Skip to main content
Platform Review
PricingSign in
Snyk assessment

Snyk procurement policy evidence

Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.

Verified procurement policy findings for Snyk
TopicPlan or tierRiskTheir wordsSource
DPA, audit rights & data residencyAll applicable tierslow**International Transfer.** Because Snyk is an international business, we may need to transfer your personal information out of the UK, EEA or Switzerland to other countries. We only transfer your information if (1) the recipient is in a country providing an adequate level of protection; (2) we use appropriate safeguards, such as standard contractual clauses; or (3) there is an applicable exception (such as consent). Please contact us at [privacy@snyk.io](mailto:Privacy@snyk.io) if you would like additional information regarding the international transfer of your personal information.Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tiersmediumThe region where your data is hosted follows local agreements, and it may not align with your own location. [Find out more](https://docs.snyk.io/working-with-snyk/regional-hosting-and-data-residency).Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tierslow- [Snyk Security Addendum](https://snyk.io/policies/snyk-security-addendum/)Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tierslow[Additional Information for users in the UK, EEA and Switzerland](https://snyk.io/policies/privacy/#Additional-Information-for-users-in-the-UK-EEA-and-Switzerland)Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tiersunknown4.3 Information Security Addendum. Snyk will employ security measures designed to protect Customer Data in accordance with the Snyk Information Security Addendum displayed at https://snyk.io/policies/snyk-security-addendum/.Captured 2026-08-14Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tierslowAs a global company, Snyk adheres to the General Data Protection Regulation (“EU GDPR”) and the UK General Data Protection Regulation (“UK GDPR”, together with the EU GDPR “GDPR”).Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tierslow4.2 Data Processing Addendum. To the extent that Snyk processes Personal Data on your behalf (as a data processor or sub-processor), as defined under applicable data protection laws) when performing its obligations under this Agreement, the Data Processing Addendum (the “ **DPA**”) displayed at [https://snyk.io/policies/dpa/](https://snyk.io/policies/dpa/) will apply and form part of this Agreement.Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tierslow**Questions or concerns.** If you have questions or concerns about our GDPR compliance, you can contact our GDPR representative—the European Data Protection Office (“EDPO”) using their [online request form](https://edpo.com/gdpr-data-request/) or by writing to them at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.Captured 2026-06-09Open source →Finding permalink →
DPA, audit rights & data residencyAll applicable tierslow11.13 EU Data Act. If you are located in the European Union or otherwise subject to the EU Data Act, the EU Data Act Addendum displayed at https://snyk.io/policies/eu-data-act-addendum/ will apply and form part of this Agreement.Captured 2026-06-09Open source →Finding permalink →
Data retentionAll applicable tiersmedium11.3 Survival.  Any provision of this Agreement that expressly or by implication is intended to come into or continue in force on or after termination or expiry of this Agreement shall remain in full force and effect.Captured 2026-06-09Open source →Finding permalink →
Data retentionAll applicable tierslow(b) you must promptly delete your organization and projects from the Services by either activating the delete button in the Services or contacting Snyk’s support team for deletion assistance;Captured 2026-06-09Open source →Finding permalink →
Data retentionAll applicable tierslowTo remove your account from app.snyk.io please follow the steps in the “ [**How Can I Delete my Account**](https://support.snyk.io/s/article/How-can-I-delete-my-account) **?**” guide.Captured 2026-06-09Open source →Finding permalink →
Data retentionAll applicable tiersunknown(c) you shall immediately uninstall all Tools from all computer equipment in your possession or control and, upon written request from Snyk, will provide satisfactory evidence of the same; and,Captured 2026-08-14Open source →Finding permalink →
Data retentionAll applicable tiersmedium- **How long do we retain personal information?** We keep personal information for as long as reasonably necessary to fulfill the purposes for which we collected, including satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for longer in the event of a complaint or a potential dispute regarding our relationship with you.Captured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tierslowOur Platform may contain links to web properties operated by third parties. If you follow any of these links, your usage of that web property will be subject to the third-party’s privacy policy. We do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.Captured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tierslow- transfer your personal information to another partyCaptured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tiersmediumWe also provide limited personal information to marketing, analytic, and search-engine companies. These companies help us understand interactions with our Platform and provide you relevant advertising.Captured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tiersmedium- **Third Parties.** We receive personal information from our vendors, business partners, and any third-party authentication providers you use to access our site. Additionally, if you use the Platform while working for one of our customers, we may receive your information from that customer so we can configure your account.Captured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tiersmediumWe may also disclose your information to third-parties: in connection with a corporate reorganization; to enforce applicable contract terms or comply with our legal obligations; with your consent; or to protect the rights, property, or safety of Snyk, our users, or others.Captured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tierslow- [Subprocessors](https://snyk.io/policies/subprocessors/)Captured 2026-06-09Open source →Finding permalink →
Subprocessors & data sharingAll applicable tiersunknown“ **Users**” means those employees, independent contractors, or other individuals acting for or on your (or your Affiliates) behalf, who are permitted by you to access the Services;Captured 2026-08-14Open source →Finding permalink →
Subprocessors & data sharingAll applicable tiersmediumWe disclose information to our vendors who help us operate our business. We require our vendors to contractually commit that they will safeguard the information and only use it in connection with purposes we specify.Captured 2026-06-09Open source →Finding permalink →
Tier differencesAll applicable tiersunknown“ **Subscription Fees**” means, where applicable, the fees payable for the Subscription Allocation and any other fees pursuant to an Order Form or Service Plan;Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersmedium10.1 Term. The term of this Agreement is determined by whether you subscribe to a free version of the Services, an Evaluation, or a paid version of the Services. In each case, this Agreement shall commence on the Commencement Date and shall endure for the duration set forth in (a), (b) or (c) below:Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersmedium(a) Free Version of Services (including Open Source Projects): This Agreement will endure until it is terminated by either party as follows: (i) by Snyk at any time and for any reason, including without notice to you; or (ii) by you at any time by deleting your organization and projects in accordance with Section 10.3(b). Additionally, Snyk reserves the right to terminate this Agreement pursuant to Section 10.1(a)(i) and/or to delete your data at its discretion without prior notice. Examples of when this might occur include prolonged account inactivity, violation of our terms, or system maintenance needs;Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersmedium(b) Service Plan: Where you subscribe to the Services through a Service Plan, Snyk and/or its third party payment processor will (and you hereby authorise it to) bill your payment card for the applicable Subscription Fee (and any On-Demand Consumption pursuant to Section 6.1). You will be billed the applicable Subscription Fee in advance on or shortly after the date you select the Service Plan and on each month or anniversary thereafter, until this Agreement and/or the Services are terminated by you or Snyk in accordance with this Agreement. Snyk reserves the right to change the Subscription Fees applicable to its Service Plans at any time. If you do not agree to such change, you must delete your account by means of the Service, or by contacting Snyk’s support team for deletion assistance and stop using the Services, at which point, this Agreement will be deemed to have been terminated by you at the end of your then current billing period. Snyk will only charge you in respect of the period before termination based on the previously agreed Subscription Fee, and will not be required to refund any Subscription Fees to you. If you do agree to such change (which will be deemed from your continued use of the Services after the date the new Subscription Fee becomes effective), your next bill will include the new Subscription Fees on a pro rata basis.Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersunknownIf you elect to purchase the Services through a Channel Partner, or through such Channel Partner’s authorized reseller, your payment for the Services will be governed by the terms agreed upon by and between you and such Channel Partner or authorized reseller. Accordingly, Section 6.3 to 6.6 of this Agreement will not apply to your payment obligations for such transactions, and this Agreement will not auto-renew pursuant to Section 10.1(c) below. However, all other provisions of this Agreement remain in effect and will continue to govern your use of the Services.Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersunknown“ **Support**” means the support services, including, if applicable, any of the fixed-fee and fixed-scope implementation services packages (e.g. Jumpstart), listed on an Order Form or Service Plan (whichever is applicable), and further described at [https://docs.snyk.io/more-info/snyk-terms-of-support-and-services-glossary](https://docs.snyk.io/more-info/snyk-terms-of-support-and-services-glossary);Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersunknown(a) Order Form: Where you subscribe to the Services on an Order Form, Snyk will invoice you in accordance with the billing frequency and payment terms on the Order Form and you will pay each invoice per such terms. If billing frequency and payment terms are omitted from the Order Form, the default billing frequency (excepting On-Demand Consumption) is annual and the payment term is net 30 from the date of the invoice; orCaptured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tierslow“ **Test Limits**” means the number of tests included as part of your Subscription Allocation;Captured 2026-06-09Open source →Finding permalink →
