Decoda Health procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ This Privacy Notice is intended to provide you with information about what personal data Decoda Health collects about you and how it is used. If you wish to confirm that Decoda Health is processing your personal data, or to have access to the personal data Decoda Health may have about you, please contact us. You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Decoda Health might have received the data from Decoda Health; what the source of the information was (if you didn't provide it directly to Decoda Health); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Decoda Health if it is inaccurate. You may request that Decoda Health erase that data or cease processing it, subject to certain exceptions. You may also request that Decoda Health cease using your data for direct marketing purposes. In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Decoda Health processes your personal data. When technically feasible, Decoda Health will—at your request—provide your personal data to you. Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, Decoda Health will provide you with a date when the information will be provided. ” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ The European Union's General Data Protection Regulation (GDPR) and other countries' privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Decoda Health has its headquarters in the United States. Information we collect about you will be processed in the United States. By using Decoda Health's services, you acknowledge that your personal information will be processed in the United States. The United States has not sought nor received a finding of "adequacy" from the European Union under Article 45 of the GDPR. Pursuant to Article 46 of the GDPR, Decoda Health is providing for appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the EEA and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when the new draft model clauses are approved. Depending on the circumstance, Decoda Health also collects and transfers to the U.S. personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest of Decoda Health in a manner that does not outweigh your rights and freedoms. Decoda Health endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Decoda Health and the practices described in this Privacy Statement. Decoda Health also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate. Since it was founded, Decoda Health has received zero government requests for information. For more information or if you have any questions, please contact us at privacy [at] decodahealth [dot] com” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “If for some reason access is denied, Decoda Health will provide an explanation as to why access has been denied. For questions or complaints concerning the processing of your personal data, you can email us at founders [at] decoda [dot] health. Alternatively, if you are located in the European Union, you can also have recourse to the European Data Protection Supervisor or with your nation's data protection authority.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Your personal data is stored by Decoda Health on its servers, and on the servers of the cloud-based database management services Decoda Health engages, located in the United States. Decoda Health retains service data for the duration of the customer's business relationship with Decoda Health and for a period of time thereafter, to analyze the data for Decoda Health's own operations, and for historical and archiving purposes associated with Decoda Health's services. Decoda Health retains prospect data until such time as it no longer has business value and is purged from Decoda Health systems. All personal data that Decoda Health controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at: founders [at] decoda [dot] health” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes. The Decoda Health website connects with third-party services such as Facebook, LinkedIn, Twitter and others. If you choose to share information from the Decoda Health website through these services, you should review the privacy policy of that service. If you are a member of a third-party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The personal information Decoda Health collects is stored on secure servers managed by trusted third-party service providers. These providers are selected for their commitment to maintaining confidentiality and ensuring the integrity of your data. They are utilized solely for data storage and retrieval, and do not access your personal information for any other purposes. Occasionally, Decoda Health may engage with various third-party services to communicate with you, including but not limited to information regarding our products, services, and events. Our selection of third-party service providers may change over time to align with our commitment to providing the best service and maintaining the highest standards of data security. We do not otherwise reveal your personal data to non-Decoda Health persons or businesses for their independent use unless: (1) you request or authorize it; (2) it's in connection with Decoda Health-hosted and Decoda Health co-sponsored conferences as described above; (3) the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; or (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement .” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ We offer no free trial to new users who register with the Services. The account will be charged according to the users chosen subscription at the end of the free trial, if one was established at some point.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ If you are unsatisfied with our services, please email us at founders [at] decodahealth [dot] com or call us at +1 (519) 588-9603. You can cancel your subscription at any time by contacting us using the contact information provided below. Your cancellation will take effect as per the terms outlined in the Enterprise Services Agreement.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.