Endstack
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
“We configure our AI provider integrations to opt out of server-side training data storage where the provider supports it (e.g., OpenAI store: false ). However, third-party AI providers are governed by their own terms of service and privacy policies, which you should review:”
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: governing law disputes
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Restricts users from participating in class actions, class arbitrations, or representative proceedings, requiring individual-basis dispute resolution and constituting a class action waiver.
Prohibits activities that could damage, disable, or impair the service or interfere with other users' access.
Mandates binding arbitration under specified arbitration association rules conducted in English for disputes not informally resolved, with arbitration awards enforceable in any court of competent jurisdiction.
How to read this page: Overall risk rates what Endstack's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 41 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 41 citationsLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Defines team membership data — team ID, role, and associated plan — as a specific metadata element stored by Endstack for team-access management.
" Team membership — if applicable, your team ID, role (admin/member), and associated plan"
Enumerates specific purposes for which Endstack uses collected data — service provision, infrastructure maintenance, team management, user communication, AI request processing, and Terms enforcement — linking each purpose to specific data categories, thereby defining the permitted uses of personal data and creating an obligation to limit use to those purposes.
" Provide the Service Account info, instance metadata — to authenticate you, provision your container, and route you to your desktop Maintain and operate infrastructure Instance state, infrastructure metadata — to start/stop containers, ma..."
Specifies that upon termination user access ceases, Endstack may delete the user's container and contents after a reasonable retention period, and account metadata may be retained for legal, regulatory, or legitimate business purposes — defining post-termination data lifecycle obligations and permissions.
" Upon termination, your right to access the Service ceases. We may delete your container and its contents after a reasonable retention period following termination. Account metadata may be retained as required for legal, regulatory, or legi..."
Specifies retention periods and deletion procedures for each data type: account information is retained while active and deleted upon request subject to legal requirements; instance metadata is retained while the instance exists and cleaned up after deletion; container contents are deleted after a reasonable grace period post-termination; AI conversations are stored locally in the user's container and the provider does not retain copies, with a note that AI providers may retain data per their own policies with an opt-out where supported — the non-retention of AI conversations is user-favorable.
" Account information Retained while your account is active. Deleted upon account deletion request, subject to legal retention requirements. Instance metadata Retained while your instance exists. Cleaned up after account deletion. Contai..."
Segment identifies the plan types offered (Individual, Team, Enterprise) and notes that plan details, pricing, features, and usage limits are described on the website and subject to change, establishing the framework of plan-level differences.
" We offer Individual plans and Team plans. Enterprise plans may be offered in the future. Plan details, pricing, features, and usage limits are described on our website and may change over time."
Defines the team plan tier as enabling multiple users to access a shared desktop environment, with the team administrator responsible for managing membership, roles, and permissions.
" Team plans allow multiple users to access a shared desktop environment. The team administrator manages membership, roles, and permissions."
Assigns responsibility to the team administrator to manage access controls and ensure appropriate use by team members in shared desktop environments, while disclosing that all team members may access shared files and resources.
" In shared desktop environments, all team members may have access to shared files and resources. The team administrator is responsible for managing access controls and ensuring appropriate use by team members."
Describes user-level isolation through individual Linux user accounts within shared containers, while disclaiming full isolation by noting shared desktops inherently involve shared resources and advising user judgment about data storage.
" Each user on a team plan has their own Linux user account within the shared container, providing a degree of user-level isolation. However, shared desktops inherently involve shared resources, and users should exercise judgment about what ..."
Clause A explicitly states that personal files and desktop data stay within the user's container and are 'not on our servers,' while Clause B indicates the policy explains how Endstack 'collects' information when users utilize the platform, including desktop containers, creating opposing claims about data handling.
" We designed Endstack so that your personal files, conversations, and desktop data stay within your own container — not on our servers. This policy explains exactly what we do and do not collect."
" This Privacy Policy explains how Endstack ("we," "us," or "our") collects, uses, shares, and protects information when you use the Endstack cloud desktop platform, including the endOS web interface, desktop containers, built-in AI agent, and related services (the "Service") at endstack.com ."
Within one documentClause A states personal data stays within the user's container and not on their servers, while Clause B explicitly states that personal information *is* stored outside the user's container.
" We designed Endstack so that your personal files, conversations, and desktop data stay within your own container — not on our servers. This policy explains exactly what we do and do not collect."
" This is the primary personal information we store outside your container."
Within one documentClause A states conversation data stays within the user's container and not on their servers, while Clause B explicitly lists 'Conversation messages you send to the agent' as data collected to 'Process AI requests'.
" We designed Endstack so that your personal files, conversations, and desktop data stay within your own container — not on our servers. This policy explains exactly what we do and do not collect."
" Provide the Service Account info, instance metadata — to authenticate you, provision your container, and route you to your desktop Maintain and operate infrastructure Instance state, infrastructure metadata — to start/stop containers, manage persistent storage, and ensure uptime Manage teams Team membership, roles — to enforce access controls on shared desktops Communicate with you Email address — for account-related notifications, security alerts, and service updates Process AI requests Conversation messages you send to the agent (see Section 4) Enforce our Terms Account info, instance metadata — to investigate violations and protect the Service "
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Engage in any activity that could damage, disable, or impair the Service or interfere with other users' access"
Prohibits activities that could damage, disable, or impair the service or interfere with other users' access.
AI-generated interpretation, not legal advice.
" You agree to resolve disputes with us on an individual basis and waive any right to participate in a class action, class arbitration, or representative proceeding."
Restricts users from participating in class actions, class arbitrations, or representative proceedings, requiring individual-basis dispute resolution and constituting a class action waiver.
AI-generated interpretation, not legal advice.
" We offer Individual plans and Team plans. Enterprise plans may be offered in the future. Plan details, pricing, features, and usage limits are described on our website and may change over time."
Segment identifies the plan types offered (Individual, Team, Enterprise) and notes that plan details, pricing, features, and usage limits are described on the website and subject to change, establishing the framework of plan-level differences.
AI-generated interpretation, not legal advice.
" Team plans allow multiple users to access a shared desktop environment. The team administrator manages membership, roles, and permissions."
Defines the team plan tier as enabling multiple users to access a shared desktop environment, with the team administrator responsible for managing membership, roles, and permissions.
AI-generated interpretation, not legal advice.
" In shared desktop environments, all team members may have access to shared files and resources. The team administrator is responsible for managing access controls and ensuring appropriate use by team members."
Assigns responsibility to the team administrator to manage access controls and ensure appropriate use by team members in shared desktop environments, while disclosing that all team members may access shared files and resources.
AI-generated interpretation, not legal advice.
" Each user on a team plan has their own Linux user account within the shared container, providing a degree of user-level isolation. However, shared desktops inherently involve shared resources, and users should exercise judgment about what data they store in shared environments."
Describes user-level isolation through individual Linux user accounts within shared containers, while disclaiming full isolation by noting shared desktops inherently involve shared resources and advising user judgment about data storage.
AI-generated interpretation, not legal advice.
" We reserve the right to suspend or terminate accounts that violate these terms, with or without notice, depending on the severity of the violation."
Reserves the provider's right to suspend or terminate accounts that violate the acceptable use terms, with or without notice depending on violation severity, establishing an enforcement remedy.
AI-generated interpretation, not legal advice.
" THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE. USE OF THE SERVICE IS AT YOUR OWN RISK."
Provides an 'as is' and 'as available' disclaimer of all warranties — express, implied, and statutory — including merchantability, fitness for a particular purpose, and non-infringement, and places all risk of Service use on the user.
AI-generated interpretation, not legal advice.
" Any disputes not resolved informally shall be settled by binding arbitration in accordance with the rules of the American Arbitration Association, conducted in English. Judgment on the arbitration award may be entered in any court of competent jurisdiction."
Mandates binding arbitration under specified arbitration association rules conducted in English for disputes not informally resolved, with arbitration awards enforceable in any court of competent jurisdiction.
AI-generated interpretation, not legal advice.
" We do not sell or share personal information for advertising purposes"
Prohibits selling or sharing personal information for advertising purposes — user-favorable restriction on commercial data sharing.
AI-generated interpretation, not legal advice.
" Opt out of the sale of personal information — we do not sell your personal information"
Grants California residents the right to opt out of the sale of personal information, and discloses that the provider does not sell personal information — user-favorable restriction on data sale.
AI-generated interpretation, not legal advice.
" We do not share the contents of your container with third parties, except as described in Section 4.1 when you actively use the AI agent"
Restricts sharing of container contents with third parties, carving out only the limited exception described in the AI agent section when the user actively uses that feature — protective baseline with a defined exception.
AI-generated interpretation, not legal advice.
" Resell, sublicense, or redistribute the Service without our written consent"
Prohibits reselling, sublicensing, or redistributing the service without the provider's written consent, restricting downstream commercial exploitation.
AI-generated interpretation, not legal advice.
