Julius AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “You can obtain more details of the protection given to your Personal Data when it is transferred outside the UK, EEA and/or Switzerland (including a copy of the standard data protection clauses which we have entered into with recipients of your Personal Data) by contacting us as described in Section 13 below or by contacting your specific representative.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “UK Address: GDPRLocal Ltd. 1st Floor Front Suite 27-29 North Street, Brighton England BN1 1EB” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “EU Dublin Address: INSTANT EU GDPR REPRESENTATIVE LIMITED Office 2 12A Lower Main Street, Lucan Co. Dublin K78 X5P8 Ireland” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “Your Reporting Link: [https://juliusai.gdprlocal.com/eu](https://juliusai.gdprlocal.com/eu)” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “Personal Information may be transferred to, stored on servers in, and accessed from the United States and countries other than the country in which the Personal Information was initially collected. In all such instances, we use, transfer, and disclose Personal Information solely for the purposes described in this Privacy Notice and in compliance with applicable laws.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “1. the country that we send the data to might be approved by relevant data protection authorities as offering an adequate level of protection for Personal Data;” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “3. the recipient may have adhered to binding corporate rules (only for intragroup transfers); or” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “2. the recipient might have signed up to a contract based on “model contractual clauses” approved by relevant data protection authorities, obliging them to protect your Personal Data;” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “Where we transfer your Personal Data to another country outside the UK, EEA and / or Switzerland, we will ensure that it is protected and transferred in a manner consistent with legal requirements. In relation to data being transferred outside the UK and/or EEA, for example, this may be done in one of the following ways:” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “For individuals located in the EEA, UK, or Switzerland: Where personal data are transferred to a third country or to an international organization, Julius AI implements appropriate safeguards, such as contractual obligations, and standard contractual clauses adopted by the European Commission relating to the transfer.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “Julius AI is based in the United States and its headquarters are located at 149 New Montgomery Street, 4th Floor, San Francisco, CA 94105. As a result, Personal Information that we collect in and through the Services and on the Site may be transferred to our U.S. offices. In addition, we may work with third-party service providers in the U.S. and in other countries to support our business activities. Thus, Personal Information may be transferred to, stored on servers in, and accessed from the United States and countries other than the country in which the Personal Information was initially collected. In all such instances, we use, transfer, and disclose Personal Information solely for the purposes described in this Privacy Notice and in compliance with applicable laws.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “Julius AI also offers our customers the ability to enter into a Data Processing Addendum (DPA) that contains standard contractual clauses, for transfers between us and our customers. We also make use of supplementary measures to ensure your information is adequately protected.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “- EU residents use [https://juliusai.gdprlocal.com/eu](https://juliusai.gdprlocal.com/eu) or contact@gdprlocal.com” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “Information that our European users submit through the Service or the Site is sent to and stored on secure servers located in the United States of America and may be transferred by us to our other offices and/or to the third parties (as described elsewhere in this Privacy Policy), who may be situated in the United States of America or elsewhere outside the EEA and may be processed by staff operating outside the EEA. The US and other non-EEA countries do not have similar data protection laws to the European Union, and you should be aware in particular that the law and practice in the United States and some other non-EEA countries in respect of law enforcement and national security authority access to data is significantly different from Europe. However, we will ensure as reasonably as possible that where your personal information is to be transferred or shared outside the EEA, that it is only transferred or shared where we have appropriate safeguards in place, for example by agreeing standard contractual clauses adopted by the European Commission.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In compliance with Article 27 of the General Data Protection Regulation (GDPR) and the United Kingdom GDPR, we have appointed representatives to act as our point of contact for supervisory authorities and individuals in the European Economic Area ( **“EEA”**) and the United Kingdom ( **“UK”**) as listed below. You may contact our European or UK representatives regarding matters related to the processing of personal data under the GDPR/UK GDPR.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “- UK residents use [https://juliusai.gdprlocal.com/uk](https://juliusai.gdprlocal.com/uk) or contact@gdprlocal.com” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “4. in other circumstances the law may permit us to otherwise transfer your Personal Data outside Europe.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We keep Personal Information related to your Account for as long as it is needed to fulfill the purposes for which it was collected, to provide our services, to deal with possible legal claims, to comply with our business interests and/or to abide by all applicable laws. Thereafter, we either delete Personal Information about you or de-identify it. Please note that even if you request the deletion of Personal Information about you, we may be required (by law or otherwise) to retain the Personal Information and not delete it. However, once those requirements are removed, we will delete Personal Information about you in accordance with your request.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Our subsidiaries and affiliates; or a subsequent owner, co-owner or operator of the Site and/or the Services and their advisors in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our stock and/or assets, or in connection with bankruptcy proceedings, or other corporate reorganization, in accordance with this Privacy Policy.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “The Services may include links to third party websites and social media services where you will be able to post comments, stories, reviews or other information. Your use of these third-party websites and social media services may result in the collection or sharing of information about you by these third-party websites and social media services. We encourage you to review the privacy policies and settings on the third-party websites and social media services with which you interact to make sure you understand the information that may be collected, used, and shared by those third-party websites and social media services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Payment processors, which may include, but are not limited to, Stripe, Inc. and its affiliates (collectively, **“Stripe”**). Payment processing services provided by Stripe are subject to the Stripe terms and conditions and other policies available at [https://stripe.com/legal](https://stripe.com/legal) and Stripe’s Global Privacy Policy available at [https://stripe.com/privacy](https://stripe.com/privacy) (collectively, the **“Stripe Agreements”**). By agreeing to these Terms of Service, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Public authorities, such as law enforcement, if we are legally required to do so or if we need to protect our rights or the rights of third parties; and” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We also use AI Providers to enable AI Functions on the Services, which use cookies to collect and store data on use and access of the Services in accordance with their respective privacy policies.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Our advertising partners in compliance with applicable law;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We frequently make content or services from other websites available to you from links located on the Site. We may present links in a format that enables us to keep track of whether these links have been followed. In addition, we may provide you the functionality to link your Account to your social media account or other accounts, such as Facebook, Google, or GitHub, in accordance with your Account settings (which you may change at any time) and respective policies of these third parties. This Privacy Policy applies only to the Site and the Services. We do not exercise control over third party services or other websites that provide information, or over banners, other advertisements or links from within the Site or the Services. Your interactions with these third-party services are governed by the privacy policy of the company providing it. These other sites and services may place their own cookies or other files on your computer’s browser, collect data or solicit Personal Information from you. Other websites and services follow different rules regarding the use or disclosure of the Personal Information that you submit, and the collection and use of such information and access of any third-party websites are subject to such third party’s privacy policy. We encourage you to read the privacy policies and other terms of such third parties before using their services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “California Civil Code Section 1798.83 requires certain businesses that share customer Personal Information with third parties for the third parties’ direct marketing purposes to respond to requests from California customers asking about the businesses’ practices related to such information-sharing. We currently do not share or disclose your Personal Information to third parties for the third parties’ direct marketing purposes. If we change our practices in the future, we will implement an opt-out policy as required under California laws.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may disclose Personal Information you provide to us or that we collect automatically on the Site and in and through the Services with the following categories of third parties, the current list of which is provided at [https://trust.julius.ai/?tab=subprocessors](https://trust.julius.ai/?tab=subprocessors):” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.