Wix Business and the GDPR: AI training, data location and DPA

Trains on your data, with no documented way to stop it.

Yes: Wix's Generative AI Policy lists user-generated content (such as images and page layouts) and automatically generated data about site users as sources it trains its own AI and machine-learning models on. No opt-out is described.

Vendor's wording: “in order to provide, maintain and improve our services to our users, including by developing, improving, and training Wix’s software tools, including artificial intelligence and machine learning models.”

Source: support.wix.comData processing and management; Dataset governance tableSecond source: de.wix.comChecked on 19 October 2026

No EU hosting.

No: Wix says it has host servers in multiple locations around the world and it is currently not possible to select or change where your data is stored. The article adds that select custom hosting solutions are offered with Velo by Wix, included in the enterprise solution.

Vendor's wording: “Currently, it is not possible to select or change which host server your data is stored on.”

Source: support.wix.comRequest: Changing Your Host ServerChecked on 19 October 2026

DPA on request.

Yes: the Wix Data Processing Addendum for Users forms part of the Wix Terms of Use and Privacy Policy and applies to data about your site visitors and customers; no signing is described.

Vendor's wording: “This DPA forms part of the Wix Terms of Use, Privacy Policy (the “Privacy Policy”) and any other applicable Wix terms or agreement governing the use of the Services”

Source: wix.comData Processing Addendum - Users, introChecked on 19 October 2026

Published.

Yes: https://support.wix.com/en/article/list-of-wixs-sub-processors, 24 rows (10 Wix group entities, 14 third parties such as AWS, Google Ireland, Snowflake). AI providers sit on a separate page: 14 incl. Anthropic, OpenAI, Google, Meta.

Vendor's wording: “This page lists the sub-processors that Wix works with to process personal data of your site visitors and users”

Source: support.wix.comWix sub-processors; Third-party sub-processors; AI service providersSecond source: support.wix.comChecked on 19 October 2026

On the list, under review.

Active (Wix.com Inc.; EU-US DPF, Swiss-US DPF, UK Extension, re-certification under review)

Source: dataprivacyframework.govSearch 'Wix.com'Checked on 19 October 2026

No fixed period: on termination or on your written request Wix deletes your personal data and your site users' data 'as soon as reasonably practicable'; it may keep data where law requires. AI chat retention not stated.

Vendor's wording: “Upon termination of your use of the Services or your written request submitted through one of the methods detailed in the Privacy Policy, Wix shall delete your Personal Data”

Source: wix.comSection E, Deletion of Users-of-Users InformationSecond source: wix.comChecked on 19 October 2026

5 named: ISO 27001, ISO 27017, ISO 27018, SOC 2 Type 2 and PCI DSS Level 1.

Vendor's wording: “Your business meets the world’s highest website security standards, including ISO 27001, 27017, 27018 and SOC 2 Type 2. The”

Source: wix.comSecurity standardsChecked on 19 October 2026