Directory › Enterprise AI assistant › Glean
Is Glean UK GDPR compliant?
In plain English
Glean is an enterprise AI search and agent platform. Its Glean-hosted tenants default to the US but can be placed in other regions, including UK (London) at a higher price. It holds SOC 2 Type II, ISO 27001 and ISO 42001, its DPA includes the UK Addendum, and it has zero LLM data retention with no training on enterprise data.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | UK region available Default region is us-central1; customers can ask for another region. UK (London, europe-west2) is a supported 'non-preferred' region, and Glean-hosted subscriptions there cost more. | docs.glean.com/get-started/prepare/self-hosted-deployment/gc… |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA DPA applies the UK Addendum to the SCCs for transfers of Customer Personal Data from the UK. | www.glean.com/legal/dpa |
| SOC 2 | Yes SOC 2 Type II. | www.glean.com/platform/security |
| ISO 27001 | Yes Certified to ISO/IEC 27001; also ISO 42001. | www.glean.com/legal |
| Self-hostable | Partly 'Customer Hosted' runs Glean in your own GCP or AWS account, but Glean still operates it as a managed service. It is 'not a traditional self-hosted model'. | docs.glean.com/get-started/prepare/about-deployment |
| Sub-processor list | Public Public list (updated 28 July 2026); all US-located, with cloud location selectable. View list | www.glean.com/legal/subprocessors |
| AI model providers | AWS, Google, Microsoft, Anthropic, OpenAI, Baseten, Fireworks, Groq, Modal, Snowflake Listed as LLM providers. | www.glean.com/legal/subprocessors |
| Customer data used for training? | No 'Zero LLM data retention: no training of LLMs on enterprise data.' | docs.glean.com/administration/protect/overview |
Questions UK buyers ask
Is Glean UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Glean offers UK data residency; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 95/100 (Strong).
Does Glean store data in the UK?
Default region is us-central1; customers can ask for another region. UK (London, europe-west2) is a supported 'non-preferred' region, and Glean-hosted subscriptions there cost more.
Does Glean use my data to train AI models?
'Zero LLM data retention: no training of LLMs on enterprise data.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.