Understudy Labs procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | unknown | “ We keep account records while your account is active and for a reasonable period afterward for security, billing, audit, and legal reasons. Gateway metadata is retained only as long as needed to operate, debug, secure, and improve the service. Local traces and workbench artifacts are controlled by you on your machine unless you explicitly upload or share them. You can ask us to delete your account data or exported materials you have shared with us by emailing support@understudylabs.com. We may retain limited records where required for legal, security, or accounting reasons.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use a small number of subprocessors to run the service. WorkOS handles authentication. Cloudflare handles edge networking and may host gateway infrastructure, including Workers and planned KV or D1 storage. Vercel hosts the website and app. PostHog helps us understand website and product usage. HubSpot helps us manage contacts, companies, deals, sales tasks, and follow-up state. Upstream LLM providers, including Anthropic and OpenAI, receive the requests you route to them using your own provider relationship. Fireworks AI may be used for model hosting, inference, fine-tuning, or related model operations when that workflow is enabled. We do not run third-party advertising networks. We use analytics and CRM tools to understand interest, improve the product, and prioritize sales follow-up. PostHog session replay may be enabled on the public website with form fields and contact forms masked or blocked. We do not enable session replay on the authenticated dashboard by default.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Understudy is currently an early-access service. Today it operates in BYO mode: you bring your own upstream model-provider accounts, API keys, and provider terms. The service may include a website, app, gateway, proxy, workbench, SDKs, CLI, APIs, eval tooling, routing interfaces, documentation, and related support. There is no service-level agreement during early access. We may change endpoints, features, limits, or workflows with notice when practical, especially to improve security, reliability, or provider compatibility.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.