Deep Infra
GDPR Compliance
Data Handling
AWS and GCP infrastructure, US-based. No EU region publicly available.
ZDR by default — volatile memory only, deleted post-inference. Exception: image outputs stored briefly; bulk inference API stores encrypted on disk until results are returned. Google/Anthropic passthrough models: those providers' policies apply.
Named DPO: Nikola Borisov (dpo@deepinfra.com). GDPR compliance listed as 'In Progress' on Trust Center as of verification date.
Certifications & EU AI Act
Verification
Headquartered in San Francisco, CA. Has the only public sub-processor list and strongest security certifications (SOC2, ISO27001) of the three US inference providers (DeepInfra, Fireworks, Together), but lacks a public DPA and has GDPR formally marked as 'In Progress'. SCCs not confirmed. Sub-processors are all US-based (Stripe, AWS, GCP).