Developer / Coding · snyk.comSnyk
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“5.4 AI Compliance. Snyk may use AI Models in the provision of the Services. Snyk will not use (or permit any of its Affiliates, sub-processors, or other third parties to use) any Inputs to train, enhance or improve any AI Models incorporated within the Services and more fully described in the Documentation. Snyk aligns its AI compliance program to industry…”
Watch: indemnity liability
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
This clause sets out additional terms for Snyk API & Web (SAW), prohibiting circumvention of fees or usage limits, restricting self-serve plan users from certain entitlements, and governing the specific operating conditions of the cloud-based SAW product.
Excludes consequential, incidental, indirect, exemplary, special, enhanced, and punitive damages for both parties under any legal theory, regardless of foreseeability or prior notice of the possibility of such damages.
This segment caps the aggregate service credits claimable for downtime in a single calendar month at the equivalent of 10 days of services, limiting Snyk's maximum liability for uptime failures within any given month.
Scores derived from 70 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Snyk's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — Snyk's terms include affirmatively protective IP language.
- Data handling is conditional — 11 privacy or retention clauses warrant review before using Snyk at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Snyk's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredIP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.
Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.
Based on 100 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 160 citationspdf textLast captured 2026-08-14
- Privacy PolicyVerified - read in full - 73 citationspdf textLast captured 2026-08-31
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Defines 'Permitted Purpose' as either evaluation-only internal testing or internal business operations for production use, establishing the boundary of permissible use that restricts how Services may be deployed under the Agreement.
"“ **Permitted Purpose**” means: (a) where you have subscribed to the Services for an Evaluation, the use of the Services by you solely for internal testing of the Services to assess their suitability to help you secure your software develop..."
Defines Consulting Services as optional à la carte time-and-materials engagements governed by a mutually signed statement of work, and clarifies that the statement of work may amend or supplement Agreement terms as applied to those services.
"3.8 Consulting Services. You may opt to purchase à la carte consulting services to be provided on a time and materials basis as mutually agreed upon in a statement of work signed by both parties (“ **Consulting Services**”). The statement o..."
States the purposes for which personal information is used, creating an obligation to limit use to those stated purposes including contract fulfillment, personalization, communication, and platform administration.
"- **How do we use personal information?** We use personal information to operate our business, including fulfilling contract obligations, personalizing user experiences, communicating with users, and administering the Platform."
States the overarching obligation to use personal information only for business operations and legal/compliance purposes, establishing purpose limitation as a binding commitment.
"We use personal information we collect to operate our business and fulfill our legal and compliance obligations, including:"
This clause permits Snyk to collect, analyze, and process Usage Data for internal business purposes including security, analytics, and service improvement, and to publicly disclose it in aggregated/de-identified form, while explicitly excluding customer Inputs from treatment as Usage Data.
"4.4 Usage Data. Snyk may (i) collect, analyse and otherwise process Usage Data internally for its business purposes, including for the purposes of security and analytics, to improve and enhance the Services, or for other development, diagno..."
Definition delimiting a term that scopes downstream obligations; retained and linked.
"“ **Application**” means the proprietary software applications made available by Snyk, including Snyk Code, Snyk Open Source, Snyk Container, Snyk Infrastructure as Code, and Snyk API and Web, that you are permitted to access pursuant to an..."
Definition delimiting a term that scopes downstream obligations; retained and linked.
"“ **Code Asset**” means any source code repository, code file, configuration file, web application, API, container image, cloud asset, or similar software asset relating to your software projects stored in your source code manager and used ..."
Definition delimiting a term that scopes downstream obligations; retained and linked.
"“ **Intellectual Property Rights**” means all rights to patents, inventions, copyright and related rights, trademarks, business names and domain names, get-up, goodwill, designs, computer software, database rights, including know-how and tr..."
Clause A specifies a 10-day notice period for termination due to specific uptime failures, while Clause B, a general material breach clause, would imply either immediate termination (if irremediable) or termination after a 30-day cure period (if remediable) for what could be considered the same underlying breach, creating conflicting termination processes and timelines.
"**2\.** If Monthly Uptime Percentage is below 95% for: (a) three consecutive months; or, (b) any three months during any twelve-month period; then, in addition to the 10-day Service Credit referenced above, you will also have the right to terminate this Agreement upon 10 Business Days’ written notice to Snyk."
"10.2 Termination. Without affecting any other right or remedy available to it, including (but not limited to) the rights in Section 10.1, either party may terminate this Agreement, an Order Form and/or the Service Plan with immediate effect by giving written notice to the other party if: (a) the other party commits a material breach of any other term of this Agreement which breach is irremediable or, if such breach is remediable, the breaching party fails to remedy that breach within a period of 30 days after being notified in writing to do; (b) the other party ceases to function as a going concern or to conduct operations in the normal course of business; or, (c) the other party has a petition filed by or against it under any bankruptcy or insolvency laws which petition has not been dismissed or set aside within sixty (60) days of filing. Snyk may additionally terminate this Agreement upon written notice to you if: (i) you fail to pay any amount due under this Agreement on the due date for payment and remain in default not less than 10 days after being notified in writing to make such payment (though termination does not relieve you of your payment obligation); or (ii) the Channel Partner (if any) fails to pay any amounts due to Snyk with respect to your subscription to the Services. You acknowledge and agree that Snyk shall have no liability of any kind with respect to any such termination, and your sole recourse with respect to any such termination shall be against the Channel Partner."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"**(a)** Snyk Tools. The Tools are intended to be used as an interface between the Services and an external application or repository operated and controlled by you. You may access and use the Tools solely to enable your use of the Applications as permitted under this Agreement. Snyk may rate-limit, throttle or otherwise restrict usage of the Tools to prevent what it considers (in its absolute discretion) to be abuse, security issues, or excessive use. Snyk will use reasonable endeavours when applying such restriction(s) to return a descriptive error message. No warranty or representation is made as to its compatibility with any software or technical protocols or standards."
This clause restricts use of Snyk Tools to enabling permitted Applications use, permits Snyk to rate-limit or restrict tool usage at its absolute discretion to prevent abuse, and disclaims warranties regarding the Tools, limiting how and when Tools may be accessed.
AI-generated interpretation, not legal advice.
"**(b)** Snyk API & Web. Snyk API & Web (“SAW”) is a web application vulnerability scanner cloud-based solution that has been designed to operate against web applications where connectivity exists between Snyk's servers and the server hosting the web application being tested. The following additional terms apply to your access to and use of SAW: (i) you shall not, and shall not encourage or assist any third party to, access or use SAW in any manner intended to improperly avoid incurring fees or to exceed usage limits or quotas. If you are purchasing SAW on a self-serve plan, you are not entitled to concurrent scans of the same target or more than sixty (60) scans of the same target on a monthly basis; and (ii) you acknowledge and agree that use of any DAST tool, including SAW, in connection with production environments or live data involves inherent risks, and accordingly assume responsibility for the appropriate deployment and use of SAW, including backing up data and taking reasonable precautions before testing begins."
This clause sets out additional terms for Snyk API & Web (SAW), prohibiting circumvention of fees or usage limits, restricting self-serve plan users from certain entitlements, and governing the specific operating conditions of the cloud-based SAW product.
AI-generated interpretation, not legal advice.
"- **Your Devices.** We collect personal information from your devices, often through the use of cookies or similar tools. Cookies (and similar tools) help us to provide you with a good experience when you browse our Platform and also allows us to improve our Platform. You can find more information on which cookies we use, why we use them, by reviewing the details in our cookie management tool on our website."
Defines device-based collection as a source of personal information, specifying the use of cookies and similar tools, and references the cookie management tool for further detail, incorporating that resource by cross-reference.
AI-generated interpretation, not legal advice.
"- Informing you about other products and services we offer that are similar to those that you have already purchased or enquired about;"
Grants permission to use personal information for informing users about similar products and services they have already purchased or inquired about, establishing a lawful basis for related marketing communications.
AI-generated interpretation, not legal advice.
"- **Geolocation Data.** This includes information about your general location."
Defines the 'Geolocation Data' category of personal information collected, specifying general location information.
AI-generated interpretation, not legal advice.
"- **Internet or Network Activity.** This includes information such as your IP address, browser type, operating system, and activity on our website (such as what pages you visited and where you clicked)."
Defines the 'Internet or Network Activity' category of personal information collected, specifying IP address, browser type, operating system, and website activity data.
AI-generated interpretation, not legal advice.
"4.4 Usage Data. Snyk may (i) collect, analyse and otherwise process Usage Data internally for its business purposes, including for the purposes of security and analytics, to improve and enhance the Services, or for other development, diagnostic and corrective purposes in connection with the Services or other Snyk products or services, and (ii) publicly disclose Usage Data only in an aggregated and/or de-identified form in connection with its business in a manner that does not identify you or any of your Users. For the avoidance of doubt, your Inputs shall not be treated as Usage Data for the purposes of this Agreement, and Inputs remain subject to Section 5.4 (AI Compliance)."
This clause permits Snyk to collect, analyze, and process Usage Data for internal business purposes including security, analytics, and service improvement, and to publicly disclose it in aggregated/de-identified form, while explicitly excluding customer Inputs from treatment as Usage Data.
AI-generated interpretation, not legal advice.
"- Administering and improving our products and services, including troubleshooting, data analysis, testing, research, statistical and survey purposes;"
Grants permission to use personal information for administering and improving products and services, including troubleshooting, analytics, testing, research, and statistical purposes, establishing a lawful use for service development.
AI-generated interpretation, not legal advice.
"We may change this policy from time to time, such as when the law changes. If we make a change, we will post the new version on this website and, if required by law, notify you of the updates. Please check back frequently to see any updates or changes to our privacy policy."
Establishes the procedure by which Snyk may amend the privacy policy, including posting updates on the website and providing legally required notices, and places users on constructive notice to check for updates.
AI-generated interpretation, not legal advice.
"9.2 EXCLUSION OF DAMAGES. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL EITHER PARTY BE LIABLE UNDER THIS AGREEMENT UNDER ANY LEGAL OR EQUITABLE THEORY, INCLUDING BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, AND OTHERWISE, FOR ANY CONSEQUENTIAL, INCIDENTAL, INDIRECT, EXEMPLARY, SPECIAL, ENHANCED, OR PUNITIVE DAMAGES REGARDLESS OF WHETHER SUCH DAMAGE WAS FORESEEABLE AND WHETHER EITHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES."
Excludes consequential, incidental, indirect, exemplary, special, enhanced, and punitive damages for both parties under any legal theory, regardless of foreseeability or prior notice of the possibility of such damages.
AI-generated interpretation, not legal advice.
"**3\.** The aggregate maximum number of Service Credits you can claim for Downtime periods that occur in a single calendar month shall not exceed the equivalent of 10 days of Services being added to your account."
This segment caps the aggregate service credits claimable for downtime in a single calendar month at the equivalent of 10 days of services, limiting Snyk's maximum liability for uptime failures within any given month.
AI-generated interpretation, not legal advice.
"**4\.** This SLA does not apply to any unavailability of the Services caused by: (a) your acts or omissions; (b) the failure or malfunction of equipment, applications or systems not owned or controlled by Snyk; (c) third party connections or utilities or other reasons beyond Snyk’s control (d) any inconsistencies or changes in your source environment, including either intentional or accidental connections or disconnections to the environment; (e) Customer Data; (f) Force Majeure events; (g) any suspension of the Services in accordance with the terms of this Agreement; (h) you using the Services in a manner inconsistent with the Documentation; (i) Scheduled Downtime; or, (j) Emergency Downtime."
This segment lists circumstances under which the SLA does not apply, including customer acts or omissions, third-party failures, force majeure, and authorized service suspensions, thereby excluding Snyk's liability for downtime caused by those factors.
AI-generated interpretation, not legal advice.
