Directory › AI agent builder › Stack AI
Is Stack AI UK GDPR compliant?
In plain English
Stack AI is an enterprise agent builder with SOC 2 Type II and ISO 27001. It offers multi-tenant, dedicated, bring-your-own-cloud and on-premises deployment, and DPAs are available. It advertises 'custom data residency' but names no UK or EU region, so check this in contract.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | Not published 'Custom Data Residency' is advertised for multi-tenant and dedicated cloud, but no UK or EU region is named. | www.stackai.com/platform/deployments |
| DPA and UK GDPR transfer terms | DPA, UK not explicit DPAs are offered across deployment models. No public DPA text was found to confirm UK wording. | www.stackai.com/platform/deployments |
| SOC 2 | Yes SOC 2 Type II. | www.stackai.com/security |
| ISO 27001 | Yes ISO 27001. | www.stackai.com/security |
| Self-hostable | Yes Private cloud (BYOC) and on-premise deployment. | www.stackai.com/platform/deployments |
| Sub-processor list | Not published No public sub-processor list found. | www.stackai.com/security |
| AI model providers | Not published Third-party model providers are referred to but not named publicly. | www.stackai.com/privacy |
| Customer data used for training? | No 'Stack AI is committed to protecting your data and does not use it to train Artificial Intelligence models.' | www.stackai.com/privacy |
Questions UK buyers ask
Is Stack AI UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Stack AI does not publish a UK or EU hosting region; its DPA status is "DPA, UK not explicit"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 57/100 (Mixed).
Does Stack AI store data in the UK?
'Custom Data Residency' is advertised for multi-tenant and dedicated cloud, but no UK or EU region is named.
Does Stack AI use my data to train AI models?
'Stack AI is committed to protecting your data and does not use it to train Artificial Intelligence models.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.