Directory › Workflow automation › Tines
Is Tines UK GDPR compliant?
In plain English
Tines is an Irish-founded workflow and AI-agent platform popular with security and IT teams. Its cloud can be hosted in a customer-selected AWS region, including United Kingdom (London) and Ireland (Dublin), or self-hosted. Its DPA includes the UK Addendum, and its managed AI is stateless with no training.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | UK region available Customer-selected AWS region, typically Tokyo, Sydney, Zurich, Dublin, Stockholm, London or Oregon. | www.tines.com/sub-processors/ |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA DPA defines the ICO's UK Addendum to the SCCs. | www.tines.com/data-processing-addendum-feb-2024/ |
| SOC 2 | Yes Tines says its compliance posture, including SOC 2 and ISO 27001, is published in its trust centre. | www.tines.com/blog/how-tines-supports-eu-data-sovereignty-ac… |
| ISO 27001 | Yes As above; ISO 27001 per the Tines trust centre. | www.tines.com/blog/how-tines-supports-eu-data-sovereignty-ac… |
| Self-hostable | Yes Tines can be deployed within your own infrastructure. | www.tines.com/blog/how-tines-supports-eu-data-sovereignty-ac… |
| Sub-processor list | Public Public list with locations. View list | www.tines.com/sub-processors/ |
| AI model providers | AWS Bedrock, OpenAI Tines' two managed AI providers; Bedrock runs in the customer-selected region. | explained.tines.com/en/articles/14048877-comparing-tines-man… |
| Customer data used for training? | Partly / conditional For managed AI, both providers are stateless with 'No training' of your data. No broader statement on Tines' own use was found. | explained.tines.com/en/articles/14048877-comparing-tines-man… |
Questions UK buyers ask
Is Tines UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Tines offers UK data residency; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 92/100 (Strong).
Does Tines store data in the UK?
Customer-selected AWS region, typically Tokyo, Sydney, Zurich, Dublin, Stockholm, London or Oregon.
Does Tines use my data to train AI models?
For managed AI, both providers are stateless with 'No training' of your data. No broader statement on Tines' own use was found.
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.