Data

Superhuman Mail and the GDPR: AI training, data location and DPA

Business: Trains on your data unless you switch it off. EU hosting not documented · DPA on request.

Vendor: Superhuman Platform Inc.Writing and emailChecked on How we check

Verdict

Is Superhuman Mail GDPR compliant?

Business

Business

Trains on your data unless you switch it off

EU hosting not documented · DPA on request

Price: $33 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Superhuman Mail train on your data?

Trains on your data by default?

Checked

Trains on your data unless you switch it off.

Yes, unless switched off: the Terms (7.2) license your content to operate and improve the services, including training (their example: the suggestion engine), and the plans page lists model training as 'Opt out' for Business.

Vendor's wording: “your acceptance or rejection of our grammatical suggestions may help train our suggestion engine”

Source: superhuman.comTerms 7.2 License to User Content, (i)Checked on

Switch-off

How do you turn off AI training in Superhuman Mail?

How to switch training off

Vendor says

You can switch the training off.

Switch model training off in your settings: the plans page lists model training as 'Opt out' for Business (it is off by default only on Enterprise). No menu path is published.

Vendor's wording: “Privacy Model training Opt out Opt out Opt out Off by default”

Source: superhuman.comPlan comparison, Privacy row 'Model training'Checked on

Location

Where does Superhuman Mail store your data?

Where data is stored by default

Checked

United States: Superhuman Mail is hosted on Google Cloud Platform, and the platform's infrastructure is located in the US

Source: superhuman.comExhibit B, Section 1 (hosting) and the Superhuman Mail service-specific measuresChecked on

Contract

Does Superhuman Mail sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes. The Superhuman Data Privacy Addendum (effective 8 Jul 2026) is incorporated into the agreements between the customer and Superhuman Platform Inc.

Source: superhuman.comOpening paragraphChecked on

Processors

Who else handles Superhuman Mail data?

Sub-processors (companies that handle the data for them)

Checked

20 listed.

Public, one list for the whole Superhuman Platform: 20 third parties, all in the US (AI: Anthropic, Azure, OpenAI, Baseten; transcription: Deepgram, Soniox), plus 8 group companies; undated

Source: superhuman.comSection 'Third-party Sub-processors'Checked on

Security

Which certifications and admin controls does Superhuman Mail have?

Security certifications

Checked

SOC 2 Type 2, SOC 3, ISO/IEC 27001:2022, 27017:2015, 27018:2019 and 27701:2019 (Superhuman Platform)

Source: grammarly.comCompliance sectionChecked on

The vendor doesn't say: EU hosting, retention, admin controls, price.

Alternatives

Superhuman Mail alternatives that don't train on your data

Other writing and email tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Gmail with Gemini

    Google Workspace Business Standard · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Google Translate in Google Workspace

    Business Standard · €13.60 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • LanguageTool

    Team · €56.90 / user / yr

    Doesn't train on your dataData in the EU by default · DPA on request

    ✓✓✓✓✓

  • Azure Translator

    S1 pay as you go · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓?✓

  • Hunter

    Growth · See details

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✕

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices