Vera Health procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you have any questions or comments about this Privacy Policy or your choices and rights, please contact us at: privacy@verahealth.ai , or Veracity-Health Inc. d/b/a Vera Health 2261 Market Street, Suite 22644 San Francisco, California 94114 USA Our EU representative is Instant EU GDPR Representative Ltd —Adam Brogden, Office 2, 12A Lower Main Street, Lucan, Co. Dublin, K78 X5P8, Ireland · contact@gdprlocal.com To contact our Data Protection Officer: Email: security@verahealth.ai ” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ The Services are hosted and operated in the United States (“ U.S. ”) by Vera Health and its service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any personal data, regardless of whether provided by you or obtained from a third party, is being provided to Vera Health in the U.S. and will be hosted on servers located in the U.S. In addition, your personal data may be further transferred to other countries outside the European Economic Area, to the extent one of the entities identified under para. 6 is located outside the European Economic Area. When Vera Health transfers personal data to countries outside the European Economic Area, the transfer complies with Articles 45 ff of the GDPR, by relying on recognized transfer mechanisms such as adequate decisions adopted by the European Commission, standard contractual clauses with its service providers, suppliers, and customers whenever appropriate. Please contact us at privacy@verahealth.ai for more information about the safeguards we use.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “If your use of the Services is prohibited by applicable laws, then you aren’t authorized to use the Services. We can’t and won’t be responsible for your using the Services in a way that breaks the law. You (or other people that you collaborate with) may be able access the Services (including Content) from outside the United States. Upon termination of the Services, the associated Content may be permanently deleted and inaccessible to you. It is your responsibility to back up your Content and to migrate any Content off the Services that you may want after termination. Certain Content may be maintained and displayed publicly or through the Services after termination of your account.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data for as long as necessary to provide the Services or for our business purposes. When establishing retention periods, we consider who we collected the data from, our need for the data, why we collected it, and its sensitivity. We may retain personal data longer where necessary to comply with legal obligations or resolve disputes, and we may retain information in aggregated or de-identified form.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We can disclose with third parties aggregated, de-identified or anonymized data in a manner that could not identify you.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Hosting, technology and communications providers; security and fraud prevention consultants; and support and customer service vendors.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may disclose personal data to comply with law, enforce agreements, protect rights and safety, and in connection with corporate transactions (e.g., merger, acquisition, asset sale, or bankruptcy), subject to appropriate protections.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Our Services may contain third party content, integrations or links to third party websites operated by organizations not affiliated with Vera Health. Through these integrations, you may be providing information to the third party as well as to Vera Health. Since we can only control our own Services, we are not responsible for how those third parties collect or use your information so please review the privacy policies of every third-party service that you visit or use, including those third parties you interact with through our Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The categories of personal data we collect depend on how you interact with us. The chart below summarizes categories we may collect and categories of third parties to whom we may disclose such information. Category of Personal Data (and Examples) Categories of Third Parties To Whom We May Disclose this personal data Profile or contact data such as first and last name and email. Service Providers, as better described below<br>Parties You Authorize, Access or Authenticate Commercial data such as usage history (of Vera Health’s products) and consumer profiles. Service Providers, as better described below Device/IP data such as IP address, device ID, domain server, and type of device/ operating system/ browser used to access the Services. Service Providers, as better described below<br>Advertising Partners, as better described below<br>Analytics Partners, as better described below Web analytics such as web page interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Services. Service Providers, as better described below<br>Advertising Partners, as better described below<br>Analytics Partners, as better described below Geolocation data such as IP-address-based location information. Service Providers, as better described below<br>Advertising Partners, as better described below<br>Analytics Partners, as better described below Other identifying information that You voluntarily choose to provide such as emails, letters, texts, or other communications you send us. Service Providers, as better described below Input and Output related to the use of AI Services Service Providers, as better described below ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ VERA HEALTH HAS WRITTEN AGREEMENTS WITH ALL OF THE SERVICE PROVIDERS, ADVERTISING PARTNERS, AND ANALYTICS PARTNERS WHO ASSIST WITH THE PROVISION OF THE SERVICES (COLLECTIVELY, “ PROCESSORS ”). OUR AGREEMENTS WITH PROCESSORS LIMIT THEIR USE OF ANY PERSONAL DATA TO THE SERVICES THEY PROVIDE TO VERA HEALTH. A LIST OF PROCESSORS IS AVAILABLE UPON REQUEST.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Ad networks and marketing providers that help us market the Services and provide offers or advertising, including interest-based or targeted advertising.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may share personal data with the following categories of recipients, depending on the context:” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Providers that help us understand web traffic and how users interact with the Services.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you with a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of personal data that we receive from you.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We may offer trial usage for some portions of the Services. If you sign up for such use, your trial period starts on the day you create the trial account and lasts for up to the number of days specified when you sign up. If you are on a trial, you may cancel at any time until the last day of your trial. At the conclusion of your trial, you will have no access to the Services and all of your Content will be permanently deleted. Trial usage is for testing and evaluation only, and not for production purposes. If you want to continue to use the Services after the trial, you must contact us before the end of the trial period (contact Vera Health Support – see Section 22, below) and establish a full-use account.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.