Sembly and the GDPR: AI training, data location and DPA

Trains on your data unless you switch it off.

Yes, unless the workspace opts out: Enterprise content is never used for training, other plans have an opt-out; content used is PII-redacted and anonymized. The terms of service also license Sembly to use recordings and transcripts for AI development and training

Vendor's wording: “We DO NOT use audio, video, or text data from Enterprise Plan customers for model training. Other plans can manage this with opt-out setting.”

Source: sembly.aiInformation We CollectSecond source: sembly.aiChecked on 19 October 2026

You can switch the training off.

Use the opt-out for model training (non-Enterprise plans); the policy says to 'let us know' and does not give a menu path

Vendor's wording: “You have the right to opt out from Sembly AI including any content from your workspace for AI model training.”

Source: sembly.aiYour Rights and ChoicesChecked on 19 October 2026

United States by default (where Sembly's AI processing runs); EEA for customers who choose the EU storage option

Vendor's wording: “in the United States by default and in the EEA for customers who choose EU data storage”

Source: sembly.aiArtificial Intelligence (AI) FeaturesChecked on 19 October 2026

EU hosting available.

Yes: Sembly offers local data storage in EU-based data centres for EU users, with personal data stored inside the EEA; the plan it applies to is not stated

Vendor's wording: “Sembly AI now offers a local data storage option in our EU-based data centers.”

Source: sembly.aiEU data storageChecked on 19 October 2026

On the list.

Active (Sembly AI; EU-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Sembly'Checked on 19 October 2026

Kept per the customer's selected retention settings (Pro has retention settings and 2 years of history); users can delete content; deleted content is removed from production and can remain in backups up to 14 days

Vendor's wording: “Retained according to the user’s or customer’s selected retention settings.”

Source: sembly.aiData RetentionChecked on 19 October 2026

1 named: SOC 2 audits (type not stated in the privacy policy)

Vendor's wording: “We maintain comprehensive compliance measures including SOC 2 audits.”

Source: sembly.aiSharing and TransparencyChecked on 19 October 2026