DeepL

Data-handling profile

Trains on input

Yes, on the consumer tier (enterprise tier excluded)

Retention

Consumer/Free tier: Texts and translations are stored for an undisclosed period to train and improve translation models. Enterprise/Pro tier: Texts are processed in RAM and deleted immediately after the translation is completed; no text is permanently stored.

Data region

European Union (primarily Germany and Finland)

Certifications

ISO 27001SOC 2 Type II

DPA available

Yes

Breach history

No known publicly disclosed data breaches of customer translation data have occurred.

EU AI Act

DeepL's AI translation tools are categorized as general-purpose AI (GPAI) but do not present systemic risks. As a German-headquartered company (DeepL SE), DeepL is subject to EU jurisdiction and maintains high compliance with European standards, aligning well with the EU AI Act's transparency and copyright compliance provisions.

Sources

• https://www.deepl.com/en/privacy
• https://www.deepl.com/en/pro-data-security
• https://www.deepl.com/en/pro-license
• https://www.deepl.com/en/trust-center

Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.

Change history

No material changes recorded since monitoring began.