Skip to main content
Platform Review
PricingSign in
← All platforms
Workflow & Automation · energent.ai

CambioML

Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskLOWReviewed 2026-08-12
Creator: low · GRC: low · Counsel: low
Benchmark

No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.

46 verified findings6 policy surfaces1/1 core docs verified

Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.

Risk triage

Watch: Data retention

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
5
medium
2
low
1/1
docs
Trains on your data?
Not yet assessed
no verified finding covers this surface yet
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →

How to read this page: Overall risk rates what CambioML's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Partially verifiedWorkflow & Automation

Partially verified — Privacy Policy — Verified (read in full, 46 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Terms not yet captured

AIRIN has not yet captured a gate-verified Terms of Service document for this platform.

Document status
  • Privacy Policy
    Verified - read in full - 46 citationsstaticLast captured 2026-08-12
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Data retention

Establishes an obligation to retain personal information only as long as necessary for service provision, legal obligations, or rights protection, and to promptly process or delete information when it is no longer needed or upon user request, with retention periods determined by specified factors.

" We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal r..."
📍 § 5 (Retention)Jump to exact text →
plan language
Subprocessors & data sharing

Introduces the category of legal compliance scenarios under which information may be shared with advisors, regulatory bodies, or government agencies, serving as a header for the enumerated legal sharing triggers that follow.

" Legal Compliance Scenarios : Sharing information with advisors, regulatory bodies, or government agencies in the following situations:"
📍 § 3 (How and Why We Share Your Information)Jump to exact text →
plan language
Subprocessors & data sharing

Grants permission to share information in response to legal and regulatory requirements, court orders, or government requests.

" Responding to legal and regulatory requirements, court orders, or government requests"
📍 § 3 (How and Why We Share Your Information)Jump to exact text →
plan language
Audit rights / DPA / residency

Imposes an obligation to adhere to lawful data transfer mechanisms, including named standard contractual clauses and relevant local addenda, when transferring personal data internationally, ensuring appropriate protection during cross-border processing by the company and its partners.

" To support global business operations, we and our partners may transfer, store, and process your personal information worldwide (including in the European Union, United Kingdom, and United States). For residents of the European Union, Swit..."
📍 § 7 (International Data Transfers)Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 5
Tier-specific - 0
Total citations - 46
Severity
Surface
Document
Tier
Privacy & data use
High
" Right to Access Information and Data Portability : You have the right to obtain a copy of your personal information that we hold, understand how we use and disclose your information, and how we have processed your data in the past. You can also request that we provide specific information in a standardized, commonly used machine-readable format and transfer it to you or a third party you designate."
§ 8 (How You Can Exercise Your Personal Rights)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants users the right to access a copy of their personal information, understand its use and disclosure history, and request transfer of specific data in a standardized machine-readable format to themselves or a designated third party.

AI-generated interpretation, not legal advice.

Data retention
High
" We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to respecting your control over your personal data while meeting our business needs."
§ 5 (Retention)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Establishes an obligation to retain personal information only as long as necessary for service provision, legal obligations, or rights protection, and to promptly process or delete information when it is no longer needed or upon user request, with retention periods determined by specified factors.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" To provide the Services, we may need to share necessary information with the following categories of third parties:"
§ 3 (How and Why We Share Your Information)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Introduces the categories of third parties with whom the company may share necessary information in order to provide the Services, framing the subsequent enumerated sharing scenarios.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" Service Supporters : Disclosure of necessary personal information to third-party service providers who assist in providing the Services."
§ 3 (How and Why We Share Your Information)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants permission to disclose necessary personal information to third-party service providers who assist in delivering the Services, establishing a subprocessor sharing basis.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" When necessary, we will share your information with trusted third parties and service providers to provide services, meet legal requirements, and achieve other purposes detailed later in this policy."
Privacy Policy › “Fulfill our legal obligations”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants the company permission to share user information with trusted third parties and service providers when necessary to provide services, meet legal requirements, and other purposes described later in the policy.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes."
§ 3 (How and Why We Share Your Information)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Prohibits selling or sharing personal information with third parties for targeted advertising purposes, and states this prohibition has also applied historically to information of individuals under 16 — user-favorable restriction on commercial data sharing.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" To optimize your user experience, we need to process your personal information. If you do not wish to have your personal information processed as described in this policy, or if you are under 18 years of age, please stop using our Services."
Privacy Policy › “Effective Date: February 27, 2025”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Restricts access to users who consent to personal information processing as described, and expressly excludes users under 18 years of age from using the Services, conditioning continued use on acceptance of processing terms.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Our Services are designed for adults and not intended for children. We do not knowingly solicit or collect personal information from children. According to our Terms of Service, all users must be at least 18 years old to use our Services. If you discover that we have collected personal information from minors without guardian consent, please contact us immediately, and we will promptly delete the relevant data."
§ 6 (Children's Personal Information)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Restricts the service to adults aged 18 and over, prohibits knowingly collecting personal information from children, and imposes an obligation to promptly delete any such data collected without guardian consent upon notification — protective of minors' data.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Please note that the above rights are not absolute and may only apply in specific situations or may be reasonably refused."
§ 8 (How You Can Exercise Your Personal Rights)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Limits the scope of the rights described in preceding segments by clarifying they are not absolute and may only apply in specific situations or be reasonably refused.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" Disclosure at Your Request : When you explicitly instruct or contractually stipulate disclosure."
Privacy Policy › “Protecting the rights and personal safety of all parties”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines an exception permitting disclosure of personal information when the user explicitly instructs or contractually stipulates such disclosure, carving out user-directed sharing from general disclosure restrictions.

AI-generated interpretation, not legal advice.

Audit rights / DPA / residency
High
" To support global business operations, we and our partners may transfer, store, and process your personal information worldwide (including in the European Union, United Kingdom, and United States). For residents of the European Union, Switzerland, or the United Kingdom, we strictly adhere to lawful data transfer mechanisms, such as the European Commission's Standard Contractual Clauses and relevant local regulations (such as the UK's International Data Transfer Addendum), ensuring your personal data receives appropriate protection during cross-border transfers."
§ 7 (International Data Transfers)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Imposes an obligation to adhere to lawful data transfer mechanisms, including named standard contractual clauses and relevant local addenda, when transferring personal data internationally, ensuring appropriate protection during cross-border processing by the company and its partners.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We use your basic information to create and maintain your account, which is necessary for fulfilling our contract with you."
§ 2 (How We Use Your Information)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants permission to use basic user information to create and maintain accounts, characterizing this processing as necessary for contractual performance.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" To provide you with services, we use your basic information, communication content, application information, browser and device information, service usage data, and other information you submit to us, which is also necessary for fulfilling our contract with you."
§ 2 (How We Use Your Information)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants permission to use multiple data categories (basic information, communication content, device/browser data, usage data, and other submitted information) to provide services, characterizing this processing as necessary for contractual performance.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Right to Complain : You have the right to file a complaint with your local data protection authority."
§ 8 (How You Can Exercise Your Personal Rights)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Grants users the right to file a complaint with their local data protection authority, providing an external enforcement avenue independent of the company.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We primarily collect and use your information to:"
Privacy Policy › “Effective Date: February 27, 2025”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Introduces the primary stated purposes for which information is collected and used, serving as a forward-reference summary to enumerated purposes that follow.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Cambio Corp. (hereinafter referred to as "we," "us," "our") has established this Privacy Policy to explain how we collect, use, disclose, and protect your information when you use our software-as-a-service products provided through the Energent.ai . These services include related software, applications, and websites (collectively referred to as the "Services")."
Privacy Policy › “Effective Date: February 27, 2025”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines the identity of the data controller ('Cambio Corp.'), the scope of the policy (collection, use, disclosure, protection of information), and the covered services ('Energent.ai' platform, related software, applications, and websites), establishing foundational definitions for the remainder of the document.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" By using our Services, you acknowledge that you have read and agree to all terms of this Privacy Policy. If you do not agree to these terms, please immediately cease using or accessing our applications. We strongly recommend that you read this policy in detail before taking any action."
Privacy Policy › “Effective Date: February 27, 2025”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Imposes a user obligation of acceptance: by using the Services the user is deemed to have read and agreed to the policy; instructs non-consenting users to cease use immediately, creating a binding consent mechanism as a condition of access.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We collect personal information that you provide to us (including basic information such as first name, last name, email address, password), user content (any personal information collected when you use our Services, including information provided in inputs, file uploads, feedback, or outputs), and communication content (any communications we exchange, including chatbot interface communications, survey responses, or feedback)."
§ 1 (Information We Collect)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Defines the categories of personal information actively collected from users: basic account information, user content (inputs, uploads, feedback, outputs), and communication content (chatbot communications, surveys, feedback), establishing the scope of data collection.