"9.4 EXCEPTIONS. THE LIMITATION ON MONETARY LIABILITY SET FORTH ABOVE SHALL NOT APPLY TO: (A) A PARTY’S INDEMNIFICATION OBLIGATIONS UNDER SECTION 8; (B) A PARTY’S FRAUD, GROSS NEGLIGENCE OR WILFUL MISCONDUCT; (C) LOSSES FOR DEATH OR BODILY INJURY; OR (D) LIABILITY WHICH CANNOT BE EXCLUDED OR LIMITED BY APPLICABLE LAW. EACH PROVISION OF THIS AGREEMENT THAT PROVIDES FOR A LIMITATION OF LIABILITY, DISCLAIMER OF WARRANTIES, OR EXCLUSION OF DAMAGES IS TO ALLOCATE THE RISKS OF THIS AGREEMENT BETWEEN THE PARTIES. THIS ALLOCATION IS REFLECTED IN THE PRICING OFFERED BY SNYK TO YOU AND IS AN ESSENTIAL ELEMENT OF THE BASIS OF THE BARGAIN BETWEEN THE PARTIES. THE LIMITATIONS IN THIS SECTION 9 (LIMITATION OF LIABILITY) WILL APPLY NOTWITHSTANDING THE FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY IN THIS AGREEMENT"
Enumerates categories excluded from the monetary liability cap, including indemnification obligations, fraud/gross negligence/wilful misconduct, death or bodily injury, and non-excludable statutory liability, and explains the risk-allocation rationale behind the limitations.
AI-generated interpretation, not legal advice.
"9.3 LIMITATION ON MONETARY LIABILITY. EXCEPT AS OTHERWISE PROVIDED IN SECTION 9.4, IN NO EVENT WILL THE AGGREGATE LIABILITY OF EITHER PARTY ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER ARISING UNDER OR RELATED TO BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER LEGAL OR EQUITABLE THEORY, EXCEED THE GREATER OF: (A) 100 USD; OR (B) THE TOTAL SUBSCRIPTION FEES PAID OR PAYABLE BY YOU UNDER THIS AGREEMENT FOR THE 12 MONTH PERIOD PRECEDING THE EVENT GIVING RISE TO THE CLAIM. THE FOREGOING LIMITATIONS APPLY EVEN IF ANY REMEDY FAILS OF ITS ESSENTIAL PURPOSE."
Caps each party's aggregate monetary liability at the greater of $100 USD or total subscription fees paid in the preceding 12 months, applying this cap across all legal theories even if remedies fail of their essential purpose.
AI-generated interpretation, not legal advice.
"For the avoidance of doubt, this Agreement will apply to your use of and access to the Services, irrespective of whether you subscribe to: (i) a paid version of the Services, whether from Snyk directly, or from a Channel Partner; or (ii) a free trial or evaluation of the Services (“ **Evaluation**”), or a free version of the Services, including your entitlement to use a paid version through the Secure Developer Project available [here](https://snyk.io/open-source/) or through any other open source or related projects offered by Snyk from time to time which permit the free use of a paid version of the Services (“ **Open Source Projects**”), save that Sections 1(b), 3.1(b), 3.2, 6, 8.2, 11.6(a), 11.13 and Schedule 2 shall not apply to the Services described in this (ii). In connection with the Open Source Projects, Snyk may provide you with the Services at no charge, provided that you satisfy the applicable requirements prescribed by Snyk from time to time on its website or otherwise communicated to you."
This clause establishes that the Agreement applies universally across all service tiers—paid, channel partner, free trial, evaluation, and free versions—incorporating all tiers under the same contractual framework and defining the scope of 'Evaluation' as a defined term.
AI-generated interpretation, not legal advice.
"(b) Service Plan: Where you subscribe to the Services through a Service Plan, Snyk and/or its third party payment processor will (and you hereby authorise it to) bill your payment card for the applicable Subscription Fee (and any On-Demand Consumption pursuant to Section 6.1). You will be billed the applicable Subscription Fee in advance on or shortly after the date you select the Service Plan and on each month or anniversary thereafter, until this Agreement and/or the Services are terminated by you or Snyk in accordance with this Agreement. Snyk reserves the right to change the Subscription Fees applicable to its Service Plans at any time. If you do not agree to such change, you must delete your account by means of the Service, or by contacting Snyk’s support team for deletion assistance and stop using the Services, at which point, this Agreement will be deemed to have been terminated by you at the end of your then current billing period. Snyk will only charge you in respect of the period before termination based on the previously agreed Subscription Fee, and will not be required to refund any Subscription Fees to you. If you do agree to such change (which will be deemed from your continued use of the Services after the date the new Subscription Fee becomes effective), your next bill will include the new Subscription Fees on a pro rata basis."
Specifies that Service Plan subscribers authorize Snyk or its third-party payment processor to charge their payment card in advance, sets out the recurring billing cycle, and reserves Snyk's right to change Subscription Fees with notice before the next billing cycle.
AI-generated interpretation, not legal advice.
"10.1 Term. The term of this Agreement is determined by whether you subscribe to a free version of the Services, an Evaluation, or a paid version of the Services. In each case, this Agreement shall commence on the Commencement Date and shall endure for the duration set forth in (a), (b) or (c) below:"
Defines the overall term structure of the Agreement by reference to whether the customer subscribes to a free version, an Evaluation, or a paid version of the Services, linking each to a separate sub-clause.
AI-generated interpretation, not legal advice.
"(a) Free Version of Services (including Open Source Projects): This Agreement will endure until it is terminated by either party as follows: (i) by Snyk at any time and for any reason, including without notice to you; or (ii) by you at any time by deleting your organization and projects in accordance with Section 10.3(b). Additionally, Snyk reserves the right to terminate this Agreement pursuant to Section 10.1(a)(i) and/or to delete your data at its discretion without prior notice. Examples of when this might occur include prolonged account inactivity, violation of our terms, or system maintenance needs;"
Specifies that the free-version Agreement endures until terminated by either party, granting Snyk the right to terminate at any time without notice and allowing the customer to terminate by deleting its organization and projects; also grants Snyk discretion to delete customer data upon termination without prior notice, including for inactivity, terms violations, or system maintenance.
AI-generated interpretation, not legal advice.
Common questions about Snyk's policies
- Does Snyk train its AI models on your data?
- No training on your content by default — based on 4 verified findings from Snyk's published policy. Informational only, not legal advice.
- Who owns the content you create with Snyk?
- You own your outputs — based on 5 verified findings from Snyk's published policy. Informational only, not legal advice.
- Can you use Snyk's output commercially?
- Commercial use allowed — based on 5 verified findings from Snyk's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Snyk's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
42 verified clausesClauses in Snyk's policies that work in your favour — commitments the platform made to you.
- Moderation & enforcementterms can change anytime
“11.6 Amendment. Snyk may periodically update the terms of this Agreement. If you have an active Snyk account, Snyk will notify you of updates via an email or a notification through the Services. Unless the notice states otherwise, the updated terms of this Ag…”
Establishes Snyk's unilateral right to amend the Agreement, the mechanism for notifying users, the 30-day effectiveness period for updates, and a procedure for paid subscribers to object to material changes.
- Terms changes: advance notice promised
📍 § 11.6Jump to exact text → - Model trainingdoes-not-train
“5.4 AI Compliance. Snyk may use AI Models in the provision of the Services. Snyk will not use (or permit any of its Affiliates, sub-processors, or other third parties to use) any Inputs to train, enhance or improve any AI Models incorporated within the Service…”
This clause expressly prohibits Snyk and any of its affiliates, sub-processors, or third parties from using customer Inputs to train, enhance, or improve AI Models incorporated in the Services, constituting a binding res…
📍 § 5.4Jump to exact text → - Indemnity & liabilityindemnity direction
“8.3 Indemnification Procedure. Each party will promptly notify the other party in writing of any claim for which such party believes it is entitled to be indemnified pursuant to this Section 8. The party seeking indemnification (the " **Indemnitee**") shall c…”
Establishes the procedural mechanics of indemnification, including notice requirements, cooperation duties, control of defense, and restrictions on the Indemnitee's ability to admit liability or settle without the Indemn…
📍 § 8.3Jump to exact text → - Confidentiality
“7.1 Each party (“ **Recipient**”) will be given access to Confidential Information from the other party (“ **Discloser**”) to perform its obligations under this Agreement. A party's Confidential Information shall not be deemed to include information that: (a)…”
Defines 'Recipient' and 'Discloser' roles and enumerates four exceptions to what constitutes Confidential Information, establishing the scope of confidentiality obligations for both parties.
