Data

Replit and the GDPR: AI training, data location and DPA

Pro: Trains on your data unless you switch it off. EU hosting not documented · DPA on request.

Vendor: Replit, Inc.Code and app buildersChecked on How we check

Verdict

Is Replit GDPR compliant?

Pro

Business

Trains on your data unless you switch it off

EU hosting not documented · DPA on request

Price: $90 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Replit train on your data?

Trains on your data by default?

Checked

Trains on your data unless you switch it off.

Yes, unless you opt out: Replit's Pro Agreement lets Replit use customer content to develop, train and improve its models and AI features; customers can opt out on the settings page

Source: replit.comSection 2(c) 'Customer Content'Second source: replit.comChecked on

Switch-off

How do you turn off AI training in Replit?

How to switch training off

Checked

You can switch the training off.

Yes, on the settings page, per the Pro Agreement

Source: replit.comSection 2(c) 'Customer Content'Checked on

Location

Where does Replit store your data?

Contract

Does Replit sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes. Replit's DPA (updated 1 Apr 2026) forms part of the Replit Commercial Agreement

Source: replit.comOpening paragraphChecked on

Processors

Who else handles Replit data?

Sub-processors (companies that handle the data for them)

Checked

49 listed.

Public. 49 entries, all in the US except IntouchCX (Canada); AI from Anthropic, OpenAI, Google, OpenRouter, Fireworks, Baseten and Parallel

Source: replit.comSubprocessor list (last updated August 2026)Second source: replit.comChecked on

EU–US Data Privacy Framework

Checked

Not listed.

No listing found for search term 'Replit'

Source: dataprivacyframework.govSearch 'Replit' returned 'Query returned no results'Checked on

Retention

How long does Replit keep your data?

How long data is kept

Checked

No period during the subscription is stated; the customer may request return or deletion of personal data up to 90 days after the agreement ends

Source: replit.comSection 'Termination and return or deletion'Second source: replit.comChecked on

Security

Which certifications and admin controls does Replit have?

Security certifications

Checked

SOC 2 Type II; Replit cites Google Cloud's ISO 27001 for its infrastructure, not its own

Source: trust.replit.comCompliance documentsChecked on

Admin controls for AI

Checked

Not on Pro: SSO, SCIM, audit logs and 'advanced privacy controls' are Enterprise features

Source: replit.comEnterprise feature listChecked on

The vendor doesn't say: EU hosting, price.

Alternatives

Replit alternatives that don't train on your data

Other code and app builders tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Amazon Q Developer

    Pro tier · $19 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓?✓

  • GitHub Copilot

    Business · $19 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

  • JetBrains AI Pro

    organisation licence · See details

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

  • Webflow Premium

    site plan · $25 / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

  • v0

    Business · $100 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓?✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices