Workflow & Automation · webex.comWebex AI (Cisco)
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Creates an exception permitting sharing of data in aggregated, anonymized, or de-identified form that cannot reasonably identify individuals, carving out such use from personal data restrictions.
No specific retention periods are provided. The open-ended business requirements and dispute resolution carve-outs could justify retaining personal data far beyond what users would reasonably expect. GDPR and similar frameworks require defined retention periods.
Automated decision-making affecting legal rights is regulated under GDPR Article 22 and similar frameworks. Delegating manual review to 'trusted third-party business partners' introduces accountability gaps. The clause does not specify the categories of decisions subject to automation.
Scores derived from 60 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Data handling is conditional — 23 privacy or retention clauses warrant review before using Webex AI (Cisco) at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Webex AI (Cisco)'s own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 80 verified, verbatim-cited findings below — read the citations.
Based on 126 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 7 citationsrenderedLast captured 2026-08-17
- Privacy PolicyVerified - read in full - 150 citationspdf textLast captured 2026-08-12
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Automated decision-making affecting legal rights is regulated under GDPR Article 22 and similar frameworks. Delegating manual review to 'trusted third-party business partners' introduces accountability gaps. The clause does not specify the categories of decisions subject to automation.
"We process Personal Data using both manual and automated methods of processing. Automated methods are often used to assist our manual methods in accordance with applicable laws. Where an individual's legal rights and legitimate interests ma..."
Defines the right of California residents under Civil Code § 1798.83 to request a list of third parties to whom personal data was disclosed for direct marketing purposes in the preceding year, or alternatively to exercise opt-in/opt-out choices.
" Residents of the State of California, under California Civil Code § 1798.83, have the right to request from companies conducting business in California a list of all third parties to which the company has disclosed Personal Data during the..."
Introduces the categories of Personal Data processed by Cisco, clarifying that the types depend on business context and collection purpose, providing a definitional framework for subsequent data use obligations.
"The types of Personal Data we may process depend on the business context and the purposes for which it was collected. It may include:"
Defines business interests, opinions, and CRM-held information as categories of Personal Data, broadening the scope of data subject to privacy obligations.
" Details of an individual's business and other interests and opinions (such as information held in a customer relationship management database)"
Introduces enumeration of specific business reasons for Personal Data collection, serving as a definitional lead-in for subsequent listed purposes.
" We collect Personal Data for a variety of business reasons, such as:"
Imposes an obligation on Cisco to respond to Personal Data requests within 30 days or as required by applicable law, and requires Cisco to provide an explanation if it cannot honor the request or needs more time.
" If you need additional assistance, or help with accessing, correcting, suppressing, or deleting your Personal Data, please feel free to contact us directly. We will respond to your request within 30 days or as appropriate under applicable ..."
Provides a specific procedural mechanism (phone numbers) for California residents to submit opt-out or privacy rights requests, supplementing other described opt-out channels.
" In addition, California residents may also submit a request by calling direct 408-906-2726 or toll free 833-774-2726 (833-PRI-CSCO)."
The phrase 'other legitimate purposes permitted by applicable law' is an open-ended basis that can be used to justify almost any processing. Combined with marketing and customization purposes, users have limited ability to predict or constrain how their data is used.
"We may use your Personal Data for the purposes of operating and helping to ensure the security of our business; delivering, improving, and customizing our websites, Solutions, and interactions with you; sending notices, marketing, and other..."
Clause A states users can request deletion of their Personal Data, but Clause B broadly declares Cisco is 'not responsible' for Personal Data submitted to public forums, creating ambiguity about whether deletion rights apply to such data.
"- If you need additional assistance, or help with accessing, correcting, suppressing, or deleting your Personal Data, please feel free to [contact us](https://privacyrequest.cisco.com/) directly. We will respond to your request within 30 days or as appropriate under applicable data protection laws. If we are unable to honor your request or need more time, we will provide you with an explanation."
"If you participate in a discussion forum, local communities, or chat room on a Cisco website, you should be aware that the information you provide there (such as your public profile and comments) will be made broadly available to others and could be used to contact you, to send you unsolicited messages, or for purposes neither Cisco nor you have control over. Also, please recognize that individual forums and chat rooms may have additional rules and conditions. Cisco is not responsible for the Personal Data or any other information you choose to submit in these forums. To request removal of your Personal Data from our blog or community forum, please submit a [Privacy Request](https://privacyrequest.cisco.com/). In some cases, we may not be able to remove all Personal Data and comments. In such cases, we will provide you with a response and explanation."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"We process Personal Data using both manual and automated methods of processing. Automated methods are often used to assist our manual methods in accordance with applicable laws. Where an individual's legal rights and legitimate interests may be impacted by such automated decision-making, we will provide the impacted individual the opportunity to inquire about the decision or request manual review. Manual review may be conducted by Cisco employees or trusted third-party business partners working on Cisco's behalf."
Automated decision-making affecting legal rights is regulated under GDPR Article 22 and similar frameworks. Delegating manual review to 'trusted third-party business partners' introduces accountability gaps. The clause does not specify the categories of decisions subject to automation.
AI-generated interpretation, not legal advice.
"We also use the information to improve our websites and Solutions, provide greater service and value, better understand your potential interest in our websites and Solutions, and provide you with more relevant ads and other content."
Using behavioral tracking data for ad targeting and interest profiling requires opt-in consent in many jurisdictions (GDPR, CCPA). The statement does not clarify how users can opt out of ad targeting specifically.
AI-generated interpretation, not legal advice.
"We may use your Personal Data for the purposes of operating and helping to ensure the security of our business; delivering, improving, and customizing our websites, Solutions, and interactions with you; sending notices, marketing, and other communications; and for other legitimate purposes permitted by applicable law."
The phrase 'other legitimate purposes permitted by applicable law' is an open-ended basis that can be used to justify almost any processing. Combined with marketing and customization purposes, users have limited ability to predict or constrain how their data is used.
AI-generated interpretation, not legal advice.
"Analyzing, personalizing, improving accuracy, and enhancing user experience, communications, and interactions"
This purpose encompasses profiling and behavioral analysis, which in certain jurisdictions (e.g., EU under GDPR) requires additional safeguards or opt-out rights. The statement does not clearly distinguish between improving individual experience versus improving Cisco's products/models.
AI-generated interpretation, not legal advice.
"Cisco uses automatic data collection tools, such as cookies, embedded web links, pixels, tags, and web beacons. These tools collect certain standard information that your browser sends to us (such as Internet Protocol [IP] address, MAC address, clickstream behavior, and telemetry)."
Collection of MAC address, IP address, clickstream, and telemetry via cookies and web beacons constitutes significant tracking. The statement does not describe a consent mechanism for non-essential cookies, which is required under GDPR/ePrivacy Directive in the EU.
AI-generated interpretation, not legal advice.
" When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. From the list on left, please choose whether this site may use Performance and/or Targeting Cookies. By selecting Strictly Necessary Cookies only, you are requesting Cisco not to sell or share your personal data. Note, blocking some types of cookies may impact your experience on the site and the services we are able to offer."
Explains how cookies may store or retrieve browser information, discloses the purposes of such data collection, and informs users of their right to restrict certain cookie categories, qualifying the extent of personalization and data use practices.
AI-generated interpretation, not legal advice.
" Information about the user and usage of our websites and Solutions, including System Information such as device identifiers and telemetry (e.g., IP or MAC address) when such data is linked or tied to a specific individual’s device"
Defines website and Solution usage data including device identifiers, telemetry, IP and MAC addresses as Personal Data when linked to a specific individual, establishing scope for privacy obligations relating to technical identifiers.
AI-generated interpretation, not legal advice.
" Communications content (such as audio, video, text), social media and discussion forum, or other communications details when you interact with Cisco"
Defines communications content (audio, video, text, social media, discussion forums) as Personal Data categories collected during interactions with Cisco, establishing what data is subject to privacy protections.
AI-generated interpretation, not legal advice.
" We may collect data, including Personal Data, about you as you use our websites and Solutions and interact with us. We also acquire Personal Data from trusted third-party sources and engage third parties to collect Personal Data on our behalf, in accordance with applicable laws."
Grants Cisco permission to use Personal Data for operating its business, delivering and improving Solutions, sending communications, and other lawful purposes, defining the permitted scope of data use.
AI-generated interpretation, not legal advice.
" Sending communications to you, including for marketing or customer satisfaction purposes, either directly from Cisco or from our partners"
Permits Cisco to use Personal Data to send marketing and customer satisfaction communications directly or through partners.
AI-generated interpretation, not legal advice.
" These tools help make your visit to our websites and Solutions easier, more efficient, and personalized. We also use the information to improve our websites and Solutions, provide greater service and value, better understand your potential interest in our websites and Solutions, and provide you with more relevant ads and other content."