📍 § 7.1Jump to exact text → - Indemnity & liabilityindemnity direction
“8.4 Mitigation. If any of the Services are, or in Snyk’s reasonable opinion are likely to be, claimed to infringe, misappropriate, or otherwise violate any third-party Intellectual Property Right, or if your use of the Services is enjoined or threatened to be…”
Grants Snyk the option to mitigate IP infringement exposure by obtaining continued-use rights, modifying or replacing the Services, or terminating the Agreement and refunding prepaid fees, providing alternative remedies…
📍 § 8.4Jump to exact text → - Confidentiality
“7.4 Notwithstanding any provision of this Agreement, Recipient may disclose Discloser’s Confidential Information, in whole or in part (i) to its employees, officers, directors, consultants and professional advisers (e.g., attorneys, auditors, financial advisor…”
Permits disclosure of Confidential Information to Personnel with a need-to-know who are bound by confidentiality obligations or professional ethical duties, creating an authorized channel for internal sharing.
📍 § 7.4Jump to exact text →
+ 36 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
3 verified clausesWhat Snyk requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“You shall not: (a) use the Services in connection with any Code Asset that is not owned by you or your Affiliates, or that you do not have a right to access or use; (b) upload or input to the Services: (i) any Virus; or, (ii) any material that is illegal or in…”
This clause enumerates prohibited uses of the Services, including restrictions on using unowned Code Assets, uploading viruses or infringing materials, uploading sensitive or regulated data outside the DPA, and commercia…
📍 Terms of Service › “SNYK TERMS OF SERVICE”Jump to exact text → - Moderation & enforcementconduct restrictions
“of Snyk, or to develop or sell a competing product or service, or for purposes that are competitive with Snyk; or, (o) access or use the Services from any country or region subject to a comprehensive U.S.”
This clause continues the enumeration of prohibited uses, restricting use to develop competing products or services and prohibiting access from embargoed countries or regions, extending the competitive and geographic use…
📍 Terms of Service › “SNYK TERMS OF SERVICE”Jump to exact text → - Moderation & enforcement
“(c) you shall immediately uninstall all Tools from all computer equipment in your possession or control and, upon written request from Snyk, will provide satisfactory evidence of the same; and,”
Requires the customer to immediately uninstall all Tools from its systems upon termination and, on Snyk's written request, provide satisfactory evidence of such uninstallation.
📍 § 10.3Jump to exact text →
What the policies actually cover
14 topics- Product telemetry & usage tracking12 clauses
- Advertising & tracking1 protective6 clauses
- Sale or sharing of personal data2 protective2 clauses
- Sensitive data (biometric, location, health)1 protective2 clauses
- Children's data2 protective2 clauses
- Government & law-enforcement disclosure2 clauses
- Does not train on your content1 protective1 clause
- Damages & liability cap5 protective17 clauses
- Indemnity direction3 protective5 clauses
- Terms can change at any time1 protective4 clauses
- Deletion rights & post-termination survival2 protective4 clauses
- Auto-renewal & cancel window4 clauses
- Breach-notification promises1 protective1 clause
- Conduct restrictions2 obligations2 clauses
169 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Terms of Service, § 11.3 addresses how long content is retained, and the Terms of Service, § 5.3 addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
Verified retention clauses point in different directions: the Privacy Policy describes broad or open-ended retention, while the Terms of Service, § 10.3 describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause includes sublicensable, transferable, or assignable rights.
