Litmus procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | unknown | “ We retain personal information for as long as reasonably necessary to provide the Service, support the hiring company's assessment process, maintain security and audit records, resolve disputes, and comply with legal obligations. Candidate assessment data is retained according to the hiring company's configuration or instructions, unless a longer period is required for security, legal, or dispute-resolution purposes. You may request deletion by contacting us, subject to legal, security, contractual, and operational retention requirements.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell personal information or share personal information for cross-context behavioral advertising as those terms are used under California privacy law. We may share information with: Service Providers: Third parties that help us operate the Service (e.g., Clerk for authentication, Stripe for payments, Resend for email, Cloudflare R2 for backup storage, Vercel for hosting and Blob storage, Anthropic for assessment generation and grading, OpenAI for audio transcription of walkthrough recordings) Employers: When you submit an assessment as a candidate, the hiring company can view your submission and related metrics” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.