Solidroad procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Where Solidroad acts as a data processor, data subject requests should be directed to the relevant customer acting as data controller. Where Solidroad acts as a data controller, individuals may request:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Where a DPA applies, it governs in the event of any conflict with this Privacy Policy.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Personal data may be processed in the United States and other jurisdictions where Solidroad or its subprocessors operate. Where required, Solidroad relies on lawful transfer mechanisms, including Standard Contractual Clauses and other recognized safeguards.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Backup and log data may be retained for a limited period for security, compliance, and disaster recovery purposes” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Solidroad retains customer data for the duration of the applicable customer contract. Unless otherwise agreed or legally required: Customer data is deleted within 30 days following contract termination or upon verified deletion request” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Solidroad may engage third-party subprocessors to support delivery of the Services, including providers of:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Processing data from third-party systems only when enabled by the customer” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ All subprocessors are subject to contractual obligations requiring appropriate confidentiality, security, and data protection safeguards. Solidroad does not sell personal data and does not share personal data for advertising purposes.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.