InferCheck

Vercel AI Gateway

Unverifiedapi providergithub.com

GDPR Compliance

EU-only data residency
Inference stays in EU
No training on customer data
Opt-out available
Standard Contractual Clauses
Adequacy decision (HQ country)
EU + SCCsDPATraining Unknown

Data Handling

Regions
US, EU

Vercel states AI Gateway runs across its distributed infrastructure in multiple AWS regions and routes requests to the nearest Vercel region. Vercel documents per-request Zero Data Retention filtering for certain upstream providers, but no primary-source documentation found guarantees EU-only processing for AI Gateway inference. Vercel's privacy policy also says information may be processed in the United States and other jurisdictions in which it operates.

Retention Policy

AI Gateway documents a zero-data-retention policy: prompts, outputs, and sensitive data are immediately and permanently deleted after requests complete. Separately, Vercel's general privacy policy says personal information is retained for the minimum necessary period to fulfill legal and contractual obligations and other legitimate business purposes, and the DPA says customer data is deleted within a commercially reasonable timeframe after termination or expiration unless retention is required by law.

Additional Details

Vercel's AI Product Terms expressly state that for Enterprise AI Gateway subscriptions, Vercel will not use AI Gateway Customer Content to train or improve the AI Products and Services. I could not find a primary source stating the default training position for non-Enterprise AI Gateway customers specifically, so the training and opt-out fields are null.

Sub-processors
Disclosed ↗(includes EU entities)

Certifications & EU AI Act

Certifications
SOC2ISO27001
EU AI Act Status
monitoring

Vercel's AI Product Terms require customers to comply with applicable AI laws and regulations, and its Acceptable Use Policy references 'high risk' areas under the EU AI Act. No primary-source statement was found claiming formal EU AI Act compliance for AI Gateway itself.

Verification

Last verified2026-04-11
Verified byAI-assisted draft (pending review)
Pricing tierfree tier
Notes

Vercel offers a public DPA, public trust center, public subprocessor disclosure, SCC-based transfer language, and Data Privacy Framework statements, but I found no primary-source guarantee of EU-only inference for AI Gateway. AI Gateway documents zero data retention and Enterprise-only no-training language; for non-Enterprise AI Gateway customers, I could not confirm a provider-specific default training position from primary sources, so those fields are left null.

← Back to all providers