“Subject to the Subscription Allocation for the applicable Application(s), Snyk grants you a non-exclusive, non-transferable, non-assignable (subject to Section 11.9), non-sublicensable right to: (a) access and use (and to permit your Users to access and use) the Services, Support, and Documentation during the Term solely for the Permitted Purpose; and (b) use the Service Data for software development and maintenan...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Subject to the Subscription Allocation for the applicable Application(s), Snyk grants you a non-exclusive, non-transferable, non-assignable (subject to Section 11.9), non-sublicensable right to: (a) access and use (and to permit your Users to access and use) the Services, Support, and Documentation during the Term solely for the Permitted Purpose; and (b) use the Service Data for software development and maintenan...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“6.2 Credits. If you purchase any Services under a credit model, such as Snyk Credits (“ **Credits**”), those Credits form part of your Subscription Allocation. Credits may be applied for various Services. When Credits are applied, the number of Credits required to redeem a Service shall be deducted from your Credit balance. Unless otherwise stated on an applicable Order Form, all Credits must be used within the te...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Subject to the Subscription Allocation, Snyk grants you a non-exclusive, non-transferable, non-assignable (subject to Section 11.9), non-sublicensable right to: (a) access and use (and to permit your Users to access and use) the Services, Support, and Documentation during the Term solely for the Permitted Purpose; and (b) use the Service Data for software development and maintenance purposes in conjunction with th...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“6.2 Credits. If your Subscription Allocation includes Credits, those Credits may be applied to various features and functionality of the Services, and the number of Credits required will be deducted from your Credit balance. Unless otherwise stated on an applicable Order Form, all Credits must be used within the term of such Order Form, after which any unused Credits will expire and cannot be redeemed, refunded, o...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 2 |
| All applicable tiers | confidentiality | conditional | MEDIUM | 2 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 1 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 14 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 1 |
| All applicable tiers | output ownership | conditional | MEDIUM | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 8 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 2 |
| All applicable tiers | tier differences | worsens | HIGH | 2 |
| Free | indemnity liability | conditional | MEDIUM | 2 |
| Free | tier differences | conditional | MEDIUM | 3 |
| Pro / Paid | indemnity liability | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sale or sell on privacy data use
“We do not have actual knowledge that we sold or shared personal information concerning minors—those under 16 years of age.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“This notice explains how we (Snyk Limited and our affiliates) collect, use, and disclose personal information. Snyk is a provider of software-as-a-service that helps developers find and fix vulnerabilities and other issues relating to their software projects. We collect personal information when you interact with our website or use our products and services (together the “Platform”). **Please read it carefully.**”Open timeline citation
Latest stance: sublicensable or transferable on commercial use
“Subject to the Subscription Allocation, Snyk grants you a non-exclusive, non-transferable, non-assignable (subject to Section 11.9), non-sublicensable right to: (a) access and use (and to permit your Users to access and use) the Services, Support, and Documentation during the Term solely for the Permitted Purpose; and (b) use the Service Data for software development and maintenance purposes in conjunction with the Code Asset, subject to Section 10.3(a) (Effects of Termination).”Open timeline citation
Latest stance: sublicensable or transferable on tier differences
“6.2 Credits. If your Subscription Allocation includes Credits, those Credits may be applied to various features and functionality of the Services, and the number of Credits required will be deducted from your Credit balance. Unless otherwise stated on an applicable Order Form, all Credits must be used within the term of such Order Form, after which any unused Credits will expire and cannot be redeemed, refunded, or credited. Credits are not redeemable for cash and are non-transferable. Upon your exhaustion of your prepaid Credits, Snyk (or its Channel Partner, where applicable) may invoice you for any On-Demand Consumption pursuant to Section 6.1.”Open timeline citation
Latest stance: third party or vendor sharing on moderation enforcement
