Skip to main content
Platform Review
PricingSign in
← All platforms
Project & Work Management · wrike.com

Wrike

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskHIGHReviewed 2026-08-21
Creator: medium · GRC: medium · Counsel: medium
creator band
Severe
enterprise · Caution
Dealbreaker · Training without opt-out
Exhibit A · Privacy Policy · verbatim

8.6. Aggregated Anonymous Data. Wrike may aggregate the metadata and usage data of Customer and/or Users collected or otherwise made available through the Service so that the results are non-personally identifiable with respect to Customer or Users (“ Aggregated Anonymous Data ”). The Aggregated Anonymous Data will be deemed Wrike’s proprietary technology,

cited by the training without opt-out dealbreaker — tap for the citation
140 verified findings13 policy surfaces2/2 core docs verified
Risk triage

Watch: confidentiality

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
52
medium
88
low
2/2
docs
Trains on your data?
No training on your content by default
from 1 cited finding
Who owns outputs?
You own outputs — with license carve-outs
from 1 cited finding
Commercial use?
Commercial use allowed — with conditions
from 1 cited finding
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 75 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Wrike's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
  • Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
  • Data handling is conditional — 11 privacy or retention clauses warrant review before using Wrike at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Wrike's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
SEVERE
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause · and another
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause · and another

Based on 188 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
CAUTION
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause · and another
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause · and another

Based on 192 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Fully verifiedProject & Work Management

Fully verified — complete core corpus captured and read in full.

Document status
  • Terms of Service
    Verified - read in full - 34 citationsstaticLast captured 2026-06-08
  • Privacy Policy
    Verified - read in full - 106 citationsstaticLast captured 2026-08-21
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Prompt / input ownership

This segment establishes that Customer retains all rights to Customer Data while granting Wrike a non-exclusive, transferable, sublicensable, worldwide, royalty-free license to use Customer Data as necessary to provide the Service — directly addressing data ownership and the scope of the license granted to Wrike over Customer inputs and outputs.

" 5.1. Customer Data. Customer retains all rights to any and all of its Customer Data, subject to a non-exclusive, transferable, sublicensable, worldwide, royalty-free license to Wrike as necessary to provide the Service hereunder. Each Part..."
plan language
Commercial use

This segment grants Customer a limited, personal, non-exclusive, non-sublicensable, non-transferable, worldwide license to use the Service for business and professional purposes only, explicitly excluding consumer use, and identifies that Wrike uses subcontractors, Sub-Processors, and Affiliates to provide the Service.

" 2.1. Right to Use Service for Business . Subject to the terms of the Agreement, Wrike, with the assistance of Wrike third-party service providers including its subcontractors, Sub-Processors, and Affiliates, will provide the Service set fo..."
plan language
Privacy & data use

This segment obligates Wrike to collect specific categories of personal data (contact details, professional details, device/browser information, interaction data, payment information, and inferences) and describes the sources of collection, creating a transparency obligation and defining the scope of data collection practices.

" In addition to personal data subject to the Wrike DPA that Customers provide to Wrike as Customer Data or otherwise in connection with the Service Offerings, we also collect personal data , including contact details, professional details s..."
📍 § 2 (Types of Personal Data We Collect)Jump to exact text →
plan language
Privacy & data use

States Wrike's obligation to enforce the legal terms governing its business and online properties, grounding enforcement actions in contractual compliance duties.

" To enforce the legal terms that govern our business and online properties; "
📍 § 3 (How We Use Personal Data)Jump to exact text →
plan language
Privacy & data use

Restricts the Service Offerings from being directed at minors under 18 and prohibits knowing collection of personal information from such minors, creating a compliance obligation and parental notification procedure.

" The Service Offerings are not directed at minors under 18. We do not knowingly collect personal information from minors under 18. If you become aware that a minor may have provided us with personal information, please alert the appropriate..."
📍 § 11 (Children)Jump to exact text →
plan language
Privacy & data use

This segment restricts Wrike's use and disclosure of Sensitive Personal Information to purposes permitted by CCPA/CPRA (such as performing services or security), and explains that because usage is already so restricted, no separate opt-out mechanism is offered.

