Suno procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | medium | “ Suno is based in the United States, and we generally store your information on servers located in the United States. We also conduct business in other countries, directly or through one of our subsidiaries or partners, and may transfer your information to and/or store it in such other locations as reasonably necessary to provide the Services or for other legitimate business purposes, in accordance with this Privacy Notice.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ If you are a resident in the EEA and / or UK, in order to perform our contract with you and provide our Services to you, your data will be transferred to and processed in the United States. To the extent we further transfer, store or otherwise process your personal data in countries outside the EEA/UK, we will only transfer personal data outside the EEA and/or UK to countries which have been found to have an adequate level of protection for personal data for the purposes of the European and/or United Kingdom General Data Protection Regulation (together, the “GDPR”) or where such transfers are subject to appropriate safeguards. For more information about data transfers, you can contact us at [email protected] .” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “We will retain this information for no longer than three (3) years following your last interaction with us (at which point, we will erase the informat, except as required otherwise by applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain information, we consider various criteria, including whether we need the information to continue to administer your account, provide the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products. To the extent we process your biometric information in connection with the Services, we will retain this data for no longer than three (3) years following your last interaction with us, except as required otherwise by applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ 3. Delete Your Information. You can request that we delete your information at any time, subject to certain exceptions as discussed below. You can request to have your information deleted by contacting us by email at [email protected] . We will comply with your request within a reasonable period of time; however, in certain circumstances, we may not be able or required to delete all of your information. For example, if we have provisioned a user account for you and you intend to continue to use portions of the Services requiring access through said account, we must retain certain information in order to maintain your account and your access to the Services. We also retain certain information if required in connection with our performance of a contract (such as a license agreement between us and your employer), if required by law or relevant to a legal proceeding, or for other compliance or auditing purposes, as permitted by law. Please note that we may obtain information about you in the future, as discussed under the heading "Information We Collect From Other Sources," and we may not be able to recognize it as your information due to complying with a previous deletion request from you. In this case, you will need to submit a new request if you wish to have your re-added information deleted. In addition, if we have deidentified, anonymized or aggregated data such that it no longer identifies or relates to you, we may retain and use that information for any lawful purpose.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We also retain certain information if required in connection with our performance of a contract (such as a license agreement between us and your employer), if required by law or relevant to a legal proceeding, or for other compliance or auditing purposes, as permitted by law. Please note that we may obtain information about you in the future, as discussed under the heading "Information We Collect From Other Sources," and we may not be able to recognize it as your information due to complying with a previous deletion request from you. In this case, you will need to submit a new request if you wish to have your re-added information deleted. In addition, if we have deidentified, anonymized or aggregated data such that it no longer identifies or relates to you, we may retain and use that information for any lawful purpose.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Some Third-Party Services will provide us with access to certain information that you have provided to third parties, including through such Third-Party Services, and we will use, store and disclose such information in accordance with our Privacy Policy.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ **5. In connection with, or during negotiations of, any merger, sale of all or a portion of our business or assets, bankruptcy, or similar business transaction. We may, in our legitimate interests or as required by law, share your personal data with a prospective buyer, seller, new owner, or other relevant third party as necessary while negotiating or in relation to a change of corporate control such as restructuring, merger, or sale of our assets.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 2. With Service Providers. We work with third parties that provide to us engine or application development and/or processing services; information systems hosting, infrastructure, maintenance, backup, storage, security, support and other information technology-related services; artificial-intelligence or machine-learning services that support certain features of the Services; advertising, marketing and related analytics services; promotion, distribution, resale and support services related to our products and services; consulting and other technical and/or business services, which may require access to information about you to perform such services on our behalf. We share your information with these service providers only for our business purposes pursuant to written contracts. Our contracts with these third-party service providers require protection of your information consistent with this Privacy Notice, and require that they retain, use and disclose your information only as necessary to provide the services in accordance with such contracts.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We work with third parties that provide to us engine or application development and/or processing services; information systems hosting, infrastructure, maintenance, backup, storage, security, support and other information technology-related services; artificial-intelligence or machine-learning services that support certain features of the Services; advertising, marketing and related analytics services; promotion, distribution, resale and support services related to our products and services; consulting and other technical and/or business services, which may require access to information about you to perform such services on our behalf. We share your information with these service providers only for our business purposes pursuant to written contracts.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ You acknowledge and agree that Suno may preserve Content and your Voice Model and may also disclose Content and your Voice Model if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) comply with legal process, applicable laws, or government requests; (b) enforce these Terms of Service; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of Suno, its users, or the public. You understand that the technical processing and transmission of the Service, including Content, may involve (i) transmissions over various networks; and (ii) changes to conform and adapt to technical requirements of connecting networks or devices.