TypingMind Teams and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. TypingMind says conversations on its system are never used for training. Prompts sent to the AI provider you connect (OpenAI, Anthropic, Google) follow that provider's own policy.

Vendor's wording: “All of your conversations on the TypingMind system are strictly confidential and never used for training purposes.”

Source: docs.typingmind.comData Usage and Model Training Policy, topChecked on 19 October 2026

EU hosting available.

Yes. When creating a cloud instance you select Europe under Data Center: web server on Vercel and database on AWS, both in the EU. Calls to AI providers may still leave the EU.

Vendor's wording: “you can opt-in to have all of your data hosted in EU data center”

Source: docs.typingmind.comEU Data CenterChecked on 19 October 2026

DPA on request.

Yes. A DPA based on EU standard clauses is published and is signed between the customer and Typing Technology Co. Ltd.; it prevails over other agreements.

Vendor's wording: “is entered into between Typing Technology Co. Ltd. and the undersigned Customer identified in the applicable Appendix I”

Source: docs.typingmind.comOpening paragraph and Clause 4Checked on 19 October 2026

Published.

Yes, in the DPA appendix (https://docs.typingmind.com/security-and-compliance/data-processing-agreement.md): 11 entries (AWS, Render, Vercel, Customer.io, Sentry, Axiom, Stripe, Lemon Squeezy, Paddle, Help Scout, Mailgun). No AI model provider is listed; customers bring their own.

Vendor's wording: “| Amazon AWS | Cloud Hosting & Databases | USA (us-west-1), Germany (eu-central-1) |”

Source: docs.typingmind.comAppendix II list of sub-processorsChecked on 19 October 2026

Not listed.

No listing found for search term 'Typing Technology', 'TypingMind'

Source: dataprivacyframework.govSearch 'Typing Technology', 'TypingMind' returned 'Query returned no results'Checked on 19 October 2026

No fixed period published. Data is kept only as long as needed for its purpose and deleted or anonymised afterwards or on request; on termination the customer chooses deletion or return of all data (DPA). Professional adds chat logs and export.

Vendor's wording: “We store your data only for the period of time needed to realize the purpose for which it was collected.”

Source: docs.typingmind.comSection 6 How We Store and Protect Your DataSecond source: docs.typingmind.comChecked on 19 October 2026

SOC 2 shown as Compliant (report type not stated) and GDPR as Compliant on the trust center: 1 security certification named.

Vendor's wording: “### SOC 2 Compliant ### GDPR Compliant”

Source: trust.typingmind.comCompliancesChecked on 19 October 2026

Partly. On Professional, admins set roles and permissions and per-user limits on which models users can use or see. No setting to switch AI off is documented (the product is a chat front end for models you connect).

Vendor's wording: “Per-user model usage & visibility limits | ❌ | ❌ | ✅”

Source: docs.typingmind.comFull Feature Comparison, User ManagementChecked on 19 October 2026