ClickUp Brain
ClickUp Brain (ClickUp AI)
Provider: Mango Technologies, Inc. · Based in: Mango Technologies, Inc. DBA ClickUp, 350 Tenth Ave, 5th floor, San Diego, CA 9… · Provider website
- Plans
- 3
- Sources
- 8
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 5 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- not publicly documented: Free Forever, Core / BusinessEU option: MAX / Enterprise
- Training on inputs
- no: all 3 plans
- DPA
- yes: all 3 plans
- Provider
- Mango Technologies, Inc. (ClickUp)
- Based in
- Mango Technologies, Inc. DBA ClickUp, 350 Tenth Ave, 5th floor, San Diego, CA 92101, USA (q3)
Values from 3 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare ClickUp Brain
Compare with another toolCompared plan by plan with other tools in the category Office & collaboration:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | Free ForeverCompare ClickUp Brain Free Forever with another tool | Core / BusinessCompare ClickUp Brain Core / Business with another tool | MAX / EnterpriseCompare ClickUp Brain MAX / Enterprise with another tool |
|---|---|---|---|
| differs by plan | 0 USD | several tiers | Pricing page as displayed in the browser… |
| Details: Price | USD 0 (pricing page: Free Forever “Free”; also USD 0 in the hidden variant 'pricing-2026') | Pricing page as displayed in the browser on 2026-10-18: Unlimited USD 7, Business USD 12 per user per month with annual billing, USD 10 and USD 19 respectively with monthly billing; AI add-on Brain AI USD 9, Everything AI USD 28 per user per month; additional credits USD 10 per 10,000 credits. Hidden variant 'pricing-2026' in the page source: Core USD 9, Business USD 17 with annual billing (USD 12 and USD 25 regular price), AI included. No indication whether VAT is included. | Pricing page as displayed in the browser on 2026-10-18: Enterprise individual (“Contact sales”), AI add-ons as above; MAX only in the hidden variant 'pricing-2026': USD 100 per user per month with annual billing (USD 120 regular price). No indication whether VAT is included. |
| yes | yes | yes | |
| Details: AI features included | yes (pricing page as displayed in the browser: Free Forever with 'Trial access to advanced AI features'; hidden page variant 'pricing-2026': ClickUp Brain² Trial with 500 credits per workspace) | yes (pricing page as displayed in the browser: AI as an add-on, 'Brain AI' with 1,500 AI Super Credits or 'Everything AI' with 5,000 AI Super Credits per user per month; hidden page variant 'pricing-2026': ClickUp Brain² included in the plan, Core 1,000, Business 1,500 credits per user per month, pooled) | yes (pricing page as displayed in the browser: Enterprise, AI via the add-ons Brain AI/Everything AI; hidden page variant 'pricing-2026': Enterprise 'ClickUp Brain² Scaled' with 3,000, MAX 'ClickUp Brain² MAX' with 10,000 credits per user per month, pooled) |
| yes | yes | yes | |
| Details: DPA | yes (Data Protection Addendum at clickup.com/terms/dpa, applies to customers with Terms of Use or SaaS Services Agreement, no plan restriction; contains EU SCCs Module Two and Three, UK Addendum and Swiss adaptations as Annex 3) Provider’s DPA | yes (Data Protection Addendum at clickup.com/terms/dpa, applies to customers with Terms of Use or SaaS Services Agreement, no plan restriction; contains EU SCCs Module Two and Three, UK Addendum and Swiss adaptations as Annex 3) Provider’s DPA | yes (Data Processing Addendum) Provider’s DPA |
| no | no | no | |
| Details: Training on inputs | Help centre FAQ (q8): 'ClickUp AI is not trained on data from your Workspace.'; contracts with AI providers prohibit training and retention ('prohibit ClickUp customer data from being used to train any AI model or from being retained by that model after processing'); zero data retention agreements with all LLM providers. Brain page: 'We forbid third-party AI providers from training on your data'. According to the FAQ, engineers only see traces when a user rates an AI response negatively (thumbs down). | Help centre FAQ (q8): 'ClickUp AI is not trained on data from your Workspace.'; contracts with AI providers prohibit training and retention ('prohibit ClickUp customer data from being used to train any AI model or from being retained by that model after processing'); zero data retention agreements with all LLM providers. Brain page: 'We forbid third-party AI providers from training on your data'. According to the FAQ, engineers only see traces when a user rates an AI response negatively (thumbs down). | Help centre FAQ (q8): 'ClickUp AI is not trained on data from your Workspace.'; contracts with AI providers prohibit training and retention ('prohibit ClickUp customer data from being used to train any AI model or from being retained by that model after processing'); zero data retention agreements with all LLM providers. Brain page: 'We forbid third-party AI providers from training on your data'. According to the FAQ, engineers only see traces when a user rates an AI response negatively (thumbs down). |