Grants permission for Cisco to use automatically collected data to improve websites and Solutions, personalize user experience, understand user interest, and deliver relevant advertising and content.
AI-generated interpretation, not legal advice.
" These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising."
Defines targeting cookies, identifies that advertising partners (subprocessors) set them, describes profile-building and cross-site tracking use, and discloses that unique browser/device identifiers are used rather than directly stored personal information.
AI-generated interpretation, not legal advice.
" These cookies provide metrics related to the performance and usability of our site. They are primarily focused on gathering information about how you interact with our site, including: page load times, response times, error messages, and allowing a replay of a visitor’s interactions with our site, which enables us to review and analyze visitor behavior, helping to improve site usability and functionality. These cookies also allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance."
Defines performance cookies and describes the data they collect (page load times, interaction replays, visit counts), establishing what personal/behavioral data is gathered and its purpose.
AI-generated interpretation, not legal advice.
" These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly."
Defines functional cookies, identifies that third-party providers may set them, and notes the consequence of disallowing them (services may not function), establishing the scope of third-party data processing on the platform.
AI-generated interpretation, not legal advice.
" If we link other data with your Personal Data, we will treat that linked data as Personal Data."
Imposes an obligation on Cisco to treat any data linked with Personal Data as Personal Data itself, expanding the scope of data protection requirements.
AI-generated interpretation, not legal advice.
" If you participate in a discussion forum, local communities, or chat room on a Cisco website, you should be aware that the information you provide there (such as your public profile and comments) will be made broadly available to others and could be used to contact you, to send you unsolicited messages, or for purposes neither Cisco nor you have control over. Also, please recognize that individual forums and chat rooms may have additional rules and conditions. Cisco is not responsible for the Personal Data or any other information you choose to submit in these forums. To request removal of your Personal Data from our blog or community forum, please submit a Privacy Request . In some cases, we may not be able to remove all Personal Data and comments. In such cases, we will provide you with a response and explanation."
Disclaims Cisco's responsibility for personal data voluntarily submitted by users in forums and chat rooms, warns of broad availability and potential misuse of such data, and limits Cisco's liability for user-generated disclosures in public community spaces.
AI-generated interpretation, not legal advice.
" We may update this Privacy Statement from time to time. If we modify our Privacy Statement, we will post the revised version here with an updated revision date. If we make material changes to our Privacy Statement, we may also notify you by other means, such as by posting a notice on our websites or sending you a notification. By continuing to use our website after such revisions are in effect, you accept and agree to the revisions and to abide by them."
Establishes the procedure by which Cisco will update and communicate changes to the Privacy Statement, and deems continued use of the website after revisions as acceptance of those changes, creating a binding consent mechanism.
AI-generated interpretation, not legal advice.
" For business purposes in the last 12 months, Cisco may have collected, used, and shared Personal Data about you as described in this Privacy Statement. Each category of data that may be used by Cisco or shared with third parties is categorically outlined in this Privacy Statement. Cisco does not sell Personal Data as the term “sell” is traditionally understood."
Obligates Cisco to collect, use, and share personal data only as described in the Privacy Statement, and clarifies that Cisco does not sell personal data, establishing the scope of permissible data handling for business purposes over the preceding 12 months.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Webex AI (Cisco)'s own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
23 verified clausesClauses in Webex AI (Cisco)'s policies that work in your favour — commitments the platform made to you.
- Audit rights, DPA & residency
“Cisco-U.S. is responsible for the processing of Personal Data it receives under the DPF, and subsequently may transfer it to third parties acting as agents on its behalf. Cisco-U.S. complies with the DPF Principles for all onward transfers of Personal Data fro…”
Obligates Cisco-U.S. to comply with DPF Principles for all onward transfers of personal data including to third-party agents, including onward transfer liability provisions, and acknowledges potential disclosure to publi…
Location: exact-text link only — source has no section structureJump to exact text → - Privacy & data usesale/sharing of personal data
“California residents (as well as those in jurisdictions with similar laws) have the right to ask Cisco not to “sell” or “share” certain Personal Data. For more information on how to make such a request, please see “Use of cookies and similar technologies” abov…”
Grants California residents and those in similar jurisdictions the right to opt out of the sale or sharing of their personal data, and provides the procedure for exercising that right via cookies or a dedicated link.
