Airweave procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ We make a data processing addendum (DPA) available on request for customers who require GDPR- or similar-compliant processor terms, including standard contractual clauses for international transfers where applicable.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We operate in the U.S. and the Netherlands and may process data in these and other jurisdictions. Where required, we use appropriate safeguards for cross-border transfers (e.g., EU Standard Contractual Clauses). We will implement supplementary measures where necessary.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on your location, you may have rights to access, correct, delete, restrict, object, or port your personal data, and to withdraw consent where processing is based on consent. EEA/UK: You may also lodge a complaint with your local supervisory authority.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Our Privacy Policy describes how we handle personal data as a controller, and our DPA governs processing of Customer Data as a processor where applicable. By using the Services, you agree to the Privacy Policy and, where relevant, the DPA.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ California: You may have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of certain “sales”/“sharing” (we do not sell personal information in the conventional sense). Requests: contact hello@airweave.ai . We may verify your identity and, for processor data, direct you to your organization’s administrator.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ These Terms remain in effect while you use the Services. Either party may terminate for material breach not cured within thirty (30) days after written notice. We may suspend or terminate immediately for lawful reasons (e.g., security risk, fraud, violation of law). Upon termination, your access ceases and we will delete or return Customer Data per our Privacy Policy, DPA, and applicable law.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. For processor data, retention follows your configuration and instructions, including deletion upon termination or your request, subject to legal requirements.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Airweave provides an open-source and hosted platform that makes apps and data sources searchable for AI agents by syncing and transforming data from third-party tools and customer environments. Features include multi-tenant support, OAuth2 and API key integrations, automated and on-demand syncs, and a unified search layer. We also support Bring Your Own Data Stores configurations where customers retain control of storage. See our website for an overview of features and connectors at airweave.ai .” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In connection with corporate transactions (e.g., merger, financing), subject to appropriate safeguards.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Your use of third-party services (e.g., connectors, identity providers) is subject to their own privacy policies. We are not responsible for their practices.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share information with: Service providers and subprocessors that help deliver the Services (e.g., hosting, storage, authentication, observability, billing).” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ A list of material subprocessors is available upon request and will be updated as our service evolves.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Authorities where required by law or to protect rights and safety.” | Captured 2026-09-24Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.