Copy.ai: security & AI-training scorecard
copy.ai ↗ · AI SDR · Last checked Oct 17, 2026
Does Copy.ai train AI on customer data?
No“Your prompts and ideas fuel your success, not our AI models. We value your trust, ensuring our models are trained without utilizing your individual data.”
Note: Source is a marketing security page, not a contract.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
SOC 2 (type not stated)
“Download Our SOC 2 Report Now”
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: No statement found in fetched sources.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
Not verified from vendor-owned sources
Note: No DPA found (copy.ai/dpa returns 404).
No vendor source found as of check date.
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“Your prompts and ideas fuel your success, not our AI models. We value your trust, ensuring our models are trained without utilizing your individual data.”
Note: Source is a marketing security page, not a contract.
Data retention
What the vendor publishes about how long customer data is kept.
Varies by purpose; no fixed period published
“We retain different types of Personal Data for different periods, depending on the purposes for processing the information”
Subprocessor list
Where the vendor lists third parties that process customer data.
Not verified from vendor-owned sources
Note: Not located in fetched sources.
No vendor source found as of check date.
Trust center
The vendor's security/trust portal.
Note: Page title 'Trust Center - Copy.ai' verified; content did not render.
Other notes
Additional context from vendor sources.
Copy.ai's support contact on its homepage uses a fullcast.com address; corporate relationship not verified from Copy.ai's legal pages.
All sources checked (4)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Copy.ai's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.