Data

Sonix and the GDPR: AI training, data location and DPA

Advanced: Doesn't train on your data. No EU hosting · no DPA.

Vendor: Sonix, Inc. (San Francisco, CA, USA)Meetings and notesChecked on How we check

Verdict

Is Sonix GDPR compliant?

Advanced

Business

Doesn't train on your data

No EU hosting · no DPA

Price: $50 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Sonix train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No: Sonix says it does not use customer content to train its machine learning or generative AI models.

Vendor's wording: “Sonix does not use your content or Customer Data to train our machine learning or generative AI models.”

Source: sonix.aiContent and Customer DataChecked on

Location

Where does Sonix store your data?

Where data is stored by default

Checked

United States, on Amazon Web Services.

Vendor's wording: “All data is stored at AWS in the USA.”

Source: sonix.aiYour Data is YoursChecked on

EU hosting on this plan

Checked

No EU hosting.

No on Advanced: all data is stored at AWS in the USA; data residency options are offered to Enterprise customers only, and no region is named.

Vendor's wording: “We offer data residency options for Enterprise customers who need to keep data in specific geographic regions.”

Source: sonix.aiFAQ: Where is my data storedChecked on

Contract

Does Sonix sign a data processing agreement?

Data processing agreement (DPA)

Vendor says

No DPA.

Not included on Advanced as listed: Sonix lists a data processing agreement as an Enterprise plan feature only.

Vendor's wording: “Pay by wire or check Data processing agreement (DPA) Business Associate Agreement (BAA)”

Source: sonix.aiEnterprise plan feature listChecked on

Processors

Who else handles Sonix data?

EU–US Data Privacy Framework

Checked

Not listed.

No listing found for search term 'Sonix'

Source: dataprivacyframework.govSearch 'Sonix' returned 'Query returned no results'Checked on

Retention

How long does Sonix keep your data?

How long data is kept

Checked

You can view, export and delete files at any time. Deleting the account destroys media, transcripts and translations; copies stay in backups up to 90 days. Automatic deletion rules are an Enterprise feature.

Vendor's wording: “When you delete your Sonix account, we permanently destroy the media files, transcripts, translations, and other content stored in it.”

Source: sonix.aiData RetentionChecked on

Security

Which certifications and admin controls does Sonix have?

Security certifications

Checked

1 audited: SOC 2 Type II (audited annually, monitored with Drata). HIPAA via Medical Sonix with a BAA on Enterprise; GDPR protocols followed.

Vendor's wording: “SOC 2 Type II certified with continuous security control monitoring. Our controls are independently audited annually to ensure we meet the highest standards for security, availability, and confidentiality.”

Source: sonix.aiSOC 2 Type II CertifiedChecked on

The vendor doesn't say: sub-processors, admin controls, price.

Alternatives

Sonix alternatives that don't train on your data

Other meetings and notes tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • jamie

    Team · €33 / user / mo

    Doesn't train on your dataData in the EU by default · DPA on request

    ✓✓✓✓✓

  • Leexi

    Business · €39 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Noota

    Business · $39 / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • tl;dv

    Business (+1) · €29 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Trint

    Advanced · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices