// Trust & Security Report
Vercel, Inc.
Vercel AI SDK: a free, open-source (Apache-2.0) TypeScript toolkit (npm package 'ai') for building AI-powered apps and agents, published and maintained by Vercel, Inc. Part of a broader Vercel AI product family that includes AI Gateway (hosted multi-provider model routing/proxy), AI Elements (UI component library), Workflows/Workflow DevKit, v0 (AI app generation), and Vercel Sandbox, all of which sit on top of Vercel's core hosting/deployment platform.
Certifications held
7
Maturity
Enterprise
Trains on your data
Yes
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on vercel.com“Vercel has a SOC 2 Type 2 attestation for Security, Confidentiality, and Availability.”
Verify on vercel.com“Vercel is ISO 27001:2022 certified. Our certificate is available here.”
Verify on vercel.com“Vercel provides both a Self-Assessment Questionnaire D (SAQ-D) Attestation of Compliance (AOC) for service providers and a Self-Assessment Questionnaire A (SAQ-A) Attestation of Compliance (AOC) for merchants under PCI DSS v4.0.”
Verify on vercel.com“Vercel supports HIPAA compliance as a business associate by committing to... Signing Business Associate Agreements (BAAs) with eligible Pro and Enterprise customers.”
Verify on vercel.com“Vercel supports GDPR compliance, which means that we commit to the following: Implement and maintain appropriate technical and organizational security measures surrounding customer data...”
Verify on vercel.com“Vercel is certified under the EU-U.S. Data Privacy Framework. To view our public listing, visit the Data Privacy Framework website.”
Verify on vercel.com“Vercel has achieved TISAX Assessment Level 2 (AL2), which covers requirements for handling information with a high need for protection.”
> Show 4 unconfirmed / not-held certifications
source: vercel.comNo public evidence: Vercel's own compliance page (vercel.com/docs/security/compliance) and Trust Center list SOC 2, ISO 27001:2022, PCI DSS, HIPAA, GDPR, EU-U.S. DPF, and TISAX, but do not mention ISO 27017, 27018, or 27701.
source: vercel.comNo public evidence found. Vercel's compliance page and Trust Center enumerate SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, DPF, and TISAX only; no AI-governance-specific certification (ISO 42001) is claimed anywhere on vercel.com.
source: security.vercel.comNo public evidence found on vendor-owned domains of CSA STAR registration or the CSA 'STAR for AI' designation.
source: security.vercel.comNo public evidence found. Not listed among Vercel's certifications (SOC 2, ISO 27001, PCI DSS, HIPAA, HITECH, GDPR, CCPA, CPRA, EU-US DPF, Swiss-US DPF, UK Extension to EU-US DPF, PIPEDA, DSA, NIS 2, DORA, nFADP, TISAX).
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
Vercel platform default region is U.S., with dozens of selectable global regions; data may be transferred to/processed in the U.S. and elsewhere under Vercel's DPA. Vercel is EU-U.S./Swiss-U.S. Data Privacy Framework certified for cross-border transfers. AI Gateway requests are additionally routed to third-party model providers whose own data residency/retention policies vary by provider and are only uniformly controlled when Zero Data Retention is enabled.
Tier-dependent and product-dependent. The open-source AI SDK library itself does not transmit data to Vercel unless paired with AI Gateway. For AI Gateway specifically, Vercel states 'AI Gateway does not use your prompts or responses for training purposes' by default (Zero Data Retention), but this default routing does NOT filter providers by their training policy: 'If we do not know a provider's training data stance or have not yet established an agreement with them, we assume that they train on your data' unless the customer explicitly sets disallowPromptTraining or enables team-wide ZDR. Separately, Vercel's general AI Product Terms state that for Hobby/Pro plans 'Your Content may be used by Vercel and shared with third parties... for training/improvement,' while Enterprise customers on AI Gateway and v0 receive an explicit contractual warranty that Vercel 'shall not use AI Gateway Customer Content to train or improve the AI Products and Services.' Hobby/Pro users can opt out via Team Preferences. This creates a real Hobby/Pro-vs-Enterprise gap that AIFOXX should not blur into a single 'does not train' claim.
