Enterprise Search / Productivity · nabla.comNabla
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
“As part of using the Services, you agree that you will comply with all laws, rules, and regulations applicable to you and/or your business, including the Health Insurance Portability and Accountability Act (“HIPAA”). You represent and warrant that you have all rights necessary to any information covered by HIPAA that you use or provide to us as part of your…”
Watch: Commercial use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Creates an exception for Major Evolutions, which are only included in the license if the parties enter into a specific amendment modifying the Subscription Package, limiting the default scope of the license grant.
This clause restricts the client from using or exploiting NABLA's intellectual property rights for purposes other than using the Modules and Solution, or on behalf of third parties without NABLA's authorization, limiting the scope of the client's permitted use of NABLA's IP.
GDPR Article 5(1)(e) requires data be kept no longer than necessary (storage limitation). Without defined retention periods, users cannot assess compliance. The litigation-belief exception is broad and unilaterally determined by Nabla.
Scores derived from 63 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Nabla's training terms are conditional — check the tier, opt-out, and enterprise exceptions before relying on protection.
- Your outputs and prompts are explicitly yours — Nabla's terms include affirmatively protective IP language.
- Data handling is conditional — 5 privacy or retention clauses warrant review before using Nabla at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Nabla's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 96 citationsstaticLast captured 2026-06-07
- Terms of ServiceVerified - read in full - 279 citationsstaticLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Imposes an obligation on users to create individual accounts and provide complete, accurate information as a condition of accessing the Services, establishing account registration requirements and responsibilities.
" 4.1 Account registration To access and use the Services, you will be required to create a user account (“Account”). Any individual employed by a business that is a healthcare provider, telehealth company and any company that provides ser..."
This clause restricts Business Associate from claiming data ownership rights over any data shared with it under the Agreement by clarifying that its role as data steward does not confer ownership, preserving Covered Entity's proprietary rights in PHI.
" Business Associate’s data stewardship does not confer data ownership rights on Business Associate with respect to any data shared with it under the Agreement."
Obligates users to comply with HIPAA and related laws, requires users to represent they have rights to HIPAA-covered information, and conditions use of the Services on executing a Business Associate Agreement when applicable.
" As part of using the Services, you agree that you will comply with all laws, rules, and regulations applicable to you and/or your business, including the Health Insurance Portability and Accountability Act (“HIPAA”). You represent and warr..."
This segment defines 'Protected Health Information' or 'PHI' by cross-reference to federal regulations and limits it to information created or received by Business Associate from or on behalf of Covered Entity, scoping the entire subject matter of the BAA's operative provisions.
" M. “Protected Health Information” or “PHI” has the meaning given to the term “protected health information” in 45 CFR §§164.501 and 160.103, limited to the information created or received by Business Associate from or on behalf of Covered ..."
This clause obligates Covered Entity to notify Business Associate of any changes or revocations of individual permissions to use or disclose PHI, ensuring Business Associate can adjust its practices accordingly.
" B. Notify Business Associate of any changes in, or revocation of, permission by an Individual to use or disclose Protected Health Information, to the extent that such changes may affect Business Associate’s use or disclosure of PHI."
This segment imposes a mandatory written reporting obligation on Business Associate to notify Covered Entity of any unauthorized PHI use or disclosure and any Security Incident affecting Electronic PHI within five business days of becoming aware, establishing a specific breach and incident notification timeline requirement.
" Business Associate will report to Covered Entity in writing any use or disclosure of PHI not provided for by this BAA of which it becomes aware and Business Associate agrees to report to Covered Entity any Security Incident affecting Elect..."
Defines 'Legitimate Interest' as a lawful basis for processing and describes the balancing test applied before relying on it, establishing a procedural restriction on its use where fundamental rights override business interests.
" Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Legitimate Interest means the interest of our business in conducting and managing o..."
Continues the definition of 'Regulations,' specifying that it encompasses all applicable French and EU data protection legal texts, with particular reference to the GDPR, establishing the legal framework governing data processing obligations under the contract.
" all legal and regulatory texts applicable in France and in the European Union with regard to the protection of Personal Data and in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on th..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" The CLIENT is prohibited from using or exploiting NABLA's intellectual property rights for purposes other than the use of the Modules and the Solution and/or on behalf of third parties without NABLA's authorization. "
This clause restricts the client from using or exploiting NABLA's intellectual property rights for purposes other than using the Modules and Solution, or on behalf of third parties without NABLA's authorization, limiting the scope of the client's permitted use of NABLA's IP.
AI-generated interpretation, not legal advice.
"By using the Services you have consented to our use of cookies as updated from time to time. In particular, you consent to cookies being stored on your computer and/or mobile device (unless rejected or disabled by your browser)."
Implied consent through continued use ('as updated from time to time') is a weak consent mechanism under GDPR (which requires freely given, specific, informed, unambiguous consent). This approach may not satisfy ePrivacy Directive or GDPR Art. 7 standards in applicable jurisdictions.
AI-generated interpretation, not legal advice.
"We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identit"
The clause grants Nabla an unlimited right to use and share aggregated derivatives of personal data for any purpose. Although aggregated data is generally outside GDPR scope, the lack of any stated limitation on downstream use or sharing is a risk factor for users concerned about competitive intelligence or profiling.
AI-generated interpretation, not legal advice.
"We keep this privacy policy under regular review and may update it from time to time without notice to you, so please check it regularly. We will however aim to bring any significant changes to your attention."
Unilateral modification of privacy terms without mandatory notice or consent for material changes may undermine user trust and could be inconsistent with requirements under GDPR (Art. 13/14) to proactively inform data subjects of changes affecting their rights.
AI-generated interpretation, not legal advice.
" NABLA remains the owner of the intellectual property rights relating to the Modules and the Solution. "
This clause establishes that NABLA retains ownership of all intellectual property rights relating to the Modules and the Solution, vesting proprietary rights in NABLA and excluding any transfer of IP to the client.
AI-generated interpretation, not legal advice.
" We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Services feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy. "
Grants permission to collect, use, and share Aggregated Data for any purpose while defining when aggregated data becomes personal data requiring protection, establishing both a broad permissive right and a conditional restriction on re-identification.
AI-generated interpretation, not legal advice.
" F. Business Associate may de-identify any and all PHI created or received by Business Associate under this BAA in accordance with the requirements outlined in the HIPAA Regulations as permitted by the Agreement, and for (a) product improvement, development, and support, (b) technical support, (c) audit, corrective actions and diagnostics, and (d) other operational purposes in connection with the Services. Once PHI has been de-identified pursuant to 45 CFR 164.514(b), such information is no longer Protected Health Information and no longer subject to this BAA."
This segment permits Business Associate to de-identify PHI and use the resulting de-identified information for product improvement, development, technical support, auditing, diagnostics, and other operational purposes, and specifies that once de-identified the information is no longer PHI and no longer subject to the BAA, creating a significant carve-out for operational and development use of processed data.
AI-generated interpretation, not legal advice.
" This right includes Major Evolutions if and only if the Parties have entered into an amendment to this effect modifying the chosen Subscription Package. "
Creates an exception for Major Evolutions, which are only included in the license if the parties enter into a specific amendment modifying the Subscription Package, limiting the default scope of the license grant.
AI-generated interpretation, not legal advice.
"We retain your personal data for as long as we need it for the purposes we have collected it for, such as contracting with you for your use of our Services. We may retain your personal data for a longer period if you make a complaint under this privacy policy or our Terms of service, or if we have a reasonable belief that litigation may arise in relation to our relationship with you. We may also be required to retain certain personal data from you to comply with our legal and regulatory requirements. "
GDPR Article 5(1)(e) requires data be kept no longer than necessary (storage limitation). Without defined retention periods, users cannot assess compliance. The litigation-belief exception is broad and unilaterally determined by Nabla.
AI-generated interpretation, not legal advice.
" In some circumstances, we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. "
Creates an exception to standard retention limits by permitting indefinite use of anonymised personal data for research or statistical purposes without further notice to the data subject, since it can no longer be associated with them.
AI-generated interpretation, not legal advice.
" We will not be liable for any failure to perform any of our obligations stated in this Agreement if the failure results from a cause beyond our reasonable control, including—without limitation—mechanical, electronic or communications failure or degradation, strikes or other labor disputes (whether or not relating to our workforce), restraints or delays affecting carriers, or our inability or delay in obtaining supplies of adequate or suitable materials. "
Limits the company's liability for non-performance of obligations caused by events beyond its reasonable control, including mechanical failures, labor disputes, carrier delays, or supply shortages.
AI-generated interpretation, not legal advice.
" In view of the complexity of the Internet, the unequal capacities of the various sub-networks, the influx of users at certain times, and the various bottlenecks over which NABLA has no control, NABLA may not be held liable under any circumstances for "
Limits NABLA's liability for internet-related performance issues by listing circumstances—access speeds, external slowdowns, and network transmission failures—beyond NABLA's control for which it cannot be held liable, establishing a liability exclusion.
AI-generated interpretation, not legal advice.
" NABLA shall not be liable for any indirect damage, such as, in particular, commercial loss, loss of orders, any commercial disruption whatsoever, loss of profits, or damage to the brand image, "
Limits NABLA's liability by excluding indirect damages such as commercial loss, loss of orders, commercial disruption, loss of profits, and brand image damage from compensable claims.
AI-generated interpretation, not legal advice.
"YOU UNDERSTAND AND AGREE THAT THE DOWNLOAD OF ANY MATERIALS IN CONNECTION WITH THE SERVICES IS DONE AT YOUR DISCRETION AND RISK AND THAT YOU WILL BE SOLELY RESPONSIBLE FOR ANY LOSS OR DAMAGE TO YOUR COMPUTER SYSTEM OR LOSS OF DATA THAT MAY RESULT FROM THE DOWNLOAD OR UPLOAD OF ANY MATERIAL. COMPANY NEITHER ASSUMES, NOR DOES IT AUTHORIZE ANY OTHER PERSON TO ASSUME ON ITS BEHALF, ANY OTHER LIABILITY IN CONNECTION WITH THE PROVISION OF THE SERVICES. IF, NOTWITHSTANDING THE OTHER PROVISIONS OF THIS AGREEMENT, COMPANY IS FOUND TO BE LIABLE TO YOU FOR ANY DAMAGE OR LOSS WHICH ARISES OUT OF OR IS IN ANY WAY CONNECTED WITH YOUR USE OF ANY SERVICES, COMPANY’S LIABILITY SHALL IN NO EVENT EXCEED THE GREATER OF (1) THE TOTAL OF ANY FEES PAID BY YOU TO COMPANY IN THE SIX (6) MONTHS PRIOR TO THE DATE THE CLAIM IS ASSERTED FOR ANY OF THE SERVICES OR FEATURE RELEVANT TO THE CLAIM, OR (2) US$500.00. THESE DISCLAIMERS AND LIMITATIONS OF LIABILITY ARE MADE TO THE FULLEST EXTENT PERMITTED BY LAW."
Limits the company's liability for damages arising from downloads, data loss, and general service use, capping total liability and disclaiming assumption of liability for any other person on the company's behalf.
AI-generated interpretation, not legal advice.
" the performance of the Contract, all claims taken together, to the amount of the last annual fee for the Solution collected by NABLA . "
Completes the liability cap clause by specifying the ceiling amount as the last annual fee collected by NABLA for the Solution, limiting total recoverable damages.
AI-generated interpretation, not legal advice.
" are subject to dissemination as a result of a court order. "
Excepts from confidentiality obligations information required to be disclosed pursuant to a court order, recognizing a legally compelled disclosure carve-out.
AI-generated interpretation, not legal advice.
" You cannot assign, transfer or sublicense your rights, obligations or responsibilities under this Agreement without first obtaining our consent. We may assign, transfer, or delegate any of our rights and obligations without consent. This Agreement does not create any agency, partnership, joint venture, or employment relationship, and neither party has any authority to bind the other in any respect. "
Restricts the user from assigning, transferring, or sublicensing their rights under the Agreement without prior consent, while granting the company unrestricted right to assign or transfer its rights and obligations.
AI-generated interpretation, not legal advice.
" As part of using the Services, you agree that you will comply with all laws, rules, and regulations applicable to you and/or your business, including the Health Insurance Portability and Accountability Act (“HIPAA”). You represent and warrant that you have all rights necessary to any information covered by HIPAA that you use or provide to us as part of your use of the Services. If either of you or your organization are subject to HIPAA as a Covered Entity or Business Associate (as defined in HIPAA) and intend to use the Services in a manner that will cause us to create, receive, maintain, or transmit Protected Health Information (“PHI”) on your behalf, then, at the outset of creating an Account to use the Services for yourself or your organization, you and Nabla shall comply with the Business Associate Agreement attached hereto as Appendix I . Notwithstanding anything to the contrary in this Agreement, in addition to any rights set forth in the BAA, you acknowledge and agree that Nabla may collect, process, and otherwise use de-identified data that is transmitted to Nabla through your use of the Services for training of Nabla’s internal artificial intelligence model, and Nabla may disclose such de-identified data in connection with the Services. Data will be de-identified in accordance with HIPAA regulations. For the avoidance of doubt, audio data does not include patient audio."
