Workflow & Automation · cardamon.aiCardamon
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Prohibits the sale or rental of personal data and restricts sharing to identified categories of service providers — cloud hosting, analytics, and payment processors — that assist in platform operation, limiting data disclosure to operational necessity.
States that personal information is retained only as long as necessary to fulfill stated purposes or to comply with legal, tax, and regulatory obligations, establishing a purpose-linked and compliance-linked retention limitation.
Disclaims responsibility for third-party websites' or services' privacy practices, placing the burden on users to review those policies — a liability-limiting disclaimer regarding third-party conduct.
How to read this page: Overall risk rates what Cardamon's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 20 citationsstaticLast captured 2026-08-28
- Terms of ServiceVerified - read in full - 0 citationsLast captured 2026-08-04
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" We do not sell or rent your personal data. We may share limited data with: Service providers that help us operate (e.g., cloud hosting, analytics, payment processors)."
Prohibits the sale or rental of personal data and restricts sharing to identified categories of service providers — cloud hosting, analytics, and payment processors — that assist in platform operation, limiting data disclosure to operational necessity.
AI-generated interpretation, not legal advice.
" We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations."
States that personal information is retained only as long as necessary to fulfill stated purposes or to comply with legal, tax, and regulatory obligations, establishing a purpose-linked and compliance-linked retention limitation.
AI-generated interpretation, not legal advice.
" We use your data to: Deliver and maintain our platform and services."
States that collected data is used to deliver and maintain the platform and services, establishing service delivery as a declared processing purpose.
AI-generated interpretation, not legal advice.
" Respond to inquiries and provide customer support."
States that data is used to respond to inquiries and provide customer support, identifying customer support as a processing purpose.
AI-generated interpretation, not legal advice.
" Personalize user experience and improve product performance."
States that data is used to personalize user experience and improve product performance, identifying personalization and product improvement as processing purposes.
AI-generated interpretation, not legal advice.
" Send updates, product announcements, or marketing communications (you can opt out anytime)."
States that data is used to send updates, product announcements, or marketing communications, and grants users a right to opt out of such communications at any time.
AI-generated interpretation, not legal advice.
" Ensure compliance with legal obligations and prevent misuse or fraud."
States that data is used to ensure compliance with legal obligations and to prevent misuse or fraud, identifying legal compliance and security as processing purposes.
AI-generated interpretation, not legal advice.
" For users in the EU, our processing of personal data is based on: Your consent."
States that processing of personal data for users in the relevant region is based on consent as a legal basis, defining a foundational justification for processing activities.
AI-generated interpretation, not legal advice.
" Legitimate interests (to improve and secure our platform)."
Identifies legitimate interests — specifically improving and securing the platform — as a legal basis for processing, defining a third justification and its stated scope.
AI-generated interpretation, not legal advice.
" We collect information to provide and improve our services. This may include:"
States that the controller collects information for the purpose of providing and improving services, establishing a stated purpose limitation for data collection activities.
AI-generated interpretation, not legal advice.
" Any information you choose to provide in support or contact forms."
Discloses collection of any information users voluntarily submit via support or contact forms, identifying a category of user-provided personal data.
AI-generated interpretation, not legal advice.
" Device and session information for performance and security monitoring."
Discloses automatic collection of device and session information for performance and security monitoring purposes, identifying a data category and its stated use.
AI-generated interpretation, not legal advice.
" Our Privacy Policy outlines how we collect, use, and protect your personal information. Your privacy and security are our priorities."
Introductory statement defining the document's scope — it describes the policy as governing collection, use, and protection of personal information, establishing the overarching purpose of the document.
AI-generated interpretation, not legal advice.
" We apply strict technical and organizational measures to protect your data — including encryption, access control, and continuous system monitoring — to prevent unauthorized access, loss, or disclosure. Depending on your location, you may have the right to: Access, correct, or delete your personal data."
Imposes an obligation on the controller to apply technical and organizational security measures — including encryption, access control, and continuous monitoring — to prevent unauthorized access, loss, or disclosure; also grants users a location-contingent right to access, correct, or delete their personal data.
AI-generated interpretation, not legal advice.
" Our website uses cookies and similar technologies for analytics and user experience optimization. You can adjust your browser settings to refuse or delete cookies."
Describes the use of cookies and similar technologies for analytics and user experience optimization, and grants users a procedure to adjust browser settings to refuse or delete cookies — establishing both a data use practice and a user opt-out mechanism.
AI-generated interpretation, not legal advice.
" We may update this Privacy Policy periodically. Changes will be reflected with a new “Last Updated” date. Significant updates will be communicated directly to users when required."
