You.com
You.com (Search, Answer and Research API)
Provider: SuSea, Inc. · Based in: SuSea, Inc., 417 Montgomery Street, Suite 800, San Francisco, CA 94104, USA · Provider website
- Plans
- 3
- Sources
- 9
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 7 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- US only: all 3 plans
- Training on inputs
- no: all 3 plans
- DPA
- not publicly documented: Free, Pay as you goyes: Enterprise
- Provider
- SuSea, Inc. (d/b/a you.com)
- Based in
- SuSea, Inc., 417 Montgomery Street, Suite 800, San Francisco, CA 94104, USA (privacy notice, q2); terms of use: 'based in the United States' (q3)
Values from 3 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare You.com
Compare with another toolCompared plan by plan with other tools in the category AI assistants & search:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | Free (Web Search API via MCP)Compare You.com Free (Web Search API via MCP) with another tool | Enterprise (custom)Compare You.com Enterprise (custom) with another tool | Pay as you go (API)Compare You.com Pay as you go (API) with another tool |
|---|---|---|---|
| differs by plan | free | custom | several tiers |
| Details: Price | Free (pricing page) | Custom (pricing page: 'Custom, Talk to our humans') | Web Search API 5 USD per 1,000 calls; Contents API 1 USD per 1,000 pages; Answer API 5 USD per 1,000 calls; Research API per 1,000 calls: Lite 12 USD, Standard 50 USD, Deep 100 USD, Exhaustive 450 USD, Frontier 1,200 USD; Finance Research Deep 110 USD, Exhaustive 500 USD per 1,000 calls; no minimum purchase, no platform fee (pricing page, in USD); according to MSA (Online) 5.8, the fees do not include any taxes, including value-added tax ('value-added') |
| yes | yes | yes | |
| Details: AI features included | yes (Web Search via MCP server, up to 100 requests per day, without API key or account) | yes (all APIs; according to the pricing page, custom load capacity and SLA support) | yes (Web Search, Contents, Answer, Research and Finance Research API; all endpoints, SDKs and MCP) |
| differs by plan | not publicly documented | yes | not publicly documented |
| Details: DPA | not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA. | yes: public 'SuSea, Inc. Data Processing Addendum' (you.com/dpa, 'Last updated: December 12, 2025', linked in the footer of the pricing page); in the Trust Center, 'You.com DPA - March 2025' and 'You.com DPA - Security Addendum' are also available to view. According to its text, the DPA becomes part of the Master Subscription Agreement or another written/electronic agreement. Pricing page: 'DPA-ready'. Provider’s DPA | not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA. |
| no | no | no | |
| Details: Training on inputs | Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'. | Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. Additionally with ZDR: requests are not used for training, not sold to third parties and not sent to Google or Bing (documentation). MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5). | Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. MSA (Online, December 2025) 3.4.3: You.com uses Customer Data (Prompts and Output) only 'as necessary to provide Customer with the Services, comply with applicable law, and for safety purposes'; Platform Analyses (statistical usage data without identifying Customer Data) may be used for product development (6.5). By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'. |
| Privacy notice: account and profile data… | Privacy notice: account and profile data… | Privacy notice: account and profile data… | |
| Details: Data retention | Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' | Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' According to the documentation, ZDR applies to the Web Search API and Answer API and is activated by You.com on request (no self-service switch). MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'. | Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.' MSA (Online) 11.4: after the end of the contract, 30 calendar days of access to retrieve Customer Data upon written notice, after which You.com will 'promptly delete Customer Data'. |
| US only | US only | US only | |
| Details: Hosting | Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented. | Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented. | Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented. |
| list available | list available | list available | |
| Details: Sub-processors |
|
|
|
| differs by plan | 7 sources | 8 sources | 8 sources |
| Details: Sources with retrieval date |
|
|
|
Compare You.com Free (Web Search API via MCP) with another tool
Price and scope
- differs by plan
- free
Free (pricing page)
- yes
yes (Web Search via MCP server, up to 100 requests per day, without API key or account)
Contract and data use
- differs by plan
- not publicly documented
not publicly documented whether a DPA applies to this plan. According to its text, the public DPA (you.com/dpa, as of 2025-12-12) becomes part of the 'Master Subscription Agreement or other written electronic agreements' with the signing customer; the 'You.com MSA (Online)' linked on the pricing page (version December 2025), which is accepted by clicking or by using the platform, does not refer to the DPA.
- no
Privacy notice (as of 2026-09-22): You.com does not use the content of prompts, files or generated outputs for training or fine-tuning its own models; contracts with the providers of the integrated language models prohibit them from training on this content, 'except where you have separately opted in'. De-identified and aggregated content may be used for other purposes. Zero Data Retention documentation: requests are not used for training. The statements are not differentiated by plan. By contrast, section 4.5 of the terms of use (as of 2024-08-27) permits the use of Content 'to: (a) provide, maintain, train and improve the Services'; the privacy notice governs which rule prevails in the event of a conflict only for Enterprise customers and 'Paid Subscriber's subscription terms'.
