Artificial Societies procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Your information may be transferred to and processed in countries outside the United Kingdom, including the United States (where our parent company, Societies, Inc., is located) and other countries where our service providers operate. When we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including: Standard Contractual Clauses approved by the UK Information Commissioner; Transfers to countries with an adequacy decision from the UK government; Other safeguards as required by Data Protection Laws. We have conducted a Transfer Risk Assessment evaluating the risks to personal data when it is processed by US-based sub-processors. This assessment concludes that the combination of contractual, technical, and organisational safeguards in place ensures an essentially equivalent level of protection to that guaranteed under UK GDPR. A copy of this assessment is available on request. For Platform customers, please refer to Section 8.8 of our Terms of Service for specific provisions regarding international data transfers.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Publicly available persona data Duration of active use in platform models; deleted or refreshed when no longer required, or upon valid objection/erasure request For Customer Data processed on behalf of customers, retention is governed by the Terms of Service (Section 6.4).” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Third parties who provide services on our behalf, including: Cloud hosting providers (GCP); Authentication services (Supabase); Security and CDN services (Cloudflare); Analytics services (PostHog). A full list can be found at societies.io/subprocessors . These providers are contractually bound to protect your information and may only use it to provide services to us.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell your personal data or share it with third parties for their advertising purposes.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In connection with any merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Authorities or other third parties when required by law, court order, or regulatory request, or to protect our rights, property, or safety.” | Captured 2026-07-19Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.