Writing & translation

Copy.ai

Provider: CopyAI, Inc. · Based in: CopyAI, Inc., 1661 International Drive, Memphis, TN 38120, USA · Provider website

Plans
4
Sources
7
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 5 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
mixed: all 4 plans
Training on inputs
no: all 4 plans
DPA
not publicly documented: all 4 plans
Provider
CopyAI, Inc.
Based in
CopyAI, Inc., 1661 International Drive, Memphis, TN 38120, USA; EU representative: GDPRLocal (contact@gdprlocal.com) (q3)

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compared plan by plan with other tools in the category Writing & translation:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
29 USD/mo… (further prices in the details)
yes

Contract and data use

not publicly documented
no
Privacy notice: retention depending on…

Hosting and sharing

mixed
list available

Evidence

6 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

Privacy notice (as of 2023-11-27): CopyAI, Inc. is based in the USA; data may be transferred to the USA, Brazil, Costa Rica, the Philippines and Canada. For transfers from the EU/EEA, the UK and Switzerland, Copy.ai names the EU-US Data Privacy Framework (incl. UK Extension and Swiss-US DPF) and standard contractual clauses. According to the official DPF list, however, CopyAI, Inc. is an 'Inactive Participant' (all three frameworks 'Inactive - Lapse', original certification 2024-01-02, inactive since 2026-02-07); according to the list, there is therefore currently no active DPF certification. Storage and processing in the USA and EU. Transfer mechanism per service provider: not publicly documented.

Sources:

Certifications (as stated by the provider)

Security page: Copy.ai offers a SOC 2 report for download or on request and refers to independent attestations without stating the type or audit period. ISO 27001: not publicly documented. The Trust Center (trust.copy.ai) shows only a 'Request access' form without access; contents cannot be viewed.

Sources:

AI Act

Functions: Generative text features (chat, workflows, agents, Brand Voice, tables, translation and localisation) with models from OpenAI, Anthropic and Gemini according to the pricing page.

Provider’s statement: not publicly documented(no mention of the EU AI Act found on the pricing page, security page, privacy notice, Terms or in the help centre).

Classification (for review, not legal advice): For review: the customer is typically a deployer (Art. 3 No. 4 AI Act); for AI-generated, published texts, check transparency obligations under Art. 50. Not legal advice.

Sources:

Current notes 2026

The privacy notice (2023-11-27) and Terms (2023-10-12) still bear these dates when retrieved on 2026-10-18; newer versions were not found. The pricing page shows the footer '© 2025'. The help centre redirects to support.fullcast.com/copy-ai ('© 2026 Fullcast, Inc.'), and the support address on the security page is a fullcast.com address; the legal texts do not describe the corporate relationship. According to its own statement, the privacy notice does not apply to content processed on behalf of business customers.

Open points of the review

  • No public DPA and no sub-processor list found on copy.ai, on the security page or in the help centre.
  • Trust Center can be viewed only upon an access request; SOC 2 type and audit period not publicly stated.
  • Terms (as of 2023-10-12) 7(b): the licence to user content, including for improving the services, neither excludes nor includes model training; the commitment on training appears only on the security page.
  • Whether the hosting region can be chosen is not described in the privacy notice, security page or help centre.
  • No AI Act statement by the provider found.

Frequently asked questions

Where does Copy.ai store data?

mixed (plans: Chat, Growth, Expansion / Scale, Enterprise). According to the provider, as of 18 Oct 2026.

Is there a DPA for Copy.ai?

not publicly documented in: Chat, Growth, Expansion / Scale, Enterprise. Based on our research, as of 18 Oct 2026.

Does Copy.ai use inputs for AI training?

no in: Chat, Growth, Expansion / Scale, Enterprise. According to the provider, as of 18 Oct 2026.

Where is the provider based?

CopyAI, Inc., 1661 International Drive, Memphis, TN 38120, USA; EU representative: GDPRLocal (contact@gdprlocal.com). According to the provider, as of 18 Oct 2026.

All sources

  1. 01Copy.ai pricingPricing page · retrieved 18 Oct 2026
  2. 02Security & TrustSecurity page · retrieved 18 Oct 2026
  3. 03Privacy Notice (Last Updated November 27, 2023)Privacy notice · retrieved 18 Oct 2026
  4. 04Terms of Service (Last Updated October 12th 2023)Terms and conditions · retrieved 18 Oct 2026
  5. 05Copy.ai Trust CenterTrust Center · retrieved 18 Oct 2026
  6. 06Data Privacy Framework List – CopyAI, Inc. (Inactive Participant)Official register · retrieved 18 Oct 2026
  7. 07copy.ai Knowledge BaseHelp centre · retrieved 18 Oct 2026

More tools in Writing & translation with an EU hosting option (in at least one plan)

  • DeepL · Based in: Maarweg 165, 50825 Köln, Germany
  • Google Translate · Based in: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

All tools in Writing & translation · Tools with an EU hosting option

Further reading

All tools in the category: Writing & translation. Figures across all tools: Data report.