Klaviyo AI (K:AI agents, predictive analytics, Customer Agent)

by Klaviyo

AI Application

Low Confidence

Klaviyo AI (K:AI) is the set of AI capabilities embedded in Klaviyo, the B2C CRM and marketing automation platform of Klaviyo, Inc. (NYSE: KVYO), used mainly by ecommerce and consumer brands (vendor reports 183,000 to 205,000+ customers). It has four layers per Klaviyo's AI FAQ: predictive AI that scores every consumer profile (predicted CLV, churn risk, expected next order date, channel affinity, personalised send time, product recommendations, RFM), which is core to the platform and cannot be switched off; generative content tools (Email AI, SMS AI, Subject Line Generator, Image Remix, Brand voice AI, Smart translations); automation AI (Segments AI, Flows AI, benchmarks); and agentic AI: Composer, which analyses account performance and builds audiences, content and send plans and can make supported changes for review, and Customer Agent, a consumer-facing support and sales agent that tracks orders, handles returns, recommends products in 113 languages, connects to other systems through custom skills and writes insights back to customer profiles. Generative and agentic features send prompts and necessary data to OpenAI, Anthropic, AWS Bedrock and Gemini, which are contractually barred from training on customer data; Klaviyo trains its own models on aggregated or de-identified data. A remote MCP server and ChatGPT and Claude apps expose account data to external AI clients with broad read and write scopes. Users are marketing, CRM, ecommerce and customer service teams. Rated medium: the data is ordinary consumer marketing and commerce data (contact details, consent status, orders, browsing events, support conversations) rather than special categories, none of the uses fall under EU AI Act Annex III, and Klaviyo has a solid documented assurance posture (SOC 2 Type II and ISO 27001 stated by the vendor, ISO 27017 and PCI DSS badges, a public and dated sub-processor list, an AI FAQ with no-training commitments, EU-U.S. DPF participation and an EU representative). The open points are that profiling is pervasive and cannot be opted out of, which puts the burden on the customer for GDPR Art. 21/22 and ePrivacy consent; Customer Agent talks directly to consumers and triggers EU AI Act Art. 50 chatbot transparency duties; data is hosted in the US by default with EU residency only for new accounts; Gemini is named as an LLM provider but is missing from the sub-processor list; and the MCP server cannot restrict which AI clients connect. The rating would rise if the brand sells regulated or sensitive products (health, wellness, adult, financial) so that segments or predictions reveal special-category data, if Customer Agent is allowed to take refund or account actions without human review, or if data subjects are minors; it could fall to low for accounts using only predictive scoring with EU residency and no generative or agentic features.