Perplexity AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “We commit to resolve DPF Principles-related complaints about our collection and use of personal information. Individuals in the EU and UK with inquiries or complaints regarding our compliance with the DPF should first contact us, at support@perplexity.ai. If you have an unresolved complaint concerning our handling of personal information received in reliance on the DPF that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/). Under certain conditions (more fully described here) you may be entitled to invoke binding arbitration to resolve your complaint. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, we commit to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “The personal information that we collect will be transferred to, stored at/processed in, or accessed from countries outside the jurisdiction in which you are based in, for the purposes described in this Privacy Policy, including countries in which our service providers or other third parties described in Section 4 are located. Specifically, we have servers for the Service in the US. We also have support, engineering and other teams who may support the Service, including from the United States.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “If there is any conflict between the terms in this privacy policy and the DPF Principles, the Principles shall govern to the extent applicable to the information at issue. The Federal Trade Commission has jurisdiction over our compliance with the DPF and, in accordance with the DPF, we are responsible for onward transfers to third parties that process personal information subject to the DPF in a way that does not follow the DPF Principles. To learn more about the Data Privacy Framework program, and to view our certification, please visit the Data Privacy Framework website.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “We process the personal information that you provide to us by creating an account and using our Services in countries outside the relevant jurisdiction you are resident in in order to perform our contract with you (to provide you with our Services). By using the Services and acknowledging the Privacy Policy, you acknowledge and, if necessary in your jurisdiction, consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country or region where we have databases or affiliates and, in particular, to the jurisdictions specified herein. For such transfers of data outside the relevant jurisdiction will use applicable safeguards, for example, for UK and EEA users, the European Commission’s model contracts for the transfer of personal information to third countries (i.e., the standard contractual clauses) (the “ **Model Clauses**”), or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals’ rights and freedoms for their personal information.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “10. DATA TRANSFERS” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “We comply with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce (collectively, the “DPF”) and have certified to the U.S. Department of Commerce that we adhere to the DPF Principles with regard to the processing of personal information received from the European Union and UK (and Gibraltar) in reliance on the DPF.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We commit to resolve DPF Principles-related complaints about our collection and use of personal information. Individuals in the EU and UK with inquiries or complaints regarding our compliance with the DPF should first contact us, at support@perplexity.ai. If you have an unresolved complaint concerning our handling of personal information received in reliance on the DPF that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://www.dataprivacyframework.gov/ . Under certain conditions (more fully described here) you may be entitled to invoke binding arbitration to resolve your complaint. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, we commit to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “We process the personal information that you provide to us by creating an account and using our Services in countries outside the relevant jurisdiction you are resident in in order to perform our contract with you (to provide you with our Services). By using the Services and acknowledging the Privacy Policy, you acknowledge and, if necessary in your jurisdiction, consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country or region where we have databases or affiliates and, in particular, to the jurisdictions specified herein. For such transfers of data outside the relevant jurisdiction will use applicable safeguards, for example, for UK and EEA users, the European Commission’s model contracts for the transfer of personal information to third countries (i.e., the standard contractual clauses) (the “ **Model Clauses**”), or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals’ rights and freedoms for their personal information. Please contact us at support@perplexity.ai should you wish to inquire further as to such data transfer mechanisms, including to examine a copy of the Model Clauses.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ We process the personal information that you provide to us by creating an account and using our Services in countries outside the relevant jurisdiction you are resident in in order to perform our contract with you (to provide you with our Services). By using the Services and acknowledging the Privacy Policy, you acknowledge and, if necessary in your jurisdiction, consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country or region where we have databases or affiliates and, in particular, to the jurisdictions specified herein. For such transfers of data outside the relevant jurisdiction will use applicable safeguards, for example, for UK and EEA users, the European Commission’s model contracts for the transfer of personal information to third countries (i.e., the standard contractual clauses) (the “ Model Clauses ”), or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals’ rights and freedoms for their personal information. Please contact us at support@perplexity.ai should you wish to inquire further as to such data transfer mechanisms, including to examine a copy of the Model Clauses.” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | API | low | “This Privacy Policy does not cover the use of the Perplexity API or Enterprise Pro, where we act solely as a processor, and which are governed by the applicable Terms and Conditions, including the Data Processing Addendum incorporated therein, that you agree to when signing up for a subscription to the Business Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Finally, we may, in our legitimate interests, deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“ Deidentified Information ”) (or we may collect information that has already been deidentified/anonymized), and we may use such Deidentified Information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified/anonymized form and not attempt to reidentify the information, except solely for the purpose of determining whether our deidentification/anonymization process satisfies legal requirements.” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “08. DATA SECURITY AND RETENTION” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Policy. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “| Financial Information – this may include bank account number, credit card number, debit card number, and other financial information. | - Company Group.<br> <br>- Service Providers.<br> <br>- Professional Advisors. | N/A. |” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Business Partners.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “| Additional categories of personal data described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include signature, physical characteristics, or description, insurance policy number. | - Company Group.<br> <br>- Service Providers.<br> <br>- Business Partners.<br> <br>- Other Third Parties<br> <br>- Professional Advisors. | N/A. |” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may also disclose your information as needed to comply with applicable law or any obligations thereunder or to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users. We do this in our legitimate interest to protect our Service and business and to comply with applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Information we receive from business partners and other companies that we partner with to provide you with free or discounted access to the Services or other offers or promotions, which we use in our legitimate interests to provide you with free or discounted access to the Services (“ Partner Information ”).” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ See Section 11 to exercise your rights concerning health-related data. Your health information may be shared in the following ways, in addition to those described elsewhere in this policy: with service providers that help us provide requested services, Apps/services that you connect to Perplexity Health, third party AI models that help us provide requested services. Selling and/or Sharing of Personal Information: We do not “sell” (as defined under the CCPA) personal information, nor have we done so in the preceding 12 months. Further, we do not have actual knowledge that we “sell” or “share” personal information of residents under 16 years of age. ” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Service Providers:** Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, generative AI and content creation, security, customer transaction facilitation and relationship management, marketing communications, web analytics, payment networks, and payment processing.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose your information to third parties subject to this Privacy Policy, including the following categories of third parties: Company Group: Our affiliates or others within our corporate group, in accordance with our contract with you, and for internal administration or support purposes, in our legitimate interest to run a successful business and in order to provide our Services.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Business Transactions:** We will share personal information with a prospective buyer, seller, new owner, or other relevant third party as necessary while negotiating or in relation to a change of corporate control such as a restructuring, merger, asset sale or purchase, bankruptcy or other business transaction or re-organization. We do this in our legitimate interest to run a successful and compliant business, and as required by applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Business Partners:** Third parties through whom you receive access to our Services, including via use of a promotion code or other method provided by such business partners, in our legitimate interest to provide you with free or discounted access to our Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Other Third Parties, including other users: Third parties to whom you request or direct us to disclose information, such as through your use of social media widgets or login integrations, when you purchase third-party goods through the Services, send an email or interact with your third party email or calendar account through the Services, or otherwise choose to share or make output or other information visible to others, including other users. We do this as necessary for the performance of a contract, or in our legitimate interest to provide you with access to the Services and integrations with third parties, or with your consent.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Other Third Parties, including other users:** Third parties to whom you request or direct us to disclose information, such as through your use of social media widgets or login integrations, when you purchase third-party goods through the Services, send an email or interact with your third party email or calendar account through the Services, or otherwise choose to share or make output or other information visible to others, including other users. We do this as necessary for the performance of a contract, or in our legitimate interest to provide you with access to the Services and integrations with third parties, or with your consent.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Information we receive from business partners and other companies that we partner with to provide you with free or discounted access to the Services or other offers or promotions, which we use in our legitimate interests to provide you with free or discounted access to the Services (“ **Partner Information**”).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Advertising Partners:** Third parties who display advertising information on our Services or otherwise assist with the delivery of ads.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Advertising Partners: Third parties who display advertising information on our Services or otherwise assist with the delivery of ads.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Professional Advisors:** As necessary, we will share your personal information with professional advisors such as auditors, law firms, or accounting firms.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Right to Request a List of Third-Party Recipients . You may request a list of specific third parties to which we have disclosed personal information. Some areas also allow you to obtain a list of the categories of third parties to which we have disclosed personal information. You can find that information in the table above under Section 9 (U.S. RESIDENTS).” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “| Professional or employment-related information – this includes, for example, information submitted by job applicants. | - Company Group.<br> <br>- Service Providers.<br> <br>- Other Third Parties<br> <br>- Professional Advisors. | N/A. |” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Certain features of the Services may allow you to initiate interactions between the Services and third-party services or platforms, such as Discord, X (formerly Twitter) and other social networks (“ **Social Features**”). Social Features include features that allow you to access our pages on third-party platforms, and from there ‘like’ or ‘share’ our content. Use of Social Features may allow a third party to collect and/or use your information. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service. For more information, see the section below, Third Party Websites and Links.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Business Transactions: We will share personal information with a prospective buyer, seller, new owner, or other relevant third party as necessary while negotiating or in relation to a change of corporate control such as a restructuring, merger, asset sale or purchase, bankruptcy or other business transaction or re-organization. We do this in our legitimate interest to run a successful and compliant business, and as required by applicable law.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Professional Advisors.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Business Partners: Third parties through whom you receive access to our Services, including via use of a promotion code or other method provided by such business partners, in our legitimate interest to provide you with free or discounted access to our Services.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may provide links to third-party websites or platforms, such as Discord and X (formerly Twitter). If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy policy, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “04. DISCLOSURE OF YOUR INFORMATION” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “| Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | - Company Group.<br> <br>- Service Providers.<br> <br>- Business Partners.<br> <br>- Other Third Parties<br> <br>- Professional Advisors. | N/A. |” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Professional Advisors: As necessary, we will share your personal information with professional advisors such as auditors, law firms, or accounting firms. ” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Service Providers: Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, generative AI and content creation, security, customer transaction facilitation and relationship management, marketing communications, web analytics, payment networks, and payment processing.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “- Payment information, such as credit or debit card information and billing address, which we collect using a third party payment processor (“ **Payment Information**”). We use this information where necessary to perform our contract with you to process your payment and provide the Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Certain features of the Services may allow you to initiate interactions between the Services and third-party services or platforms, such as Discord, X (formerly Twitter) and other social networks (“ Social Features ”). Social Features include features that allow you to access our pages on third-party platforms, and from there ‘like’ or ‘share’ our content. Use of Social Features may allow a third party to collect and/or use your information. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service. For more information, see the section below, Third Party Websites and Links.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may disclose your information to third parties subject to this Privacy Policy, including the following categories of third parties:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Company Group:** Our affiliates or others within our corporate group, in accordance with our contract with you, and for internal administration or support purposes, in our legitimate interest to run a successful business and in order to provide our Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “- **Right to Request a List of Third-Party Recipients**. You may request a list of specific third parties to which we have disclosed personal information. Some areas also allow you to obtain a list of the categories of third parties to which we have disclosed personal information. You can find that information in the table above under Section 9 (U.S. RESIDENTS).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Service Providers.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Payment information, such as credit or debit card information and billing address, which we collect using a third party payment processor (“ Payment Information ”). We use this information where necessary to perform our contract with you to process your payment and provide the Services.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | Paid | low | “Payment information, such as credit or debit card information and billing address, which we collect using a third party payment processor (“ **Payment Information**”). We use this information where necessary to perform our contract with you to process your payment and provide the Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ This Privacy Policy describes how Perplexity AI, Inc. (“ we ”, “ us ,” “ our ”) collects, uses and discloses information about individuals who use our websites ( www.perplexity.ai and https://labs.perplexity.ai ) to access the free version of our product or Perplexity Pro or Perplexity Max, other applications, services, tools and features, or who purchase our products or otherwise interact with us (collectively, the “ Services ”). For the purposes of this Privacy Policy, we are the data controller, and “ you ” and “ your ” means you as the user of the Services, whether you are a customer, website visitor, job applicant, representative of a company with whom we do business, or another individual whose information we have collected pursuant to this Privacy Policy. This Privacy Policy does not cover the use of the Perplexity API or Enterprise Pro, where we act solely as a processor, and which are governed by the applicable Terms and Conditions, including the Data Processing Addendum incorporated therein, that you agree to when signing up for a subscription to the Business Services. ” | Captured 2026-06-10Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.