Rex
Graded against 809 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
No verified risks yet
AIRIN has not published verified findings for this record yet. The page shows the gap instead of guessing.
How to read this page: Overall risk rates what Rex's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 0 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 0 citationsLast captured 2026-07-20
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain your information for as long as necessary to provide our services and fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. When we no longer need to retain your information, we will securely delete or anonymise it.”Open source citation
The clause permits sale of personal data or information.
“We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.”Open source citation
The clause says submitted content is not used for model training or model/service improvement.
“Rex maintains a documented information security programme and externally communicates its key commitments through this Privacy Policy, our Terms of Service , our Data Processing Agreement , our AI Security overview , and our publicly accessible Trust Center . Our key technical and organisational measures include: Encryption of personal data in transit (TLS 1.2 or higher) and at rest (AES-256), including database b...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 1 |
| All applicable tiers | training use | improves | LOW | 1 |
| Team / Business | privacy data use | worsens | HIGH | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sale or sell on privacy data use
“We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.”Open timeline citation
Latest stance: no training claim on training use
“Rex maintains a documented information security programme and externally communicates its key commitments through this Privacy Policy, our Terms of Service , our Data Processing Agreement , our AI Security overview , and our publicly accessible Trust Center . Our key technical and organisational measures include: Encryption of personal data in transit (TLS 1.2 or higher) and at rest (AES-256), including database backups. Role-based access controls, multi-factor authentication, least-privilege provisioning, and regular access reviews. Infrastructure hosted on AWS with VPC isolation, network access controls, and continuous monitoring. Tenant isolation so personal data is logically segregated between customers and is not used to train or fine-tune any AI models. Documented incident detection, response, and breach notification procedures, with notification to affected customers without undue delay. Personnel controls including background checks, signed confidentiality agreements, and recurring security awareness training. Continuous improvement through vulnerability scanning, dependency monitoring, and independent assessments. Rex is pursuing SOC 2 Type II certification. A current list of subprocessors, certifications, and our overall security posture is maintained at our Trust Center linked above. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.”Open timeline citation
Latest stance: indefinite or necessity based on data retention
“We retain your information for as long as necessary to provide our services and fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. When we no longer need to retain your information, we will securely delete or anonymise it.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
10 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Rex's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Rex's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Rex's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.