VEED and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. VEED's Terms limit its right to train AI on uploaded content to the Free tier and say this does not apply to paid subscriptions such as Business. Enterprise is also excluded.

Vendor's wording: “This does not apply if you have a paid-for subscription (e.g., ‘Basic’, ‘Pro’ or ‘Business’)”

Source: veed.ioBrief summary of these terms (Free-tier training right)Second source: veed.ioChecked on 19 October 2026

European Union: VEED's servers are in the EU, on Google Cloud Platform (West 1). Sub-processors elsewhere are listed separately.

Vendor's wording: “VEED’s servers are located in the EU (we use Google Cloud Platform - West 1).”

Source: veed.ioSecurity FAQs > Where is the data processed?Checked on 19 October 2026

Data in the EU by default.

EU hosting is the default (Google Cloud Platform West 1); no region setting to choose is described. Some sub-processors operate outside the EU.

Vendor's wording: “VEED’s servers are located in the EU (we use Google Cloud Platform - West 1).”

Source: veed.ioSecurity FAQs > Where is the data processed?Checked on 19 October 2026

DPA in the terms.

Yes: the Terms of Use include a Personal Data Processing Agreement (with EU standard contractual clauses) for business clients on paid services, so Business is covered without a separate contract.

Vendor's wording: “willing to enter into terms of sale for business clients for paid services (Master Agreement) that may require the Provider to process Personal Data on behalf of the Customer.”

Source: veed.ioPersonal Data Processing Agreement (Background)Checked on 20 October 2026

UK (EU adequacy).

Not applicable (UK-based vendor, Veed Limited, London)

Vendor's wording: “Full name of legal entity: Veed Limited”

Source: veed.ioContact detailsChecked on 19 October 2026

On termination of the contract, personal data in the service is deleted or destroyed within 60 days (or returned if the customer asks beforehand). No in-service retention period is given.

Vendor's wording: “the Provider will securely delete or destroy within 60 days or, if directed in writing by the Customer before the termination or expiry of the Master Agreement, return and not retain”

Source: veed.ioPersonal Data Processing Agreement 10.2Checked on 19 October 2026