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 3. With Your Consent. We share information about you with third parties when you give us consent or direct us to do so – for example, if you have agreed to be a reference for Suno or have provided a testimonial regarding our Services, or use login integrations provided by third parties such as Discord and Google.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We utilize third-party service providers that act as resellers of, and/or payment processors for the fees payable for, licenses to certain of our Services and/or content that may be purchased through our Services (each, a "Payment Processor"). In order to purchase such Services through our Services, you will be required to provide credit/debit card and/or financial institution account information directly to the Payment Processor. Such information is not collected or stored by us.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We may share information about you as discussed below. We do not sell your information to third parties. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may share information about you with a third party if we believe that sharing such information is reasonably necessary to (a) comply with any applicable legal obligation, including applicable law, regulation, legal process or governmental request, including to meet national security requirements, (b) enforce our agreements, policies and terms of service, or to exercise or defend any legal claims, (c) protect the security or integrity of our products and services, and (d) protect Suno, our customers, employees or other persons from harm, legal liability or illegal activities.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 1. With Other Users. In connection with your use of certain features of the Services, such as certain sharing and/or collaboration features, we may share information about you (such as your name and email address) and your Content with such other persons, as part of your use of the Services or as otherwise directed by you through your use of relevant features.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may disclose this information to our affiliates and service providers to provide and develop our Services, as further explained in the section above, How We Share Your Information.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Analytical, targeting and advertising cookies, and the User Activity Information generated from these cookies, are created, stored and/or managed by third-party service providers that provide us with web traffic analytics, sales engagement and marketing automation services, such as Google Analytics.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 4. For Legal and Compliance Purposes. We may share information about you with a third party if we believe that sharing such information is reasonably necessary to (a) comply with any applicable legal obligation, including applicable law, regulation, legal process or governmental request, including to meet national security requirements, (b) enforce our agreements, policies and terms of service, or to exercise or defend any legal claims, (c) protect the security or integrity of our products and services, and (d) protect Suno, our customers, employees or other persons from harm, legal liability or illegal activities.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Service may display, include, make available, or provide links or other access to services, sites, software, applications, content, data, technology, and resources that are provided or otherwise made available by third parties (the "Third-Party Services"). Additionally, you may enable or log in to the Service via various online Third-Party Services, such as social media and social networking services like Discord. Your access and use of the Third-Party Services may also be subject to additional terms and conditions, privacy policies, or other agreements with such third party, and you may be required to authenticate to or create separate accounts to use Third-Party Services on the websites or via the technology platforms of their respective providers. Some Third-Party Services will provide us with access to certain information that you have provided to third parties, including through such Third-Party Services, and we will use, store and disclose such information in accordance with our Privacy Policy. For more information about the implications of activating Third-Party Services and our use, storage and disclosure of information related to you and your use of such Third-Party Services within the Service, please see our Privacy Policy. Suno has no control over and is not responsible for such Third-Party Services, including for the accuracy, availability, reliability, or completeness of information shared by or available through Third-Party Services, or on the privacy practices of Third-Party Services. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Payment Processing: Notwithstanding any amounts owed to Suno hereunder, SUNO DOES NOT PROCESS PAYMENT FOR ANY SERVICES. To facilitate payment for the Service via bank account, credit card, or debit card, we use Stripe, Inc. and its affiliates ("Stripe"), a third-party payment processor. These payment processing services are provided by Stripe and are subject to the Stripe terms and conditions and other policies available at https://stripe.com/legal and Stripe's Global Privacy Policy available at https://stripe.com/privacy (collectively, the "Stripe Agreements"). By agreeing to these Terms of Service, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements, as the same may be modified by Stripe from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service. Please contact Stripe for more information. Suno assumes no liability or responsibility for any payments you make through the Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Our Services contain links to other websites operated by third parties as well as certain features that allow you to initiate interactions between the Services and third-party services or platforms, such as social networks through “liking” or “sharing” our content. Information collected by such third parties is governed by their privacy policies which we encourage you to review to learn about the privacy practices of those third parties. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links or features does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | Paid | medium | “To facilitate payment for the Service via bank account, credit card, or debit card, we use Stripe, Inc. and its affiliates ("Stripe"), a third-party payment processor. These payment processing services are provided by Stripe and are subject to the Stripe terms and conditions and other policies available at https://stripe.com/legal and Stripe's Global Privacy Policy available at https://stripe.com/privacy (collectively, the "Stripe Agreements"). By agreeing to these Terms of Service, users that use the payment functions of the Service also agree to be bound by the Stripe Agreements, as the same may be modified by Stripe from time to time. You hereby authorize Stripe to store and continue billing your specified payment method even after such payment method has expired, to avoid interruptions in payment for your use of the Service.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.