Taiga procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Taiga operates primarily from the United States, and information we collect is stored and processed in the United States. If we transfer personal information from other jurisdictions, we rely on appropriate legal mechanisms and safeguards for those transfers. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Either party may terminate these Terms for material breach that is not cured within thirty (30) days after written notice, or as otherwise provided in the order form or Master Services Agreement. Upon termination, your right to access the services ends, and each party will return or delete the other party's confidential information, except as required to be retained by law or as otherwise provided in the Business Associate Agreement. Sections that by their nature should survive termination (including intellectual property, confidentiality, limitation of liability, indemnification, and governing law) will survive. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain information for as long as we provide services to your practice and for the periods required to meet legal, accounting, tax, and regulatory obligations - including requirements under HIPAA, state medical record laws, and payer audit windows. When information is no longer needed, we delete or de-identify it in accordance with our retention schedule. Customers may request deletion or return of their data on termination, subject to applicable legal holds described in the Business Associate Agreement and Master Services Agreement. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We share information only as needed to run the service. This includes vetted subprocessors that help us operate Taiga (cloud hosting, infrastructure monitoring, analytics, error tracking, communications, and similar tools), clearinghouses and payers (commercial insurers, Medicare, Medicaid, TRICARE, and similar programs) in order to submit claims and receive responses, and professional advisors where legally required. Subprocessors handling PHI are bound by written agreements, including a Business Associate Agreement where required by HIPAA. Our current subprocessor list is available in our trust center. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We use cookies and similar technologies on our marketing website to operate the site, understand which pages are being viewed, and identify some U.S.-based business visitors who show interest in Taiga. We may work with service providers that associate website visits and related identifiers with business contact information or professional profiles so that we can better understand demand for Taiga and follow up with prospective customers. This use is limited to our U.S.-focused website visitor identification program and does not include international company-level tracking. You may opt out of this type of advertising and matching by visiting https://app.retention.com/optout. ” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.