Filevine procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Personal data may be stored and processed in any country where we do business or our service providers do business. Personal data may be transferred, stored or processed in any country other than your own country, including the United States. Users should be aware that these countries may have data protection and privacy laws that are different to the laws of your country. Officials in those countries may be entitled to access your personal data. When transferring data across borders, we take measures to comply with applicable data protected laws related to such transfer. When transferring data across borders from the European Economic Area (“EEA”), the UK or Switzerland, we comply with applicable laws to provide an adequate level of data protection. Where required by applicable law, we use the EU Standard Contractual Clauses with a data recipient outside the EEA, UK or Switzerland or other legal methods available to us under applicable law.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so. If you are a resident of the EEA, you may direct your questions or complaints to the supervisory authority of the country you are located in, available here . If you are a resident of the UK, you may direct your questions or concerns to the UK Information Commissioner’s Office .” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of personal data. We maintain organizational, technical and administrative measures designed to protect personal data covered by this Privacy Policy against unauthorized access, destruction, loss, alteration or misuse. Your personal data is only accessed by a limited number of personnel who need access to the information to perform their duties. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (e.g., you feel that the security of your account has been compromised), please contact us immediately. We retain your personal data as long as we are providing the Sites and Services to you or our Subscribers (as applicable). Even after we stop providing Sites and Services directly or indirectly to you, and even if you close your Filevine account, we keep your personal data in order to comply with our legal and reporting obligations. In all cases where we keep data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The categories of third parties to whom we disclose personal information for a business or commercial purpose or to whom we sell or share personal information are summarized in the chart below. We do not knowingly sell or share the personal information of minors under the age of 16.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell or share this category of Personal Information ” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third-Party Analytics. Through third-party analytics, such as Google Analytics, in order to collect and analyze information about the use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “ How Google uses data when you use our partners’ websites or apps .” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites . Session Replay . We partner with third-party session replay vendors, such as Microsoft Clarity, to capture how you use and interact with our Sites through behavioral metrics, heatmaps, and session replay to improve your website experience. Site usage data is captured using first and third-party cookies and other tracking technologies to determine your interactions with the Sites. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement. Chat Functionality. We use a live chat feature powered by a third-party to enable live customer service and technical support via our Site. When you engage in the live chat enabled by this service provider, we will automatically collect and share certain information (such as personal identifiers, usage information, and message content) with the vendor to provide the customer service and technical support enabled by the live chat tool.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Third-party Sources. We may combine personal data we receive from you with personal data falling within one of the categories identified above that we obtain from other sources, such as: Public sources, such as government agencies, public records, social media platforms, and other publicly available sources. Data providers , such as information services and data licensors. Partners , such as marketing partners and event co-sponsors. Service providers that provide services on our behalf or help us operate the Service or our business. Business transaction partners . We may receive personal information in connection with an actual or prospective business transaction. For example, we may receive your personal information from an entity we acquire or are acquired by, a successor, or assignee or any party involved in a business transaction such as a merger, acquisition, sale of assets, or similar transaction, and/or in the context of an insolvency, bankruptcy, or receivership. Third-party services , such as Google and Microsoft, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose your personal data as described below: Affiliates. With other Filevine affiliates in order to provide our Sites and Services and for our administrative purposes. Service Providers. To contractors, service providers, and other third parties we use to support our business, such as website hosting, data analysis, marketing service, customer service, email delivery and auditing services; Business Partners. With third-party business partners in connection with our Sites and Services to our Subscribers for business purposes. Corporate Transactions. In connection with an actual or proposed merger, reorganization, divestiture, or sale of some or all of Filevine’s assets or a financing or acquisition of all or a portion of our business by another company. In these circumstances, Filevine will instruct the parties with whom personal data is shared to process personal data in accordance with this Privacy Policy. Compliance and Harm Prevention. To comply with any court order, law, or legal process, including to responding to any government or regulatory request; to enforce or apply our Terms of Service and other agreements, including for billing and collection purposes; if we believe disclosure is necessary or appropriate to protect our rights, property, or safety, our subscribers, or others; or Other. With your consent or for any other purpose we disclose when you provide the information. Note: All the above categories exclude text messaging originator opt-in data and consent; such data and consent will not be shared with any third parties.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Categories of Personal Information Category of Recipients to Whom We Disclose Personal Information for a Business or Commercial Purpose Categories of Third Parties to Whom We Sell or Share Personal Informatione Identifiers. Affiliates” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.