Enjamb Labs procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 6.1 Where data is stored. Your Content and metadata are stored in our Supabase project hosted on AWS in us-east-2 (US East, Ohio). We do not currently offer customer-selectable data regions. 6.2 Data Protection. We use encryption (in transit and at rest), access controls, monitoring, backups, and strict internal access rules to protect your data. Our third-party partners are required to meet equivalent standards. No system is perfectly secure. We cannot guarantee the absolute security of your data. 6.3 International transfers. Enjamb is based in the United States and our infrastructure is located in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection rules than your country. By using the Services you consent to that transfer. For users in the European Economic Area, United Kingdom, or Switzerland: when Personal Data is transferred from those regions to the U.S., we rely on Standard Contractual Clauses or equivalent valid transfer mechanisms. 6.4 Your responsibility. Use a strong, unique password. Don't share credentials. Log out on shared devices. Notify us at help@enjamb.org if you suspect unauthorized access.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain Your Content and Account data for as long as your Account is active or as needed to provide the Services. Active data — kept until you delete it or close your Account. Deleted content — removed from active systems within a reasonable period after deletion. May persist in encrypted backups for up to 30 days before being overwritten. Account closure — when you close your Account, we delete or de-identify your Personal Data within a reasonable period, except where retention is required by law (for example, financial records for tax) or to resolve disputes and enforce our agreements. Aggregated data — non-identifying aggregates may be retained indefinitely. You can delete individual Projects, individual files, or your entire Account from within the Services or by contacting us at privacy@enjamb.org.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ 12.1 Your right to terminate. You may stop using the Services and delete your Account at any time. Paid subscriptions continue through the end of the paid period unless cancelled earlier. 12.2 Our right to suspend or terminate. We may suspend or terminate your Account or an Organization's access at any time for breach of these Terms, for actions that threaten the security or integrity of the Services, for non-payment of fees, or as required by law. 12.3 Export on termination. Unless we terminate for cause related to illegal activity, fraud, or a material security risk, we will make a reasonable effort to provide you an opportunity to export Your Content before deletion. 12.4 Effect of termination. Upon termination, your license to use the Services ends. Enjamb will delete Your Content from active systems within a reasonable period, subject to residual copies in backups and legal retention obligations. Provisions that by their nature should survive termination (including Sections 3.1, 4.4, 8, 9, 13, 14, 15, 16, 18) survive.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In addition, the Services query public research databases on your behalf when you use research tools (Semantic Scholar, OpenAlex, arXiv, PubMed, bioRxiv, Crossref, protocols.io, and Grants.gov / simpler.grants.gov). We do not store these providers' proprietary data beyond what is necessary to display and cite results you request. We may add or replace sub-processors. Material changes will be reflected in an updated version of these Terms. If you require advance notice of sub-processor changes under a paid plan, contact us to discuss enterprise terms.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Certain features integrate optional third-party services under your control (for example, Zotero reference sync, GitHub repository linking, Stripe for payments). Your use of those integrations is subject to each provider's own terms and privacy policies, and to any additional permissions you grant. Enjamb is not responsible for the availability, accuracy, or conduct of third-party services.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To deliver the Services, Enjamb uses a set of trusted third-party sub-processors. Each sub-processor is contractually bound to security and confidentiality obligations no less protective than those in these Terms. The current list, to the best of our knowledge as of the effective date, is:” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Cookies and local storage — see Section 7. IP address — recorded for security, abuse prevention, and authentication. 2.5 Information from third parties OAuth providers. If you sign in through a third-party OAuth provider, we receive your name, email, and profile picture from that provider. Integrations. When you connect Zotero or GitHub, we receive the data needed to perform the integration (library contents, repository metadata, OAuth tokens). Public research databases. When you query academic search tools, we receive results from providers such as Semantic Scholar, OpenAlex, arXiv, PubMed, bioRxiv, Crossref, protocols.io, and Grants.gov on your behalf.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may add or replace sub-processors. Material changes will be reflected in updates to this Policy. 5.3 Business transfers. If Enjamb is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any change in ownership or material change in how your data is handled. 5.4 Legal reasons. We may disclose information when we believe in good faith it is required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Enjamb, our users, or others. 5.5 With your consent. We may share information for purposes you explicitly direct.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We share information only as described below. We do not sell your Personal Data and we do not share it for cross-context behavioral advertising. 5.1 With your collaborators. Your Content in a Project is visible to other Account holders you invite to that Project, and (for Projects you mark workspace-visible) to members of the same Organization. Project owners control invitations. 5.2 With service providers (sub-processors). We use trusted third parties to deliver the Services. Each is bound by contractual confidentiality and security obligations. The current list as of the Effective date:” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ 10.1 Plans. Features available to you depend on your subscription tier (Free, Pro, Lab, Enterprise). Tier details, seat counts, and usage limits are published on our pricing page and may change from time to time. 10.2 Billing. Paid subscriptions are billed in advance, recurring monthly or annually depending on the plan you select, via Stripe. Unless otherwise stated, fees are non-refundable once charged, except where required by law. 10.3 Taxes. Fees are exclusive of applicable taxes. You are responsible for any sales, use, VAT, or withholding taxes. 10.4 Changes to pricing. We may change prices on notice. Price changes apply to billing cycles beginning after the notice period. 10.5 Seats, guests, and usage. Organization plans are licensed by seat. Guest Accounts invited to specific Projects do not occupy a seat on the inviting Organization's plan, but the inviting Organization remains responsible for how those guests are used and configured. 10.6 Overage. Some plans include usage caps (AI credits, compute credits, storage). If you enable "extra usage," you authorize Enjamb to bill you via Stripe for usage above your plan's included amount up to any limit you set.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.