Landbot Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Landbot

Risk Overview

Minimal Risk

3.3

/10

Chatbot Builder

Workflow Automation

Top Risks

Processes third-party end-user chatbot data (customers' customers); AI features may use end-user conversation data for improvement; acts as both data processor and controller depending on context; GDPR processor obligations must be cascaded to customers.

Mitigations

Landbot provides GDPR DPA with Article 28 compliance; EU data residency on Google Cloud Belgium; customers must implement appropriate consent mechanisms for their end users; sub-processor list available; 48-hour breach notification.

Get started

Is your team using

Landbot

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Training Use

Landbot acts as a data processor for customer chatbot data. Terms note that Landbot will use end-user data entered in chatbots for certain AI services (Build-it-for-me, FAQs AI Assistant, Lead Gen AI Assistant). This constitutes processing third-party end-user data for AI feature improvement. Standard opt-in for AI services but flagged in terms.

/10

3rd-Party Sharing

As a data processor, Landbot shares data with sub-processors (Google Cloud in Belgium). Maintains a sub-processor list. GDPR Article 28 DPA in place. Does not sell data. Data shared only for service delivery. Manages third-party end-user data of customers' chatbot users.

/10

Data Retention

Personal data archived and permanently deleted 3 years after account deactivation. Financial data retained 6 years. Infrastructure on Google Cloud in Belgium, Europe. Clear retention schedule is a positive, but 3-year post-deactivation retention is moderate.

/10