Semrush

AI-powered SEO and digital marketing platform for visibility, content, and competitive intelligence

Pixis

Codeless AI infrastructure for automated performance marketing optimisation

Semrush

Moderate

13/25

Pixis

Caution

9/25

Score Breakdown

DimensionSemrushPixis

Data Residency

Where is your data stored and processed?

Semrush: Infrastructure spans US and EU; no dedicated per-customer data residency selection; standard DPA available for GDPR compliance

Pixis: Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.

2/5

Infrastructure spans US and EU; no dedicated per-customer data residency selection; standard DPA available for GDPR compliance

2/5

Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.

Legal Jurisdiction

Which laws govern the company and your data?

Semrush: US-incorporated public company, now a subsidiary of Adobe Inc.; subject to US jurisdiction and CLOUD Act; GDPR DPA available

Pixis: Incorporated in Delaware, US. Subject to the CLOUD Act. GDPR DPA available contractually, but US jurisdiction means US legal process can compel data disclosure. Indian-founded with US corporate structure increases GDPR transfer complexity.

2/5

US-incorporated public company, now a subsidiary of Adobe Inc.; subject to US jurisdiction and CLOUD Act; GDPR DPA available

2/5

Incorporated in Delaware, US. Subject to the CLOUD Act. GDPR DPA available contractually, but US jurisdiction means US legal process can compel data disclosure. Indian-founded with US corporate structure increases GDPR transfer complexity.

Data Retention & Training

Is your data used for model training?

Semrush: Primarily processes public web data; customer project and account data retained per privacy policy; no known use of customer data for AI model training

Pixis: Campaign and audience data is used to train and optimise customer-specific AI models. Data practices for model training should be reviewed carefully in the DPA before deployment. Opt-out mechanisms for data use in training are not prominently documented.

3/5

Primarily processes public web data; customer project and account data retained per privacy policy; no known use of customer data for AI model training

2/5

Campaign and audience data is used to train and optimise customer-specific AI models. Data practices for model training should be reviewed carefully in the DPA before deployment. Opt-out mechanisms for data use in training are not prominently documented.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Semrush: SOC 2 Type II certified; GDPR and CCPA compliant; no ISO 27001 publicly confirmed

Pixis: No published ISO 27001, SOC 2 Type II, or other independent third-party security certifications as of early 2026. GDPR compliance is self-asserted. Absence of independent audits is a significant concern for enterprise procurement teams processing EU personal data.

3/5

SOC 2 Type II certified; GDPR and CCPA compliant; no ISO 27001 publicly confirmed

1/5

No published ISO 27001, SOC 2 Type II, or other independent third-party security certifications as of early 2026. GDPR compliance is self-asserted. Absence of independent audits is a significant concern for enterprise procurement teams processing EU personal data.

Regulatory Fit

Suitability for regulated industries and professional services

Semrush: Suitable for marketing and SEO teams across regulated industries; primary risk is account data jurisdiction rather than sensitive data processing

Pixis: Requires significant due diligence for European deployment. US jurisdiction, absence of published security certifications, and the sensitivity of advertising audience data (which may include special category data proxies) make this a high-risk processor choice for GDPR-regulated organisations.

3/5

Suitable for marketing and SEO teams across regulated industries; primary risk is account data jurisdiction rather than sensitive data processing

2/5

Requires significant due diligence for European deployment. US jurisdiction, absence of published security certifications, and the sensitivity of advertising audience data (which may include special category data proxies) make this a high-risk processor choice for GDPR-regulated organisations.

Total Score

13/25

9/25

Best For

Semrush

Best for teams that prioritise data residency (scores 2/5) and need a review required-tier tool.

Pixis

Best for teams that prioritise data retention & training (scores 3/5) and need a bronze-tier tool.

Detailed Comparison

Pixis vs Semrush: Trust & Compliance Comparison

Pixis (Pixis, US) scores 9/25 overall with a Review Required (Caution) trust badge. Codeless AI infrastructure for automated performance marketing optimisation. Semrush (Semrush, US) scores 13/25 with a Bronze (Moderate) trust badge. AI-powered SEO and digital marketing platform for visibility, content, and competitive intelligence.

Dimension-by-Dimension Breakdown

#### Data Residency

Both score equally at 2/5.

●Pixis (2/5): Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.

●Semrush (2/5): Infrastructure spans US and EU; no dedicated per-customer data residency selection; standard DPA available for GDPR compliance

#### Legal Jurisdiction

Both score equally at 2/5.

●Pixis (2/5): Incorporated in Delaware, US. Subject to the CLOUD Act. GDPR DPA available contractually, but US jurisdiction means US legal process can compel data disclosure. Indian-founded with US corporate structure increases GDPR transfer complexity.

●Semrush (2/5): US-incorporated public company, now a subsidiary of Adobe Inc.; subject to US jurisdiction and CLOUD Act; GDPR DPA available

#### Data Retention & Training

Semrush leads with 3/5 vs 2/5.

●Pixis (2/5): Campaign and audience data is used to train and optimise customer-specific AI models. Data practices for model training should be reviewed carefully in the DPA before deployment. Opt-out mechanisms for data use in training are not prominently documented.

●Semrush (3/5): Primarily processes public web data; customer project and account data retained per privacy policy; no known use of customer data for AI model training

#### Certifications

Semrush leads with 3/5 vs 1/5.

●Pixis (1/5): No published ISO 27001, SOC 2 Type II, or other independent third-party security certifications as of early 2026. GDPR compliance is self-asserted. Absence of independent audits is a significant concern for enterprise procurement teams processing EU personal data.

●Semrush (3/5): SOC 2 Type II certified; GDPR and CCPA compliant; no ISO 27001 publicly confirmed

#### Regulatory Fit

Semrush leads with 3/5 vs 2/5.

●Pixis (2/5): Requires significant due diligence for European deployment. US jurisdiction, absence of published security certifications, and the sensitivity of advertising audience data (which may include special category data proxies) make this a high-risk processor choice for GDPR-regulated organisations.

●Semrush (3/5): Suitable for marketing and SEO teams across regulated industries; primary risk is account data jurisdiction rather than sensitive data processing

Certifications at a Glance

Certification	Pixis	Semrush
SOC 2 Type II	No	Yes

Overall Verdict

Semrush has a clear trust advantage, scoring 13/25 compared to Pixis's 9/25. Semrush particularly excels in data retention & training, certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Semrush or Pixis?

Semrush has a TrustKit score of 13/25 while Pixis scores 9/25. Semrush currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Semrush and Pixis compare on data residency?

Semrush scores 2/5 for data residency (Infrastructure spans US and EU; no dedicated per-customer data residency selection; standard DPA available for GDPR compliance), while Pixis scores 2/5 (Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.).

Are Semrush and Pixis GDPR compliant?

Both tools are assessed across five compliance dimensions. Semrush has a regulatory fit score of 3/5 and Pixis scores 2/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool