Directory › Agent framework and platform › CrewAI (AMP platform)
Is CrewAI (AMP platform) UK GDPR compliant?
In plain English
CrewAI's managed platform (AMP) has SOC 2 Type 2 and a public sub-processor PDF showing AWS in the US. However, its Terms of Use let CrewAI use Customer Data to improve its products, 'including by training and developing models'. We found no public DPA or EU/UK hosting option.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | Not published No EU or UK region published. The trust centre lists Amazon Web Services (US) as its cloud provider. | trust.crewai.com/ |
| DPA and UK GDPR transfer terms | Not published No public DPA found (crewai.com/dpa returns 404). | www.crewai.com/terms-of-service |
| SOC 2 | Yes SOC 2 Type 2 report (June 2026) listed in the trust centre. | trust.crewai.com/ |
| ISO 27001 | Not published Not listed in the trust centre. | trust.crewai.com/ |
| Self-hostable | Partly The open-source framework runs anywhere. The trust centre references an 'AMP Factory' product alongside AMP Cloud, but we could not confirm its deployment details. | trust.crewai.com/ |
| Sub-processor list | Public 'CrewAI-Subprocessors-2026-09-21.pdf' listed in the trust centre (AMP Cloud and AMP Factory). View list | trust.crewai.com/ |
| AI model providers | Not published Model providers used by the platform itself are not named publicly. | trust.crewai.com/ |
| Customer data used for training? | Yes, permitted Terms of Use s.1.5: CrewAI may use Customer Data to 'improve and develop products and services, including by training and developing models and/or algorithms'. | www.crewai.com/terms-of-service |
Questions UK buyers ask
Is CrewAI (AMP platform) UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, CrewAI (AMP platform) does not publish a UK or EU hosting region; its DPA status is "Not published"; SOC 2: Yes; ISO 27001: Not published. AgentSafe UK readiness score: 20/100 (Limited).
Does CrewAI (AMP platform) store data in the UK?
No EU or UK region published. The trust centre lists Amazon Web Services (US) as its cloud provider.
Does CrewAI (AMP platform) use my data to train AI models?
Terms of Use s.1.5: CrewAI may use Customer Data to 'improve and develop products and services, including by training and developing models and/or algorithms'.
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.