Adapt procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ International Data Transfers. You acknowledge that Adapt is a company based and headquartered in the United States. Any information we hold about you will be transferred to, used, processed, and stored in the United States and other countries and territories, which may not have data privacy or data protection laws equivalent to those in your country or territory. For the proper operation of the Services, Adapt needs to carry out international transfers of personal data. In the case of Brazil, we will rely on standard contractual clauses (SCCs) for our data transfers where required and in instances where they are not covered by an adequacy decision.” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Whether you live in the European Economic Area (EEA), UK or Switzerland (the "European Region"), or outside the European Region, the data controller responsible for your personal data is Adapt.com, Inc.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Where information is transferred outside the EEA or the UK, we ensure it benefits from an adequate level of data protection by relying on:” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We will respond to your request within 30 days (for GDPR requests) or 45 days (for CCPA/CPRA requests), with the possibility of an extension of an additional 45 days with notice.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner's Office . Various EU authorities are also available for this purpose depending on the country in which you reside. If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD) . If you live in Australia, you have the right to lodge a complaint with the Office of the Australian Information Commissioner .” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ For GDPR-related inquiries, you may also contact our Data Protection Officer at privacy@adapt.com .” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In certain situations, we rely on derogations provided for under applicable data protection law to transfer information to a third country.” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ Data is stored in the United States. In the event of a data breach, we will notify affected users as required by applicable law.” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Other U.S. States: We comply with applicable state privacy laws, including the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Data Privacy . Data submitted through the Services will be processed in accordance with the Adapt Data Processing Addendum (“ DPA ”), which is incorporated into these Terms by reference.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Adequacy decisions. These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognize that a country outside of the EEA offers an adequate level of data protection. We transfer your information as described in "Collection of Personal Data" to some countries with adequacy decisions, such as the countries listed here ; or” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in "Collection of Personal Data" to certain affiliates and third parties in countries without an adequacy decision.” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are located in EEA (GDPR), Canada, Brazil, or California (CCPA/CPRA) please read the relevant Regional Supplemental Disclosure that applies to you.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Data is stored in the United States. In the event of a data breach, we will notify affected users as required by applicable law.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Please keep in mind that these rights are not absolute and may not apply in certain circumstances. For example, in certain cases we may continue to process and retain data regardless of your request for deletion, objection, blocking or anonymization, in order to comply with legal, contractual and regulatory obligations, safeguard and exercise rights, including in judicial, administrative and arbitration proceedings and in other cases provided for by law.” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Upon termination of these Terms, a Subscription, or your access to the Services, we may at our option delete any Materials or other data associated with your Account. Sections 6 (with respect to fees outstanding as of such expiration or termination) and 9 – 12 will survive any expiration or termination of our Terms or a Subscription.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Adapt retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy.” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations, which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days.” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Effect of Termination. Upon termination, Customer may no longer access the Services. The following provisions will survive termination or expiration of these Terms: (a) Confidentiality, Publicity, Payment and Fees, Indemnification, Disclaimer of Warranties, Limits on Liability, Dispute Resolution, Ownership, and General Terms; and (b) any provision or condition that must survive to fulfill its essential purpose.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ As part of a significant corporate event. If Adapt is involved in a merger, corporate transaction, bankruptcy, or other situation involving the transfer of business assets, Adapt will disclose your personal data as part of these corporate transactions.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ It is in our legitimate interests to protect our business, employees and users from illegal activities, inappropriate behavior or violations of terms that would be detrimental. We also have a duty to cooperate with authorities. ” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal Compliance. We may comply with governmental, court, and law enforcement requests or requirements relating to provision or use of the Services, or to information provided to or collected under our Terms. We reserve the right, at our sole discretion, to report information from or about you, including but not limited to Inputs, Outputs, or Actions to law enforcement.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ With an individual's consent. Adapt will otherwise disclose personal data when an individual gives us permission or directs us to disclose this information, including as a part of our Services.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ International Data Transfers. You acknowledge that Adapt is a company based and headquartered in the United States. Any information we hold about you will be transferred to, used, processed, and stored in the United States and other countries and territories, which may not have data privacy or data protection laws equivalent to those in your country or territory. For the proper operation of the Services, Adapt needs to carry out international transfers of personal data. In the case of Brazil, we will rely on standard contractual clauses (SCCs) for our data transfers where required and in instances where they are not covered by an adequacy decision.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Adapt may also disclose personal data in the following circumstances:” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Payment Information: We collect your payment information if you choose to purchase access to Adapt's products and services. Payment Information is handled by our third-party payment processors.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Subprocessors. A list of subprocessors is available at adapt.com/subprocessors . This includes the third parties Adapt engages to help us process personal data provided to us where Adapt acts as a data processor, such as with respect to personal data we receive, process, store, or host when you use Adapt's commercial services.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ To facilitate payments for products and services provided by Adapt;” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Cross-jurisdictional Transfers. By providing us with personal data, you acknowledge and agree that your personal data may be transferred or disclosed to other jurisdictions for processing and storage outside of Canada, including to the United States and the countries listed on our Subprocessor List, where laws regarding the protection of personal data may be less stringent than the laws in your jurisdiction. Furthermore, we may disclose your personal data in these jurisdictions in response to legal processes or where we believe in good faith that disclosure is required or permitted by law.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms. We may disclose personal data to governmental regulatory authorities as required by law, including for legal, tax or accounting purposes, in response to their requests for such information or to assist in investigations. We may also disclose personal data to third parties in connection with claims, disputes or litigation, when otherwise permitted or required by law, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risk, to enforce our legal rights or the legal rights of others, to enforce contractual commitments that you have made, or as otherwise permitted or required by applicable law.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Affiliates & corporate partners. Adapt discloses the categories of personal data described above between and among its affiliates and related entities.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Adapt does not sell, rent, or lease your Customer Data. We may share your information only with your explicit consent, when required by law, or as necessary to provide the Services. Adapt will disclose personal data to the following categories of third parties for the purposes explained in this Policy:” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Aggregated Data. Adapt may share aggregated or de-identified data that cannot reasonably be used to identify you.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third-Party Websites and Services: Our Services may involve integrations with, or may direct you to, websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party and not Adapt and subject to the third party's privacy policy. If you access third-party services, such as social media sites or other sites linked through the Services (e.g., if you follow a link to our Twitter account), these third-party services will be able to collect personal data about you, including information about your activity on the Services. If we link to a site or service via our Services, you should read their data usage policies or other documentation. Our linking to another site or service doesn't mean we endorse it or speak for that third party.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Information from Third Parties. We may receive information about you from publicly available sources and business data providers. If you connect third-party services (such as CRM, financial, or marketing platforms) to Adapt, we receive data from those integrations as authorized by you.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Information of public and private entities with which we shared data. You have the right to request information of public and private entities with which we have shared your data.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Service providers & business partners. Adapt may disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, and providing you with the services.” | Captured 2026-06-10Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Pricing. Adapt offers various pricing models including usage-based, prepaid commitment, and enterprise arrangements. Payment terms are specified in your order form or subscription agreement. Payment may be made via supported methods including credit card (processed through Stripe), ACH transfer, wire transfer, or check. Late payments may accrue interest at the rate of 1.5% per month. You are responsible for all applicable taxes associated with your use of the Services.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.