Nebius AI
Nebius · Model API · NL · nebius.com
services/nebius-ai.yamlVendor data-handling terms
Nebius AI Studio and its GPU cloud process workloads under the customer agreement; the public policy covers account and website data.
“This Privacy Policy does not apply to personal data that we process solely on behalf of our customers as a processor under a separate data processing agreement.”
The public policy does not give retention periods for workload data.
Region is selected per deployment; Nebius operates data centres in Finland, France and the US.
“The standard contractual clauses approved by the EU Commission : This term refers to the appropriate safeguard for transfer of personal data to a third country provided under Article 46(2)(c) of the GDPR.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| nebius.com | app | observed |
Assessment
Reasoning: An Amsterdam-headquartered AI cloud with an inference API. EU data centres are available and customer data sits under a DPA, but the public policy says nothing about training on inference data or retention. A contract settles it.
Flags: Customer data terms not in the public policy · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Scope and transfer terms verified against the Nebius privacy policy; customer data terms contractual.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.