Coursera AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “Coursera, Inc. (referred to as "we," "us," or "our"), believes in protecting your privacy. This DPF Notice contains supplementary information relating to Personal Data transferred on the basis of the EU-U.S. Data Privacy Framework, the UK extension to the EU-U.S. Data Privacy Framework, or the Swiss-U.S. Data Privacy Framework.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Please contact us with any questions or comments about this DPF Notice, transfer of your Personal Data from the EEA, UK or Switzerland to the U.S., our privacy practices, or your consent choices by email at privacy@coursera.org .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC) available at https://www.edoeb.admin.ch/de . In the context of an onward transfer, Coursera has responsibility for the processing of Personal Data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf. Coursera shall remain liable under the Principles if its agent processes such Personal Data in a manner inconsistent with the Principles, unless Coursera proves that it is not responsible for the event giving rise to the damage.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “As part of our participation in DPF, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission and other authorized statutory bodies.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Coursera, Inc. (referred to as "we," "us," or "our"), believes in protecting your privacy. This DPF Notice contains supplementary information relating to Personal Data transferred on the basis of the EU-U.S. Data Privacy Framework, the UK extension to the EU-U.S. Data Privacy Framework, or the Swiss-U.S. Data Privacy Framework. This DPF Notice should be read in conjunction with Coursera’s Privacy Notice , which provides details of the Personal Data processed, purposes for which Personal Data is collected, processed and disclosed, types of third parties to which Personal Data is disclosed, and rights of individuals. To the extent of any conflict between this DPF Notice and Coursera’s Privacy Notice, this DPF Notice prevails. We participate in and commit to adhering to the EU-U.S. Data Privacy Framework, the UK extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (together the “DPF”) which includes the DPF Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, and recourse, enforcement and liability (the "Principles") for transfers of Personal Data from the EEA, UK and Switzerland, respectively, to the U.S. To learn more about the DPF, please visit the DPF website: https://www.dataprivacyframework.gov . For more information regarding our DPF certification, please click here or search for ‘Coursera’ in the DPF list of participants. ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We keep your Personal Data for no longer than necessary for the purposes for which the Personal Data is collected and processed, to comply with our legal and regulatory obligations, to exercise our legal rights, and to protect ourselves from legal claims. The length of time we retain Personal Data for depends on the purposes for which we collect and use it, the nature of your interaction with us, or as required to comply with applicable laws and to establish, exercise, or defend our legal rights. Biometric facial data generated as part of the identity verification process is deleted upon successful completion of verification and in any event, no later than 2 years after collection. Other information uploaded as part of the identity verification process, including your name, address, date of birth, and a photo identification document, is deleted upon request and in any event, no later than 2 years after collection.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We keep your Personal Data for no longer than necessary for the purposes for which the Personal Data is collected and processed, to comply with our legal and regulatory obligations, to exercise our legal rights, and to protect ourselves from legal claims. The length of time we retain Personal Data for depends on the purposes for which we collect and use it, the nature of your interaction with us, or as required to comply with applicable laws and to establish, exercise, or defend our legal rights.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We try to answer every request promptly where possible, and provide our response within the time period stated by applicable law. Further information for residents of U.S. States which have enacted state privacy laws is available in our U.S. State Privacy Laws Notice . If you request deletion of your Personal Data, we will delete the Personal Data associated with that account, including your learner profile, course history, and any certificates or certifications issued through our platform. Once your account is deleted, certificates and certifications cannot be accessed, verified, or reissued, and we recommend downloading any certificates and certifications you wish to keep before submitting a deletion request. Following deletion, we may retain limited Personal Data where necessary for lawful and legitimate purposes, which may vary depending on your location, such as complying with legal obligations. In addition, residual information may remain within our databases, access logs, or other records, which may or may not contain your Personal Data. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Badge / Certificate Issuers : Coursera may provide limited personal information (including name, email address, and badge metadata) to its third party digital credentialing platform (Credly) to allow you to set up an account with Credly to receive your course completion badge.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may obtain your Personal Data from third parties, including the following: Text and/or Images on third party sites : We may receive Personal Data when you access or log-in to a third party site, e.g., Facebook, from the Sites. This may include the text and/or images of your Personal Data available from the third party site. Survey data : We may receive Personal Data when you provide information in response to a survey operated by a Content Provider. Data relating to your use of partner sites : This may include information such as the amount of time spent on the partner site and pages viewed . Partner sites providing Content Offering-related tools and services to Coursera users may collect non-financial individual-level user data regarding the individual’s use of that partner site while the partner sites provide those services to Coursera. The partner sites may share that data with Coursera for the purpose of improving our Services, the partner site’s services, and the individual’s education experience.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Data relating to your use of partner sites : This may include information such as the amount of time spent on the partner site and pages viewed . Partner sites providing Content Offering-related tools and services to Coursera users may collect non-financial individual-level user data regarding the individual’s use of that partner site while the partner sites provide those services to Coursera. The partner sites may share that data with Coursera for the purpose of improving our Services, the partner site’s services, and the individual’s education experience. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ affected third parties when we believe it is appropriate; to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of Coursera, the Site, our users, customers, or others; and in connection with our Terms of Use and other agreements. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Limited data related to your course activity in ChatGPT (such as your course grade and the reason for that grade) . Coursera uses this information only to track your course progress, help you move through the OpenAI course, and issue your OpenAI course completion badge on OpenAI’s behalf.