" Wrike does not use or disclose Sensitive Personal Information for purposes other than those permitted by the CCPA/CPRA (e.g., to perform services or for security purposes). As such, we do not currently offer a "Limit the Use of My Sensitiv..."
📍 Privacy Policy › “California Privacy Rights”Jump to exact text →
plan language
Privacy & data use

This segment establishes Wrike's obligation to provide notice of AI-enabled and automated data collection to individuals who correspond with the sales team at the point of contact, and imposes a data minimization obligation by limiting AI-enabled collection to what is necessary for the specified purpose; it also discloses collection of audio recordings from videoconferences.

"Individuals who corres pond with Wrike's sales team will be provided notice of this processing at the point of contact. These tools are used to enhance our responsiveness to prospective c ustomers and to ensure the accuracy of our sales rec..."
📍 § 2 (Types of Personal Data We Collect)Jump to exact text →
plan language
Privacy & data use

Defines legitimate interests as a legal basis for processing personal data for commercial activities including customer support, marketing, security, and business improvement, and extends this basis to Customer legitimate interests as well.

" Legitimate interests: In many cases, we handle personal data on the ground that it furthers our legitimate interests in commercial activities, such as the following, in ways that are not overridden by the interests or fundamental rights an..."
📍 § 5 (Legal Bases for Processing Personal Data)Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 52
Tier-specific - 1
Total citations - 140
Severity
Surface
Document
Tier
Output ownership
CautionHigh
" 1.21. “ Wrike AI Output ” means output generated by Wrike AI based on Customer Data provided by Customer as input to Wrike AI. Wrike AI Output is presented for Customer to take some action (e.g., accept, cut/paste, …) to submit Wrike AI Output, in whole or part, to the Service, after which, such submitted Wrike AI Output shall be Customer Data for purposes of the Agreement. Due to the nature of machine learning, Wrike AI Output may not be unique and Wrike AI may generate the same or similar output for others. Wrike makes no representations or warranties with regard to Wrike AI Output, including ownership thereof. 1.22. “ Wrike Marks ” means any name, logo, or mark belonging to Wrike or its Affiliates. 1.23. “ Wrike Materials ” means any materials that Wrike provides to Customer as part of, or in the course of providing, the Service, provided that Customer Data presented back to the Customer as a result of using the Service and Wrike AI Output remain/are Customer Data and are not Wrike Materials. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines 'Wrike AI Output,' clarifying that once submitted to the Service it becomes Customer Data, that output may not be unique across users, and includes a disclaimer that Wrike makes no warranties regarding AI Output — directly addressing ownership and nature of AI-generated content.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" In addition to personal data subject to the Wrike DPA that Customers provide to Wrike as Customer Data or otherwise in connection with the Service Offerings, we also collect personal data , including contact details, professional details such as title and name of company, information about the browsers and devices that individuals use to interact with us, information about an individual’s interactions with Wrike or our partners, payment info rmation, and inferences drawn from other personal data. We obtain much of this data directly from the relevant individuals, including in some cases with the technology described in the “Cookies and Automated Data Collection” section further below. We also obtain personal data directly from our current or prospe ctive c ustomers and from other third - party sources such as resellers, referral partners, distributors, list vendors and marketing companies and third - party sites like LinkedIn. When we obtain data from these third - party sources, we take steps to ensure the data was collected lawfully and that we have the right to process it for our commercial purposes. We may also collect and process personal data contained in business communications with Wrike, including email content and other correspondence, where relevant to our relationship with current or prospective c ustomers, partners, and other business contacts. Sales representatives’ emails and related correspondence , including complete email chains and third - party responses to Wrike communications, may be processed using AI - enabled tools for the purposes described in this Privacy Policy. "
§ 2 (Types of Personal Data We Collect)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment obligates Wrike to collect specific categories of personal data (contact details, professional details, device/browser information, interaction data, payment information, and inferences) and describes the sources of collection, creating a transparency obligation and defining the scope of data collection practices.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" In our websites, apps and emails, we and third parties may collect certain information by automated means such as cookies, Web beacons, JavaScript, mobile device functionality, browser-based or plugin-based local storage such as HTML5 storage or Flash-based storage, and other similar techniques and technologies. This information includes unique browser identifiers, unique device identifiers such as the Apple Advertising Identifier or Android Advertising ID, IP address, browser and operating system information, geolocation, other device information, Internet connection information, as well as details about individuals’ interactions with our apps, websites and emails. Such details include, for example, the URL of the third-party website from which you came, the pages that you visit on our websites, and the links you click on in our websites. As part of this, we and third parties may use automated means to read or write information on your device, such as in various types of cookies and other local storage. Cookies and local storage are files that can contain data, such as unique identifiers or other information, that we or a third party may transfer to or read from an individual’s device for the purposes described in this Privacy Policy. The cookies and other technologies described here fall into the following categories:"
§ 6 (Cookies and Automated Data Collection)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Permits automated collection of user data through cookies, web beacons, JavaScript, and similar technologies by Wrike and third parties, defining the categories of data collected and the technical means used.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" To send information about our current and future Service Offerings, including marketing communications by phone, email, online display advertising, and other channels; "
§ 3 (How We Use Personal Data)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants Wrike permission to use personal data to send marketing communications across multiple channels about current and future Service Offerings, establishing a marketing purpose for processing.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"Individuals who corres pond with Wrike's sales team will be provided notice of this processing at the point of contact. These tools are used to enhance our responsiveness to prospective c ustomers and to ensure the accuracy of our sales records. When we collect personal data via AI - enabled tools or automated systems, we ensure such collection is limited to what is necessary for the specified purpose . In addition, when individuals participate in a videoconference using a Wrike conference tool or another conference tool made availab le by Wrike, we may collect and process audio recordings, video recordings, transcripts, and related meeting metadata (such as date, time, participants, and meeting title), but only where the relevant participant has provided active consent to the recordin g in accordance with Section 5 of the Privacy Policy. W here AI - enabled tools are used in connection with recorded videoconference or related business communication, we may also generate and process derived data such as transcripts, summaries, notes, action items, key topics, follow - up recommendations, and similar outputs. "
§ 2 (Types of Personal Data We Collect)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment establishes Wrike's obligation to provide notice of AI-enabled and automated data collection to individuals who correspond with the sales team at the point of contact, and imposes a data minimization obligation by limiting AI-enabled collection to what is necessary for the specified purpose; it also discloses collection of audio recordings from videoconferences.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Legitimate interests: In many cases, we handle personal data on the ground that it furthers our legitimate interests in commercial activities, such as the following, in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals: customer support; marketing, including, in some cases, direct marketing such as via email; protecting our Customers, Users, personnel and property; analyzing and improving our business and Service Offerings; and managing legal issues. We may also process personal data for the same legitimate interests of our Customers and business partners. Specifically, for prospective customers, we rely on legitimate interests to provide relevant information about our Service Offerings, provided that such interest is balanced against the individual's privacy expectations. Subject to applicable law, these legitimate interests may also include internal training, quality assurance, service improvement, sales enablement, business analytics, and the use of AI-enabled tools to assist with those activities in relation to email communications and other business communications that are not subject to a consent requirement. If our processing (especially involving AI) would likely result in a high risk to the rights and freedoms of natural persons, we would (i) conduct a Data Protection Impact Assessments (DPIAs) where our processing (especially involving AI) is likely to result in a high risk to the rights and freedoms of natural persons and (ii) update the Privacy Policy. "
§ 5 (Legal Bases for Processing Personal Data)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines legitimate interests as a legal basis for processing personal data for commercial activities including customer support, marketing, security, and business improvement, and extends this basis to Customer legitimate interests as well.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We may combine data collected from you with other sources to help us improve the accuracy of our marketing and communications as well as to help expand or tailor our interactions with you. This includes combining personal data we obtain through online channels with information we obtain through offline channels, as well as other information (such as referral programs), for the purposes described above. We may anonymize or aggregate any personal information and use and disclose it for the purposes described above and for other purposes to the extent permitted by applicable law. We also may use personal data for additional purposes that we specify at the time of collection. We will obtain your consent for these additional uses to the extent required by applicable law."
§ 3 (How We Use Personal Data)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Permits combining personal data from multiple sources for marketing and communications improvement, including anonymization and aggregation for further use, establishing the scope of data combination and onward use rights.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Analytics: These cookies mainly let us count and understand visits and traffic sources so we can measure and improve the performance of our website. They may collect information including clicks, cursor movements, and other interactions with pages on our website. They help us to know which pages, emails and online content are the most and least popular and see how visitors move around and interact with the website. For example, they allow us to measure how effective our ads are in bringing visitors to our website. "
§ 6 (Cookies and Automated Data Collection)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines 'Analytics' cookies and their data collection purposes including tracking visits, traffic sources, clicks, and page interactions to measure website performance, establishing the scope of analytics-based processing.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" To record, store, transcribe, summarize, review and use videoconferences conducted through conference tools made available by Wrike, where the relevant participant has actively consented to the recording, and to use AI - enabled tools and related service providers in connection with those videoconferences and em ails to assist with transcription, summarization, note - taking, action item generation, internal training, quality assurance , knowledge management, service improvement, documentation, and business opera tions ; "
§ 3 (How We Use Personal Data)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants Wrike permission to record, store, transcribe, summarize, review, and use videoconferences where participants have consented, and to use AI-enabled tools and service providers for transcription, summarization, note-taking, action item generation, internal training, quality assurance, knowledge management, service improvement, documentation, and business operations—establishing explicit AI training and operational use purposes for personal data including audio recordings.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" 8.6. Aggregated Anonymous Data. Wrike may aggregate the metadata and usage data of Customer and/or Users collected or otherwise made available through the Service so that the results are non-personally identifiable with respect to Customer or Users (“ Aggregated Anonymous Data ”). The Aggregated Anonymous Data will be deemed Wrike’s proprietary technology, and Customer acknowledges that Wrike may use the Aggregated Anonymous Data, both during and after the Term; (i) for its own internal, statistical analysis; (ii) to develop and improve the Service; and (iii) to create and distribute reports and other materials regarding use of the Service. For purposes of clarity, nothing in this Section 8.6 gives Wrike the right (or ability) to publicly identify Customer or any User as the source of any Aggregated Anonymous Data. 8.7. Security and Privacy . When providing the Service and Wrike Materials, Wrike will (i) implement and maintain the administrative, organizational, and technical security controls at least as protective as the terms set forth in the Wrike Information Security Addendum available at https://www.wrike.com/legal/enterprise-winfosec/ ; and (ii) process personal data on Customer’s behalf as set forth in the Wrike Data Processing Addendum available at https://www.wrike.com/legal/trust-center/ , as may in each case be amended from time to time without notice. The Wrike Information Security Addendum and the Wrike Data Processing Addendum are each incorporated herein by reference. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Permits Wrike to aggregate and anonymize Customer and User metadata and usage data to create Aggregated Anonymous Data, which Wrike may use for internal statistical analysis, service improvement, and distribution of reports, both during and after the Term—granting Wrike a broad post-term data use right.