Obligates users to comply with HIPAA and related laws, requires users to represent they have rights to HIPAA-covered information, and conditions use of the Services on executing a Business Associate Agreement when applicable.
AI-generated interpretation, not legal advice.
Common questions about Nabla's policies
- Does Nabla train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 1 verified finding from Nabla's published policy. Informational only, not legal advice.
- Can you use Nabla's output commercially?
- Commercial use allowed — with conditions — based on 4 verified findings from Nabla's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Nabla's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
81 verified clausesClauses in Nabla's policies that work in your favour — commitments the platform made to you.
- Moderation & enforcementterms can change anytime
“5.1 Fees The Services may include both paid-for Services, for which you will be charged fees (“Fees”) and free Services for which no fees are charged. The applicable Fees are available on our website or on the subscription portal. We reserve the right to, at…”
Establishes the platform's right to charge fees for paid and free tiers of service, and reserves the right to change fees or pricing models at any time upon reasonable notice, affecting users differently based on service…
- Terms changes: advance notice promised
📍 § 5.1 (Fees)Jump to exact text → - Confidentiality
““Confidential Information” means all information provided or made available by or on behalf of the disclosing party (whether disclosed orally or disclosed or accessed in written, electronic, or other form of media, and whether or not marked, designated, or oth…”
Defines 'Confidential Information' broadly and imposes mutual obligations on both parties to protect it with reasonable precautions and not to disclose or use it outside permitted purposes, with enumerated exceptions.
📍 § 7Jump to exact text → - Data retentiondeletion rights & post-termination survival
“D. Upon termination of the Agreement or this BAA for any reason, all PHI maintained by Business Associate will be returned to Covered Entity or destroyed by Business Associate. Business Associate will not retain any copies of such information. This provision w…”
This clause obligates Business Associate to return or destroy all PHI upon termination, prohibits retention of copies, extends this obligation to agents and subcontractors, and requires notification to Covered Entity if…
📍 Article DJump to exact text → - Indemnity & liabilityindemnity direction
“You agree to defend, indemnify and hold harmless the Company, its affiliates, licensors and service providers, and its and their respective officers, directors, employees, contractors, agents, licensors, suppliers, successors and assigns from and against any c…”
Establishes mutual indemnification obligations: the user agrees to defend and hold harmless the company against claims arising from the user's violations or use of the Services, and the company agrees to defend the user…
📍 § 12 (Indemnification)Jump to exact text → - Subprocessors & data sharing
“B. Except as otherwise limited by this BAA or federal or state law or other applicable law, Covered Entity authorizes Business Associate to use the PHI in its possession for the proper management and administration of Business Associate’s business and to carry…”
This segment grants Covered Entity's authorization for Business Associate to use PHI for its own management and legal responsibilities, while imposing conditions on third-party disclosures including legal requirement or…
📍 Article MJump to exact text → - Audit rights, DPA & residency
“A. Business Associate will document any disclosures of PHI made by it to account for such disclosures as required by 45 CFR §164.528(a). Business Associate also will make available information related to such disclosures as would be required for Covered Entity…”
This clause obligates Business Associate to document all PHI disclosures and make related information available to Covered Entity to support accounting of disclosures under 45 CFR §164.528, specifying minimum required el…
📍 § 8 (Audit Report)Jump to exact text →
+ 75 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
13 verified clausesWhat Nabla requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“Your use of the Services does not violate any applicable law or regulation. 3.1 Intended Use The Services are designed and intended to be used by healthcare professionals and other authorized users for informational and assistive purposes only. The Service…”
This clause restricts use of the Services to jurisdictions where such use is legally permitted, establishes eligibility limitations based on applicable law, and specifies the intended use as limited to healthcare profess…
📍 Terms of Service › “You will maintain the accuracy of such information; and”Jump to exact text → - Moderation & enforcementconduct restrictions
“Except as otherwise expressly granted to you in this Agreement, we reserve and retain all right, title and interest in the Services, including without limitation, all technology and processes, enhancements or modifications thereto, trademarks, service marks, s…”
Reserves all intellectual property rights in the Services to the company, prohibits unauthorized use of proprietary content, and restricts users from asserting ownership interest in service content or materials.
