Polymorph procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ We may process and store information in countries other than where you live. Where required, we use appropriate safeguards, such as standard contractual clauses, for international transfers.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We keep personal information for as long as needed to provide the Services and for legitimate business or legal purposes. When it is no longer needed, we delete or anonymize it.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell your personal information. We share it only as follows: Service providers who perform services for us, such as hosting, analytics, and communications, under obligations of confidentiality. Legal and safety reasons, where required by law or to protect our rights, users, or the public. Business transfers in connection with a merger, acquisition, or sale of assets. With your consent or at your direction.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use first and third party analytics, including providers such as PostHog and Statsig, to understand how the Services are used and to improve them. These tools may set cookies or collect usage data on our behalf. You can control cookies through your browser settings, though some features may not work as intended if you disable them.” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.