Vetnio procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ For clinics and organizations using Vetnio's services, Vetnio acts as a Data Processor under the General Data Protection Regulation (GDPR). By creating an account or using Vetnio's products or services, the Customer agrees to the terms of Vetnio's Data Processing Agreement (DPA) available at vetnio.com/dpa , which forms an integral part of these terms. Vetnio may process and store identifiable personal data on behalf of the Customer only to provide the agreed services, while retaining the right to use anonymized, aggregated, or derived data generated through such processing to improve, train, and develop Vetnio's technology. Large corporate or group customers may agree to separate or amended DPA terms through individual negotiation with Vetnio.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We will respond to your request without undue delay, but in all cases and at the latest within forty-five (45) days of its receipt. If we need more time, we will explain the reasons and how much more time we need. In this regard, please note that we may take up to ninety (90) days to fulfill your request. If we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within forty-five (45) days of the receipt of the request. It is your right to appeal such a decision by sending us a request using the data provided in this Privacy Policy. Before forty-five (45) days after the receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint. We do not charge a fee for responding to your request, up to two requests per year.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ This section applies to all users who are consumers residing in the State of Utah, in accordance with the Utah Consumer Privacy Act (UCPA). You may exercise certain rights with respect to your data processed by Vetnio. In particular, you have the right to do the following: access Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information. request the deletion of your Personal Information: You have the right to request that we delete any of your personal data. obtain a copy of your Personal Information: We will provide your Personal Information in a portable and usable format that allows you to easily transfer data to another entity, provided this is technically feasible. opt out of the processing of your Personal Information for targeted advertising purposes or the sale of Personal Information. To exercise the rights described above, you must submit your request by contacting us using the contact details provided in this Privacy Policy. For us to respond to your request, we need to know who you are and what right you wish to exercise. We will not respond to any request if we cannot verify your identity using commercially reasonable efforts, and thus confirm that the personal information in our possession is indeed yours. In such cases, we may ask you to provide additional information that is reasonably necessary to authenticate you and your request. ” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you believe that we have processed your personal data in a way that violates Applicable Data Protection Laws, you have the right to file a complaint with a data protection authority. You can contact the data protection authority in your country of residence, place of work, or where the alleged infringement occurred. If you are located in the European Economic Area (EEA), you can find the contact details of your local data protection authority here: European Data Protection Board – National Authorities If you are located in the United Kingdom, you may contact the Information Commissioner's Office (ICO): ICO Website If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC): FDPIC Website If you are located in California, you may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs. If you are located in another jurisdiction, we recommend that you check with your local data protection authority for further guidance. We encourage you to contact us first, so that we may try to resolve your concerns before you escalate the matter to a regulatory authority.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Vetnio will only retain your personal data for as long as reasonably necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation regarding our relationship with you. When your personal data is no longer necessary for the purpose for which it was collected, we will take reasonable steps to permanently destroy, delete, or de-identify your personal data.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Vetnio offers a modern transcription service adapted for veterinarians. By using the Service, the treating veterinarian can easily record audio files of their patient consultations instead of taking notes during the visit. The audio files are transcribed and processed using AI into a medical history. The Service streamlines the workflow and facilitates record-keeping. From each patient visit, in addition to the draft history, both the audio file and the first transcribed text file are stored. In this way, Vetnio ensures that no information is lost and makes it possible to review the material again later if necessary.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “To submit a request to delete personal information, email your request to privacy@vetnio.com and include 'CCPA Deletion Request' in the subject line. Please make sure to specify in your request which personal information you would like us to delete. Right to non-discrimination: You have the right not to be denied access to our website solely because you exercised your rights under the CCPA and CPRA. However, if such personal information is necessary for us to provide you with access to our website or other services, we may not be able to complete the provision of services/transaction. Right to opt-out: You may request us to stop collecting your personal information ('opt-out') by emailing us at privacy@vetnio.com. However, please note that we must wait at least twelve (12) months before asking you to opt-in again for the collection of your personal information, unless you provide us with prior authorization. Under the CCPA, personal information does not include: publicly available information from government records; deidentified or aggregated consumer information; or information excluded from the CCPA's scope, such as: health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data; or personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ In certain cases, we cooperate with external partners who act as independent data controllers. These partners process personal data in accordance with their own privacy policies and legal obligations, independently determining the purposes and means of such processing. One such partner is Stripe, our payment service provider. When you make a payment through Vetnio, Stripe processes your payment information as an independent data controller under its own Stripe Privacy Policy. We do not have access to your full payment details, such as your credit card number, and Stripe is solely responsible for processing this data. When you interact with or use the services provided by these partners in connection with Vetnio's services, their respective privacy policies will govern the processing of your personal data. We recommend that you review their privacy policies to understand how they collect, use, and protect your data. While we take reasonable steps to ensure that our partners comply with Applicable Data Protection Laws, we are not responsible for their processing activities.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share your personal data with trusted third parties for the purposes described in this Privacy Policy. Such third parties include service providers who help operate our platform, such as cloud hosting providers, payment processors, IT security companies, analytics providers, and customer support tools. Any third party processing personal data on our behalf is contractually obligated to do so in accordance with GDPR and other applicable Data Protection Laws. We ensure that adequate safeguards, including Standard Contractual Clauses (SCCs) or adequacy decisions, are in place when transferring personal data outside the European Economic Area (EEA). We do not sell, trade, or rent your personal data to any third party for marketing purposes. If required by law, we may disclose personal data to regulatory authorities, law enforcement agencies, or other parties in response to valid legal requests.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We engage carefully selected external data processors to process personal data on our behalf, solely for the purpose of providing and improving our services. These data processors include cloud storage providers, payment processors, analytics services, and customer support platforms. Each data processor is subject to a legally binding Data Processing Agreement (DPA) that ensures compliance with GDPR and other Applicable Data Protection Laws. We require our data processors to implement appropriate technical and organizational measures to safeguard personal data and prohibit them from using the data for any other purpose. Where data processors are located outside the European Economic Area (EEA), we ensure adequate levels of protection through Standard Contractual Clauses (SCCs) or other approved transfer mechanisms. Data uploaded to our Service is transferred and stored on encrypted Amazon servers located in Frankfurt, Germany.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.