AI-generated interpretation, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from CambioML's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

0 verified clauses

Clauses in CambioML's policies that work in your favour — commitments the platform made to you.

No protective clause has been verified in CambioML's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.

📋 Rules you must follow

0 verified clauses

What CambioML requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in CambioML's published policies yet.

What the policies actually cover

0 topics

None of CambioML's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

75
clauses
15
patterns
15
stances
privacy sharing · 12data retention · 2ip ownership · 1
data retentionMEDIUM§ 5 (Retention)

The clause allows indefinite, perpetual, or necessity-based retention.

We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to r...
Open source citation
data retentionLOW§ 5 (Retention)

The clause provides a deletion or time-bounded retention path.

We retain your personal information for 30 days. Once this retention period ends, we begin deleting the information from our systems. The deletion process may take up to an additional 30 days to complete. We may retain information for longer only when required by law or when necessary to establish, exercise, or defend legal claims.
Open source citation
ip ownershipHIGH§ 5 (Retention)

The clause appears to reserve or claim ownership rights for the platform.

We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to r...
Open source citation
privacy sharingHIGH§ 3 (How and Why We Share Your Information)

The clause permits sale of personal data or information.

We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.
Open source citation
privacy sharingHIGH§ 3 (How and Why We Share Your Information)

The clause permits sale of personal data or information.

We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersdata retentionimprovesLOW1
All applicable tiersprivacy data useworsensHIGH5
All applicable tierssubprocessors data sharingworsensHIGH7
Team / Businessdata retentionconditionalMEDIUM2

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

worsenedhigh materialityJul 19Aug 12, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
Right to Access Information and Data Portability : You have the right to obtain a copy of your personal information that we hold, understand how we use and disclose your information, and how we have processed your data in the past. You can also request that we provide specific information in a standardized, commonly used machine-readable format and transfer it to you or a third party you designate.
Before citation
After · high
We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.
After citation
improvedhigh materialityJul 19Aug 12, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.
Before citation
After · medium
To provide the Services, we may need to share necessary information with the following categories of third parties:
After citation
improvedmedium materialityJul 19Aug 12, 2026

retention improved from medium/indefinite or necessity based to low/deletion or time bound.

Before · medium
We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods. When information is no longer needed or you request deletion, we will promptly process it. We are committed to respecting your control over your personal data while meeting our business needs.
Before citation
After · low
We retain your personal information for 30 days. Once this retention period ends, we begin deleting the information from our systems. The deletion process may take up to an additional 30 days to complete. We may retain information for longer only when required by law or when necessary to establish, exercise, or defend legal claims.
After citation
Aug 12, 2026data sharingHIGH

Latest stance: sale or sell on privacy data use

We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.
Open timeline citation
Aug 12, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.
Open timeline citation
Aug 12, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

To provide the Services, we may need to share necessary information with the following categories of third parties:
Open timeline citation
Aug 12, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Service Supporters : Disclosure of necessary personal information to third-party service providers who assist in providing the Services.
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-08-12· verified 2026-08-12

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

75 findings first captured First scan: July 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of CambioML's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified CambioML's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from CambioML's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.