AI-generated interpretation, not legal advice.

Moderation & enforcement
CautionHigh
"Customer’s use of Add-Ons that are a Third Party Service may be subjected to the terms of the Third Party Service provider. Technical support for the Service is provided as set forth at https://www.wrike.com/support-packages/ as may be amended from time to time without notice. Updates to the Service are managed by Wrike and included in the Fees. Customer shall use the then-current version of the Service, including any Updates, as made available by Wrike. To the extent that Customer’s Affiliates access and use the Service through the provisioning of Users by Customer into the Customer Account, Customer warrants that it has the authority to bind those Affiliates and that Customer will be liable to Wrike in the event any Customer Affiliate fails to comply with the Agreement. Customer may purchase Wrike consulting services in support of its Subscription. With respect to Wrike consulting services, all intellectual property rights in all deliverables, pre-existing works and derivative works of such pre-existing works, as well as developments made, conceived, created, discovered, invented, or reduced to practice in the performance of the consulting services (collectively, “ Customizations ”) are and shall remain the sole and absolute property of Wrike, subject to a worldwide, non-exclusive license to Customer for internal business use during the Subscription Term. At its sole discretion, Wrike may modify or discontinue any part of the Service (including without limitation, the availability of any feature) at any time. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment imposes obligations on Customer to use the then-current version of the Service including Updates, subjects Add-On use to third-party terms, specifies that Updates are managed by Wrike and included in Fees, and extends Customer's Agreement obligations to Affiliate access through Customer's provisioning.

