Cosupport Ai procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ If you are a Client and need a Data Processing Agreement in addition to the Terms of Services, Reseller Terms of Services, and this Policy, please refer to the Data Processing Agreement .” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Please note that this Policy does not apply to the extent that we process Personal Data in the role of a processor (or a comparable role such as a “service provider” in certain jurisdictions) on behalf of our Clients, including where we collect, use, share or process Personal Data via the Services. In such cases, CoSupport does not own, control or direct the use of any of the Client Data stored or processed by the Client, Users, or End-Users via the Services. Only the Client, Users, or End-Users are entitled to access, retrieve and direct the use of such Client Data. The Client, User, or End-User is the data controller under the applicable regulation for any Client Data containing Personal Data.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We may transfer the Personal Data to countries other than the one in which you live, including transfers to the European Union. To the extent that Personal Data is transferred abroad, we will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with our obligations. We use Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to countries not subject to an adequacy decision by the European Commission or your local legislature and/or regulator.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will retain the Personal Data for a period of time that is consistent with the original purpose of the data collection, or as necessary to comply with our legal obligations, resolve disputes, prevent fraud and abuse, enforce our legal agreements and policies, and/or protect our, the Affiliates’ legal rights and other interests. When we no longer have a legitimate need to process your information, we will delete or anonymize your information from our active databases. We will also securely store the information and isolate it from further processing on backup discs until deletion is possible.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 6.4 Social Media The Website may use social media features, such as the Facebook “like” button, LinkedIn and Twitter sharing features, and other similar widgets (the “Social Media Features” ). You may be given the option by such Social Media Features to post information about your activities on the Website to a profile page of yours that is provided by a third-party social media network in order to share content with others within your network. The Social Media Features are either hosted by the respective social media network, or hosted directly on the Website. To the extent the Social Media Features are hosted by the respective social media networks and you click through to these from the Website, the latter may receive information showing that you have visited the Website. If you are logged in to your social media account, it is possible that the respective social media network can link your visit to the Website with your social media profile. Your interactions with the Social Media Features are governed by the privacy policies (and any other applicable terms) of the respective companies that provide the relevant Social Media Features.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Except as described in this Policy, we will not intentionally disclose the Personal Data or Client Data that we collect or store on the Services to third parties without the consent of the applicable Visitor, User, End-User, or Client. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 6.2 Service Providers We work with third party service providers who provide website, application development, hosting, maintenance, security and fraud detection, and other services for us. These third parties may have access to, or process Personal Data or Client Data as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Except as provided in this Policy, CoSupport does not independently cause Client Data containing Personal Data stored in connection with the Services to be transferred or otherwise made available to third parties, except to third party sub-processors who may process such data on behalf of CoSupport in connection with CoSupport’s provision of the Services to Clients.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 6.8 Change of Ownership Information about Users, End-Users, and Visitors, including Personal Data, may be disclosed and otherwise transferred to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of the User, End-User, or Visitor Data commits to a privacy policy that has terms substantially consistent with this Policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 6.3 Affiliates We may share the information with any subsidiaries, joint ventures, or other companies or products under our common control (the "Affiliates" ), in which case we will require the Affiliates to honor this Privacy Policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Information from third party providers of business information: We may receive information about you from third party providers of business information, including your name, email addresses, phone numbers, and others, for the purposes of the Services, that may interest you, delivering personalized communications, event promotion. We may combine these information with information we collect through other ways described above. The collection of your information by these third party providers is governed by their privacy policies.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 6.7 Law Enforcement, Legal Process and Compliance We may disclose Personal Data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies. We also reserve the right to disclose Personal Data or other information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the Services and the Website and any facilities or equipment used to make the Services and the Website available, or (v) protect our property or other legal rights, enforce our legal agreements and policies, or protect the rights, property, or safety of others.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Client Data may be physically or electronically transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, for the sole purpose of continuing the operation of the Services, and only if the recipient of the Client Data commits to a privacy policy that has terms substantially consistent with this Policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 6.6 Non Personally Identifiable Information We may make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our Clients’, Users’, End-Users’, and Visitors’ interests, habits, and usage patterns for certain programs, content, and/or functionality available through the Services, all of the foregoing being subject to additional limits on use of your data as stated in this Policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Information from the Reseller and service providers: If you contact any of the Reseller, or otherwise express interest in any of the Services to them, the Reseller may pass your name, email address, company name and other information to CoSupport. If you register for or attend an event that is sponsored by CoSupport, the event organizer may share your information with us. CoSupport may also receive information about you from review sites if you comment on any review of the Services, and from other third-party service providers that we engage for marketing the Services.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.