" We do not use analytics cookies, advertising cookies, or third-party tracking cookies."
Expressly restricts the service from using analytics cookies, advertising cookies, or third-party tracking cookies, which is protective of the user by prohibiting those data collection practices.
AI-generated interpretation, not legal advice.
" We do not send your entire filesystem or any data you have not directed the agent to interact with."
Restricts the scope of data transmitted to AI providers by stating that the entire filesystem and any data not directed by the user to the agent will not be sent, which is a user-favorable limitation on data sharing.
AI-generated interpretation, not legal advice.
" We do not have routine access to this data. It resides on your container's encrypted block storage. We do not index, scan, analyze, or mine this content. The Endstack Agent accesses your files only when you instruct it to."
Restricts Endstack from having routine access to container data and explicitly prohibits indexing, scanning, analyzing, or mining container content; the AI agent accesses files only upon user instruction — strongly user-favorable restriction on data access.
AI-generated interpretation, not legal advice.
" We do not use analytics or tracking tools (no Google Analytics, no PostHog, no Segment, etc.)"
Restricts Endstack from using analytics or tracking tools, listing specific tool types as examples — user-favorable prohibition on behavioral data collection.
AI-generated interpretation, not legal advice.
" Endstack employees do not have routine access to the contents of your container"
Restricts routine access by the service's own employees to the contents of the user's container, which is protective of the user by limiting internal data access.
AI-generated interpretation, not legal advice.
Common questions about Endstack's policies
- Does Endstack train its AI models on your data?
- No training on your content by default — based on 1 verified finding from Endstack's published policy. Informational only, not legal advice.
- Who owns the content you create with Endstack?
- You own your outputs — based on 2 verified findings from Endstack's published policy. Informational only, not legal advice.
- Can you use Endstack's output commercially?
- Commercial use allowed — based on 1 verified finding from Endstack's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Endstack's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Endstack's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Endstack's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Endstack requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Endstack's published policies yet.
What the policies actually cover
0 topicsNone of Endstack's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the policy document, § 11.2 (By Us) addresses how long content is retained, and the policy document, AI Addendum › “Morph — for code editing assistance” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The policy document, AI Addendum › “Morph — for code editing assistance” describes a way to decline model training, and the policy document, § 7.1 (Team Plans) states that terms differ by plan or tier. Whether the opt-out applies on every tier is determined by those clauses together — read both before relying on the opt-out.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Any disputes not resolved informally shall be settled by binding arbitration in accordance with the rules of the American Arbitration Association, conducted in English. Judgment on the arbitration award may be entered in any court of competent jurisdiction.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“You agree to resolve disputes with us on an individual basis and waive any right to participate in a class action, class arbitration, or representative proceeding.”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Resell, sublicense, or redistribute the Service without our written consent”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“We reserve the right to suspend or terminate accounts that violate these terms, with or without notice, depending on the severity of the violation.”Open source citation
The clause limits liability or disclaims warranties.
“THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE. USE OF THE SERVICE IS AT YOUR OWN RISK.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 1 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 2 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 1 |
| All applicable tiers | training use | conditional | MEDIUM | 1 |
| Free | indemnity liability | conditional | MEDIUM | 1 |
| Team / Business | tier differences | conditional | MEDIUM | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sale or sell on privacy data use
“Opt out of the sale of personal information — we do not sell your personal information”Open timeline citation
Latest stance: sale or sell on privacy data use
“We do not sell or share personal information for advertising purposes”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We do not share the contents of your container with third parties, except as described in Section 4.1 when you actively use the AI agent”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“You agree to resolve disputes with us on an individual basis and waive any right to participate in a class action, class arbitration, or representative proceeding.”Open timeline citation
Latest stance: liability limited on indemnity liability
“THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE. USE OF THE SERVICE IS AT YOUR OWN RISK.”Open timeline citation
Latest stance: training with opt out on training use
“We configure our AI provider integrations to opt out of server-side training data storage where the provider supports it (e.g., OpenAI store: false ). However, third-party AI providers are governed by their own terms of service and privacy policies, which you should review:”Open timeline citation
Latest stance: rights or controls vary by tier on tier differences
“We offer Individual plans and Team plans. Enterprise plans may be offered in the future. Plan details, pricing, features, and usage limits are described on our website and may change over time.”Open timeline citation
Latest stance: rights or controls vary by tier on tier differences
“Team plans allow multiple users to access a shared desktop environment. The team administrator manages membership, roles, and permissions.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
80 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Endstack's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Endstack's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Endstack's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.