- Privacy notice: account and profile data…
- Privacy notice: account and profile data are stored for as long as the account is active, user content and usage data for as long as necessary for provision and security; data subject to a deletion request until that request has been processed; the notice does not state fixed periods. Different periods or Zero Data Retention under the Enterprise contract take precedence. With ZDR (Enterprise, on request), requests and responses are processed only briefly for handling and are not stored permanently; pricing page: 'All queries and responses are automatically purged and never stored.'
Hosting and sharing
- US only
Terms of use (as of 2024-08-27, Section 2.3): 'We are based in the United States and the Services are provided from the United States.' Privacy notice (as of 2026-09-22): 'We use Amazon Web Services for various content hosting'. Trust Center (sub-processor list): all cloud/hosting providers (AWS, Google Cloud, Microsoft Azure, Vercel, MongoDB Atlas) with location 'United States'. EU option: not publicly documented.
- list available
- According to the Trust Center (sub-processor list, 24 entries; location 'United States' in each case, no location for Coralogix and Gong): cloud/infrastructure: Amazon Web Services, Google Cloud Platform (also LLM provider, according to the list 'with Zero Data Retention and Zero Data Training'), Microsoft Azure, Vercel, MongoDB Atlas (database), Confluent (Kafka infrastructure for user events), Cloudflare (CDN, security, DNS)
- LLM/model providers according to the Trust Center: Anthropic, OpenAI, Together.ai, Fireworks.AI (each 'Zero Data Retention and Zero Data Training'), Cohere (without this addition), Baseten (model serving), Modal (sandbox), Anchor Browser
- Others according to the Trust Center: Osano (privacy operations), Descope (identity/accounts), Moesif (billing analytics), Coralogix (observability/logs), Tableau (product analytics), Stripe (payments), Braze and HubSpot (marketing/CRM), Gong (sales)
- Privacy notice: AWS 'for various content hosting'; Google Analytics and Google Tag Manager for analytics; Stripe for payment processing
- In addition, 'Supplemental Subprocessors.xlsx' in the Trust Center only on access request; content not publicly documented
Evidence
- differs by plan
- 7 sources
- PricingPricing page, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-09-22)Privacy notice, retrieved 18 Oct 2026
- Terms & Conditions (as of 2024-08-27)Terms and conditions, retrieved 18 Oct 2026
- Zero Data Retention (ZDR)Documentation, retrieved 14 Oct 2026
- You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report)Trust Center, retrieved 14 Oct 2026
- You.com Trust Center – SubprocessorsSub-processor list, retrieved 14 Oct 2026
- SuSea, Inc. Data Processing Addendum (as of 2025-12-12)DPA, retrieved 14 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy notice (as of 2026-09-22): You.com has self-certified under the EU-U.S. Data Privacy Framework including the UK Extension and the Swiss-U.S. DPF; where the framework does not apply, You.com relies on standard contractual clauses with the UK Addendum and a transfer impact assessment. Copy of the SCCs on request by email. The vendor names EU and UK representatives under Art. 27 GDPR. Terms of use: services are provided from the USA. DPA (you.com/dpa, as of 2025-12-12): incorporation of the EU standard contractual clauses (Modules One, Two and Three) with the UK Addendum and Swiss Addendum; Irish law and Irish jurisdiction apply to the SCCs. Trust Center: all listed sub-processors with location 'United States' (two without location). Official DPF list: you.com (Su-Sea, Inc.) with status 'Active' for the EU-US DPF, UK Extension and Swiss-US DPF (initial certification 2025-02-04, next re-certification due 2027-10-02).
- Privacy Policy (as of 2026-09-22) (Privacy notice), retrieved 18 Oct 2026
- Terms & Conditions (as of 2024-08-27) (Terms and conditions), retrieved 18 Oct 2026
- You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report) (Trust Center), retrieved 14 Oct 2026
- You.com Trust Center – Subprocessors (Sub-processor list), retrieved 14 Oct 2026
- SuSea, Inc. Data Processing Addendum (as of 2025-12-12) (DPA), retrieved 14 Oct 2026
- Data Privacy Framework List – you.com (Su-Sea, Inc.) (Official register), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Trust Center (Resources): document 'SuSea, Inc. - 2025 SOC 2 Type 2 Report.pdf' only on access request; audit period and auditor therefore not publicly documented. Executive summaries of platform and mobile assessments (Sep 2025) likewise only on request. Pricing page (Enterprise): 'Zero Data Retention, SOC 2, DPA-ready', 'SOC 2 certified', 'CCPA'. ISO 27001: not publicly documented.
