Avoma procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Avoma complies with the EU-US Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)as set forth by the US Department of Commerce. Avoma has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Avoma has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. We have certified that we adhere to the Data Privacy Framework Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. If there is any conflict between this Privacy Policy and the Data Privacy Framework Principles, the Data Privacy Framework Principles will govern. To learn more about the Data Privacy Framework program, and to view our certification page, please visit https://www.dataprivacyframework.gov/ . The Federal Trade Commission (FTC) has jurisdiction over our compliance with the EU-US Data Privacy Framework.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ We may store and process information in various sites throughout the globe, including in sites operated and maintained by cloud-based service providers. At any time, you may opt-out of such transfer by emailing a request to help@avoma.com.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Avoma commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Avoma represents and warrants to Customer that: (a) the Services will function in all material respects in conformity with the applicable documentation and specifications; and (b) the Services will not knowingly contain any Harmful Content, defined as code, files, scripts, or programs, including viruses, worms, and Trojans, intended to deceive, disrupt, destroy, distort, disable, or otherwise do harm. The warranties set forth herein shall not apply to any error, interruption, other non-conformity, or Harmful Content caused by: (i) Customer’s use of the Service not in conformity with the applicable documentation or specifications; (ii) Customer’s or any third party’s network, equipment, hardware, or software; (iii) Your Data; or (iv) Customer’s breach of the Terms. The terms of the Avoma Data Processing Addendum (“DPA”) are hereby incorporated by reference and apply to the processing on Avoma information systems of personal information which is part of Your Data. Third party users of the Services may view the terms of Avoma Privacy Policy . Avoma will utilize appropriate technical, physical, and organizational security measures and safeguards in connection with the storage, transmission, handling, and processing of Your Data via the Services, in order to protect Your Data from unauthorized use, access, and disclosure. Avoma will utilize: (a) adequate physical security of all premises in which Your Data will be processed and/or stored by Avoma; (b) reasonable precautions with respect to the employment of, and access given to, Avoma personnel and third-party contractors engaged by Avoma in connection with providing the Services, including assigning appropriate access privileges to individuals; (c) an appropriate network security program; (d) appropriate access controls” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We do periodical assessments of our data processing and privacy practices, to make sure that we comply with this policy, to update the policy when needed, and to verify that the policy is displayed properly and accessible. If you have any concerns about the way we process your personal information, you are welcome to contact our privacy team at: help@avoma.com . We will look into your query and make good-faith efforts to resolve any existing or potential dispute with you. In compliance with the EU-US DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Avoma commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Avoma at: help@avoma.com. Additionally, if you are an EU data subject, you may invoke binding arbitration in certain cases, as further described in Annex I of the EU-U.S. Data Privacy Framework Agreement, the UK Extension to the EU-U.S. Data Privacy Framework Agreement and the Swiss-U.S. Data Privacy Framework Agreement. For further information, please visit the Data Privacy Framework web site at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction or contact our privacy team. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “The termination would take effect at the end of the current subscription term and is not eligible for refund. Either party may terminate the TOU if there are no active subscriptions upon thirty (30) days prior written notice. In no event will termination of the TOU under this Section relieve the Customer of its obligation to pay any fees for Services it procured prior to such termination. If the TOU is terminated for any reason: (a) all order forms and subscriptions will terminate; (b) all rights, licenses, consents, and authorizations granted by either party to the other will immediately cease; (c) Avoma will disable Customer’s Account and its Users’ access to all Services; (d) Customer shall pay for all subscriptions up to the effective date of termination; (e) Customer and its Users will immediately cease all use of the Services; (f) Customer may, during the thirty (30) day period following the date of termination, export Your Data and Avoma will delete Your Data after Customer’s export is complete.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may need to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Avoma may engage Sub-Processors to Process Personal Data on behalf of the Customer. Customer hereby provides Avoma with a general authorization to engage the Sub-Processors listed at https://trust.avoma.com/subprocessors . All Sub-Processors have entered into written agreements with Avoma that bind them by data protection obligations substantially similar to those under our Data Processing Addendum (DPA). Our Customers and their meeting participants or call receivers have access to the recordings, transcription, and our analysis. They may share access to the recordings with their other colleagues and relevant third parties. We do not sell, share, rent or lease your personally identifiable information. We may share your identifiable information with service providers and other third parties, if necessary to fulfill the purposes for collecting the information, provided that any such third party will commit to protect your privacy as required under the applicable law and this policy. We may also share personally identifiable information with companies or organizations connected, or affiliated with us, such as subsidiaries, sister-companies and parent companies, with the express provision that their use of such information must comply with this policy. Additionally, a merger, acquisition or any other structural change may require us to transfer your personal information to another entity, provided that the receiving entity will comply with this policy. We may be liable for onward transfers to third parties in violation of the Data Privacy Framework Principles. For further information, please below see, as applicable, the EU-US Data Privacy Framework , the UK Extension to the EU-U.S. DPF, or the Swiss-U.S. Data Privacy Framework chapter of this policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Avoma complies with the above Notice and Choice Principles when transfering personal information to a third party. In the context of an onward transfer, Avoma is responsibile for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on our behalf. Avoma remains liable under the DPF Principles if its agents process such personal information in a manner inconsistent with the DPF Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.