v0 and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No by default. Vercel says v0 users other than Free/Premium users on a Hobby account are opted out of AI training by default, and paid Pro plans have training off unless the team opts in (Team Settings, Data Preferences).

Vendor's wording: “Any other v0 user will be opted out of AI training by default”

Source: vercel.comFAQ, As a v0 only user, what does this change mean for me?Second source: v0.appChecked on 19 October 2026

United States: Vercel says its primary processing facilities are in the US and data can be processed anywhere Vercel or its sub-processors operate. No v0-specific region is named.

Vendor's wording: “Vercel's primary processing facilities are in the United States.”

Source: vercel.comData Processing Addendum, Processing in the United StatesChecked on 19 October 2026

DPA on request.

Yes. Vercel's Terms of Service incorporate its Data Processing Addendum by reference; the DPA text itself says it forms part of the Enterprise terms or another executed agreement, so a signed copy for Business is not described.

Vendor's wording: “in accordance with Vercel's Data Processing Addendum ("DPA"), which is incorporated by reference”

Source: vercel.comTerms, 10.1 Vercel's RoleSecond source: vercel.comChecked on 19 October 2026

On the list.

Active (Vercel Inc.; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Vercel'Checked on 19 October 2026

No fixed period. Vercel keeps information for the minimum necessary period, then deletes or anonymises it. For v0, users can download their chats and ask support to delete v0 outputs; models already trained are not updated.

Vendor's wording: “We retain your information for the minimum necessary period to fulfill our legal and contractual obligations”

Source: vercel.comHow We Retain Your InformationChecked on 19 October 2026

SOC 2 Type 2 is stated to cover v0 (1 certification confirmed). Vercel's compliance page also lists ISO 27001:2022, PCI DSS, HIPAA and TISAX for the Vercel platform; whether v0 is in their scope is not stated.

Vendor's wording: “v0 is included in the scope of Vercel's SOC 2 report.”

Source: v0.appFAQ, Is v0 compliant?Checked on 19 October 2026