📍 § 10 (Intellectual Property)Jump to exact text → - Moderation & enforcement
“The CLIENT declares that it is fully aware of the legal and regulatory constraints relating to health data, to which it is subject in the context of the use of the Solution. In this respect, the CLIENT guarantees that the specifications and characteristics o…”
This clause requires the client to declare awareness of health data legal and regulatory constraints, guarantee that the Solution's specifications comply with applicable law, and confirm that the client has fulfilled all…
📍 Terms of Service › “Other obligations”Jump to exact text → - Moderation & enforcement
“Your use of the Services is subject to your compliance with this Agreement. By accessing and using the Services, you warrant that: You are legally capable of entering into binding contracts; All registration information you submit is truthful and accurate;…”
This clause restricts use of the Services to legally capable individuals who provide truthful registration information, limits the intended use to healthcare professionals for informational and assistive purposes, and ex…
📍 § 3 (Use of the Services)Jump to exact text → - Moderation & enforcement
“-Neither it, nor its officers, employees, agents, subcontractors or any other third party acting on its behalf have committed or will commit any corrupt act against any of the other Party's officers, employees, agents, subcontractors or any other third part…”
Obligates each party and its officers, employees, agents, subcontractors, and third-party representatives not to commit corrupt acts against the other party or its representatives in connection with the contract.
📍 Terms of Service › “ETHICS AND COMPLIANCE”Jump to exact text →
+ 8 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
13 topics- Product telemetry & usage tracking13 clauses
- Advertising & tracking1 protective13 clauses
- Sensitive data (biometric, location, health)3 protective12 clauses
- Government & law-enforcement disclosure1 protective8 clauses
- Trains by default, opt-out available1 clause
- Damages & liability cap2 protective19 clauses
- Indemnity direction3 protective6 clauses
- Terms can change at any time5 protective10 clauses
- Deletion rights & post-termination survival5 protective8 clauses
- License survival after account deletion1 protective1 clause
- Auto-renewal & cancel window3 clauses
- Breach-notification promises5 protective9 clauses
- Conduct restrictions3 obligations3 clauses
269 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy addresses how long content is retained, and the Terms of Service, § 9 (Patient Information) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, Terms of Service › “INTELLECTUAL PROPERTY” describes rights the platform takes in user content, and the Terms of Service, Terms of Service › “Information; or” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Verified retention clauses point in different directions: the Privacy Policy describes broad or open-ended retention, while the Privacy Policy describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause includes sublicensable, transferable, or assignable rights.
“Your use of the Services does not violate any applicable law or regulation. 3.1 Intended Use The Services are designed and intended to be used by healthcare professionals and other authorized users for informational and assistive purposes only. The Services do not provide medical advice, medical treatment, legal advice, billing services, coding services, reimbursement services, or compliance determinations. 3.2 El...”Open source citation
The clause grants a broad content license.
“Your use of the Services does not violate any applicable law or regulation. 3.1 Intended Use The Services are designed and intended to be used by healthcare professionals and other authorized users for informational and assistive purposes only. The Services do not provide medical advice, medical treatment, legal advice, billing services, coding services, reimbursement services, or compliance determinations. 3.2 El...”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“We reserve the right to update and revise this Agreement at any time. We’ll make sure to also change the “Last Updated” date at the top of this page so you can tell if this Agreement has changed since your last visit. Any such changes are effective immediately when we post them and apply to all access to and use of the Services thereafter. Please review this Agreement regularly because once we post any changes, yo...”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“3.5 Modifications of the Services We may from time to time in our sole discretion develop and provide updates to the Services, modify the Services, change the Services, restrict access to the Services (including to End Users) or withdraw or terminate the Services entirely, and we reserve the right to do so in our sole discretion without notice to you. Any such updates, modifications or changes will be deemed part ...”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“If you are required to but do not complete the verification process, you may not be permitted to use the Services. We reserve the right to modify the verification process, including but not limited to automating the verification process, at any time in our sole discretion. 4.3 Responsibility for Account If you create an Account, you are solely responsible for any activity that occurs through your Account. You, you...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | worsens | HIGH | 1 |
| All applicable tiers | output ownership | worsens | HIGH | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 4 |
| Api | governing law disputes | worsens | HIGH | 2 |
| Pro / Paid | privacy data use | worsens | HIGH | 2 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 2 |
| Team / Business | training use | worsens | HIGH | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: training permitted on training use