| differs by plan | DPA: deletion after the end of the… | DPA: deletion after the end of the… | as above |
| Details: Data retention | DPA: deletion after the end of the contract 'as soon as reasonably practicable'; 30-day export period after termination, deletion within 30 days of a customer request. Help centre FAQ: zero data retention agreements with all LLM providers, data at partners 'deleted from their systems as soon as possible'. Privacy policy: storage 'as long as reasonably required'. | DPA: deletion after the end of the contract 'as soon as reasonably practicable'; 30-day export period after termination, deletion within 30 days of a customer request. Help centre FAQ: zero data retention agreements with all LLM providers, data at partners 'deleted from their systems as soon as possible'. Privacy policy: storage 'as long as reasonably required'. | as above (DPA) |
| differs by plan | not publicly documented | not publicly documented | EU option |
| Details: Hosting | Security page: ClickUp is hosted entirely on Amazon Web Services; sub-processor list: AWS locations USA, Ireland, Germany, Australia, Singapore (without stating which region applies without data residency). Pricing page: data residency in the Enterprise plan only. DPA 8.1: processing “anywhere ClickUp or its Subprocessors maintains facilities”. AI processing: according to the help centre FAQ not in the EU even with EU hosting ('No. OpenAI, the subprocessor for ClickUp AI integrated with Chat-GPT, is located in the US.'); AI sub-processors according to the list (as of 2026-09-28) in the USA, Kling 3.0 and Seedance 2.0 in China. | Security page: ClickUp is hosted entirely on Amazon Web Services; sub-processor list: AWS locations USA, Ireland, Germany, Australia, Singapore (without stating which region applies without data residency). Pricing page: data residency not included in Unlimited/Core and Business (Enterprise or MAX only). DPA 8.1: processing “anywhere ClickUp or its Subprocessors maintains facilities”. AI processing: according to the help centre FAQ not in the EU even with EU hosting ('No. OpenAI, the subprocessor for ClickUp AI integrated with Chat-GPT, is located in the US.'); AI sub-processors according to the list (as of 2026-09-28) in the USA, Kling 3.0 and Seedance 2.0 in China. | Security page: Enterprise customers can host core workspace data at no extra cost in US, EU (AWS Ireland) or APAC data centres (Australia, Singapore). Pricing page: data residency included in the Enterprise plan. AI processing: according to the help centre FAQ not in the EU even with EU hosting ('No. OpenAI, the subprocessor for ClickUp AI integrated with Chat-GPT, is located in the US.'); AI sub-processors according to the list (as of 2026-09-28) in the USA, Kling 3.0 and Seedance 2.0 in China. |
| list available | list available | list available | |
| Details: Sub-processors |
|
|
|
| differs by plan | 8 sources | 8 sources | 5 sources |
| Details: Sources with retrieval date |
|
|
|
Compare ClickUp Brain Free Forever with another tool
Price and scope
- differs by plan
- 0 USD
USD 0 (pricing page: Free Forever “Free”; also USD 0 in the hidden variant 'pricing-2026')
- yes
yes (pricing page as displayed in the browser: Free Forever with 'Trial access to advanced AI features'; hidden page variant 'pricing-2026': ClickUp Brain² Trial with 500 credits per workspace)
Contract and data use
- yes
yes (Data Protection Addendum at clickup.com/terms/dpa, applies to customers with Terms of Use or SaaS Services Agreement, no plan restriction; contains EU SCCs Module Two and Three, UK Addendum and Swiss adaptations as Annex 3)
Provider’s DPA- no
Help centre FAQ (q8): 'ClickUp AI is not trained on data from your Workspace.'; contracts with AI providers prohibit training and retention ('prohibit ClickUp customer data from being used to train any AI model or from being retained by that model after processing'); zero data retention agreements with all LLM providers. Brain page: 'We forbid third-party AI providers from training on your data'. According to the FAQ, engineers only see traces when a user rates an AI response negatively (thumbs down).
