Directory › AI agent builder › Lindy
Is Lindy UK GDPR compliant?
In plain English
Lindy is an AI assistant and agent builder hosted in the United States, with no EU or UK region published. It has SOC 2 Type II and says it never trains on your data, but its data processing terms only reference EU SCCs. We found no mention of UK GDPR or the UK Addendum.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | No UK/EU region Terms: 'the Services are hosted in the United States.' The security page says residency requirements are 'supported' but names no EU or UK region. | www.lindy.ai/terms-of-service |
| DPA and UK GDPR transfer terms | DPA, UK not explicit Data Processing Terms are built into the Terms of Service and reference the EU GDPR and EU SCCs. UK GDPR and the UK Addendum are not mentioned. | www.lindy.ai/terms-of-service |
| SOC 2 | Yes SOC 2 Type II, audited by Johanson Group. | www.lindy.ai/security |
| ISO 27001 | Not published No ISO 27001 claim found. | www.lindy.ai/security |
| Self-hostable | Not published No self-hosted option documented. | www.lindy.ai/security |
| Sub-processor list | Public No standalone list; the privacy policy names vendors by group, which the terms authorise as sub-processors. View list | www.lindy.ai/privacy |
| AI model providers | Anthropic, OpenAI, Perplexity AI, Exa Labs, ElevenLabs, Deepgram Named in the privacy policy under 'AI Model & AI Service Providers'. | www.lindy.ai/privacy |
| Customer data used for training? | No 'We do not use your Contributions to train AI models, and our AI model providers have agreed not to use them to train their models.' | www.lindy.ai/terms-of-service |
Questions UK buyers ask
Is Lindy UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Lindy does not offer UK or EU data residency on its hosted service; its DPA status is "DPA, UK not explicit"; SOC 2: Yes; ISO 27001: Not published. AgentSafe UK readiness score: 42/100 (Mixed).
Does Lindy store data in the UK?
Terms: 'the Services are hosted in the United States.' The security page says residency requirements are 'supported' but names no EU or UK region.
Does Lindy use my data to train AI models?
'We do not use your Contributions to train AI models, and our AI model providers have agreed not to use them to train their models.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.