AI-generated interpretation, not legal advice.

Moderation & enforcement
CautionHigh
"Customer instructs Wrike to process Customer Data for the additional purpose of providing the Wrike AI functionality and Wrike AI Output. Wrike’s Privacy Policy is hereby incorporated by reference and will incorporate any provisions not addressed in the Wrike Data Processing Addendum, which shall control over the Privacy Policy regarding the Service or consulting services related to the Agreement. 8.8. Suspension of Service . Wrike reserves the right to suspend Customer’s access to all or any portion of the Service by, in its sole discretion, either deactivating the Customer Account and all active Subscriptions associated with the Customer Account or by converting such Customer Account to a Free Customer Account (if available for the particular suspended Subscriptions) if it determines that: (i) payment for the Service is not received within fourteen (14) days from the date on which payment is due; (ii) Customer’s or its Users’ use of the Service are in breach of the Agreement; (iii) Customer fails to timely address Wrike’s request to take action pursuant to Section 2.4; (iv) Customer’s use of the Service poses a security or other risk to the Service or to other users of the Service; or (v) suspension is required pursuant to a subpoena, court order or other legal process. Wrike agrees to notify Customer of any such suspension. Customer will remain responsible for all Fees incurred before or during any suspension. Wrike reserves the right, in its sole discretion, to impose reasonable Fees to, upon Customer request, restore archived data from delinquent accounts. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Instructs Wrike to process Customer Data for Wrike AI functionality, incorporates the Privacy Policy by reference, and establishes the Data Processing Addendum as the controlling document for data processing under the Agreement.

AI-generated interpretation, not legal advice.

Moderation & enforcement
CautionHigh
" Wrike may change this Privacy Policy to reflect changes in the law, our data handling practices, or the features of our business. The updated Privacy Policy will be posted on Wrike.com."
§ 12 (Notification of Changes)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Establishes the procedure for notifying users of changes to the Privacy Policy by posting updated versions on Wrike.com, creating an obligation for how policy modifications are communicated.

AI-generated interpretation, not legal advice.

Data retention
CautionHigh
" The subsections below apply only to “personal information” about California residents (as that term is defined in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”), and its regulations (collectively, the “CCPA”)) and they supplement the information in the rest of our Privacy Policy above. Data about individuals who are not residents of California is handled differently and is not subject to the same rights described below. These subsections also do not apply to Customer Data or personal data that we receive and process on behalf of our customers in connection with performing our Service Offerings as explained above, which is handled as described in Section 1 of our Privacy Policy, even when the Customer Data or such related personal data is about a resident of California. Retention: Your personal information is retained until after its retention no longer is necessary to fulfill the business purposes described in this policy, or as otherwise required under law. Because we may collect and use the same category of personal information for different purposes and in different contexts, there is no fixed retention period that always will apply to a particular category of personal information. Duration of retention may vary depending upon factors such as legal compliance requirements, recordkeeping or, for resolving inquiries or complaints, and the existence of an ongoing relationship with you. "
§ 14 (Additional Privacy Details for California Residents)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment defines the scope of applicability of the California privacy section, establishing that it applies only to California residents' personal information as defined under the CCPA/CPRA and that it supplements but does not replace the general privacy policy, and explicitly excludes Customer Data from its scope.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, EXCEPT FOR CUSTOMER’S INDEMNIFICATION OBLIGATIONS AND A BREACH BY CUSTOMER OF SECTION 2, NEITHER PARTY SHALL BE LIABLE TO THE OTHER PARTY OR TO ANY OTHER PERSON FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL OR INCIDENTAL LOSSES, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO, THOSE ARISING OUT OF OR RELATING TO: (i) LOSS OF DATA; (ii) LOSS OF INCOME; (iii) LOSS OF OPPORTUNITY; (iv) LOST PROFITS; AND (v) UNAVAILABILITY OR NON-PERFORMANCE OF ANY OR ALL OF THE SERVICE, IN EACH CASE, HOWEVER CAUSED AND BASED ON ANY THEORY OF LIABILITY, INCLUDING, BUT NOT LIMITED TO, BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), OR VIOLATION OF STATUTE, WHETHER OR NOT SUCH PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME JURISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO SOME OF THE ABOVE LIMITATIONS IN THIS SECTION 7 MAY NOT APPLY IF CUSTOMER IS LOCATED IN SUCH A JURISDICTION. TO THE FULLEST EXTENT PERMITTED BY LAW, EXCEPT FOR CUSTOMER’S INDEMNIFICATION OBLIGATIONS AND A BREACH BY CUSTOMER OF SECTION 2, THE TOTAL CUMULATIVE LIABILITY OF EITHER PARTY AND THEIR RESPECTIVE AFFILIATES, LICENSORS AND SERVICE PROVIDERS ARISING OUT OF THE AGREEMENT AND/OR THE TERMINATION THEREOF SHALL BE LIMITED TO THE SUM OF THE AMOUNTS ACTUALLY PAID FOR THE APPLICABLE SERVICE DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE INCIDENT GIVING RISE TO THE LIABILITY, OR, IN THE CASE OF WRIKE CONSULTING SERVICES, THE AMOUNTS ACTUALLY PAID FOR THE APPLICABLE CONSULTING SERVICES. "
§ 7 (LIMITATION OF LIABILITY)Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Excludes indirect, special, consequential, incidental, and exemplary damages for both parties arising from enumerated loss categories, subject to carve-outs for Customer's indemnification obligations and breach of Section 2, limiting financial exposure.

