Perplexity Agent
GDPR Compliance
Data Handling
Perplexity’s DPA lists Amazon Web Services cloud infrastructure and third-party LLM providers as subprocessors with location stated as worldwide. No EU-only processing option was found in the API documentation or DPA.
For the Sonar API, Perplexity states a zero data retention policy: it does not retain API prompt/response content and only collects billing metadata such as token counts, model used, timestamps, duration, and API key identification. The DPA also says personal data is deleted or returned within 30 days after termination of services unless law requires longer retention.
Perplexity states that Sonar API customer data is not used to train models or for other purposes beyond processing the immediate request.
Certifications & EU AI Act
Verification
Perplexity’s API documentation is favorable on training and retention for Sonar API: it states zero retention of API content and no training on customer data. However, the public DPA indicates worldwide processing via AWS and third-party LLM providers, so EU-only inference/processing is not documented, and cross-border transfer mechanisms rely on SCCs and the EU-US Data Privacy Framework.