“As part of using the Services, you agree that you will comply with all laws, rules, and regulations applicable to you and/or your business, including the Health Insurance Portability and Accountability Act (“HIPAA”). You represent and warrant that you have all rights necessary to any information covered by HIPAA that you use or provide to us as part of your use of the Services. If either of you or your organization are subject to HIPAA as a Covered Entity or Business Associate (as defined in HIPAA) and intend to use the Services in a manner that will cause us to create, receive, maintain, or transmit Protected Health Information (“PHI”) on your behalf, then, at the outset of creating an Account to use the Services for yourself or your organization, you and Nabla shall comply with the Business Associate Agreement attached hereto as Appendix I . Notwithstanding anything to the contrary in this Agreement, in addition to any rights set forth in the BAA, you acknowledge and agree that Nabla may collect, process, and otherwise use de-identified data that is transmitted to Nabla through your use of the Services for training of Nabla’s internal artificial intelligence model, and Nabla may disclose such de-identified data in connection with the Services. Data will be de-identified in accordance with HIPAA regulations. For the avoidance of doubt, audio data does not include patient audio.”Open timeline citation
Latest stance: broad license on governing law disputes
“Your use of the Services does not violate any applicable law or regulation. 3.1 Intended Use The Services are designed and intended to be used by healthcare professionals and other authorized users for informational and assistive purposes only. The Services do not provide medical advice, medical treatment, legal advice, billing services, coding services, reimbursement services, or compliance determinations. 3.2 Eligibility You can only use or receive the Services to the extent the laws of your jurisdiction or the United States do not bar you from doing so. Please make sure this Agreement is in compliance with all laws, rules and regulations that apply to you. You are solely responsible for ensuring that your use of the Services complies with the laws of your specific jurisdiction. 3.3 License We hereby grant you a non-exclusive, non-transferable right to access and use the Services during the Term, solely for use by your End Users in accordance with this Agreement. In this Agreement, “End Users” refers to your staff (e.g. employees, contractors) authorized to use the Services under the conditions defined in the Agreement. To the extent that your use of the Services involves the use and/or integration of our Platform or any of our APIs or Services, we hereby grant you, during the Term, a non-exclusive, non-transferable license (without the right to sublicense) to use the Platform and/or any API or API components and/or Services to: develop and implement applications to assist you to access and use the Services (the “User Applications”); and use the Platform, any API and/or any code related to either for the sole purposes of designing, developing, and testing such User Applications.”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“We reserve the right to update and revise this Agreement at any time. We’ll make sure to also change the “Last Updated” date at the top of this page so you can tell if this Agreement has changed since your last visit. Any such changes are effective immediately when we post them and apply to all access to and use of the Services thereafter. Please review this Agreement regularly because once we post any changes, your continued use of the Services constitutes your acceptance of the revised Terms. If you do not accept any modification to the Terms, you must stop using the Services. Notwithstanding the foregoing, any change to the Fees and Payment terms as described in Section 5 will enter in force only on the calendar month following the revision of this Agreement.”Open timeline citation
Latest stance: platform claims or reserves rights on subprocessors data sharing
“3.5 Modifications of the Services We may from time to time in our sole discretion develop and provide updates to the Services, modify the Services, change the Services, restrict access to the Services (including to End Users) or withdraw or terminate the Services entirely, and we reserve the right to do so in our sole discretion without notice to you. Any such updates, modifications or changes will be deemed part of the Services and subject to all terms and conditions of this Agreement. Following such update, modification or change, you may terminate this Agreement without cause upon thirty (30) days written notice. We will not be liable to you or any third party for any modification, suspension, discontinuance or termination of the Services. In the event of modification suspension, discontinuance or termination, you will still be bound by your obligations under this Agreement, including the warranties made by you, and by the disclaimers and limitations of liability. From time to time, you may have the option to use alpha or beta products, functions, features or modules (collectively, “Beta Products”) offered by Nabla. The Beta Products are not generally available and are provided “as is”. Nabla does not provide any indemnities, service level commitments or warranties, express or implied, including warranties of merchantability, title, non-infringement, and fitness for a particular purpose, in relation thereto.”Open timeline citation
Latest stance: platform claims or reserves rights on data retention