Location: exact-text link only — source has no section structureJump to exact text → - Audit rights, DPA & residency
“Cisco Systems, Inc. and its U.S. based subsidiaries — Amorblox, Inc.; AppDynamics LLC; Broadsoft, Inc.; Cisco OpenDNS LLC; Cisco Systems Capital Corporation; Duo Security LLC; Fluidmesh Networks LLC; Isovalent LLC; Jasper Technologies LLC; Kenna Security, Inc.…”
Establishes that Cisco-U.S. and named U.S. subsidiaries have certified adherence to EU-U.S. DPF, U.K. Extension, and Swiss-U.S. DPF Principles with the U.S. Department of Commerce, creating a binding legal obligation for…
Location: exact-text link only — source has no section structureJump to exact text → - Audit rights, DPA & residency
“In compliance with the EU-U.S. DPF Principles, the U.K. Extension to the EU-U.S. DPF Principles, and/or the Swiss-U.S. DPF Principles, Cisco-U.S. commits to resolve complaints about your privacy and our collection or use of your Personal Data transferred to th…”
Establishes the procedure for EU, EEA, U.K., and Swiss individuals to submit DPF-related privacy complaints or inquiries to Cisco-U.S. via an online Privacy Request form, as the first step in the DPF complaint resolution…
Location: exact-text link only — source has no section structureJump to exact text → - Audit rights, DPA & residency
“Cisco's global privacy program and policies have been approved by the Dutch, Polish, Spanish, and other relevant European privacy regulators as providing additional safeguards for the protection of privacy, fundamental rights, and freedoms of individuals for t…”
EU Binding Corporate Rules approved by lead DPAs constitute a valid GDPR Chapter V transfer mechanism under Article 47. This mitigates international transfer risk for EU/EEA data subjects.
Location: exact-text link only — source has no section structureJump to exact text → - Audit rights, DPA & residency
“Cisco's global privacy program and policies have been approved by U.K.’s Information Commissioner’s Office, as providing additional safeguards for the protection of privacy, fundamental rights, and freedoms of individuals for transfers of Personal Data protect…”
Establishes that Cisco's U.K. BCR-C has been approved by the U.K. ICO and obligates Cisco entities bound by these rules to ensure appropriate safeguards for international transfers of U.K. personal data, functioning as a…
Location: exact-text link only — source has no section structureJump to exact text →
+ 17 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
0 verified clausesWhat Webex AI (Cisco) requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Webex AI (Cisco)'s published policies yet.
What the policies actually cover
9 topics- Product telemetry & usage tracking6 clauses
- Advertising & tracking4 protective15 clauses
- Sale or sharing of personal data3 protective8 clauses
- Children's data1 clause
- Government & law-enforcement disclosure3 clauses
- Arbitration & class-action waiver1 clause
- Terms can change at any time1 protective1 clause
- Deletion rights & post-termination survival2 clauses
- Breach-notification promises2 protective2 clauses
118 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2 .”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See [https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2](https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2).”Open source citation
The clause permits sale of personal data or information.
“California residents (as well as those in jurisdictions with similar laws) have the right to ask Cisco not to “sell” or “share” certain Personal Data. For more information on how to make such a request, please see “Use of cookies and similar technologies” above or click the "Cookies / Do not sell or share my personal data" or “Cookies” link at the bottom of any page on this website. Please note that your choice is...”Open source citation
The clause permits sale of personal data or information.
“For business purposes in the last 12 months, Cisco may have collected, used, and shared Personal Data about you as described in this Privacy Statement. Each category of data that may be used by Cisco or shared with third parties is categorically outlined in this Privacy Statement. Cisco does not sell Personal Data as the term “sell” is traditionally understood.”Open source citation
The clause permits sale of personal data or information.
