Data

Riverside and the GDPR: AI training, data location and DPA

Pro: Trains on your data, with no documented way to stop it. EU hosting not documented · DPA in the terms.

Vendor: RiversideFM, Inc.Meetings and notesChecked on How we check

Verdict

Is Riverside GDPR compliant?

Pro

Business

Trains on your data, with no documented way to stop it

EU hosting not documented · DPA in the terms

Price: $24 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Riverside train on your data?

Trains on your data by default?

Checked

Trains on your data, with no documented way to stop it.

Yes: the terms license Riverside to use uploaded content for training and improving its AI and machine-learning models; no opt-out on Pro

Vendor's wording: “training, testing, developing, and improving Riverside's artificial intelligence and machine learning models”

Source: riverside.fm6.1 License to RiversideChecked on

Location

Where does Riverside store your data?

Where data is stored by default

Checked

No single default: data is stored and processed in the US, Canada, EU, UK, Israel, Mexico, Argentina, the Philippines and elsewhere; cloud storage is AWS in the USA

Vendor's wording: “maintain, store and process personal data in jurisdictions including the United States (US), Canada, European Union (EU), United Kingdom (UK), Israel, Mexico, Argentina, the Philippines”

Source: riverside.fm4. Data LocationChecked on

Contract

Does Riverside sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes: a Data Processing Addendum or Agreement executed between the customer and Riverside governs personal data; how a Pro account gets it is not stated

Vendor's wording: “Riverside will process such Personal Data on your behalf and in accordance with the Data Processing Addendum or the Data Processing Agreement executed between you and us.”

Source: riverside.fm5.3 Data Processing AddendumChecked on

Processors

Who else handles Riverside data?

Sub-processors (companies that handle the data for them)

Checked

Published.

Yes, public list at riverside.com/subprocessors, last revised 22 May 2024: 11 sub-processors plus 4 subsidiaries and support providers (15 entries); AI: OpenAI, ElevenLabs, Hedra, Pika, HeyGen, Fal.ai

Vendor's wording: “Below is the list of our sub-processors with which we engage and with whom we may share Personal Data.”

Source: riverside.comSub-processorsChecked on

EU–US Data Privacy Framework

Checked

On the list.

Active (RiversideFM Inc.; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'RiversideFM'Checked on

Security

Which certifications and admin controls does Riverside have?

Security certifications

Vendor says

SOC 2 and ISO 27001 are mentioned only as a reason to talk to Sales about the Business plan; no certificate statement for Pro on the pages read

Vendor's wording: “Business becomes necessary when you need more than 100 webinar registrants, multiple producers managing a show, SSO, SOC2/ISO27001 compliance”

Source: riverside.fmFAQ: BusinessChecked on

The vendor doesn't say: EU hosting, retention, admin controls, price.

Alternatives

Riverside alternatives that don't train on your data

Other meetings and notes tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • jamie

    Team · €33 / user / mo

    Doesn't train on your dataData in the EU by default · DPA on request

    ✓✓✓✓✓

  • Leexi

    Business · €39 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Noota

    Business · $39 / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • tl;dv

    Business (+1) · €29 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Trint

    Advanced · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices