Workflow & Automation · 10xdental.com10x
Graded against 808 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Privacy and data use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Permits the company and its service providers to monitor or record calls and retain voicemail, transcripts, and related communications data for quality assurance, training, security, support, analytics, product improvement, documentation, and compliance purposes, subject to applicable law — establishes permissible data collection and retention arising from call activity.
Permits disclosure of personal information to vendors, contractors, and service providers supporting business operations including hosting, infrastructure, telephony, messaging, analytics, payment processing, fraud prevention, security, and similar services — establishes the scope of permissible third-party data sharing with subprocessors.
Discloses that the company may share categories of personal information with a range of recipients — including service providers, contractors, customers, integration partners, advisors, and authorities — by cross-referencing descriptions elsewhere in the policy.
How to read this page: Overall risk rates what 10x's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 47 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 47 citationsstaticLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Defines the company's role when processing patient data on behalf of customers — as a service provider, processor, or business associate — and clarifies that the customer retains responsibility for its own privacy notices and patient-facing disclosures, establishing a processor/controller allocation of obligations.
" If you are an employee, contractor, owner, manager, dentist, front-desk team member, administrator, or other representative of a dental practice or organization that uses our services, this Privacy Policy applies to the information we coll..."
Describes how the company handles regulated health information on behalf of covered-entity customers, specifying that such processing is governed by agreements with the customer including applicable business associate agreements, and that in such circumstances the customer is the responsible entity — a procedural allocation of compliance responsibility.
" Our customers may use 10x Dental to communicate with patients and other end users about appointments, scheduling, recalls, confirmations, missed calls, follow-up, and related operational workflows. In many of these cases, we process inform..."
Defines key terms used throughout the policy — 'Personal Information' and 'Sensitive Personal Information' — establishing the operative scope of what categories of data are subject to the policy's obligations and protections.
" 10x Dental provides communications, scheduling, recall, and workflow tools for dental practices and other organizations. Our services may involve information relating to patients, prospective patients, appointments, providers, treatment-re..."
Describes the AI and automation capabilities offered by the company — including call answering, transcript generation, scheduling assistance, and analytics — and discloses that these features may be used for operational workflows as well as for spam prevention, fraud detection, and quality assurance, informing users of automated processing applied to their data.
" We may use Personal Information for the following purposes: 6.1 To provide, operate, maintain, support, secure, and improve our website, products, and services. 6.2 To set up customer accounts, onboard customers, authenticate users, mana..."
Defines the channels and contexts through which Personal Information subject to the policy is collected, establishing the operative scope across website, communications, software/APIs, business relationships, and customer service use — a definitional provision delimiting when the policy applies.
" This Privacy Policy applies to Personal Information we collect: Through our website, including 10x Dental.com and any other website or webpage that links to this Privacy Policy. Through email, text message, phone, chat, web forms, schedu..."
Enumerates the purposes for which the company may use Personal Information — including providing services, AI-enabled communications, account management, and operational workflows — establishing the permitted uses of personal data under the policy.
" Depending on your relationship with us and how our services are used, the categories of information we may collect or process include: identifiers, such as name, email address, phone number, postal address, IP address, account identifiers..."
Grants the company permission to contact users via phone, email, or other contact information they provide, covering account-related, service, billing, and other business matters — establishes permissible uses of contact data collected from users.
" If you provide your phone number, email address, or other contact information to us, we may contact you regarding your request, your account, our services, product updates, support, billing, or other business-related matters."
Defines that some information processed may constitute protected health information or other regulated health data; states the company processes such data in accordance with applicable agreements and legal requirements when acting on behalf of covered entities; imposes compliance obligations on customers for patient notices, consents, authorizations, and rights requests; and directs patients to their dental practice for data access or correction requests — establishing obligations on both the company and customers regarding regulated health data handling.
" 12.1 Some information processed through our services may constitute PHI or other regulated health data. 12.2 When we process PHI on behalf of a covered entity or business associate customer, we do so in accordance with applicable agreemen..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" We or our service providers may monitor or record calls and retain voicemail, transcript, and related communications data for quality assurance, training, security, support, analytics, product improvement, documentation, and compliance purposes, subject to applicable law."
Permits the company and its service providers to monitor or record calls and retain voicemail, transcripts, and related communications data for quality assurance, training, security, support, analytics, product improvement, documentation, and compliance purposes, subject to applicable law — establishes permissible data collection and retention arising from call activity.
AI-generated interpretation, not legal advice.
" We may disclose Personal Information to vendors, contractors, and service providers that help us operate our business and services, including providers of hosting, infrastructure, telephony, messaging, analytics, customer support, payment processing, fraud prevention, security, scheduling, productivity, and similar services."
Permits disclosure of personal information to vendors, contractors, and service providers supporting business operations including hosting, infrastructure, telephony, messaging, analytics, payment processing, fraud prevention, security, and similar services — establishes the scope of permissible third-party data sharing with subprocessors.
AI-generated interpretation, not legal advice.
" We may disclose the categories of Personal Information described above to service providers, contractors, customers, integration partners, advisors, authorities, and others as described in this Privacy Policy."
Discloses that the company may share categories of personal information with a range of recipients — including service providers, contractors, customers, integration partners, advisors, and authorities — by cross-referencing descriptions elsewhere in the policy.
AI-generated interpretation, not legal advice.
" California residents may request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes, if any, as permitted by California Civil Code Section 1798.83."
Grants California residents the right to request information regarding the company's disclosure of personal information to third parties for direct marketing purposes, conditional on whether any such disclosure exists and subject to statutory authorization referenced without naming it.
AI-generated interpretation, not legal advice.
" We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising."
Restricts the company from selling personal information and from sharing personal information for cross-context behavioral advertising, both of which are user-protective prohibitions on specific commercial data uses.
AI-generated interpretation, not legal advice.
" If applicable, we use and disclose Sensitive Personal Information only for purposes permitted by law and consistent with this Privacy Policy and our contractual obligations."
Restricts the use and disclosure of sensitive personal information to purposes permitted by law and consistent with the privacy policy and contractual obligations, limiting how this category of data may be processed and acting as a user-protective constraint.
AI-generated interpretation, not legal advice.
" If you visit our website, request a demo, schedule a meeting, submit a contact form, or otherwise inquire about our services, this Privacy Policy applies to the information we collect about you as a visitor, lead, or prospective customer."
Defines the 'customer representatives and authorized users' audience category, specifying that the policy applies to information collected from dental practice employees and representatives in connection with account and platform use.
AI-generated interpretation, not legal advice.
" You may opt out of marketing emails by clicking the unsubscribe link in the message or by contacting us."
Grants users the right to opt out of marketing emails by clicking the unsubscribe link in messages or by contacting the company — establishing a user-exercisable opt-out mechanism for marketing communications.
AI-generated interpretation, not legal advice.
" You may opt out of certain text communications by replying STOP where applicable or contacting us."
Grants users the right to opt out of certain text communications by replying STOP where applicable or by contacting the company — establishing a user-exercisable opt-out right for text messaging.
AI-generated interpretation, not legal advice.
" You may manage cookies through your browser settings, cookie banner, or preference center where available."
Grants users the ability to manage cookies through browser settings, a cookie banner, or preference center where available — establishing a user-exercisable control mechanism over cookie-based data collection.
AI-generated interpretation, not legal advice.
" In the preceding 12 months, we may have collected the categories of Personal Information described in this Privacy Policy, including identifiers, customer records information, internet and network activity, professional information, communications content, audio information, inferences, and sensitive information where applicable."
Discloses the categories of personal information the company may have collected in the preceding 12 months — including identifiers, customer records, internet and network activity, professional information, communications content, audio information, inferences, and sensitive information — as part of its transparency obligations to residents.
AI-generated interpretation, not legal advice.
" If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:"
Identifies the legal entity name and trade name of the company responsible for the privacy policy, establishing the identity of the data controller referenced throughout the document.
AI-generated interpretation, not legal advice.
" If you are a patient contacting us about information processed on behalf of your dental practice, please contact your dental practice first, because it is usually the party that controls that information and is best positioned to respond."
Instructs patients whose data is processed on behalf of a dental practice to contact the dental practice first, identifying the dental practice as the data controller typically best positioned to respond to such requests — a procedural direction about how data subject inquiries should be routed.
AI-generated interpretation, not legal advice.
" For clarity, 10x Dental may provide features that help customers: answer or route inbound calls; place outbound calls; send SMS or MMS messages; send emails; identify and respond to missed calls; remind patients about appointments; confirm or reschedule appointments; manage recall workflows; generate transcripts, call notes, summaries, and communication analytics; and connect with scheduling, telephony, communications, and practice-management systems. Use of these features may involve the processing of communications content, metadata, recordings, transcripts, and scheduling-related information. Customers are responsible for configuring and using these features lawfully and in accordance with their obligations to patients and end users."
Defines the scope of features the platform may provide to customers, specifying the types of communications and data processing activities (calls, SMS, emails, transcripts, recordings, scheduling data, metadata, analytics) that use of those features may involve, thereby establishing what categories of data are subject to processing under the agreement.
AI-generated interpretation, not legal advice.
