Evidence-first authority page
GDPR-Compliant AI Agents: Directory and Verification Standard
A directory of AI agents verified as GDPR-compliant against primary evidence, and the standard a product must meet to be listed here.
Direct answer
This page lists AI agents with a verified GDPR compliance claim backed by a primary source — a data processing agreement, a documented lawful basis for processing, or an equivalent citable control. No agent currently has a verified GDPR-compliance receipt on file, so the directory below is empty.
Last reviewed 2026-08-29
This page remains noindex while its page-level source receipts are completed and verified. It is available for review, not presented as publication-ready authority.
Why 'GDPR-compliant' is a claim about a relationship, not just a product
GDPR compliance depends heavily on how a specific customer uses a product — what personal data of EU individuals it processes, under what lawful basis, and what data processing agreement is in place — not solely on a fixed property of the software. A vendor can offer GDPR-supporting features (a data processing addendum, EU data residency options) without every deployment of their product automatically being 'GDPR compliant' in every configuration.
What a listing here would require
- A published or directly confirmed data processing agreement (DPA) available to customers.
- A stated lawful basis and data-handling documentation specific to how the product processes personal data.
- Where relevant, confirmation of EU data residency or standard contractual clauses for cross-border transfer.
How to verify a vendor's GDPR posture yourself
Request the vendor's DPA directly — most vendors serving EU customers publish one — and confirm it names the specific product you're evaluating, covers your actual data flows, and specifies where data is processed and under what transfer mechanism if it leaves the EU.