Uizard procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 12.1. We and you specifically agree that if and when you are located in the European Economic Area ("EEA") the terms "Personal Data", "Process", "Data Controller", "Special Categories of Data", "Processing", "Data Subject", "Third Party Processing" and "Data Processor" will have the meanings given to them in the EU General Data Protection Regulation (GDPR). In respect of Personal Data processed under this Agreement, the parties agree that you are the Data Controller and we are the Data Processor. The Data Processor agrees that it will only collect process and use Personal Data for the sole purpose of performance of the Services described hereunder and in accordance with the Data Controller's instructions. You acknowledge that Personal Data shall not include Special Categories of Data. We shall have no liability arising from the processing of Personal Data in accordance with your written instructions. The Data Processor shall take appropriate technical and organizational measures to adequately protect Personal Data against (i) unauthorized access, (ii) unauthorized disclosure, (iii) misuse, (iv) corruption, and (v) loss, in accordance with the requirements of the EU General Data Protection Regulation (GDPR) . The Data Processor may transfer and/or store Personal Data within the EEA. Our processing of data shall be done in accordance with our Privacy Policy which is published at uizard.io/privacy/ as amended from time to time.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.