Directory › AI agent builder › Bardeen
Is Bardeen UK GDPR compliant?
In plain English
Bardeen is a browser-based AI automation tool. Much of its data stays in your local browser, but cloud runs and personal data may be processed anywhere, including the US. It has had SOC 2 Type 2 since April 2024 and won't train generalised AI models on your data, but we found no public DPA or sub-processor list.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | Not published Privacy policy: data may be transferred, processed and stored anywhere in the world, including the United States. No EU or UK region published. | www.bardeen.ai/privacy-policy |
| DPA and UK GDPR transfer terms | Not published No public DPA found. | www.bardeen.ai/security |
| SOC 2 | Yes SOC 2 Type 2 compliant as of 1 April 2024. | www.bardeen.ai/security |
| ISO 27001 | Not published No ISO 27001 claim found. | www.bardeen.ai/security |
| Self-hostable | Not published No self-hosted option. The browser extension keeps much data in local browser storage. | www.bardeen.ai/security |
| Sub-processor list | Not published No public sub-processor list found. | www.bardeen.ai/security |
| AI model providers | Not published AI model providers not named publicly. | www.bardeen.ai/security |
| Customer data used for training? | No 'This data will not be used for training of any generalized AI models, internal or external.' | www.bardeen.ai/privacy-policy |
Questions UK buyers ask
Is Bardeen UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Bardeen does not publish a UK or EU hosting region; its DPA status is "Not published"; SOC 2: Yes; ISO 27001: Not published. AgentSafe UK readiness score: 25/100 (Limited).
Does Bardeen store data in the UK?
Privacy policy: data may be transferred, processed and stored anywhere in the world, including the United States. No EU or UK region published.
Does Bardeen use my data to train AI models?
'This data will not be used for training of any generalized AI models, internal or external.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.