Data privacy, AI training, GDPR, SOC 2 and HIPAA, answered from Poe’s own policies. Last checked October 17, 2026
Only on a paid or business plan Only some Poe plans keep your content out of model training. It offers GDPR/CCPA rights or a data processing agreement (DPA). You can delete your data or account. Don’t paste confidential client information until you have checked the plan’s data terms with the vendor.
Checked October 17, 2026 by KurateAI editors from public information
Depends on your plan Poe keeps content out of training on some plans (usually business or enterprise), while free or personal use may be used to improve its models.
Checked October 17, 2026 by KurateAI editors from public information
GDPR rights and DPA offered Poe describes GDPR (or CCPA) rights or offers a data processing agreement. Whether your use is compliant also depends on how you use it: sign the DPA, check where data is stored and record the tool in your processing register.
Checked October 17, 2026 by KurateAI editors from public information
Not found We found no SOC 2 report or ISO/IEC 27001 certificate for Poe. That doesn’t mean it is insecure, but there is no independent audit to rely on.
Checked October 17, 2026 by KurateAI editors from public information
Documented Poe lets you delete your data or account, or states how long data is kept.
Checked October 17, 2026 by KurateAI editors from public information
Several gaps We found no public evidence of: SOC 2 or ISO/IEC 27001; encryption in transit and at rest; follows an AI risk standard (ISO/IEC 42001, NIST AI RMF, EU AI Act). Check these points with the vendor before sharing confidential or personal data. Gaps in public information: sOC 2 or ISO/IEC 27001; encryption in transit and at rest; sSO, access roles or audit logs; follows an AI risk standard (ISO/IEC 42001, NIST AI RMF, EU AI Act); human review controls. As with any AI tool, check outputs for mistakes, never paste passwords or secrets, and be careful with links and files from unknown sources, which can carry hidden instructions (prompt injection).
Checked October 17, 2026 by KurateAI editors from public information
Business plans protect more Business and enterprise plans of Poe keep your content out of training; free or personal use may not.
Checked October 17, 2026 by KurateAI editors from public information
No BAA found We found no HIPAA business associate agreement for Poe. Without a BAA, don’t use it with protected health information.
Checked October 17, 2026 by KurateAI editors from public information
Check first
For client confidentiality and privilege, we couldn’t confirm no training on your content, an independent security audit, SSO and access controls. Ask the vendor for these in writing, or limit use to non-confidential tasks.
Safest AI tools for lawyersCheck first
For financial records and client data, we couldn’t confirm no training on your content, an independent security audit, encryption. Ask the vendor for these in writing, or limit use to non-confidential tasks.
Safest AI tools for accountantsCheck first
For patient data, we couldn’t confirm no training on your content, an independent security audit, a HIPAA BAA. Ask the vendor for these in writing, or limit use to non-confidential tasks.
Safest AI tools for healthcareCheck first
For client documents under NDA, we couldn’t confirm no training on your content, an independent security audit, SSO and access controls. Ask the vendor for these in writing, or limit use to non-confidential tasks.
Safest AI tools for consultantsCheck first
For company and customer data, we couldn’t confirm no training on your content. Ask the vendor for these in writing, or limit use to non-confidential tasks.
Safest AI tools for businessesFair Some important controls are missing or not documented.
Is Poe safe? Full privacy report How SafeScore worksRisks to consider: We found no public evidence of: SOC 2 or ISO/IEC 27001; encryption in transit and at rest; follows an AI risk standard (ISO/IEC 42001, NIST AI RMF, EU AI Act). Check these points with the vendor before sharing confidential or personal data.
Assessed by KurateAI editors from public information. Last updated October 17, 2026. SafeScore summarises public information; it isn’t an audit. Make or use Poe and have more evidence? Send it to us.
| Tool | SafeScore | Trains on your data | GDPR / DPA | SOC 2 / ISO | |
|---|---|---|---|---|---|
 Poe |
62 | Depends on plan | Yes | No | |
 ChatGPT |
98 | No (by default) | Yes | Yes | Compare |
 Le Chat by Mistral |
93 | No (by default) | Yes | Yes | Compare |
 DeepSeek |
38 | Yes | No | No | Compare |
 Claude |
98 | No (by default) | Yes | Yes | Compare |
 Gemini |
98 | No (by default) | Yes | Yes | Compare |
 Microsoft Copilot |
98 | No (by default) | Yes | Yes | Compare |
This page summarises Poe’s public information as of October 17, 2026. It isn’t legal advice or an audit. Policies change, so confirm with the vendor before sharing sensitive data. Spotted something out of date? Tell us.