Writing & translation

DeepL

DeepL (Free / Pro Individual, Team, Business, Enterprise / API Free, API Pro)

Provider: DeepL SE · Based in: Maarweg 165, 50825 Köln, Germany · Provider website

Plans
7
Sources
10
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 5 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
not publicly documented: Free, API Free, Pro – Individual, Pro – Teammixed: Pro – Business, API ProEU option: Pro – Enterprise
Training on inputs
yes: Freenot publicly documented: API Freeno: Pro – Individual, Pro – Team, Pro – Business, Pro – Enterprise, API Pro
DPA
no: Free, API Freeyes: Pro – Individual, Pro – Team, Pro – Business, Pro – Enterprise, API Pro
Provider
DeepL SE
Based in
Maarweg 165, 50825 Köln, Germany (q2)

Values from 7 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compared plan by plan with other tools in the category Writing & translation:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
0 EUR
yes

Contract and data use

differs by plan
no
differs by plan
yes
differs by plan
not publicly documented

Hosting and sharing

differs by plan
not publicly documented
list available

Evidence

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

DeepL SE is based in Cologne (q2); subsidiaries include DeepL UK Ltd, DeepL NL B.V., DeepL PL, DeepL US Inc. (Delaware), DeepL Japan GK (q1). According to the Trust Center document, customer content for Business/Enterprise is by default processed via the AWS regions EU, US and JP; Data Residency add-on for EU, US or JP (q5). Regional API endpoints: EU (default), US, JP (q6). Trust Center document "Infrastructure Update" (q5, published 2026-02-06): "For any instances where data is processed outside the European Economic Area (EEA), we have implemented Standard Contractual Clauses (SCCs)." The Trust Center FAQ (q5), by contrast, states: "The translation is done within the EEA, i.e. there is no data transfer to a third country by DeepL SE." The DPA, the "International Transfer Clauses" and the "Transfer Impact Assessments" can only be viewed in the Trust Center after an access request (q5, q9).

Certifications (as stated by the provider)

According to the pricing page, ISO 27001 and SOC 2 Type II (q3). Data protection page: SOC 2 Type II, regular penetration tests (q4). Trust Center: announcements 'DeepL Achieves C5 Type 2 Attestation and Renews SOC 2 Type 2 Report' and 'DeepL Agent Achieves ISO 27001 Certification' (announcements of 2025-08-20 and 2026-02-03 respectively; ISO 27001:2022; q5). Under Compliance, the Trust Center lists C5, GDPR, HIPAA, ISO/IEC 27001:2022 and SOC 2 Type 2; the reports can only be viewed after an access request (q5). The scope per plan is not stated.

AI Act

Functions: Machine translation (text, documents), text improvement (DeepL Write), real-time speech translation (DeepL Voice), glossaries, Style Rules, MCP integration and API (q2, q8).

Provider’s statement: Terms and conditions 8.1.2: 'The Services are not intended for high-risk use as set out in Article 6 of the EU AI Act'; the customer is itself responsible for checking whether its use counts as high-risk use (q2). The developer documentation repeats this (q7). Terms and conditions 8.1.1 prohibit, among other things, the use of synthetic outputs as deepfakes and to deceive as to the speaker's identity (q2).

Classification (for review, not legal advice): To be reviewed: customer typically a deployer (Art. 3(4) EU AI Act); DeepL contractually excludes high-risk use (Art. 6). Check Art. 50 when publishing AI-translated or AI-improved text or synthetic speech. Not legal advice.

Sources:

Current notes 2026

According to the Trust Center document 'Infrastructure Update: DeepL's Enhanced Cloud Platform' (q5), DeepL is bringing AWS into data processing; 'Beginning January 1, 2026, new contracts and renewals will reflect our updated infrastructure terms'. Proprietary data centres (Iceland/Sweden) remain in use for research, model training and the Free tier; AWS takes over processing and storage for Business and Enterprise customers. The document names global processing via the AWS regions EU, US, JP as the default, plus a Data Residency add-on that can be booked. A date of 2026-05-20 does not appear in the retrieved sources (the document is dated 2026-02-06 in the Trust Center; on existing customers: "Existing customers will be notified in accordance with their contract terms."); the privacy policy (q1) does not name AWS as a recipient. The pricing page currently lists the plans Individual, Team, Business, Enterprise (q3); the terms and conditions' Service Specification also uses the names Starter, Advanced, Ultimate (q2). The terms and conditions (8.1.2) exclude high-risk use under Art. 6 EU AI Act (q2).

Open points of the review

  • Sub-processor list, full text of the DPA, "International Transfer Clauses" and "Transfer Impact Assessments": only viewable in the Trust Center after an access request ("Get access"); erasure periods, the contractual basis for third-country transfers and sub-processor rules were therefore not checked. Publicly named are only AWS (q5) and ElevenLabs and Microsoft Ireland/AWS EMEA for DeepL Voice (q1).
  • AWS regions for self-service subscriptions (Individual/Team): the Trust Center FAQ only mentions possible processing on AWS servers for self-service subscriptions taken out since 2025-02-13, no regions.
  • Contradictory location statements not resolved: global processing via the AWS regions EU/US/JP as default (q5, "Infrastructure Update"), "European Union (default)" as API endpoint (q6) and the Trust Center FAQ "The translation is done within the EEA" (q5).
  • API Free: hosting and training not expressly documented; the pricing page names "no use of your data for model training" (translated) only from Growth, without expressly addressing the free Developer plan (q10).
  • Retention for the Free version: only "limited period of time", without a period (privacy policy section 3).

Frequently asked questions

Where does DeepL store data?

not publicly documented (plans: Free (Translator / Write, free of charge), API Free, Pro – Individual (terms and conditions: Starter/Advanced/Ultimate), Pro – Team); mixed (plans: Pro – Business, API Pro); EU hosting selectable (plans: Pro – Enterprise). Based on our research, as of 18 Oct 2026.

Is there a DPA for DeepL?

no in: Free (Translator / Write, free of charge), API Free; yes in: Pro – Individual (terms and conditions: Starter/Advanced/Ultimate), Pro – Team, Pro – Business, Pro – Enterprise, API Pro. According to the provider, as of 18 Oct 2026.

Does DeepL use inputs for AI training?

yes in: Free (Translator / Write, free of charge); not publicly documented in: API Free; no in: Pro – Individual (terms and conditions: Starter/Advanced/Ultimate), Pro – Team, Pro – Business, Pro – Enterprise, API Pro. Based on our research, as of 18 Oct 2026.

Where is the provider based?

Maarweg 165, 50825 Köln, Germany. According to the provider, as of 18 Oct 2026.

All sources

More tools in Writing & translation with an EU hosting option (in at least one plan)

  • Google Translate · Based in: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

All tools in Writing & translation · Tools with an EU hosting option

Further reading

All tools in the category: Writing & translation. DeepL has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.