AI-generated interpretation, not legal advice.

Confidentiality
High
"Further, Customer agrees that it shall not disclose or use any of Wrike’s confidential information for any purpose outside the scope of the Agreement, except with Wrike’s prior written permission. Customer shall use Wrike’s confidential information, including the Wrike Technology, only as expressly permitted in the Agreement. 8.14. Force Majeure. Notwithstanding anything to the contrary in the Agreement, neither Party will be responsible or have any liability for any delay or failure to perform its non-monetary obligations hereunder to the extent due to unforeseen circumstances or causes beyond its reasonable control, including but not limited to acts of God, earthquake, fire, flood, sanctions, embargoes, strikes, lockouts or other labor disturbances, civil unrest, failure, unavailability or delay of suppliers or licensors, riots, terrorist or other malicious or criminal acts, war, failure or interruption of the Internet or third-party internet connections or infrastructure, power failures, acts of civil and military authorities and severe weather (in each case, “ Force Majeure ”). The affected Party will give the other Party prompt written notice (when possible) of the failure to perform due to Force Majeure and use its reasonable efforts to limit the resulting delay in its performance. 8.15. Feedback. If Customer provides any comments, suggestions, possible improvements, or other feedback to Wrike regarding the Service or consulting services related to the Agreement (“ Feedback ”), Wrike may use such Feedback for any purpose without any compensation or obligation to Customer provided such use does not violate Wrike’s confidentiality obligations under the Agreement. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Restricts Customer from disclosing or using Wrike's confidential information outside the scope of the Agreement without prior written permission, and limits use of Wrike Technology to only what is expressly permitted, establishing Customer-side confidentiality obligations.

AI-generated interpretation, not legal advice.

Commercial use
NeutralHigh
" 2.1. Right to Use Service for Business . Subject to the terms of the Agreement, Wrike, with the assistance of Wrike third-party service providers including its subcontractors, Sub-Processors, and Affiliates, will provide the Service set forth in any Order that Wrike has prepared and/or accepted in accordance with the Agreement. Customer acknowledges that the Service is not intended for use by consumers and is only for business and professional purposes as expressly granted in the Agreement. Wrike hereby grants Customer a limited, personal, non-exclusive, non-sublicensable, non-transferable worldwide license to use the Service up to the number of User licenses purchased for the applicable Subscription or as otherwise authorized to use or access the Service pursuant to the terms set forth in the Agreement. Customer may increase its number of User licenses for the applicable Subscription during the Subscription Term. Any increase in the number of User licenses shall be for the remainder of the Subscription Term regardless of usage and the number of User licenses may not be reduced during the Subscription Term. Customer may purchase for additional Fees enhancements and/or additional functionalities for the applicable Service for the respective Subscription(s) (collectively, “ Add-Ons ”). Add-Ons may be part of the Service or may be a Third Party Service that are not part of the Service and that are not subject to the terms of the Agreement. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants Customer a limited, personal, non-exclusive, non-sublicensable, non-transferable, worldwide license to use the Service for business and professional purposes only, explicitly excluding consumer use, and identifies that Wrike uses subcontractors, Sub-Processors, and Affiliates to provide the Service.

