GDPR

The General Data Protection Regulation (GDPR) sets standards for handling and protecting personal data from the European Economic Area (EEA) and ensures individuals’ data rights. Zilliz is GDPR-ready and committed to supporting our customers' compliance efforts.

FAQs

What is GDPR?
The General Data Protection Regulation (GDPR) is a comprehensive privacy law enacted by the European Union in 2018. It regulates how organizations collect, use, store, and transfer personal data of individuals located in the EU, regardless of the company’s location. Key principles of GDPR include consent, transparency, data minimization, security controls, and data subject rights such as access and erasure.
Can I access Zilliz’s GDPR documentation or DPF status?
Yes. Upon request and under NDA, Zilliz can provide:
- GDPR compliance summaries;
- Our SCC templates;
- Transfer Impact Assessment (TIA) samples;
- DPF application status letter or confirmation. To request documentation, please .
Is Zilliz Cloud GDPR Compliant?
Yes. Zilliz is GDPR ready and has implemented a privacy management program aligned with the General Data Protection Regulation (GDPR). Our program includes data minimization, access controls, data subject rights response procedures, and transfer mechanisms such as SCCs and TIAs to support customer compliance.
How does Zilliz handle data subject rights requests?
Zilliz has a formal process in place to respond to Data Subject Requests (DSRs), including access, rectification, erasure, and restriction of processing. To submit a request, users can contact us at privacy@zilliz.com and we will respond within a reasonable timeframe.
Does Zilliz use Standard Contractual Clauses (SCCs) for data transfers?
Yes. For transfers of personal data from the EU, Zilliz uses the EU Standard Contractual Clauses (SCCs) as the legal mechanism. We also perform Transfer Impact Assessments (TIAs) where applicable, to assess the legal risks of data transfers to third countries.
Is Zilliz applying for the EU-U.S. Data Privacy Framework (DPF)?
Yes. Zilliz has completed internal preparations and submitted an application to join the EU-U.S. Data Privacy Framework (DPF). The application is currently under review by the U.S. Department of Commerce, and we expect certification to be finalized by late summer 2025.
What does DPF certification mean for customers?
The DPF is a recognized legal framework for data transfers from the EU to certified organizations in the U.S. Once certified, Zilliz will be officially recognized as providing an “adequate level of data protection” for EU data, enabling lawful and secure data transfers under GDPR.

GDPR

AI Assistant