camelAI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We must assist you in meeting your GDPR obligations in relation to the security of processing, the notification of personal data breaches, and data protection impact assessments.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ These Service Terms incorporate the Standard Contractual Clauses between controllers and processors (“Controller-to-Processor Clauses”) and the Standard Contractual Clauses between processors (“Processor-to-Processor Clauses”) approved by the European Commission Implementing Decision (EU) 2021/914 of 4 June 2021 (the “SCCs”). The SCCs will only apply when: (i) the GDPR applies to your use of the Services to process Subject Data; and (ii) Subject Data is transferred either directly or via onward transfer, to a country outside of the European Economic Area not recognised by the European Commission as providing an adequate level of protection for personal data subject to GDPR (together a “Data Transfer”). When you are a controller (as defined in the GDPR), the Controller-to-Processor Clauses will apply to a Data Transfer. When you are a processor (as defined in the GDPR), the Processor-to-Processor Clauses will apply to a Data Transfer.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ The General Data Protection Regulation (GDPR) is a comprehensive set of regulations made by the European Union that dictates what companies like CamelAI must do in order to properly protect our customers’ data. These Terms act as a contract between CamelAI and each customer, i.e. you. Note: In GDPR terminology, we are the “Data Processor” and you (our customer) are the “Data Controller”. “Data subjects” are your customers, or end users, which you store within the Services.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We must submit to audits and inspections, provide the controller with whatever information it needs to ensure that they are both meeting their Article 28 obligations, and tell the controller immediately if it is asked to do something infringing the GDPR or other data protection law of the EU or a member state.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We must provide any needed assistance to you in order to allow Data Subjects to exercise their rights under the GDPR.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ The following GDPR Data Processing Addendum (“DPA”) forms part of the Terms entered into by and between the Customer and CamelAI. The purpose of this DPA is to reflect the parties’ agreement with regard to the processing of personal data in accordance with the requirements of Data Protection Legislation as defined below. By using our Services, you agree to be bound to the full Terms, including the DPA. In the course of providing the Services to the Customer in accordance with the Agreement, CamelAI may process personal data on behalf of the Customer. CamelAI agrees to comply with the following provisions with respect to any personal data submitted by or for the Customer to the Services or collected and processed by or for the Customer through the Services. This DPA shall not replace or supersede any agreement or addendum relating to processing of personal data negotiated by Customer and referenced in the Agreement, and any such individually negotiated agreement or addendum shall apply instead of this DPA. In this DPA, “Data Protection Legislation” means the European Directives 95/46/EC and 2002/58/EC (as amended by Directive 2009/136/EC) and any legislation and/or regulation implementing or made in accordance with them, or which amends, replaces, re-enacts or consolidates any of them (including the General Data Protection Regulation [Regulation EU 2016/279]), and all other applicable laws relating to processing of personal data and privacy that may exist in any relevant jurisdiction.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ CamelAI will act as a Data Processor to you by allowing you to store and retrieve any information that you store in our Services, as well as running reports and analysis on that information. This processing will continue from the time you create an account with us until you close the account. In order to prevent accidental loss of data, by default we retain a backup of data for up to 30 days after an account is closed. This backup is deleted after the account has been closed long enough to be sure you won’t need to recover any of the data. You may request at any time that we delete all of the data in your CamelAI account. Upon request, we may ask you for additional information for the purpose of verifying your identity to ensure that you have permission to enact the request. Please note that after the data has been deleted, it cannot be recovered.” | Captured 2026-09-24Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We may remove or delete Your Data within a reasonable period of time after the termination of your Subscription Term. We cannot provide data recovery services after this occurs.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Services may enable you to access, interact with or purchase products or services provided by third parties, including from third party websites or applications linked to or accessible through the Services (“Third Party Services”). CamelAI provides access to Third Party Services as a convenience only, and such access does not imply any warranties, representations, endorsements, approvals or verification by CamelAI of such Third Party Services. You acknowledge that the use of Third Party Services may be subject to the terms and conditions of such Third Party Services, and that any contract entered into or transaction completed through Third Party Services is between only you and the relevant third party.” | Captured 2026-09-24Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If you are purchasing a paid subscription for the Services, you must provide CamelAI’s payment provider, Stripe, with a valid credit card or other form of payment instrument approved by Stripe to pay for the subscription fee set out in the Subscription Plan. You agree that Stripe has permission to retain and/or share with financial institutions and payment processing firms your submitted payment information in order to process your purchase. You agree that CamelAI may bill your credit card or other form of payment instrument through Stripe, approved by CamelAI in advance and on a periodic basis in accordance with the Subscription Plan.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ If any amounts due under these Terms are not received by CamelAI by the due date set out in the Subscription Plan, CamelAI may: i) temporarily suspend your access to the Services until payment is received in full; or ii) cancel your subscription and suspend your access to the Services.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ You may not exceed your account’s allotted resource or rate limits, which is determined by your Subscription. We may offer some leeway to this and may attempt to reach out to the Customer in case an issue arises. Nonetheless, if we deem such action necessary based on your violation of this Agreement, or if we have detected attempts to bypass or exceed your account’s resource limits, including sharing admin accounts between individuals, we may (1) remove Your Data from the Services or (2) suspend your access to the Services. We will generally alert you before we take such action and give you a reasonable opportunity to resolve the issue, but if we determine that your actions endanger the operation of the Service or other users, we may suspend your access immediately without notice. We have no liability to you for removing or deleting Your Data or suspending your access to any Services as described in this section. We may impose new, or may modify existing, resource limits for the Services at any time at our discretion, with or without notice to you.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ You acknowledge that from time to time CamelAI may apply updates to the Services and that such updates may result in changes in the appearance and/or functionality of the Services (including the addition, modification, or removal of functionality, features, or content), and you agree to such changes. Without limiting the foregoing, CamelAI may, in its sole discretion, change the functionality associated with certain Subscription Plans, including but not limited to discontinuing all or part of the Services offered on a free subscription basis.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ You may cancel, upgrade or downgrade your subscription at any time through your Stripe account page. Following an upgrade or downgrade of your subscription, you will be charged or issued a credit, as applicable, for the difference in fees between your old and new subscriptions prorated for the number of days remaining in the subscription period. Following the cancellation of your subscription, the service will remain active for number of days remaining in the subscription period.” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Your CamelAI account will require at least 1 administrative user (“Admin”). Based on your Subscription Plan, you may be allowed to have more than a single Admin. Do not share Admin accounts between multiple persons. Attempts to exceed your allotted Admin limit may result in suspension of your account (see 1.14).” | Captured 2026-09-24Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ There may be storage limits associated with a particular Service. These limits are described in the services descriptions on our websites or in the Documentation for the particular Service. CamelAI reserves the right to charge for additional storage or overage fees at the rates specified on our website. We may impose new, or may modify existing, storage limits for the Services at any time at our discretion, with or without notice to you.” | Captured 2026-09-24Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.