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Instructors : We may share your Personal Data and your performance in a given Content Offering with the instructor or instructors who taught it, with teaching assistants or other individuals designated by the instructor or instructors to assist with the creation, modification, or operation of the Content Offering, and with the Content Provider(s) with which they are affiliated.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ from third parties, including affiliates, business partners, etc. (e.g., when you complete third party surveys or interact with third party and/or partner sites). For us to provide you with our Products or Services, you may be required to provide Personal Data directly to third parties. Please see the section entitled “Personal Data third parties collect from you directly” for more information. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Coursera may share limited personal information (name, email, course activity, and badge completion data) with OpenAI as necessary to troubleshoot the App and provide related customer support services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ External advisors : Coursera may share your Personal Data with external advisors including lawyers and consultants when we believe it is appropriate (e.g., to protect and defend the rights, property, or safety of Coursera).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ As described in the Privacy Notice, Coursera shares information when needed to deliver and support our services. For OpenAI courses taken through the App: Coursera will provide limited personal information (name, email address and badge metadata) to its third party digital credentialing platform (Credly) to allow you to set up an account with Credly to receive your OpenAI course completion badge.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “To comply with our legal obligations Identity and Contact Data; Account Registration Data; Product or Service Purchase Information; Information about your interests, preferences and affiliations; Content of your Communications; Education, Career and Skills Information; Demographic Information; Personal Data we collect from your device(s); Survey data To disclose and/or transfer your Personal Data to an acquirer, assignee or other successor entity in connection with a sale, merger, or reorganization of all or substantially all of the equity, business, or assets of Coursera, or becomes an affiliate or subsidiary of Coursera. For our legitimate interests to engage in a sale, merger, or reorganization process ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Affiliates, Subsidiaries, or Acquirers . Coursera may disclose and/or transfer your Personal Data to an affiliate, subsidiary, acquirer, assignee or other successor entity in connection with a sale, merger, or reorganization of all or substantially all of the equity, business, or assets of Coursera to which your Personal Data relates.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In addition to the information described in the Privacy Notice, Coursera may receive the following personal information from you, OpenAI, or your employer to support your access to the App and your participation in OpenAI courses: Your name, email address, and similar organization-specific identifiers . Coursera uses this information to create or manage your Coursera account, or enable single sign-on (SSO) if requested by OpenAI or your employer.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Identity and Contact Data; Account Registration Data; Product or Service Purchase Information; Information about your interests, preferences and affiliations; Content of your Communications; Education, Career and Skills Information; Demographic Information; Personal Data we collect from your device(s); Text and/or Images on third party sites; Survey data; Data relating to your use of partner sites To share your Personal Data with government authorities in response to lawful subpoenas, court orders, or other legal processes. To comply with our legal obligations” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Third Party Payment Processing . Coursera provides you with the ability to pay for Content Offerings and other Services using a credit card or other methods through a third party payment processing service provider. Please note that our service provider – not Coursera – collects and processes your financial information. Our third party payment processing service providers include Stripe , Braintree , GPay , ApplePay , PayPal , CashApp , Klarna , RazorPay , and dLocal . Each of these payment processors may use your financial information in accordance with their privacy policy, which is linked above.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Coursera will provide limited personal information (name, email address and badge metadata) to its third party digital credentialing platform (Credly) to allow you to set up an account with Credly to receive your OpenAI course completion badge.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Government Authorities : Coursera may share your Personal Data with various government authorities (such as regulatory bodies, law enforcement activities, and national security organizations) as set out in the Table above including in response to lawful subpoenas, court orders, or other legal processes.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The different Coursera entities share common goals and certain resources. As such, your Personal Data may be shared amongst these entities and our affiliates and subsidiaries, and other affiliated organisations. We may share your Personal Data with third parties as follows: Coursera Contractors . We use various third party service providers, vendors, and contractors (collectively, " Contractors ") to support Coursera’s activities, including the purposes listed in this section of the Privacy Notice. Our Contractors will have access to Personal Data to the extent necessary for provision of their services to Coursera. These Contractors may include vendors and suppliers that provide us with technology, services, and/or content related to the operation and maintenance of the Site or the Content Offerings, or related to Coursera’s other business activities. This may include for targeted advertising and custom audience activities. Access to your Personal Data by these Contractors is limited to the information reasonably necessary for the Contractor to perform its limited function for us. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Coursera Contractors . We use various third party service providers, vendors, and contractors (collectively, " Contractors ") to support Coursera’s activities, including the purposes listed in this section of the Privacy Notice. Our Contractors will have access to Personal Data to the extent necessary for provision of their services to Coursera. These Contractors may include vendors and suppliers that provide us with technology, services, and/or content related to the operation and maintenance of the Site or the Content Offerings, or related to Coursera’s other business activities. This may include for targeted advertising and custom audience activities. Access to your Personal Data by these Contractors is limited to the information reasonably necessary for the Contractor to perform its limited function for us.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | Enterprise | medium | “Coursera Customers . For learners who are part of a Coursera Enterprise program, Coursera may share your course progress, completion status, and other analytics or usage information (" Analytics Data ") with your Coursera Enterprise program for organizational purposes such as verifying enrollment, tracking completion of required or optional training, supporting internal learning and development programs, and generating related reporting.” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “This section applies to all Coursera subscription offerings, including Coursera Lite, Coursera Plus Monthly and Annual plans, and individual course or specialization subscriptions. For Coursera Plus Annual, Coursera offers a 14-day refund period.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.