Data

Semrush One and the GDPR: AI training, data location and DPA

Starter, SEO + AI Search: Doesn't train on your data. EU hosting not documented · DPA on request.

Vendor: Semrush Inc. (Delaware corporation, Boston, MA)Sales, marketing and supportChecked on How we check

Verdict

Is Semrush One GDPR compliant?

Starter, SEO + AI Search

Business

Doesn't train on your data

EU hosting not documented · DPA on request

Price: €158.40 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Semrush One train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No: Semrush says it does not train its models, and does not let its third-party AI providers train, on what you enter into its generative AI features.

Vendor's wording: “Semrush does not train or develop its models, and does not allow its third-party providers to train or develop its models on User Input.”

Source: semrush.comAI Generative Services Specifics and PrinciplesChecked on

Location

Where does Semrush One store your data?

Where data is stored by default

Checked

United States (data centres run on Amazon Web Services, Google Cloud Platform and Digital Realty).

Vendor's wording: “Semrush stores its service data at physically secure data centers in the United States.”

Source: semrush.comSecurity of data centersChecked on

Contract

Does Semrush One sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes: the Data Processing Addendum is incorporated into the agreement without further signatures.

Vendor's wording: “this DPA will form an integral part of the Agreement without the need for any additional signatures”

Source: semrush.comPreambleChecked on

Processors

Who else handles Semrush One data?

Sub-processors (companies that handle the data for them)

Checked

Published.

Yes, public at semrush.com/company/legal/sub-processors/: 9 entries (AWS counted once, listed with locations USA and Ireland); no AI model provider appears in the list.

Vendor's wording: “Amazon Web Services Cloud Storage USA Ireland”

Source: semrush.comApproved Sub-processorsChecked on

EU–US Data Privacy Framework

Checked

Not listed.

No listing found for search term 'Semrush'

Source: dataprivacyframework.govSearch 'Semrush' returned 'Query returned no results'Checked on

Retention

How long does Semrush One keep your data?

How long data is kept

Checked

After cancellation or account deletion Semrush may erase your data after a reasonable period of at least 30 days, and may keep copies for legal, archival or backup reasons; no fixed period while the account is active.

Vendor's wording: “Semrush may erase all Customer data and information stored on Semrush servers within reasonable period of time (not less than thirty (30) days)”

Source: semrush.comEffect of TerminationChecked on

Security

Which certifications and admin controls does Semrush One have?

Security certifications

Checked

1 named: PCI DSS Level 1; no ISO 27001 or SOC 2 named on the security page (data-centre providers hold their own certificates).

Vendor's wording: “we have achieved a PCI DSS Level 1 certificate”

Source: semrush.comPCI DSS complianceChecked on

Price

What does Semrush One cost?

Price, as shown in Germany

Checked

€158.40 / mo.

€158.40 per month, billed annually (listed against €190 on monthly billing); VAT not shown.

Vendor's wording: “€158.40 monthly €158.40/mo billed annually”

Source: semrush.comSEO + AI Search: StarterChecked on

The vendor doesn't say: EU hosting, admin controls.

Alternatives

Semrush One alternatives that don't train on your data

Other sales, marketing and support tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Pipedrive

    Growth · €39 / user / mo

    Says it doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Attio

    Pro · €74 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

  • Dynamics 365 Sales

    Professional · €56.30 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓?✓

  • folk

    Standard · €22 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✕

  • GetResponse Email Marketing

    Marketer · €44.28 / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices