Trint and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No: Trint states it does not use customer data to train or improve its AI models.

Vendor's wording: “Trint does not use customer data to train or improve its AI models.”

Source: trint.comSection 12.1 Artificial intelligenceChecked on 19 October 2026

EU hosting available.

Yes: Trint lets you store data in the EU or the US (separate EU tenant on AWS). The page does not say how to pick it or whether it depends on the plan.

Vendor's wording: “Trint lets you store your data either in the EU or US to stay compliant with clear data retention and destruction policies.”

Source: trint.comControl information flowsChecked on 19 October 2026

DPA on request.

Yes, built into the Terms of Service: clause 8 (Data Protection) and Annex A make Trint a processor for customer content, with sub-processor and transfer terms. No separate signing step is described.

Vendor's wording: “Trint shall process the Customer Personal Data set out in Annex A, as a processor on behalf of the Customer in respect of the processing activities set out in Annex A.”

Source: trint.comClause 8.3 Data protectionChecked on 19 October 2026

Published.

Yes, public in the privacy policy (https://trint.com/docs/platform-privacy-policy): 24 rows (20 companies): 16 global, 5 US-tenant, 3 EU-tenant. Only AI provider named: Anthropic (internal use, basic account data).

Vendor's wording: “Global sub-processors used across both tenants (US and EU)”

Source: trint.comSub-processorsChecked on 19 October 2026

UK (EU adequacy).

Not applicable (UK-based vendor, Trint Limited, London)

Vendor's wording: “Trint Limited is a company incorporated and registered in England and Wales (company number 09225083) with its registered office at C/O Mishcon de Reya, Africa House, 70 Kingsway, London”

Source: trint.comIdentity and contact information of the Data ControllerChecked on 19 October 2026

Data and media are kept for the lifetime of the subscription; secure deletion can be arranged at contract end or once a month on request. After termination Trint has no duty to keep content beyond 30 days.

Vendor's wording: “By default, we store any data or media uploaded to Trint for the lifetime of the subscription. However, secure deletion can be arranged at contract termination or once per month upon request.”

Source: trint.comData retention & destructionChecked on 19 October 2026

2 named: ISO 27001 (ISO 27001:2022 per the support hub) and Cyber Essentials. No SOC 2 is named for Trint itself.

Vendor's wording: “We are ISO 27001 and Cyber Essentials certified, while all data within Trint is encrypted in transit and at rest.”

Source: trint.comYou're in safe handsChecked on 19 October 2026