WRITER and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No: Writer's terms for trial and paid non-Enterprise plans say it will not use your materials to train its models.

Vendor's wording: “We will not use your Materials to train our models.”

Source: writer.comOur Use of MaterialsChecked on 19 October 2026

DPA on request.

Yes: the Data Processing Agreement applies when you use WRITER for an organisation and is incorporated into the Terms of Use; EU SCCs are deemed signed.

Vendor's wording: “When you are acting on behalf of an organization when accessing our Services, our Data Processing Agreement (“DPA”) applies and is incorporated by reference into these Terms.”

Source: writer.comIntro to Terms of UseChecked on 19 October 2026

Published.

Yes: https://writer.com/legal/subprocessors/ (updated 14 Oct 2026) lists 21 entries (20 companies plus Writer affiliates). AI/model providers: Baseten, OpenRouter, Parasail, Google Cloud, Microsoft Azure, AWS; web search: Exa.ai, Tavily.

Vendor's wording: “Writer and its affiliates engage third-party subprocessors to help us provide services to our customers.”

Source: writer.comSubprocessorsChecked on 19 October 2026

On the list.

Active (Writer, Inc.; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Writer, Inc'Checked on 19 October 2026

No fixed period. Under the DPA, Writer returns or deletes personal data at your written request; the Trust page adds an organisation-wide automated deletion schedule setting, with no plan named for it.

Vendor's wording: “Writer will, at the choice of Customer and upon Customer’s written request return to Customer and/or delete all Personal Data”

Source: writer.comSection 9, Return or Destruction of Personal DataChecked on 20 October 2026

SOC 2 Type II; ISO/IEC 27001, 27701 and 42001 (4 certifications); HIPAA and PCI compliance also named.

Vendor's wording: “We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications”

Source: writer.comSecurity: ISO and SOC 2 Type II certificationsChecked on 19 October 2026