“Cisco does not sell the Personal Data of California consumers.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | audit rights dpa residency | conditional | MEDIUM | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 14 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 7 |
| Enterprise | tier differences | conditional | MEDIUM | 5 |
| Government | governing law disputes | conditional | MEDIUM | 2 |
| Team / Business | audit rights dpa residency | conditional | MEDIUM | 2 |
| Team / Business | privacy data use | worsens | HIGH | 3 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 7 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sale or sell on privacy data use
“When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. From the list on left, please choose whether this site may use Performance and/or Targeting Cookies. By selecting Strictly Necessary Cookies only, you are requesting Cisco not to sell or share your personal data. Note, blocking some types of cookies may impact your experience on the site and the services we are able to offer.”Open timeline citation
Latest stance: third party or vendor sharing on audit rights dpa residency
“Cisco’s global privacy program, described in this Privacy Statement, complies with the Global Cross-Border Privacy Rules (CBPR) and the Privacy Recognition for Processors (PRP) program requirements. The Global CBPR and PRP system provide a framework for organizations to ensure the protection of Personal Data transferred between participating Global economies. More information about the Global Privacy Framework, CBPRs, and PRP can be found on the [Global CBPR Forum site](https://www.globalcbpr.org/). Our certification applies to our business processes across our global operations that process and transfer Personal Data to and from our affiliates around the world. To view our certifications, please see the [Global CBPR System Directory](https://www.globalcbpr.org/privacy-certifications/directory/) and the [Global PRP Directory](https://www.globalcbpr.org/privacy-certifications/directory/).”Open timeline citation
Latest stance: third party or vendor sharing on audit rights dpa residency
“Cisco-U.S. is responsible for the processing of Personal Data it receives under the DPF, and subsequently may transfer it to third parties acting as agents on its behalf. Cisco-U.S. complies with the DPF Principles for all onward transfers of Personal Data from the EU, EEA, U.K. (and Gibraltar), and Switzerland (for examples of such transfers, see [Disclosing your Personal Data](https://www.cisco.com/c/en/us/about/legal/privacy-full.html#spi)), including the onward transfer liability provisions. In certain situations, Cisco-U.S. may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Further, Cisco-U.S. is committed to protecting Personal Data received from EU and EEA member countries, Switzerland, and the U.K. (and Gibraltar) (see [Collection and use of your Personal Data](https://www.cisco.com/c/en/us/about/legal/privacy-full.html#personal-information) for examples of the Personal Data Cisco processes when you use our websites and Solutions and interact with us) in accordance with the DPF's applicable Principles and to help ensure Personal Data collected from individuals is accessible to them as part of their individual rights when Cisco is the Controller of the Personal Data (see [Your privacy rights](https://www.cisco.com/c/en/us/about/legal/privacy-full.html#privacy-rights)). Furthermore, Cisco acknowledges the right of EU, EEA, U.K.”Open timeline citation
Latest stance: sale or sell on privacy data use
“For business purposes in the last 12 months, Cisco may have collected, used, and shared Personal Data about you as described in this Privacy Statement. Each category of data that may be used by Cisco or shared with third parties is categorically outlined in this Privacy Statement. Cisco does not sell Personal Data as the term “sell” is traditionally understood.”Open timeline citation
Latest stance: sale or sell on privacy data use
“California residents (as well as those in jurisdictions with similar laws) have the right to ask Cisco not to “sell” or “share” certain Personal Data. For more information on how to make such a request, please see “Use of cookies and similar technologies” above or click the "Cookies / Do not sell or share my personal data" or “Cookies” link at the bottom of any page on this website. Please note that your choice is specific to the digital property you are visiting or website, the browser you are using, and to the device you are engaged with using. You will need to exercise your preferences specifically on each Cisco digital property that links to this Privacy Statement. California consumers have a right to: (1) request access, correction, and deletion of their Personal Data, (2) opt out of the sale or sharing of their Personal Data, and (3) not be discriminated against for exercising one of their California privacy rights. For more information on how to make a request to opt out of sharing certain Personal Data, please see “Use of cookies and similar technologies” above or click the “Cookies/Do not sell or share my personal data" or “Cookies” in the website footer. All individuals have the right to request access to and deletion of the information Cisco holds about them either online via the [Cisco Privacy Request Form](https://privacyrequest.cisco.com/) or by mail to Cisco Systems, Inc., Privacy Office, 170 West Tasman Dr., San Jose, CA 95134, USA.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Residents of the State of California, under California Civil Code § 1798.83, have the right to request from companies conducting business in California a list of all third parties to which the company has disclosed Personal Data during the preceding year for direct marketing purposes. Alternatively, the law provides that if the company has a privacy policy that gives either an opt out or opt in choice for use of your Personal Data by third parties (such as advertisers) for marketing purposes, the company may instead provide you with information on how to exercise your disclosure choice options.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Cisco has a comprehensive Privacy Statement and provides you with details on how you may either opt-out or opt-in to the use of your Personal Data by third parties for direct marketing purposes. Therefore, we are not required to maintain nor disclose a list of the third parties that received your Personal Data for marketing purposes during the preceding year.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-08-17· verified 2026-08-17
- Privacy Policy:Last captured 2026-08-12· verified 2026-08-12
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 38 fewer findings this quarter vs last (103 vs 141). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Webex AI (Cisco)'s policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Webex AI (Cisco)'s own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.