Brandi AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will retain your information for the duration needed to support our ordinary business activities, operating the Website, the Portal, and interacting with existing and potential customers and suppliers. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements. The overall period of retention is approximately seven years.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your information for the duration necessary to operate the Website, the Portal, and our business, and to interact with customers and suppliers, and thereafter as needed for record-keeping purposes. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We share your information in the following scenarios:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Administering the business relationship with vendors and service providers. Facilitating the Company's use of vendors' and service providers' products and services.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Authorities.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The target entity, legal counsel, and advisors.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Authorities, legal counsel, and advisors.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Complying with a binding request from an authority.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Responding to, handling, and mitigating suspected violations of law in connection with our business.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Legitimate interests in administering contractual obligations with service providers and vendors” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.