MarketMuse procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ As a US business selling software to worldwide companies, we are proud to be both DPA and GDPR compliant. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Google is certified for this for the “Privacy Shield” (https://www.privacyshield.gov/), which is intended to ensure compliance with the data protection level applicable in the EU. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ We are a US-based company and do all our tracking and analysis in the US.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ The data required for sending the newsletter will be stored for the duration of your subscription to the newsletter. You may withdraw your consent to receive the newsletter at any time. You can withdraw via the link provided in each newsletter. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 3. Data erasure and duration of storage ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We erase your personal data at the point at which the legal basis for its processing is no longer valid. However, sometimes legal bases may co-exist or, when one legal basis is no longer valid, a new one may arise, such as the requirement to store certain data to comply with a statutory retention requirement.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We save this data in so-called server protocol files (log files). This data is not saved in connection with other data about you. The storage of log files, including your IP address, is necessary for our legitimate interest in making our website available and preventing its misuse. Log files that are saved will be erased after 30 days at most, unless longer storage is necessary. For example, to avert or resolve an attack on our website. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Your data will be erased once your query has been answered in full. Where we enter into a contract, if necessary, we will continue to process the data for the purposes of the contract. Once you fill out a contact form you will be added to our newsletter. Our newsletter keeps interested parties updated at regular intervals about current offers and insights for Content Professionals, as well as new features, and tips and tricks for the MarketMuse platform. The data provided by you for this purpose is only processed to provide you with the newsletter. The additional data that is necessary for the application is only obtained to avoid misuse of the newsletter offer and, in particular, of your email address. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Subcontracting. In the event of any subcontracting, Provider shall remain liable for the acts or omissions of its subcontractors as if they were employees. Provider may not rely on a breach by a subcontractor to avoid its own liabilities under this Agreement.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The processing of your personal data in connection with the website is also partly undertaken by sub-processors, in particular, those undertaking the hosting of the website and using analysis tools. This will only occur on the basis of a contractual agreement that contains the measures set out in Art. 28, para. 3 GDPR. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ When you call up a page, your browser loads the required web fonts into your browser to display texts and fonts correctly. To do this, your browser connects to Google, which tells Google that our websites have been accessed via your IP address. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We use web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). ” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.