“You shall not: (a) use the Services in connection with any Code Asset that is not owned by you or your Affiliates, or that you do not have a right to access or use; (b) upload or input to the Services: (i) any Virus; or, (ii) any material that is illegal or infringes any third-party Intellectual Property Right; (c) upload to the Services, or otherwise make accessible to Snyk, any sensitive data or regulated data (except pursuant to the DPA with respect to non-sensitive Personal Data), such as health or financial information; (d) license, sell, rent, lease, distribute, display, commercially exploit, or otherwise make the Services available to any third party; (e) copy, modify, duplicate, create derivative works from, frame, mirror, republish, download, display, transmit, or distribute all or any portion of the Services; (f) reverse compile, disassemble, reverse engineer, or otherwise reduce to human-perceivable form, all or any part of the Services; (g) circumvent or disable any security or other technological features of the Services; (h) perform any actions that would interfere with the proper working of the Services or prevent access to or use of the Services by Snyk’s other customers; (i) use the Services to perform any benchmarking activities on the Applications or any third-party applications; (j) use the Services to provide business process outsourcing services to third parties (e.g., as a service bureau); (k) remove any proprietary notices or labels from the Services; (l) use the Services and/or Documentation other than in accordance with this Agreement; (m) use or input any data into the Services in breach of: (i) applicable law; or, (ii) license terms or other contractual obligations owing to a third party; (n) access or use the Services if you are a competitor”Open timeline citation
Latest stance: third party or vendor sharing on confidentiality
“7.1 Each party (“ **Recipient**”) will be given access to Confidential Information from the other party (“ **Discloser**”) to perform its obligations under this Agreement. A party's Confidential Information shall not be deemed to include information that: (a) is or becomes publicly known other than through any act or omission of the Recipient; (b) was in the Recipient's lawful possession before the disclosure; (c) is lawfully disclosed to the Recipient by a third party without restriction on disclosure; or, (d) is independently developed by the Recipient without reference to, or reliance on, the Confidential Information of the Discloser, which independent development can be shown by written evidence. Your Confidential Information includes Customer Data, Code Assets and Outputs. Snyk’s Confidential Information includes the Services, Service Data, product roadmaps, pricing, and the results of any performance tests of the Services. The terms of this Agreement are confidential to both parties.”Open timeline citation
Latest stance: liability limited on indemnity liability
“9.1 EXCLUSIONS FROM LIABILITY. EXCEPT AS EXPRESSLY PROVIDED IN THIS AGREEMENT: (A) SNYK SHALL HAVE NO LIABILITY FOR ANY LOSS OR DAMAGE CAUSED BY ERRORS OR OMISSIONS IN ANY INFORMATION, INSTRUCTIONS OR SCRIPTS PROVIDED TO SNYK BY YOU IN CONNECTION WITH THE SERVICES, OR ANY ACTIONS TAKEN BY SNYK AT YOUR DIRECTION; (B) ALL WARRANTIES, REPRESENTATIONS, CONDITIONS AND ALL OTHER TERMS OF ANY KIND WHATSOEVER, EXPRESS OR IMPLIED BY STATUTE OR COMMON LAW ARE, TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, EXCLUDED FROM THIS AGREEMENT; AND, (C) THE SERVICES ARE PROVIDED TO YOU ON AN "AS IS" BASIS.”Open timeline citation
Latest stance: liability limited on indemnity liability
“3.2 Performance Warranty. Snyk will make commercially reasonable efforts to ensure that the Services perform substantially in accordance with the Documentation and that all Support will be performed with reasonable skill and care (“ **Performance Warranty**”). If the Services and Support do not conform with the foregoing Performance Warranty, Snyk will, at its expense, use reasonable efforts to promptly correct any such non-conformance. Such correction constitutes your sole and exclusive remedy for any breach of the Performance Warranty, provided that should Snyk fail to cure such non-conformity, you shall be permitted to terminate the applicable Services or Support and receive a pro-rata refund of any pre-paid Subscription Fees for such Services not delivered as of the date of termination. The remedies set forth in this Section 3.2 constitute your sole and exclusive remedy for any breach of the Performance Warranty. Notwithstanding the foregoing, the Performance Warranty does not apply where you subscribe to a free version of the Services, an Evaluation or a paid version of the Services through the Open Source Projects, and Snyk may suspend, limit or throttle such Services at any time where necessary due to the exigencies of its business.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-08-14· verified 2026-08-14
- Privacy Policy:Last captured 2026-08-31· verified 2026-08-31
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 204 more findings this quarter vs last (420 vs 216). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Snyk's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Snyk's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.