Bardeen procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Bardeen ensures secure collection, transfer, processing and storage of all collected data. We adhere to industry standard security practices and are compliant with the SOC 2 Type 2, GDPR and CASA Tier 2 / Tier 3 standards. As of April 1, 2024, we are proud to announce our compliance with the AICPA SOC 2 Type 2 standards, ensuring that our systems and processes meet rigorous criteria for security. Additionally, we adhere to the EU’s GDPR compliance checklist for US companies, affirming our commitment to data protection and privacy for our international users. Furthermore, Bardeen meets the stringent requirements of Tier 2 and Tier 3 of the Cloud Application Security Assessment (CASA) as defined by the App Defense Alliance, built upon the industry-recognized OWASP Application Security Verification Standard (ASVS). ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your personal information consistent with the requirements of applicable laws. If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses . For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “To determine the appropriate retention period for personal information, we may consider applicable legal requirements, the amount, nature, and sensitivity of the personal information, certain risk factors, the purposes for which we process your personal information, and whether we can achieve those purposes through other means.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in “ Contact Us ” below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account, if applicable.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We store the personal information we collect as described in this Privacy Notice for as long as you use our Services, or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We may suspend or terminate your access to and use of the Services, including suspending access to or terminating your account, at our sole discretion, at any time and without notice to you. You may cancel your account at any time via the functionality of the Services. Upon any termination, discontinuation or cancellation of the Services or your account, the following Sections will survive: 6(a), 6(b), 6(c) (only for payments due and owing to Bardeen prior to the termination), 7(b), 7(c), 7(e), 8, 10, 11, 12, 13, 14, 15 and 16.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Services may allow you to access third-party websites or other resources, including linking your account with an account you maintain with a third party. We provide access to such third-party websites or other resources only as a convenience and are not responsible for the content, products or services on or available from those resources or links displayed on such websites. You acknowledge sole responsibility for and assume all risk arising from, your use of any third-party resources.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third-Party Websites/Applications. The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk. Supervisory Authority . If your personal information is subject to the applicable data protection laws of the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your personal information violates applicable law.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “These third-party advertising partners may set Technologies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising”, “personalized advertising”, or “targeted advertising.”” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We disclose your personal information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ You may use the Services only if you are at least 13 years of age (or such other minimum age at which you can provide consent to data processing under the laws of your territory), and not otherwise barred from using the Services under applicable law. You also agree that you will not use the Services in connection with your professional endeavors (e.g., in connection with your work or employment) unless you have received express permission to do so. For certain features of the Services you’ll need an account. It’s important that you provide us with accurate, complete and current account information and keep this information up to date. If you don’t, we might have to suspend or terminate your account. To protect your account, keep the account details and password confidential, and notify us right away of any unauthorized use. You’re responsible for all activities that occur under your account. ” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “All payments for Transactions are non-refundable and non-transferable except as expressly provided in these Terms. All fees and applicable taxes, if any, are payable in United States dollars. Refunds . All sales are final. But if for any reason you're unhappy with Bardeen, please let us know at support@bardeen.ai — we'd love to hear your feedback, and will be happy to work with you to help create the best experience possible. Bardeen may consider refund requests on a case-by-case basis, and decisions on whether to grant a refund request are in the sole discretion of Bardeen. Canceling One-Time Payment or Subscription . If something unexpected happens in the course of completing a Transaction, we reserve the right to cancel your Transaction for any reason; if we cancel your Transaction we’ll refund any payment you have already remitted to us for such Transaction. Without limiting the foregoing, you may cancel your Subscription at any time, but please note that such cancellation will be effective at the end of the then-current Subscription period. YOU WILL NOT RECEIVE A REFUND OF ANY PORTION OF THE SUBSCRIPTION FEE PAID FOR THE THEN CURRENT SUBSCRIPTION PERIOD AT THE TIME OF CANCELLATION. You may cancel your Subscription via the functionality of the Services. You will be responsible for all Subscription Fees (plus any applicable taxes and other charges) incurred for the then-current Subscription period. If you cancel, your right to use the Services will continue until the end of your then current Subscription period and will then terminate without further charges. ” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Bardeen requires payment of a fee for use of the Services (or certain portions thereof) and you agree to pay such fees. You may make a one-time payment for specific aspects or features of the Services (“ One-Time Payment ”), and you may purchase a monthly or annual subscription (“ Subscription ”) for your use of the Services. General . Whether you make a One-Time Payment or purchase a Subscription (each, a “ Transaction ”), you expressly authorize us (or our third-party payment processor) to charge you for such Transaction. We may ask you to supply additional information relevant to your Transaction, including your credit card number, the expiration date of your credit card and your email and postal addresses for billing and notification (such information, “ Payment Information ”). You represent and warrant that you have the legal right to use all payment method(s) represented by any such Payment Information. When you initiate a Transaction, you authorize us to provide your Payment Information to third parties so we can complete your Transaction and to charge your payment method for the type of Transaction you have selected (plus any applicable taxes and other charges). You may need to provide additional information to verify your identity before completing your Transaction (such information is included within the definition of Payment Information). By initiating a Transaction, you agree to the pricing, payment and billing policies applicable to such fees and charges, as posted or otherwise communicated to you. ” | Captured 2026-07-19Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.