Directory › Enterprise AI assistant › Langdock
Is Langdock UK GDPR compliant?
In plain English
Langdock is a Berlin-based enterprise AI chat and agent platform. It is hosted on Azure inside the EU as standard, holds ISO 27001 and SOC 2 Type II, and never trains on customer data. Large customers can run it in their own cloud or on-premises.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | EU region (no UK) Multi-tenant SaaS is hosted via Microsoft Azure on servers inside the EU. Processing generally takes place in the EU/EEA, per the DPA. | langdock.com/security |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA Art. 28 GDPR DPA forms part of the Terms. The sub-processor table names 'EU & UK SCCs' and the UK Extension to the DPF as transfer mechanisms. | langdock.com/dpa |
| SOC 2 | Yes SOC 2 Type II audited. | langdock.com/security |
| ISO 27001 | Yes ISO 27001 certified; certificates in the trust centre. | langdock.com/security |
| Self-hostable | Yes Bring-your-own-cloud (Enterprise, 2,000+ seats) and on-premise via Kubernetes/Helm (Enterprise, 5,000+ seats). | langdock.com/security |
| Sub-processor list | Public Sub-processor table published in the DPA. View list | langdock.com/dpa |
| AI model providers | Microsoft Azure (OpenAI models), OpenAI Ireland, Mistral AI, AWS, Google Cloud Per DPA sub-processor table; some Azure inference can occur in other Microsoft data zones, including the US. | langdock.com/dpa |
| Customer data used for training? | No 'Customer data is never used to train or improve AI models.' | langdock.com/security |
Questions UK buyers ask
Is Langdock UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Langdock offers EU (but not UK) data residency; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 90/100 (Strong).
Does Langdock store data in the UK?
Multi-tenant SaaS is hosted via Microsoft Azure on servers inside the EU. Processing generally takes place in the EU/EEA, per the DPA.
Does Langdock use my data to train AI models?
'Customer data is never used to train or improve AI models.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.