// Security controls
Data backup
Automatic backups every 2 hours, retained 30 days, globally replicated; internal disaster-recovery use only, not customer-restorable
vercel.comPenetration testing
Regular third-party penetration testing plus daily code reviews and static analysis checks
vercel.comAI Gateway Zero Data Retention
Enabled by default at the request level: 'AI Gateway uses zero data retention by default and permanently deletes your prompts and responses after requests complete.' Can be enforced provider-wide via team settings.
vercel.comAI Gateway provider allowlist
Opt-in feature (Pro/Enterprise) letting team owners restrict which model providers may serve AI Gateway requests
vercel.comSecure Compute / VPC peering
Enterprise-only private, isolated cloud environments with dedicated outgoing IPs and VPN/VPC peering into customer AWS infrastructure
vercel.com// Products & data scope
data: Runs entirely inside the developer's own application and infrastructure; makes direct calls to whichever model provider (or AI Gateway) the developer configures. No data flows through Vercel-operated infrastructure unless the app is deployed on Vercel or routed through AI Gateway.
Apache-2.0 licensed, free, 16M+ weekly npm downloads. Carries no certification of its own; security posture is whatever the developer's own hosting and chosen model providers offer.
data: Proxies prompts and responses to 100+ third-party model providers; zero data retention by default at the gateway layer, with opt-in per-request/team controls (disallowPromptTraining, ZDR enforcement, provider allowlist).
Free tier plus Pro/Enterprise; only Enterprise gets a contractual no-training warranty over AI Gateway Customer Content.
data: Hosts the customer's deployed application code, environment variables, functions, and any data the app persists to Vercel storage products.
Carries the SOC 2 / ISO 27001 / HIPAA / PCI DSS / TISAX certifications; only in scope for an AI SDK user if they also deploy their app on Vercel.
data: Customer prompts/generated code ('Customer Content'); used for model training/improvement on Hobby/Pro plans unless opted out, with a contractual non-training warranty for Enterprise.
Distinct product line, referenced for completeness since it shares the same AI Product Terms as AI Gateway.
// What to watch
- Scope nuance, not a fabrication risk: the certifications above (SOC 2, ISO 27001, HIPAA, PCI DSS, TISAX, DPF) are held by Vercel, Inc. at the company/platform level, covering Vercel's hosting infrastructure and AI Gateway. The open-source 'ai' npm package (AI SDK) itself is portable code that runs in the developer's own environment and carries no certification of its own; the certs are only operative when the developer also uses Vercel's hosted AI Gateway and/or deployment platform.
- Potential over-claim risk if simplified: AI Gateway-specific docs state 'AI Gateway does not use your prompts or responses for training purposes' by default, but Vercel's general AI Product Terms state Hobby/Pro plan content 'may be used by Vercel and shared with third parties... for training/improvement' unless the customer opts out, with only Enterprise customers receiving a contractual no-training warranty. A blanket 'does not train on your data' listing claim would be inaccurate for Hobby/Pro users.
- Default AI Gateway routing does not filter by provider training policy unless disallowPromptTraining or team-wide ZDR is explicitly enabled; Vercel's own docs say it assumes unknown providers train on submitted data by default.
- No public evidence of AI-governance-specific certifications (ISO/IEC 42001, CSA STAR for AI) or FedRAMP; these should not be claimed for this vendor.
// At a glance
Pricing model
AI SDK core library: free and open-source (Apache-2.0, npm install ai). AI Gateway: usage/token-based pricing layered on Free/Pro/Enterprise team plans. Vercel hosting: Hobby (free) / Pro / Enterprise subscription tiers.
Self-hostable
Yes
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Vercel, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-09. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
security.vercel.com