- Deployment
- hosted
- Hq Country
- United States
- Hq City
- San Francisco
- Ownership
- private
- Founded
- 2013
- Training Default
- never
- Residency Options
- multi-tenant Google Cloud Platform project; no EU region is published
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- deployer
- Certs
- SOC 2 Type II
- DPA available
- yes
- Zero Retention Available
- Yes
- Retention Default
- Minimal Data Retention is available to all Amp users, not only Enterprise: for inference through Amp-managed model provider connections on Amp credits, Amp's agreements with major model providers limit retention to narrow safety, abuse and legal exceptions, and availability and exceptions vary by model and feature. Customers needing specific retention terms are directed to Amp Enterprise or to bring their own model provider key (BYOK), in which case the provider account's terms apply. Thread data is removed within 30 days of thread deletion; threads owned by an Enterprise workspace are kept until the enterprise's contract ends.
- Retention Exceptions
- ZDR has two documented exceptions: content flagged by a provider's abuse classifiers may be retained in that provider's abuse-monitoring systems, and some models require extended prompt caching, where key/value tensors derived from prompts sit in provider infrastructure for a limited period. Enterprise workspace threads are owned by the enterprise and survive a user deleting their account; they are deleted when the contract ends. Deleted threads clear within 30 days.
- Subprocessors
- Anthropic — USA, OpenAI — USA, Google (Cloud and LLM) — USA, Fireworks AI — USA, Cloudflare — USA, Observe — USA
- Subprocessor Count
- 6
- Transfer Mechanism
- sccs
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- Amp documents its data handling better than most of this batch and then puts all of it in the United States. The security page is specific in the way procurement wants — zero data retention on Enterprise with both exceptions named rather than hidden, training that can never be switched on for an Enterprise workspace, thread-deletion semantics spelled out for three different workspace types, SOC 2 Type II, a complete sub-processor table — and every entry in that table says USA. The Amp Server runs in a multi-tenant Google Cloud project with no published EU region, so an EU buyer gets contractual protection under SCCs and no data-residency story at all. The one lever that changes this is the customer-managed model provider connection: bring your own API key and inference falls under your contract with that provider, which is also why this row scores above the closed assistants on exit cost.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- medium
- Subprocessors Claim Basis
- stated
- Subprocessors Confidence
- high
- Residency Class
- non-eu-only
- Portability / Exit Path
- open-api-standard
- Subprocessor Jurisdiction
- non-eu
- Underlying model providers
- Anthropic (US), OpenAI (US), Google (US), Fireworks AI (US), customer-managed model provider connections
