Definite procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data we hold about you. For data contained in your institution's connected sources, direct your request to your institution and we will assist it as processor. For anything else, email contact@usedefinite.com .” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Connected source snapshots are retained according to your tenant's configured retention policy. Receipts and evidence packages are append-only records and are retained for the life of your agreement, and you can export them at any time. Account data is retained while your account is active and deleted or anonymized within a reasonable period after closure, except where law requires longer retention.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.