Yes. Cited is operated by Ascend Group OÜ, an Estonian company, and it operates under the EU General Data Protection Regulation (GDPR) and Estonian data protection law. It sets out a clear legal basis for each use of data, hosts core data in the EU, and offers a Data Processing Agreement. These details come from the published Privacy Policy.
What its GDPR posture covers
The Privacy Policy does the things GDPR expects. It names a legal basis for each way data is used, lists the providers it works with, explains your rights, and names a lead supervisory authority, the Estonian Data Protection Inspectorate.
It also separates two roles clearly. For your account, billing, and marketing, Cited is the data controller. For the brand and content data you put into the platform, it acts as a processor under your instructions, governed by a Data Processing Agreement.
Two commitments matter most to buyers reviewing AI vendors. Cited does not sell your personal data, and it does not use your content or personal data to train general-purpose AI models. The AI providers it works with do not train their general models on data sent through their APIs.
Where your data lives
Core data is hosted in the EU. Cited's database, authentication, and storage run on infrastructure hosted in Ireland, so your core data is resident in the European Union.
Some providers are based outside the EU, mainly in the US. For data that leaves the EU, Cited relies on the EU-US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.
Your rights and the DPA
Under GDPR you can access your data, correct it, delete it, restrict its use, get it in a portable format, object to certain processing, and withdraw consent. To use any of these, you email [email protected], and Cited responds within one month.
For procurement and legal teams, a Data Processing Agreement is available, covering how data is handled, the sub-processors used, and a summary of security measures.
Where to go next
For the full trust picture, read is Cited legit: trust, security, and privacy. For where data is stored, see where is my data stored. For what access the service needs, see do you need my logins.
