Tracecat procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Failure by Tracecat to enforce any provision(s) of this Agreement will not be construed as a waiver of any provision or right. Except for any signed agreement or order form between you and Tracecat, this Agreement constitutes the complete and exclusive agreement between you and Tracecat with respect to its subject matter, and supersedes and governs any and all prior agreements or communications. If there is a conflict, the following applies. A signed agreement or order form between you and Tracecat prevails over these Terms of Service. The data processing addendum controls on the processing of personal data, and the Privacy Policy controls on how we handle personal information. Otherwise these Terms of Service control. The provisions of this Agreement are intended to be interpreted in a manner which makes them valid, legal, and enforceable. In the event any provision is found to be partially or wholly invalid, illegal or unenforceable, such provision shall be modified or restructured to the extent necessary to render it valid, legal, and enforceable. This Agreement may not be assigned or transferred by you without our prior written approval. We may assign or transfer this Agreement without your consent, including but not limited to assignments: (1) to a parent or subsidiary, (2) to an acquirer of assets, or (3) to any other successor or acquirer. Any assignment in violation of this section shall be null and void. This Agreement will inure to the benefit of Tracecat, its successors and assigns.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “We delete Customer Data from production systems within thirty (30) days after the end of your free trial or Account, and within thirty (30) days after you ask us to delete it. Residual copies in routine backups are deleted on our ordinary backup cycle, which does not exceed thirty (30) days, and remain subject to these Terms of Service until deleted. You are responsible for Customer Data and for the means by which you acquire it. You represent that you have all rights, consents and lawful bases necessary for us to process Customer Data as described in these Terms of Service.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Services may contain links (such as hyperlinks) to or integrations with third-party websites, applications, application programming interfaces, plugins, connectors, Model Context Protocol (MCP) servers, artificial intelligence and machine learning models and the providers that host them, and other products or services (“Third-Party Services”). Such links or integrations do not constitute endorsement by Tracecat or association with those Third-Party Services, their content or their operators. Such links are provided as an information service, for reference and convenience only. Tracecat does not control any Third-Party Services, and is not responsible for their availability, accuracy, content, advertising, products, or services. It is your responsibility to evaluate the content and usefulness of the information obtained from Third-Party Services. You acknowledge and agree that Tracecat is not involved in the creation or development of Third-Party Services and disclaims any responsibility for them. The use of Third-Party Services is governed by the terms and conditions of use and privacy policies of the parties that provide them. You access Third-Party Services at your own risk. As part of the functionality of the Services, you may link your Account with online accounts you may have with third-party service providers (each such account, a “Third-Party Account”). You represent that you are entitled to disclose your Third-Party Account login information to Tracecat and/or grant Tracecat access to your Third-Party Account without breach of any terms. ” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Welcome to Tracecat. Tracecat is an open-core workflow automation and case management platform for security teams. Security teams use Tracecat’s click-and-drag builder and AI case management features to orchestrate security alerts and automate investigations. We make the Cloud Service available as a hosted subscription and may also make it available as a free trial. Unless we agree otherwise in writing, a free trial is limited to ninety (90) days, 25,000 workflow executions per month and ten (10) authorized users. You may use production data during a free trial. Exceeding a usage limit during a free trial is not, by itself, a breach of these Terms of Service. We may limit usage above those limits, or request that you move to a paid subscription. We give no support commitment and no service level commitment during a free trial, and we may suspend or end a free trial at any time. When a free trial ends, we handle your data as described in Section 3.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.