Tier differencesAll applicable tiersunknown6.3 Billing. Depending on whether you subscribe to the Services on an Order Form or Service Plan, the billing frequency and payment terms applicable to you shall be as follows:Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tierslow“ **Subscription Allocation**” means the limits on the use of the Services set out in an Order Form or Service Plan, whichever is applicable, including Test Limits and any other limits on the number of Contributing Developers, or Code Assets;Captured 2026-06-09Open source →Finding permalink →
Tier differencesAll applicable tierslow“ **Service Plan**” means, where you do not sign an Order Form, the applicable service plan described at  [https://snyk.io/plans](https://snyk.io/plans/) selected by you which specifies the Services and Support (if any) to be provided by Snyk pursuant to this Agreement;Captured 2026-06-09Open source →Finding permalink →
Tier differencesAll applicable tiersmediumFor the avoidance of doubt, this Agreement will apply to your use of and access to the Services, irrespective of whether you subscribe to: (i) a paid version of the Services, whether from Snyk directly, or from a Channel Partner; or (ii) a free trial or evaluation of the Services (“ **Evaluation**”), or a free version of the Services, including your entitlement to use a paid version through the Secure Developer Project available [here](https://snyk.io/open-source/) or through any other open source or related projects offered by Snyk from time to time which permit the free use of a paid version of the Services (“ **Open Source Projects**”), save that Sections 1(b), 3.1(b), 3.2, 6, 8.2, 11.6(a), 11.13 and Schedule 2 shall not apply to the Services described in this (ii). In connection with the Open Source Projects, Snyk may provide you with the Services at no charge, provided that you satisfy the applicable requirements prescribed by Snyk from time to time on its website or otherwise communicated to you.Captured 2026-06-09Open source →Finding permalink →
Tier differencesAll applicable tiersmedium(c) Paid Version of Services: This Agreement will, unless otherwise terminated early as provided herein, endure for the term recorded in the Order Form or Service Plan (whichever is applicable). Unless otherwise terminated in accordance with the terms of this Agreement, the term of an initial Order Form or Service Plan will (unless otherwise specified in the Order Form or Service Plan) be 1 year from the date specified in the Order Form or Service Plan as the start date of your subscription to the Services (the “ **Initial Term**”) and, thereafter, unless either party provides the other party with written notice of non-renewal at least 30 days prior to the end of the then current Term, shall renew automatically for successive 1 year periods (each a “ **Renewal Term**“). The Initial Term together with any Renewal Term(s) shall constitute the Term of the Order Form or Service Plan. For the avoidance of doubt, a valid notice of non-renewal provided by one party to the other in terms of this Section 10.1(c), will result in the termination of the Order Form or Service Plan (whichever is applicable) at the end of its then current Term, and no Subscription Fees shall be refunded to you.Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tierslow“ **Subscription Fees**” means, where applicable, the fees payable for the Subscription Allocation and any other fees set out in the Order Form or Service Plan;Captured 2026-06-09Open source →Finding permalink →
Tier differencesAll applicable tiersunknown“ **Subscription Allocation**” means the limits on the use of the Services pursuant to an Order Form or Service Plan, whichever is applicable, including test limits and any other limits concerning the number of Contributing Developers, Credits or Code Assets;Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersunknown6.2 Credits. If your Subscription Allocation includes Credits, those Credits may be applied to various features and functionality of the Services, and  the number of Credits required will be deducted from your Credit balance. Unless otherwise stated on an applicable Order Form, all Credits must be used within the term of such Order Form, after which any unused Credits will expire and cannot be redeemed, refunded, or credited.  Credits are not redeemable for cash and are non-transferable. Upon your exhaustion of your prepaid Credits, Snyk (or its Channel Partner, where applicable) may invoice you for any On-Demand Consumption pursuant to Section 6.1.Captured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersunknown(b) Evaluations: This Agreement will, unless otherwise terminated early as provided herein, endure until the earlier of: (i) the expiry of the Evaluation Period; or (ii) the termination of this Agreement by Snyk by providing 3 calendar days’ notice to you, where Snyk reasonably believes that the Services or Documentation are not being used in accordance with this Agreement, or are being accessed in a way that interferes with the normal operation of the Service; orCaptured 2026-08-14Open source →Finding permalink →
Tier differencesAll applicable tiersunknown6.6 Renewal Subscription Fee Increases. Unless otherwise set forth in the Service Plan or the Order Form (whichever is applicable), if your subscription to the Services auto-renews pursuant to Section 10.1 below, Snyk’s then current rates for the Services will apply from the commencement of the Renewal Term.Captured 2026-08-14Open source →Finding permalink →

Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.