Greptile procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ Data Processing Agreement - Available on request (contact security@greptile.com ) For any questions about these terms, please contact support@greptile.com .” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ This section provides additional information regarding Greptile's processing of Personal Information of people located in the European Union (EU), European Economic Area (EEA), Switzerland, and the United Kingdom (UK) in accordance with the EU General Data Protection Regulation, UK Data Protection Regulation, and the Swiss Federal Data Protection Act.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ If you are visiting our Site from outside of the United States, please note that our Site is hosted in the United States. Where permitted by applicable law, we may transfer the Personal Information we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Notice. For individuals in the European Union, European Economic Area, Switzerland, and United Kingdom: Greptile will transfer Personal Information to third parties located outside of this region only when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ To comply with our legal obligations, resolve disputes, and enforce any agreements Criteria we will use to determine how long to retain your Personal Information include:” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ If we have an ongoing business purpose for retaining your Personal Information, such as communicating with you about ongoing or prospective Services you requested” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We retain your information for as long as needed:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ functions; or (e) protect the rights, property, or safety of Greptile, its employees and clients, or the public against harm. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We are not responsible for the practices employed by any websites or services linked to or from our Site, including the information or content contained within them. We encourage you to investigate and ask questions before disclosing Personal Information to third parties, because any Personal Information disclosed will be handled in accordance with the applicable third party's privacy policy. We may also give you the option to login to Greptile platforms via third-party services like GitHub. If you choose to leverage this option to link your accounts, we may receive information associated with your account (such as your name and profile information) from that third-party service. This information varies and is controlled by that service or as authorized by you via your privacy settings at that service. We recommend reviewing the service's privacy policy beforehand and managing your privacy settings on an ongoing basis.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may use third-party providers to enable certain customer interaction opportunities, content delivery (like audio or video), or other service capabilities.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of Personal Information to third parties for the third parties' direct marketing purposes, if any. To make such a request, please contact us at support@greptile.com . Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.” | Captured 2026-07-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Merger or Change of Control – We may disclose Personal Information to third parties as necessary if we are involved in a merger, acquisition, or any other transaction involving a change of control in our business, including but not limited to, a bankruptcy or similar proceeding. Where legally required, we will give you notice prior to such disclosure. Other – We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.