- Pricing (Pricing page), retrieved 18 Oct 2026
- You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report) (Trust Center), retrieved 14 Oct 2026
AI Act
Functions: AI search and answer generation (Answer API), multi-step research (Research API), Web Search and Contents API for AI applications; integrable third-party language models according to the privacy notice (pricing page, privacy notice).
Provider’s statement: not publicly documented(no mention of the EU AI Act found on the pricing page, privacy notice, terms of use, MSA (Online) or ZDR documentation).
Classification (for review, not legal advice): For review: the customer is typically a deployer (Art. 3 No. 4 AI Act) or, where integrated into its own products, possibly a provider. Which obligations apply depends on the specific use (check Annex III). Not legal advice.
- Pricing (Pricing page), retrieved 18 Oct 2026
- Privacy Policy (as of 2026-09-22) (Privacy notice), retrieved 18 Oct 2026
- Terms & Conditions (as of 2024-08-27) (Terms and conditions), retrieved 18 Oct 2026
- You.com Master Services Agreement (Online), MSA v.121525 (December 2025) (Terms and conditions), retrieved 18 Oct 2026
Current notes 2026
The pricing page retrieved in 2026 describes only API plans (Web Search, Answer, Research); you.com/plans redirects to this API pricing page, while the website still offers 'Sign in to Chat Platform'. The privacy notice of 2026-09-22 also names SuSea, Inc. as a data broker registered with Californian, Texan and other authorities (section 'Data Broker Registration'). When retrieved on 2026-10-18, the terms of use still bear the date 2024-08-27.
Open points of the review
- Prices and conditions of the chat subscriptions (formerly Pro, Team) not public: you.com/plans redirects to the API pricing page.
- Whether the DPA applies to Free and Pay as you go is not documented (the MSA (Online) does not refer to the DPA); 'Supplemental Subprocessors.xlsx' only on request.
- No EU hosting option documented; the privacy notice states no fixed retention periods for user content.
- SOC 2 Type 2 report (2025) only on request; ISO 27001 not evidenced.
- Consumer training in third-party models: note 'except where you have separately opted in' without stating where this consent is given.
- Conflict between section 4.5 of the terms of use (use of Content also to train the Services) and the privacy notice (no training of own models) not resolved for use without an Enterprise contract.
- No AI Act statement by the provider found.
Frequently asked questions
Where does You.com store data?
US only (plans: Free (Web Search API via MCP), Enterprise (custom), Pay as you go (API)). According to the provider, as of 18 Oct 2026.
Is there a DPA for You.com?
not publicly documented in: Free (Web Search API via MCP), Pay as you go (API); yes in: Enterprise (custom). Based on our research, as of 18 Oct 2026.
Does You.com use inputs for AI training?
no in: Free (Web Search API via MCP), Enterprise (custom), Pay as you go (API). According to the provider, as of 18 Oct 2026.
Where is the provider based?
SuSea, Inc., 417 Montgomery Street, Suite 800, San Francisco, CA 94104, USA; terms of use: 'based in the United States'. According to the provider, as of 18 Oct 2026.
All sources
- 01PricingPricing page · retrieved 18 Oct 2026
- 02Privacy Policy (as of 2026-09-22)Privacy notice · retrieved 18 Oct 2026
- 03Terms & Conditions (as of 2024-08-27)Terms and conditions · retrieved 18 Oct 2026
- 04Zero Data Retention (ZDR)Documentation · retrieved 14 Oct 2026
- 05You.com Trust Center – Resources (DPA, SOC 2 Type 2 Report)Trust Center · retrieved 14 Oct 2026
- 06You.com Trust Center – SubprocessorsSub-processor list · retrieved 14 Oct 2026
- 07SuSea, Inc. Data Processing Addendum (as of 2025-12-12)DPA · retrieved 14 Oct 2026
- 08You.com Master Services Agreement (Online), MSA v.121525 (December 2025)Terms and conditions · retrieved 18 Oct 2026
- 09Data Privacy Framework List – you.com (Su-Sea, Inc.)Official register · retrieved 18 Oct 2026
More tools in AI assistants & search with an EU hosting option (in at least one plan)
- Aleph Alpha · Based in: Speyerer Straße 14, 69115 Heidelberg, Germany
- ChatGPT · Based in: According to the privacy policy
- DeutschlandGPT · Based in: DeutschlandGPT GmbH, Gabriele-Münter-Straße 3, 82110 Germering, Germany
- Gemini Notebook · Based in: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
All tools in AI assistants & search · Tools with an EU hosting option
Further reading
All tools in the category: AI assistants & search. Figures across all tools: Data report.