" If you are an employee, contractor, owner, manager, dentist, front-desk team member, administrator, or other representative of a dental practice or organization that uses our services, this Privacy Policy applies to the information we collect about you in connection with account creation, onboarding, support, communications, and platform use."
Defines the company's role when processing patient data on behalf of customers — as a service provider, processor, or business associate — and clarifies that the customer retains responsibility for its own privacy notices and patient-facing disclosures, establishing a processor/controller allocation of obligations.
AI-generated interpretation, not legal advice.
" Our customers may use 10x Dental to communicate with patients and other end users about appointments, scheduling, recalls, confirmations, missed calls, follow-up, and related operational workflows. In many of these cases, we process information on behalf of our customer, which controls the underlying patient relationship. In those situations, we generally act as a service provider, processor, or business associate to the customer, and the customer remains responsible for its own privacy notices, legal obligations, and patient-facing disclosures."
Describes how the company handles regulated health information on behalf of covered-entity customers, specifying that such processing is governed by agreements with the customer including applicable business associate agreements, and that in such circumstances the customer is the responsible entity — a procedural allocation of compliance responsibility.
AI-generated interpretation, not legal advice.
" 10x Dental provides communications, scheduling, recall, and workflow tools for dental practices and other organizations. Our services may involve information relating to patients, prospective patients, appointments, providers, treatment-related communications, insurance-related communications, and similar operational data. When we handle protected health information or other regulated health information on behalf of a covered entity or other regulated customer, we do so pursuant to our agreements with that customer, including applicable business associate agreements where required. In such circumstances: the customer decides why the information is collected and how it is used within the customer relationship; we process such information on the customer's behalf and under the customer's instructions, subject to applicable law and our agreements; and if you are a patient and have questions about how your dental practice uses your information, or you wish to exercise rights relating to your records, appointments, treatment, billing, or communications preferences, you should generally contact that dental practice directly. This Privacy Policy is not a dental practice's Notice of Privacy Practices."
Defines key terms used throughout the policy — 'Personal Information' and 'Sensitive Personal Information' — establishing the operative scope of what categories of data are subject to the policy's obligations and protections.
AI-generated interpretation, not legal advice.
" We collect information from several sources and in several ways, depending on how you interact with us."
Enumerates the categories of Personal Information the company may collect directly from individuals, including contact details, account credentials, and interaction data, establishing what information is subject to the policy's use and retention obligations.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from 10x's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in 10x's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in 10x's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat 10x requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in 10x's published policies yet.
What the policies actually cover
0 topicsNone of 10x's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“For purposes of this Privacy Policy: “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual. Depending on applicable law, this may include “personal data” or similar terms. “Sensitive Personal Information” means Personal Information that is c...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We or our service providers may monitor or record calls and retain voicemail, transcript, and related communications data for quality assurance, training, security, support, analytics, product improvement, documentation, and compliance purposes, subject to applicable law.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may disclose Personal Information to vendors, contractors, and service providers that help us operate our business and services, including providers of hosting, infrastructure, telephony, messaging, analytics, customer support, payment processing, fraud prevention, security, scheduling, productivity, and similar services.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may disclose the categories of Personal Information described above to service providers, contractors, customers, integration partners, advisors, authorities, and others as described in this Privacy Policy.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| Government | privacy data use | conditional | MEDIUM | 1 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“For purposes of this Privacy Policy: “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual. Depending on applicable law, this may include “personal data” or similar terms. “Sensitive Personal Information” means Personal Information that is considered sensitive under applicable law, such as account credentials, precise geolocation, government identifiers, financial account data, health-related information, or similar categories. “Customer Data” means information submitted to, stored on, transmitted through, or otherwise processed by our services on behalf of a customer. “Protected Health Information” or “PHI” has the meaning assigned under HIPAA when applicable. “Service Provider” means a vendor, contractor, or third party that processes information on our behalf for business purposes. “De-identified Information” means information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular individual, consistent with applicable law.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We or our service providers may monitor or record calls and retain voicemail, transcript, and related communications data for quality assurance, training, security, support, analytics, product improvement, documentation, and compliance purposes, subject to applicable law.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may disclose Personal Information to vendors, contractors, and service providers that help us operate our business and services, including providers of hosting, infrastructure, telephony, messaging, analytics, customer support, payment processing, fraud prevention, security, scheduling, productivity, and similar services.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may disclose the categories of Personal Information described above to service providers, contractors, customers, integration partners, advisors, authorities, and others as described in this Privacy Policy.”Open timeline citation
Latest stance: sale or sell on privacy data use
“We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“California residents may request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes, if any, as permitted by California Civil Code Section 1798.83.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
56 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of 10x's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified 10x's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from 10x's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.