Devin (Cognition AI) procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on where you live, you may be able to exercise certain privacy rights related to your personal information. If any of the rights listed below are not provided for under law for your jurisdiction, we have absolute discretion in providing these rights. Right to access/know and portability : You may have the right to request that we provide you a copy of your personal information held by us, or for details relating to the ways in which we use and disclose your personal information, and how we have used or disclosed your personal information in the past. You may also have the right to request that we provide certain personal information in a structured, commonly used, machine-readable format and make this available to you or a designated third party. Right to deletion/erasure : You may have the right to request to erase your personal information. If you end your Services, we will retain or delete information associated with your account as described in Section 5. Right to rectification/correction : You may have the right to request us to rectify or update any of your personal information that is incomplete or inaccurate. Right to object or restrict processing : You may have the right to restrict or object to us using or transferring your personal information based on our legitimate interests, in the public interest or for direct marketing. We may continue to process your personal information where permitted or required by applicable law. ” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We implement commercially reasonable technical, administrative, and organizational measures intended to protect personal information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, these measures are not a guarantee of absolute security and you acknowledge and accept that your use of our Services is ultimately at your own risk.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ 7.1 Term: The term (“Term”) of this Agreement will commence on the first day the subscription is active and continue in effect for the duration stated in the subscription, and will automatically renew for successive periods of the same duration unless you cancel the Service or we terminate it. YOUR CANCELLATION MUST BE RECEIVED BEFORE THE RENEWAL DATE IN ORDER TO AVOID CHARGES FOR THE NEXT SUBSCRIPTION PERIOD. 7.2 Subscription Termination: You may terminate your subscription at any time. We may suspend or terminate your access to your subscription at any time without notice to you if we believe that you have breached these Terms, or if we must do so in order to comply with law. If we terminate your access to the subscription due to a violation of these Terms or the law, you will not be entitled to any refund. In addition, if you have a subscription, we may terminate the subscription at any time for any other reason. If we exercise this right and you purchased the subscription via our website, we will refund you, on a pro rata basis, the fees you paid for the remaining portion of your subscription after termination. Upon termination of these Terms or your subscription, we may at our option delete any Customer Data or other data associated with your account.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell or share your personal information with third parties for targeted advertising purposes, nor have we done so in the past 12 months. We also do not have actual knowledge that we sell or share for targeted advertising purposes personal information about individuals under 16 years old. We work with service providers and other third parties to help us provide our Services, and as a result we need to provide certain information with these third parties as described below. We disclose, and in the past 12 months, we've disclosed, the categories of personal data set forth in Section 1 with the following categories of third parties: Third Party Service Providers — We provide personal information to third party service providers who help us provide our Services. Other Third Parties — Certain features allow you to display or share information with other users or third parties. For example, you may share Devin AI conversations with other users via shared links. Be sure you trust any user or third party with whom you share information. Professional Advisors, authorities, and regulators — We share your information with our advisors, regulators, tax authorities, law enforcement, and government agencies to: Respond pursuant to applicable law or regulations, court orders, legal process or government requests; Comply with our reporting and information sharing obligations and regulatory authorities; Detect, investigate, prevent, or address fraud and other illegal activity or security and technical issues; and Protect the rights, property, safety of us, our users, or others, including to prevent death or imminent bodily harm.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.