- differs by plan
- DPA: deletion after the end of the…
- DPA: deletion after the end of the contract 'as soon as reasonably practicable'; 30-day export period after termination, deletion within 30 days of a customer request. Help centre FAQ: zero data retention agreements with all LLM providers, data at partners 'deleted from their systems as soon as possible'. Privacy policy: storage 'as long as reasonably required'.
Hosting and sharing
- differs by plan
- not publicly documented
Security page: ClickUp is hosted entirely on Amazon Web Services; sub-processor list: AWS locations USA, Ireland, Germany, Australia, Singapore (without stating which region applies without data residency). Pricing page: data residency in the Enterprise plan only. DPA 8.1: processing “anywhere ClickUp or its Subprocessors maintains facilities”. AI processing: according to the help centre FAQ not in the EU even with EU hosting ('No. OpenAI, the subprocessor for ClickUp AI integrated with Chat-GPT, is located in the US.'); AI sub-processors according to the list (as of 2026-09-28) in the USA, Kling 3.0 and Seedance 2.0 in China.
- list available
- Amazon Web Services (infrastructure; USA, Ireland, Germany, Australia, Singapore)
- OpenAI (AI functionality; USA)
- Anthropic (AI functionality; USA)
- Google Firebase, Google Analytics, Google Gemini (including AI functionality; USA)
- Microsoft Azure AI Foundry (AI functionality; USA)
- AssemblyAI, Baseten, Brave, Browserbase, Memori Labs, Vercel (AI functionality; each USA)
- Foundry Labs, Inc / E2B (AI functionality: code interpreter; USA)
- Kling 3.0 (Gen AI; China)
- Seedance 2.0 (Gen AI; China)
- Daily (audio/video, transcription, recording; USA); Recall (transcription; USA)
- further platform, support and service sub-processors (including Amplitude, Datadog, Snowflake, Stripe, Twilio, Zendesk, Salesforce, Maven AGI, Replit), all USA; full list at q7
Evidence
- differs by plan
- 8 sources
- PricingPricing page, retrieved 18 Oct 2026
- ClickUp BrainProvider product page, retrieved 18 Oct 2026
- Privacy Policy (Effective 2026-06-02)Privacy notice, retrieved 18 Oct 2026
- ClickUp AI Terms (Last updated 2025-07-11)Terms and conditions, retrieved 18 Oct 2026
- Data Processing AddendumDPA, retrieved 18 Oct 2026
- SecurityTrust Center, retrieved 18 Oct 2026
- List of Sub-processors (Last updated September 28, 2026)Sub-processor list, retrieved 18 Oct 2026
- ClickUp AI models, privacy, and security FAQHelp centre, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy policy (as of 2026-06-02): data may be transferred and processed outside the country of residence, including in the USA, in accordance with the DPA. DPA with EU SCCs (Module Two and Three), UK Addendum and Swiss adaptations (Annex 3). Sub-processor list (as of 2026-09-28): almost all sub-processors in the USA, the Gen AI sub-processors Kling 3.0 and Seedance 2.0 in China; according to the help centre FAQ, AI processing takes place in the USA even with EU hosting. EU-US Data Privacy Framework: not mentioned in the privacy policy or the DPA.
- Privacy Policy (Effective 2026-06-02) (Privacy notice), retrieved 18 Oct 2026
- Data Processing Addendum (DPA), retrieved 18 Oct 2026
- List of Sub-processors (Last updated September 28, 2026) (Sub-processor list), retrieved 18 Oct 2026
- ClickUp AI models, privacy, and security FAQ (Help centre), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Security page: SOC 1 Type 2, SOC 2 Type 2 and SOC 3; ISO/IEC 27001:2022, 27017:2015, 27018:2019, 27701:2019 and ISO/IEC 42001 (AI management system); PCI compliance; the Brain page additionally mentions HIPAA compliance (self-declaration). Help centre FAQ: ISO certificates on request via sales@clickup.com; reports not reviewed.
- ClickUp Brain (Provider product page), retrieved 18 Oct 2026
- Security (Trust Center), retrieved 18 Oct 2026
- ClickUp AI models, privacy, and security FAQ (Help centre), retrieved 18 Oct 2026
AI Act
Functions: ClickUp Brain (assistant, @Brain agent, AI chat with Claude/ChatGPT/Gemini, enterprise search), Super Agents, Ambient Agents, Notetaker, AI fields, AI automations (Brain page, pricing page).