Establishes the procedure for updating the Privacy Policy, including reflecting changes with a new date and communicating significant updates directly to users when required — creating an obligation around notice of material changes to data practices.
AI-generated interpretation, not legal advice.
" Our website may include links to third-party websites or services. We are not responsible for their privacy practices, so we encourage you to review their policies."
Disclaims responsibility for third-party websites' or services' privacy practices, placing the burden on users to review those policies — a liability-limiting disclaimer regarding third-party conduct.
AI-generated interpretation, not legal advice.
" Information provided by partners or integrations you authorize (e.g., CRM, analytics, or compliance tools)."
Discloses that data may be received from authorized partners or integrations such as CRM, analytics, or compliance tools, identifying third-party data sources and the condition of user authorization.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Cardamon's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Cardamon's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Cardamon's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Cardamon requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Cardamon's published policies yet.
What the policies actually cover
0 topicsNone of Cardamon's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations.”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“Performance of a contract. Legitimate interests (to improve and secure our platform). Compliance with legal requirements. 4. Data Retention We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations. 5. Data Sharing & Transfers We do not sell or rent your personal data. We may share limited data with: Ser...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations.”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“You may not copy, modify, or distribute any part of our Service without written permission. 5. Disclaimers Cardamon provides its Services on an “as is” and “as available” basis. We do not guarantee that the platform will always be uninterrupted or error-free. Cardamon is not responsible for compliance failures arising from incorrect or incomplete data provided by clients. 6. Limitation of Liability To the maximum ...”Open source citation
The clause affirms user ownership or retention of rights.
“Terms of Service | Cardamon AI ')"> Last Updated on: Nov 10, 2025 Terms of Service Terms of Service These Terms of Service (“Terms”) govern your use of Cardamon’s products, platforms, and services (“Services”). By accessing or using our Services, you agree to be bound by these Terms. Please read them carefully. These Terms of Service (“Terms”) govern your use of Cardamon’s products, platforms, and services (“Servi...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 3 |
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 2 |
| Free | indemnity liability | worsens | HIGH | 2 |
| Standard | data retention | conditional | MEDIUM | 3 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“We do not sell or rent your personal data. We may share limited data with: Service providers that help us operate (e.g., cloud hosting, analytics, payment processors).”Open timeline citation
Latest stance: sale or sell on privacy data use
“We do not sell or rent your personal data. We may share limited data with: Service providers that help us operate (e.g., cloud hosting, analytics, payment processors).”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations.”Open timeline citation
Latest stance: liability limited on indemnity liability
“You may not copy, modify, or distribute any part of our Service without written permission. 5. Disclaimers Cardamon provides its Services on an “as is” and “as available” basis. We do not guarantee that the platform will always be uninterrupted or error-free. Cardamon is not responsible for compliance failures arising from incorrect or incomplete data provided by clients. 6. Limitation of Liability To the maximum extent permitted by law, Cardamon is not liable for any indirect, incidental, or consequential damages, including data loss or service interruption. 7. Termination We reserve the right to suspend or terminate your access to the Services if you breach these Terms or engage in misuse of our platform. 8. Governing Law These Terms are governed by and interpreted in accordance with the laws of the United Kingdom (or your relevant jurisdiction) . Disputes will be resolved exclusively in courts located in that jurisdiction. 9. Updates to Terms Cardamon may revise these Terms from time to time. The latest version will always be available on our website, with the “Last Updated” date clearly indicated. Product Company Articles Contact Book a Demo Product Get started with Cardamon today! Book A Demo Book A Demo Explore our product Explore our product Get started with Cardamon today! Book A Demo Book A Demo Explore our product Explore our product Get started with Cardamon today! Book A Demo Book A Demo Explore our product Explore our product Address 169 Madison Ave STE 15050, New York, NY 10016, United States of America 124 City Road, London, United Kingdom, EC1V 2NX Menu Home Articles Company Contact Product Horizon Scanning Obligation Mapping Gap Analysis AI Reg Search Contact us hello@cardamon.ai © 2025 Cardamon Ltd Privacy Policy / Terms of Service Cookie Policy”Open timeline citation
Latest stance: user retains rights on data retention
