SS&C Blue Prism procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ When processing customer data in the course of providing our solutions (e.g. Blue Prism Cloud), SS&C Blue Prism acts on the instructions provided by its customer. If you would like to know more about a customer’s processing of personal information using SS&C Blue Prism solutions, please contact the relevant customer directly. For any questions or concerns about our privacy practices or to submit a request to us, please email [email protected] or follow any specific instructions below.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ As a global business, we operate worldwide and transfer and store personal information overseas in countries that may have data privacy laws that differ from the laws in your country. All SS&C Blue Prism affiliates have access to personal information in order to run and grow the SS&C Blue Prism business, such as business contact details and customer relationship management information. When transferring personal data overseas, we make sure there are necessary safeguards in place where required, such as contractual commitments (e.g. the European Commission’s Standard Contractual Clauses for transfers to non-UK or EEA organisations that do not have an adequacy decision) or Binding Corporate Rules. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ If you would like to find out more about our retention periods for specific categories of personal information please email [email protected] . ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We keep personal data for as long as is necessary to:” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Where we de-identify personal information so it is no longer reasonably likely to identify an individual (e.g. in order to use it to analyse, improve and develop our business and solutions) we may keep the information indefinitely.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ When determining the retention period for personal information, we consider the applicable legal, tax, accounting, and other regulatory or reporting requirements, the purposes for which we process the personal information, the type of personal information and the potential risk of harm from unauthorized use or disclosure.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Stripe may periodically provide us with basic information regarding payments made via the Digital Exchange in order to assist Blue Prism to provide its solutions to you, and to facilitate us in reconciling our accounts.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Partners (e.g. distribution partners and/or technology partners providing information about customers and prospects)” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Organisation/group/network you have a role with (e.g. a customer, partner or supplier) Our payment processing service providers. See “ Digital Exchange purchases ” section for more information.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third parties in connection with corporate transactions relating to our business (e.g. potential transaction counterparties, their agents and advisers) Any of the categories of personal information included in the section “What personal information do we have and who provides it?” may be shared as reasonably necessary in relation to a proposed purchase, merger or acquisition of any part of our business subject to confidentiality obligations and limits on the use of the personal information for the purposes of the transaction.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Event organisers/hosts (e.g. about people attending an event SS&C Blue Prism is involved with) Service providers including business to business lead generation service providers (e.g. business contact information for prospects and customers) Publicly available information (e.g. from internet searches and social networks)” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ SS&C Blue Prism does not collect or process your credit or debit card details. Instead, these details are collected and processed directly by our payment processing service provider, currently Stripe Payments Europe, Ltd (“Stripe”). For more information about how Stripe processes your personal information please see Stripe's privacy policy .” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Regulators, government, law enforcement authorities, courts or other third party to assert or defend against legal claims or to enable us to enforce or exercise our rights Any of the categories of personal information included in the section “What personal information do we have and who provides it?” may be shared in order to respond to a request or to assert or defend against legal claims or to enable us to enforce or exercise our rights. We will cooperate with and respond to requests from domestic and international regulators, government authorities and/or law enforcement authorities as where legally required or, as appropriate, where permitted. Service providers, including:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Event sponsors (e.g. information about people attending the event being sponsored)” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Third parties described in our Cookies Policy , including advertising and social networks” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The table below includes information about the categories of recipients (which may include third parties) that may receive personal information from us and the categories of personal information they may receive.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We will never be able to access your credit or debit card information, however in some instances we may access basic information about your account activity held by Stripe so that we can effectively administer our service to you, and for the purposes of account reconciliation, including invoicing, payments, refunds, and the resolution of any conflicts between us that may occur.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Event organisers/hosts (e.g. about people attending an event Blue Prism is involved with) Advertising and social networks (e.g. LinkedIn) and marketing agencies Publicly available information (e.g. from internet searches)” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We share personal information with our affiliates, customers, partners, event sponsors and organisers, service providers (including IT providers, auditors and professional advisers) as part of running and growing our business. If a regulator, government or law enforcement authority asks for personal information, we will provide the information that we are legally required or permitted to provide. We do not sell personal information.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Other category of recipient/third party included in a separate privacy notice provided to you covering a specific activity Any of the categories of personal information included in the section “What personal information do we have and who provides it?” may be shared as described in the separate privacy notice provided.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We are part of the SS&C group of companies. Please see SS&C’s privacy policy for information about how SS&C processes personal information.” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.