Code Four procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on your jurisdiction (e.g., California under CCPA/CPRA, European Economic Area under GDPR), you may have certain rights regarding your personal information, including:” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ • Portability: Request transfer of your data in a structured format ” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ • Correction: Request correction of inaccurate personal information ” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Our marketing infrastructure is primarily located in the United States. Limited subprocessors may process data outside your jurisdiction. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) to protect data transferred internationally.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ • Deletion: Request deletion of your personal information ” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ • Restriction/Objection: Restrict or object to certain processing activities ” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To exercise these rights, please contact us at support@codefour.us . We will authenticate your request and respond within the time period required by applicable law.” | Captured 2026-09-24Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ • Access: Request a copy of the personal information we hold about you ” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Security documentation, including penetration test summaries and security architecture details, is available upon request under NDA. Visit our Trust Center for more information.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. You may request deletion of marketing outreach records by emailing support@codefour.us .” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • Service Providers: Third-party vendors who assist with hosting, analytics, scheduling (e.g., Cal.com), email delivery, and other operational services ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • Advertising Partners: Marketing platforms for targeted advertising (if applicable) ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • Legal Authorities: Government agencies or law enforcement when required by law or to protect our rights ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • Analytics Providers: Services that help us understand how visitors use our Website (e.g., Google Analytics, Mixpanel if implemented) ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • Business Transfers: In connection with a merger, acquisition, or sale of assets ” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Our Services are sold exclusively to police departments and public safety agencies ("Customers"). Access is provided to officers and staff designated by Customer ("Authorized Users"). Individual officers cannot sign up directly; access is provisioned through departmental agreements.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Platform/Services: Processing of data within our law enforcement platform is governed by customer agreements and the Platform Privacy Addendum available at our Trust Center .” | Captured 2026-09-24Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.