“If you are required to but do not complete the verification process, you may not be permitted to use the Services. We reserve the right to modify the verification process, including but not limited to automating the verification process, at any time in our sole discretion. 4.3 Responsibility for Account If you create an Account, you are solely responsible for any activity that occurs through your Account. You, your employees or agents should not share your Account information. You agree to not use another person’s Account or registration information to access or use the Services. You agree not to permit any third party to use your Account or registration information to access or use the Services. You are solely responsible for keeping your Account and Account password secure and for any consequence resulting from your failure to do so. You should never publish, distribute, or post login information for your Account. 4.4 Suspension or termination of Account We reserve the right to disable any Account, username, password or other identifier, whether chosen by you or provided by us, at any time in our sole discretion for any or no reason, including if, in our opinion, you have violated any provision of this Agreement. You can always delete your Account by emailing us at support@nabla.com .”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“5.1 Fees The Services may include both paid-for Services, for which you will be charged fees (“Fees”) and free Services for which no fees are charged. The applicable Fees are available on our website or on the subscription portal. We reserve the right to, at any time and from time to time and upon reasonable advance notice to you, in our sole discretion, change the Fees we charge for the Services, including the right to charge Fees for Services that were previously free of charge. We may also at any time and from time to time, in our sole discretion, change or remove any of the pricing models in place. The new prices shall apply as of the calendar month following the notification. In case of refusal of the new prices, you remain free to terminate this Agreement by notifying us before the new prices enter in force. 5.2 Invoicing and Payment Fees are invoiced in advance on monthly basis and payable upon receipt of the invoice by direct debit, credit card or other payment means notified to you at our sole discretion. The first invoice will cover the period from the Effective Date to the end of the then-current month. We may use third party payment service providers to collect any Fees you incur in the course of your use of the Services. Our third party payment service providers may receive and implement updated credit card information from your credit card issuer in order to prevent your payment or subscription from being interrupted by an outdated or invalid card.”Open timeline citation
Latest stance: platform claims or reserves rights on output ownership
“Except as otherwise expressly granted to you in this Agreement, we reserve and retain all right, title and interest in the Services, including without limitation, all technology and processes, enhancements or modifications thereto, trademarks, service marks, site design, text, video, graphics, logos, images and icons, as well as the arrangement thereof. You acknowledge that the Services contain proprietary content, information and material protected by applicable intellectual property and other laws, including but not limited to copyright and trademark laws, and you agree that, except with our prior written consent or as explicitly provided in this Agreement, using the Services does not, give you any ownership of any intellectual property rights in our Services, or grant you the right to display, modify, reproduce, distribute, create derivative works of, download, store, transmit or otherwise use any of our intellectual property. Any unauthorized use of any content or materials on the Services is strictly prohibited and violates copyright, trademark, and/or other intellectual property laws, and/or the laws of privacy, publicity, and/or communications regulations and statutes. In particular, audio or video content from Nabla not explicitly indicated as downloadable may not be downloaded or copied from the Services. You may not otherwise download, display, copy, reproduce, distribute, modify, perform, transfer, create derivative works from, sell or otherwise exploit any content, code, data or materials in the Services.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“5.1 Fees The Services may include both paid-for Services, for which you will be charged fees (“Fees”) and free Services for which no fees are charged. The applicable Fees are available on our website or on the subscription portal. We reserve the right to, at any time and from time to time and upon reasonable advance notice to you, in our sole discretion, change the Fees we charge for the Services, including the right to charge Fees for Services that were previously free of charge. We may also at any time and from time to time, in our sole discretion, change or remove any of the pricing models in place. The new prices shall apply as of the calendar month following the notification. In case of refusal of the new prices, you remain free to terminate this Agreement by notifying us before the new prices enter in force. 5.2 Invoicing and Payment Fees are invoiced in advance on monthly basis and payable upon receipt of the invoice by direct debit, credit card or other payment means notified to you at our sole discretion. The first invoice will cover the period from the Effective Date to the end of the then-current month. We may use third party payment service providers to collect any Fees you incur in the course of your use of the Services. Our third party payment service providers may receive and implement updated credit card information from your credit card issuer in order to prevent your payment or subscription from being interrupted by an outdated or invalid card.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-06-07· verified 2026-06-07verified once — no re-scan in 96 days
- Terms of Service:Last captured 2026-07-20· verified 2026-07-20
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 299 fewer findings this quarter vs last (119 vs 418). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Nabla's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Nabla's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.