Provider’s statement: not publicly documented(the EU AI Act is not mentioned on the Brain, Security or pricing pages, nor in the AI Terms, DPA, privacy policy or the help centre's AI privacy FAQ). AI Terms (2025-07-11): output may contain errors; the user reviews it; notes on use in the healthcare sector (not a medical device). FAQ: answers include sources; bias mitigation lies with the underlying model provider.
Classification (for review, not legal advice): For review: the customer is typically a deployer (Art. 3 No. 4 AI Act). The models come from third-party providers; ClickUp's own AI Act role is not documented. The classification depends on the use case (e.g. HR or assessment workflows; check Annex III). Not legal advice.
- ClickUp Brain (Provider product page), retrieved 18 Oct 2026
- ClickUp AI Terms (Last updated 2025-07-11) (Terms and conditions), retrieved 18 Oct 2026
- ClickUp AI models, privacy, and security FAQ (Help centre), retrieved 18 Oct 2026
Current notes 2026
Privacy policy last updated 2026-06-02, AI Terms 2025-07-11, sub-processor list 2026-09-28 (at clickup.com/terms/dpa/subprocessors; the former address clickup.com/terms/subprocessors leads to an error page). The pricing page contains two versions: displayed are Unlimited/Business/Enterprise with AI add-ons (Brain AI USD 9, Everything AI USD 28); hidden in the page source is the variant 'pricing-2026' with Core/Business/Enterprise/MAX and ClickUp Brain² included; the Brain page (FAQ) also refers to the add-on model. Two Gen AI sub-processors (Kling 3.0, Seedance 2.0) located in China.
Open points of the review
- The pricing page delivers two versions (displayed: Unlimited/Business/Enterprise with AI add-ons; hidden: 'pricing-2026' with Core/Business/MAX and AI included); which version applies to new customers is not documented. The billing interval of the add-on prices (USD 9/USD 28) remains unchanged when toggling and is ambiguous.
- Hosting region for plans without data residency not documented (sub-processor list names AWS in the USA, Ireland, Germany, Australia, Singapore without assignment).
- Which features use the Gen AI sub-processors in China (Kling 3.0, Seedance 2.0) and whether customer data are transferred to them is not documented.
- DPA without version or date; ISO/SOC reports not public (ISO certificates via sales@clickup.com according to the FAQ), not reviewed.
- AI Act statement by the provider not found on the pages checked.
Frequently asked questions
Where does ClickUp Brain store data?
not publicly documented (plans: Free Forever, Core / Business); EU hosting selectable (plans: MAX / Enterprise). Based on our research, as of 18 Oct 2026.
Is there a DPA for ClickUp Brain?
yes in: Free Forever, Core / Business, MAX / Enterprise. According to the provider, as of 18 Oct 2026.
Does ClickUp Brain use inputs for AI training?
no in: Free Forever, Core / Business, MAX / Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
Mango Technologies, Inc. DBA ClickUp, 350 Tenth Ave, 5th floor, San Diego, CA 92101, USA. According to the provider, as of 18 Oct 2026.
All sources
- 01PricingPricing page · retrieved 18 Oct 2026
- 02ClickUp BrainProvider product page · retrieved 18 Oct 2026
- 03Privacy Policy (Effective 2026-06-02)Privacy notice · retrieved 18 Oct 2026
- 04ClickUp AI Terms (Last updated 2025-07-11)Terms and conditions · retrieved 18 Oct 2026
- 05Data Processing AddendumDPA · retrieved 18 Oct 2026
- 06SecurityTrust Center · retrieved 18 Oct 2026
- 07List of Sub-processors (Last updated September 28, 2026)Sub-processor list · retrieved 18 Oct 2026
- 08ClickUp AI models, privacy, and security FAQHelp centre · retrieved 18 Oct 2026
More tools in Office & collaboration with an EU hosting option (in at least one plan)
- Asana AI · Based in: Asana, Inc., 633 Folsom Street, Suite 100, San Francisco, CA 94107-3600, USA
- Atlassian Rovo · Based in: Atlassian Pty Ltd
- Microsoft 365 Copilot · Based in: According to the Microsoft Privacy Statement
- Miro AI · Based in: RealtimeBoard, Inc. dba Miro, 315 Montgomery St Suite 900, San Francisco, CA 94104, USA
All tools in Office & collaboration · Tools with an EU hosting option
Further reading
All tools in the category: Office & collaboration. ClickUp Brain has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.