Fuse procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Business Associate will make internal practices, policies, and records relating to PHI available to Customer or the Secretary of Health and Human Services as required by law.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Fuse maintains SOC 2 Type II audited controls and HIPAA-aligned security measures including encryption, access controls, monitoring, and incident response. We aim for high availability but do not guarantee uninterrupted service.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If Business Associate holds PHI in a Designated Record Set, it will assist Customer in meeting obligations relating to individual access, amendments, and accountings of disclosures. If an individual submits a request directly, Business Associate will forward it to Customer.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “Because personal data is processed in the United States, individuals acknowledge that such transfers involve international data movement under UK/EU GDPR; Fuse implements Standard Contractual Clauses and equivalent safeguards to protect that data during transfer.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Fuse hosts most infrastructure in the United States. Any international transfers use Standard Contractual Clauses, the UK Addendum, or other lawful mechanisms.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon termination of services involving PHI, Business Associate will return or destroy PHI unless return or destruction is infeasible, in which case protections in this Addendum will continue. If return or destruction is infeasible, Business Associate will document the reasons in writing and continue to protect the PHI in accordance with this Addendum for as long as it is retained.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain data as long as needed to provide services, comply with obligations, support audits, or resolve issues. Customers may request deletion of Customer Data, subject to legal and contractual limits.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Retention and deletion: synced email is kept while the Gmail account stays connected. When a user disconnects the account in Fuse settings, Fuse deletes the email it synced from that account. Users can remove Fuse's access to their Google account at any time at myaccount.google.com/permissions , and can request deletion of any remaining data by emailing [email protected] .” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Either party may terminate for uncured material breach. Upon termination Customer’s access ends, Customer may request data export for 30 days, and Fuse may delete data per retention policies. Customer represents it is not located in an embargoed country or on any U.S. government restricted party list. Customer agrees to comply with all export control and sanctions laws.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share information with service providers that support hosting, infrastructure, email, security, authentication, payments, and customer support. Providers are contractually required to protect data and use it only for Fuse’s purposes. Information may be transferred during corporate transactions such as mergers, acquisitions, financings, or restructurings. We may disclose data to comply with law, respond to lawful requests, or protect safety and security. Fuse does not sell personal information or PHI.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Sharing: we do not share Google user data with third parties, except service providers that host and operate the platform for us, when required by law, to protect security, or as part of a merger, acquisition or sale of assets with the user's prior consent.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Analytics and advertising technologies: Google Analytics / GA4, Meta Pixel including CAPI, and hosting logs. These tools provide aggregated insights. Cookie preferences can be adjusted via browser settings.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Fuse Analytics Limited (United Kingdom) may share personal data with Fuse Insight, Inc. (United States), which provides hosting, infrastructure, and platform services. These transfers occur only as necessary to operate the website, deliver the platform, provide support, and maintain our systems.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Business Associate will comply with applicable HIPAA electronic transaction standards and ensure subcontractors do so as well.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ • Digital Patient Intake: $0, included in minimum fee ” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ This Pricing Addendum forms part of the Fuse Platform Terms of Use. Capitalized terms have the meanings given in the Terms. This Pricing Addendum applies once the free trial ends and Customer has added a valid payment method and authorized Fuse to charge for usage.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Access to the Platform and use of any paid features requires payment of the fees set out in Fuse’s then-current Pricing Addendum (the “Fees”), including any applicable minimum fees. Fuse may invoice Customer or charge Customer’s stored payment method in accordance with the Billing section of the Pricing Addendum. Fees are non-refundable unless stated otherwise in writing. Failure to pay any undisputed Fees when due may result in suspension of access to the Platform.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “(b) Customer adds a valid payment method and authorizes Fuse to bill for usage. ” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.