Copy.ai
low riskAI Writingcopy.aiverified 2026-06-27
Data-handling profile
- Trains on input
- No — does not train on customer inputs
- Retention
- Copy.ai states models are trained without using individual user data; user prompts and creative inputs are not shared across customers; subscription-based revenue model rather than data-monetization model.
- Data region
- US
- Certifications
- SOC 2 Type II
- DPA available
- Yes
- Breach history
- none known
- EU AI Act
- Limited-risk AI writing assistant; primary EU AI Act exposure is transparency labeling of AI-generated marketing copy, not high-risk classification.
Sources
- https://www.copy.ai/security
- https://www.copy.ai/blog/soc-2-annoucement
- https://www.copy.ai/blog/how-automated-workflows-and-soc-2-compliance-protect-your-data
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.