RunDiffusion procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Our servers are located in the United States. Your information may be transferred to and processed in the US and other countries where our service providers operate. If you are located in the EEA, UK, or Switzerland, please note that data protection laws in these countries may not be as comprehensive as those in your country. To protect your information, we use Standard Contractual Clauses approved by the European Commission for data transfers outside the EEA and UK. These clauses require recipients to protect your information according to European data protection standards.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ The Company shall perform regular backups of End User data stored using the Products and Services daily and maintain a comprehensive disaster recovery plan. Users and End Users are contingent to” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Generally, we will keep your information for as long as you have an account with us. When your information is no longer needed, we will delete or anonymize it. If deletion is not possible (e.g., for backup purposes), we will securely store and isolate your information until deletion is possible.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share your information with trusted third-party service providers who help us operate our business, such as payment processors, cloud storage providers, and marketing platforms. We have contracts with these providers requiring them to protect your information. We may also share your information in the following circumstances: Business Transfers: If we are involved in a merger, acquisition, or sale of assets” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.