Inconvo procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ practices. Inconvo is hosted in EU-based cloud infrastructure with encryption in transit and at rest, strict access controls enforced through SSO and multi-factor authentication, continuous monitoring for anomalies, and regular policy, access, and vendor reviews. These measures help protect customer data and surface issues quickly.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “We host our primary infrastructure in the European Union. Some service providers we rely on operate from the United States or other regions. When personal data is transferred outside the EU, UK, or Switzerland, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms. We minimise the amount of personal data shared with third-party AI platforms and request EU processing regions whenever they are available.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “You may request deletion of personal data at any time. We generally satisfy verified requests within 30 days and confirm once complete.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Active customer data is stored for the duration of your organisation's contract; analytics events are typically retained for up to 12 months; system logs have a shorter retention window; and encrypted database backups are rotated on a rolling basis. When an organisation terminates service or asks us to delete its data, we hard-delete the associated records from our production systems. Residual copies may remain in backups until those backups expire.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ (30) days of termination of this Agreement for cause, upon Customer's request” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Business transfers. Parties involved in a merger, financing, acquisition, or similar transaction involving Inconvo, where they agree to honour this policy.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “We do not sell personal data. We share personal data only with organisations that enable us to provide the Services or where the law requires it. Each recipient must protect the data and use it only for the purpose we specify. The categories of recipients include:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ with third-party products, services, or applications that are not owned or controlled by Inconvo (e.g., customer data warehouses or collaboration tools) ("Third-Party Applications") and Customer, at its sole option, may choose to use such Third-Party Applications. If necessary for the Service and the Third-Party Application to work together, Customer will provide its login information to Inconvo for the sole purpose of Inconvo providing the Service to Customer, and Customer represents and warrants that Customer has the right to provide such login information without breach by Customer of any of the terms and conditions that govern Customer's use of the applicable Third-Party Application. Inconvo does not endorse such Third-Party Applications. Customer acknowledges and agrees that this Agreement does not apply to Customer's use of such Third-Party Applications and Customer may be required by the providers of such Third-Party Applications to enter into separate agreements for Customer's use. Inconvo expressly disclaims all representations and warranties relating to any Third-Party Applications. Customer will look solely to the providers of the Third-Party Applications for any warranty-related issues or other claims. Customer's use of Third-Party Applications is at Customer's own risk. Inconvo will have no liability or other obligation of any kind arising out of or related to any Third-Party Applications, including arising from Customer's use or inability to use Third-Party Applications.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Authorities and law enforcement. Government bodies when required to respond to lawful requests or protect rights and safety.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Service providers. Vendors that supply cloud hosting, authentication, analytics, communications, customer support, billing, and AI model services we rely on to run Inconvo.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Entities you authorize. Integrations or partners that you or your organisation connect to the Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 10.3. Changes. Customer acknowledges that the Service is an online, subscription-based product, and that to provide improved customer experience Inconvo may make changes to the Service provided, however, Inconvo will not materially decrease the core functionality of the Service. Inconvo may also unilaterally modify the terms of this Agreement by notifying you at least thirty (30) days prior to such changes taking effect and posting such changes at https://inconvo.com/terms.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ 5.2. Termination. Either party may terminate this Agreement upon written notice to the other party if the other party materially breaches this Agreement and such breach is not cured within thirty (30) days after the breaching party's receipt of such notice. Inconvo may terminate Customer's access to the Free Version at any time upon notice to Customer.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ following termination, or if Customer deletes its workspace within the Service, Inconvo will delete Customer's User Information, including passwords and all related information, files, and User Submissions, unless Customer requests an earlier deletion in writing. If Customer is using the Free Version, Inconvo will retain User Submissions and User Information to facilitate such use. Inconvo may delete all User Submissions or User Information if Customer maintains an account in the Free Version but such account is not used for a period of one (1) year or more.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.