Directory › Workflow automation › Pipedream
Is Pipedream UK GDPR compliant?
In plain English
Pipedream, a developer-focused automation platform now under Workday, runs only in AWS us-east-1 in the United States. Its DPA properly covers the UK Addendum and it holds SOC 2 Type 2, but there's no EU or UK hosting and we found no statement on AI training.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | No UK/EU region Pipedream is hosted on AWS in the us-east-1 region. | pipedream.com/docs/privacy-and-security |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA DPA defines the ICO International Data Transfer Addendum (B1.0) and deems it executed for UK personal data. | pipedream.com/dpa |
| SOC 2 | Yes SOC 2 Type 2 report available on request. | pipedream.com/docs/privacy-and-security |
| ISO 27001 | Not published No ISO 27001 claim found. | pipedream.com/docs/privacy-and-security |
| Self-hostable | Not published No self-hosted edition documented. | pipedream.com/docs/privacy-and-security |
| Sub-processor list | Public Public list, last updated 20 August 2025. View list | pipedream.com/docs/subprocessors |
| AI model providers | Anthropic, OpenAI Listed as AI-service sub-processors. | pipedream.com/docs/subprocessors |
| Customer data used for training? | Not published No statement on model training found on the privacy and security page. | pipedream.com/docs/privacy-and-security |
Questions UK buyers ask
Is Pipedream UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Pipedream does not offer UK or EU data residency on its hosted service; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Not published. AgentSafe UK readiness score: 40/100 (Mixed).
Does Pipedream store data in the UK?
Pipedream is hosted on AWS in the us-east-1 region.
Does Pipedream use my data to train AI models?
No statement on model training found on the privacy and security page.
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.