Lyzr procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ If you use our Services outside of the United States, you understand that we may collect, process, and store your information in the United States and other countries. The laws in the U.S. regarding information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law. To facilitate data transfers from the EU to other countries, we make use of the European Commission-approved standard contractual data protection clauses, the Data Privacy Framework, or other appropriate legal mechanisms to safeguard the transfer. Please contact us at support@lyzr.ai or dpo@lyzr.ai to receive a copy of our standard contractual data protection clauses. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We may transfer your personal data outside the European Economic Area (EEA) to:- Various global locations for analytics and support services Transfer Safeguards: – AWS: EU-US Data Privacy Framework and AWS Standard Contractual Clauses – Other Transfers: Standard Contractual Clauses (SCCs) approved by European Commission – Transfer Impact Assessments: Conducted for high-risk transfers to ensure adequate protection For copies of our data transfer safeguards, please contact our Data Protection Officer at dpo@lyzr.ai. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ 6.5. Customer Products . Customer shall be solely responsible for the design, development, sale, distribution and deployment of Customer Products, including compliance with all applicable laws and the terms and conditions pursuant to which the Customer Products are made available. Customer Products may be marketed and distributed under Customer’s brands and trade and service marks and shall not include Lyzr marks unless expressly approved by Lyzr in writing. 6.6 Beta Features . Lyzr may, in its sole discretion, make certain new features or functionality within the Product available to Customer in a pre-production release, beta or evaluation format (“ Beta Features ”). Beta Features are not required to be used by Customer and are made available AS-IS. Customer’s use of any Beta Features is at Customer’s sole risk. 6.7. Compliance . Customer agree to allows Lyzr, or its authorized agent, to audit Customer’s use of the Products. Lyzr will provide Customer with at least 10 days advance notice prior to the audit, and the audit will be conducted during normal business hours. Lyzr will bear all out-of-pocket costs that we incur for the audit, unless the audit reveals that Customer have exceeded the Scope of Use. Customer will provide reasonable assistance, cooperation, and access to relevant information in the course of any audit at Customer’s own cost. If Customer exceed Customer’s Scope of Use, Lyzr may invoice Customer for any past or ongoing excessive use, and Customer will pay the invoice promptly after receipt. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your personal information for as long as we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements). The criteria used to determine appropriate retention period for personal information include: The amount, nature, and sensitivity of the personal information. The purpose(s) for which the personal information was collected and used. Whether we have a legal obligation to retain personal information or whether retaining personal information is necessary to resolve disputes, including the establishment, exercise, or defense of legal claims. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Data is securely deleted or anonymized when retention periods expire, unless longer retention is required by law. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We retain personal data for the following periods: ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share personal data with: – Cloud Service Providers: Amazon Web Services (AWS) for hosting in us-east-1 region – Analytics Providers:Google Analytics, mixpanel, marketing platforms – Customer Support Systems: Ticketing and support platforms – Payment Processors: Billing and subscription management services – Security Service Providers: Monitoring and threat detection services – Legal and Professional Advisors: As required for business operations ” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.