Directory › Enterprise AI assistant › Writer
Is Writer UK GDPR compliant?
In plain English
Writer is an enterprise generative AI and agent platform built on its own Palmyra models. It holds SOC 2 Type II and ISO 27001, 27701 and 42001, its DPA includes the UK Addendum, and it doesn't train on customer data. Several sub-processors list EU locations, but no EU or UK hosting region is described as a product option.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | Not published Sub-processors such as AWS, Google Cloud and Parasail list 'United States, European Union', but no customer-selectable EU or UK region is published. | writer.com/legal/subprocessors/ |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA DPA defines and uses the UK Addendum issued by the ICO. | writer.com/legal/data-processing/ |
| SOC 2 | Yes Annual SOC 2 Type II. | writer.com/trust/ |
| ISO 27001 | Yes ISO/IEC 27001, 27701 and 42001. | writer.com/trust/ |
| Self-hostable | Not published No self-hosted option confirmed on Writer's own pages. | writer.com/trust/ |
| Sub-processor list | Public Public list (updated 14 Oct 2026). View list | writer.com/legal/subprocessors/ |
| AI model providers | Writer Palmyra (own LLMs); OpenRouter, Baseten and Parasail listed as infrastructure Per the trust page and sub-processor list. | writer.com/legal/subprocessors/ |
| Customer data used for training? | No 'We don't use the data you share with us to create, modify, or train our models.' | writer.com/trust/ |
Questions UK buyers ask
Is Writer UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Writer does not publish a UK or EU hosting region; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 65/100 (Good).
Does Writer store data in the UK?
Sub-processors such as AWS, Google Cloud and Parasail list 'United States, European Union', but no customer-selectable EU or UK region is published.
Does Writer use my data to train AI models?
'We don't use the data you share with us to create, modify, or train our models.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.