

Yes, for all customers: the DPA limits processing to the EU, EEA or adequate countries

Source: personio.comDPA Section 1.2.4Checked on

Contract

Does Personio sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes. The Data Processing Addendum on Personio's terms page is agreed and forms an integral part of the agreement

Source: personio.comGTC (version 08-2026) Section 11.1; DPA version 09-2024Checked on

Processors

Who else handles Personio data?

EU–US Data Privacy Framework

Checked

EU or Swiss vendor.

Not applicable (EU-based vendor, Personio SE & Co. KG, Munich)

Source: personio.comGTC Section 1.1Checked on

Retention

How long does Personio keep your data?

How long data is kept

Checked

Kept for the agreement; Personio keeps the data for 30 days after it ends so the customer can export or ask for deletion, then deletes it

Source: personio.comDPA Sections 10.2 to 10.4Checked on

Security

Which certifications and admin controls does Personio have?

Security certifications

Checked

ISO 27001, audited yearly by an independent firm

Source: personio.comSection on controls and standardsChecked on

Admin controls for AI

Checked

Yes. AI features are optional: admins can enable or disable any AI feature, or all AI Credit consumption, at any time, and can set a spend limit

Source: personio.comSupplemental Terms for AI Features, Sections 2.1 and 7.3Checked on

The vendor doesn't say: sub-processors, price.

Alternatives

Personio alternatives that don't train on your data

Other documents, hr and finance tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • iLovePDF

    Premium · €5 / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Pleo

    Build · €14 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Teamtailor

    subscription by quote · Quote only

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Tellent Recruitee

    Advance · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Candis

    Basis · From €389 / mo

    Doesn't train on your dataNo EU hosting · DPA in the terms

    ✓✕✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices