Is Lakera Guard (Check Point) UK GDPR compliant?
answer from its trust card · not checked yet
> short_answer
Lakera Guard (Check Point) handles customer data, so it acts as a supplier under UK GDPR. You’ll want a contract that covers processing, and to check where the data goes. The facts below are from its trust card.
No tool is “compliant” on its own; compliance depends on how you use it. This page shows the facts you need to decide.
The facts that matter for UK GDPR
Data location: Cloud API: the nearest region by default (EU, US or Singapore); you can pin a regional endpoint and restrict which regions process requests. Self-hosted: your own infrastructure.○ unclaimed
Data kept for: By default the cloud service logs all prompts and model outputs for its dashboard; admins can switch prompt logging off. Detected personal data is masked before logging.○ unclaimed
Certifications: SOC 2 Type II, ISO 27001:2022○ unclaimed
What you still need to do
- Add it to your record of processing. Pre-filled entry
- Check your contract covers processing and any transfers abroad. DPIA starter
- Watch it, so you hear if any of this changes. Watch Lakera Guard (Check Point)