“Terms of Service | Cardamon AI ')"> Last Updated on: Nov 10, 2025 Terms of Service Terms of Service These Terms of Service (“Terms”) govern your use of Cardamon’s products, platforms, and services (“Services”). By accessing or using our Services, you agree to be bound by these Terms. Please read them carefully. These Terms of Service (“Terms”) govern your use of Cardamon’s products, platforms, and services (“Services”). By accessing or using our Services, you agree to be bound by these Terms. Please read them carefully. 1. Overview Cardamon provides AI-powered compliance and risk management tools designed to automate regulatory mapping, monitoring, and analysis. By using our Services, you confirm that you are authorized to accept these Terms on behalf of your organization. 2. Use of Services You must use the Services only for lawful purposes and in accordance with these Terms. Unauthorized access, data scraping, or reverse engineering of our platform is strictly prohibited. We may update, modify, or discontinue any Service feature at any time. 3. Data & Privacy Your use of our Services is also governed by our [Privacy Policy] . Cardamon processes client data securely and in compliance with global data protection standards. You retain ownership of your data while granting Cardamon a limited license to process it solely to deliver the Services. 4. Intellectual Property All materials, trademarks, and technology used within the Cardamon platform are the property of Cardamon or its licensors.”Open timeline citation
Latest stance: platform claims or reserves rights on indemnity liability
“You may not copy, modify, or distribute any part of our Service without written permission. 5. Disclaimers Cardamon provides its Services on an “as is” and “as available” basis. We do not guarantee that the platform will always be uninterrupted or error-free. Cardamon is not responsible for compliance failures arising from incorrect or incomplete data provided by clients. 6. Limitation of Liability To the maximum extent permitted by law, Cardamon is not liable for any indirect, incidental, or consequential damages, including data loss or service interruption. 7. Termination We reserve the right to suspend or terminate your access to the Services if you breach these Terms or engage in misuse of our platform. 8. Governing Law These Terms are governed by and interpreted in accordance with the laws of the United Kingdom (or your relevant jurisdiction) . Disputes will be resolved exclusively in courts located in that jurisdiction. 9. Updates to Terms Cardamon may revise these Terms from time to time. The latest version will always be available on our website, with the “Last Updated” date clearly indicated. Product Company Articles Contact Book a Demo Product Get started with Cardamon today! Book A Demo Book A Demo Explore our product Explore our product Get started with Cardamon today! Book A Demo Book A Demo Explore our product Explore our product Get started with Cardamon today! Book A Demo Book A Demo Explore our product Explore our product Address 169 Madison Ave STE 15050, New York, NY 10016, United States of America 124 City Road, London, United Kingdom, EC1V 2NX Menu Home Articles Company Contact Product Horizon Scanning Obligation Mapping Gap Analysis AI Reg Search Contact us hello@cardamon.ai © 2025 Cardamon Ltd Privacy Policy / Terms of Service Cookie Policy”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“Performance of a contract. Legitimate interests (to improve and secure our platform). Compliance with legal requirements. 4. Data Retention We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations. 5. Data Sharing & Transfers We do not sell or rent your personal data. We may share limited data with: Service providers that help us operate (e.g., cloud hosting, analytics, payment processors). Regulatory or legal authorities , if required by law. If data is transferred outside the EU/EEA, we ensure adequate protection through standard contractual clauses or equivalent safeguards. 6. Security We apply strict technical and organizational measures to protect your data — including encryption, access control, and continuous system monitoring — to prevent unauthorized access, loss, or disclosure. Depending on your location, you may have the right to: Access, correct, or delete your personal data. Object to or restrict processing. Withdraw consent at any time. Request data portability. 8. Cookies Our website uses cookies and similar technologies for analytics and user experience optimization. You can adjust your browser settings to refuse or delete cookies. 9. Third-Party Links Our website may include links to third-party websites or services. We are not responsible for their privacy practices, so we encourage you to review their policies.”Open timeline citation
Latest stance: third party or vendor sharing on data retention
“Performance of a contract. Legitimate interests (to improve and secure our platform). Compliance with legal requirements. 4. Data Retention We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, tax, and regulatory obligations. 5. Data Sharing & Transfers We do not sell or rent your personal data. We may share limited data with: Service providers that help us operate (e.g., cloud hosting, analytics, payment processors). Regulatory or legal authorities , if required by law. If data is transferred outside the EU/EEA, we ensure adequate protection through standard contractual clauses or equivalent safeguards. 6. Security We apply strict technical and organizational measures to protect your data — including encryption, access control, and continuous system monitoring — to prevent unauthorized access, loss, or disclosure. Depending on your location, you may have the right to: Access, correct, or delete your personal data. Object to or restrict processing. Withdraw consent at any time. Request data portability. 8. Cookies Our website uses cookies and similar technologies for analytics and user experience optimization. You can adjust your browser settings to refuse or delete cookies. 9. Third-Party Links Our website may include links to third-party websites or services. We are not responsible for their privacy practices, so we encourage you to review their policies.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-28· verified 2026-08-28
- Terms of Service:Last captured 2026-08-04· verified 2026-08-04verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
35 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Cardamon's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Cardamon's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.