Weaviate
Weaviate · Model API · NL · weaviate.io
Last verified 2026-09-16
Entry
services/weaviate.yamlTraining on your data (default tier)
Not stated; for data stored in Weaviate Cloud the corporate customer is the sole controller and Weaviate processes it to supply the service
Retention
Not stated as a period in the quoted text; the policy refers to a storage-period section
Data residency
Dutch company; Weaviate Cloud offers serverless or customer-managed VPC deployment; some third parties outside the EEA
Vendor data-handling terms
Training on your data (default tier)
Not stated; for data stored in Weaviate Cloud the corporate customer is the sole controller and Weaviate processes it to supply the service
“Instead, you (the relevant corporate customer) qualify as the sole data controller under the GDPR with respect to such personal data. / To supply our service, to supply our support, to improve our products and services, to improve our customer support.”
Retention
Not stated as a period in the quoted text; the policy refers to a storage-period section
The policy says a later section states storage periods but does not give one for cloud data in the text extracted.
Data residency
Dutch company; Weaviate Cloud offers serverless or customer-managed VPC deployment; some third parties outside the EEA
“Weaviate is a private limited company, established at the Prinsengracht 769A in Amsterdam, the Netherlands. / You may also simplify your cloud management with our cloud solution called Weaviate Cloud, which we offer serverless (referred to as our “ Serverless service ”) or inside your customer managed VPC (referred to as our “ BYOC service ”).”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| weaviate.io | app | observed |
Assessment
Weaviate Cloud: lowSelf-hosted: low
Reasoning: An open-source vector database from Amsterdam with a managed cloud. The customer is controller of stored data, deployment can sit in the customer's own VPC, and the data is whatever the application embeds.
Flags: Retention period not stated for cloud data · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Controller and deployment terms verified against the Weaviate privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.