Directory › AI agent builder › Flowise
Is Flowise UK GDPR compliant?
In plain English
Flowise is an open-source visual builder for AI agents. Flowise Cloud stores data in AWS US East 1, and we found no Flowise-specific DPA, SOC 2 or ISO certificate. The open-source version can be self-hosted wherever you like, which is the route to UK residency.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | No UK/EU region 'For FlowiseAI Cloud, your data is stored in the US East 1 Region.' | flowiseai.com/privacy |
| DPA and UK GDPR transfer terms | Not published No public Flowise DPA found. The privacy policy mentions SCCs for transfers, and the terms incorporate Workday's online terms by reference. | flowiseai.com/terms |
| SOC 2 | Not published No Flowise-specific SOC 2 claim found. | flowiseai.com/privacy |
| ISO 27001 | Not published No Flowise-specific ISO 27001 claim found. | flowiseai.com/privacy |
| Self-hostable | Yes Open-source and self-hostable. Per the privacy policy, self-hosted data stays in your infrastructure. | flowiseai.com/privacy |
| Sub-processor list | Not published No public sub-processor list found. | flowiseai.com/privacy |
| AI model providers | Customer's choice (bring your own model) Flowise connects to the model providers you configure. | flowiseai.com/privacy |
| Customer data used for training? | Not published No statement on training found in the privacy policy. | flowiseai.com/privacy |
Questions UK buyers ask
Is Flowise UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Flowise does not offer UK or EU data residency on its hosted service; its DPA status is "Not published"; SOC 2: Not published; ISO 27001: Not published. AgentSafe UK readiness score: 10/100 (Limited).
Does Flowise store data in the UK?
'For FlowiseAI Cloud, your data is stored in the US East 1 Region.'
Does Flowise use my data to train AI models?
No statement on training found in the privacy policy.
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.