GDPR

Our GDPR Commitment

Future AGI is committed to full compliance with the General Data Protection Regulation (GDPR). We provide the tools, processes, and contractual frameworks necessary for our customers to meet their own GDPR obligations when using our platform.

Whether you are collecting AI agent traces, running evaluations, or managing datasets, Future AGI gives you control over personal data at every stage.

Future AGI as Data Processor

When you send data to Future AGI for observability and evaluation, we act as a Data Processor under the GDPR. You, as the customer, remain the Data Controller and determine the purposes and means of processing.

This means:

• We process personal data only on your documented instructions
• We do not use your data for any purpose other than providing the services you have contracted
• We do not sell, share, or otherwise monetize customer data
• We maintain a comprehensive record of processing activities

A Data Processing Agreement (DPA) is available for all customers and can be executed at any time. See our DPA page for details on provisions and how to request a copy.

EU Data Residency

For customers requiring data residency within the European Union, Future AGI offers a dedicated EU region deployment in eu-west-1 (Frankfurt). When EU data residency is selected:

• All trace data, evaluation results, and project metadata are stored within EU boundaries
• Data replication and backups remain within the EU region
• Sub-processors with access to customer data operate under EU-compliant data transfer mechanisms

Contact your account manager or email privacy@futureagi.com to enable EU data residency for your organization.

Data Subject Access Requests

Future AGI supports the full range of data subject rights under the GDPR. If a data subject exercises their rights with you and the request involves data processed by Future AGI, we will assist you in fulfilling that request.

DSAR Process

1. Submit the request to privacy@futureagi.com with the relevant data subject identifiers
2. Our privacy team will acknowledge receipt within 5 business days
3. The request will be processed and completed within 30 calendar days
4. You will receive confirmation once the action has been carried out

Rights Supported

Future AGI supports the following data subject rights:

• Right of Access — Confirm whether personal data is being processed and provide a copy of that data
• Right to Rectification — Correct inaccurate or incomplete personal data
• Right to Erasure — Delete personal data when there is no lawful basis for continued processing
• Right to Data Portability — Export personal data in a structured, machine-readable format
• Right to Restriction of Processing — Restrict the processing of personal data in certain circumstances
• Right to Object — Object to processing based on legitimate interests or direct marketing

For guidance on managing personal data within the platform, including data masking, deletion, and retention controls, see our Managing Personal Data page.