Pentagon procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “You can access your data at any time through Pentagon. You may request an export of your data by contacting us.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Pentagon is a cloud-based platform. When you use the Service, we store the following data on our servers:” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “You can delete your account and all associated data by contacting us at privacy@pentagon.run .” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We do not store your source code, documents, or other files. Agents interact with your files locally or through version control systems you configure. The contents of your folders are never uploaded to or stored on Arlington Labs servers.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Messages: All messages you send to your agents and all responses your agents generate Agent Reports: Status updates, memory entries, and task history produced by your agents Workspace Data: Map configurations, team structures, channel contents, and agent settings” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Messages and Agent Data: Retained while your account is active; deleted within 30 days of account deletion Account Information: Retained while your account is active; deleted within 30 days of account deletion Analytics Data: Aggregated and anonymized; retained for up to 2 years” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ AI Model Providers: Pentagon connects to AI model providers (such as Anthropic) to power your agents. Your use of these models is subject to the respective provider's terms of service.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “We may disclose information if required by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use the following third-party services to operate Pentagon:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Supabase: Powers our cloud infrastructure. Subject to Supabase's Terms of Service .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “These providers process data only on our behalf and are contractually obligated to protect your information.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Pentagon connects your agents to AI model providers (such as Anthropic) to power their responses. When you send a message to an agent:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ GitHub OAuth: Used for authentication. Subject to GitHub's Terms of Service .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “If Arlington Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ AI Model Providers: Processing agent requests (e.g., Anthropic)” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Pentagon integrates with and relies on third-party services, including:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Your message is sent through our servers to the AI model provider The AI model provider processes the request and returns a response Both the message and response are stored on our servers as part of your conversation history The AI model provider's own data retention and privacy policies apply to their processing of your requests” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.