AI-generated interpretation, not legal advice.

Privacy & data use
FavorableHigh
"Wrike.com treats qualifying browsers for which the user has activated the GPC signal as having opted out of what CCPA calls a “sale” or “sharing” of any California personal information that is collected on that site from that browser using cookies and similar technology. You can override that treatment for a GPC-enabled browser by using the cookie controls available via the Cookie Preferences link in our website footer to opt into particular categories of cookies from that browser. In that case, “sales” and “sharing” via cookies and similar technology in those categories may resume on that browser. Opting out of “sales” and “sharing” limits only some types of disclosures of personal information, and there are exceptions to all of the rights described in this Section. Collection and Disclosure of California Personal Information During Past 12 Months The chart below provides more detail on our disclosures of California personal information during the 12 months leading up to the effective date of this Privacy Policy:"
§ 14 (Additional Privacy Details for California Residents)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment describes the procedure by which Wrike honors Global Privacy Control (GPC) signals as opt-outs of CCPA 'sale' or 'sharing' of California personal information collected via cookies, and explains how users can override that treatment through cookie preference controls.

AI-generated interpretation, not legal advice.

Common questions about Wrike's policies

Does Wrike train its AI models on your data?
No training on your content by default — based on 1 verified finding from Wrike's published policy. Informational only, not legal advice.
Who owns the content you create with Wrike?
You own outputs — with license carve-outs — based on 1 verified finding from Wrike's published policy. Informational only, not legal advice.
Can you use Wrike's output commercially?
Commercial use allowed — with conditions — based on 1 verified finding from Wrike's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Wrike's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

39 verified clauses

Clauses in Wrike's policies that work in your favour — commitments the platform made to you.

  • Privacy & data usehuman review of your content
    AI-generated outputs may contain errors or omissions and may be reviewed by Wrike personnel. Wrike implements appropriate technical and organizational measures to ensure that AI-assisted processing of Customer and prospective customers data is conducted in a m…

    Imposes obligations on Wrike to implement appropriate technical and organizational measures for AI-assisted processing, restricts use of recordings for solely automated decision-making with significant effects, and requi…

    📍 § 3 (How We Use Personal Data)Jump to exact text →
  • Audit rights, DPA & residency
    Except where indicated, this Privacy Policy does not apply to Customer Data or personal data Wrike processes in connection its performance of the Service Offerings. We do not control the content of Customer Data, and, because of security features in the Platfo…

    This segment restricts the Privacy Policy's application by excluding Customer Data and personal data processed in connection with Service Offerings performance; it defines Wrike's role as processor under GDPR for Custome…

  • Confidentiality
    Customer acknowledges that Wrike will rely on the information provided by Customer to resolve issues arising with the Customer Account. 5.3. Customer Account Access/Instructions . The Account Owner and any authorized Users will have access to information in…

    This segment establishes procedures for Customer Account access, specifying who may access account information, restricting Wrike from providing account access to unauthorized persons without Account Owner consent, and p…

  • Audit rights, DPA & residency
    We are headquartered in the United States, and recipients of the data disclosures described in this Privacy Policy are located in the United States and elsewhere in the world, including where privacy laws may not provide as much protection as those of your cou…

    Describes the legal mechanisms for cross-border data transfers, including EU data center storage options for eligible Customers and use of European Commission-approved transfer mechanisms, permitting Customers to arrange…

    📍 § 10 (International Data Transfers)Jump to exact text →
  • Prompt ownershiplicense survival after account deletion
    5.1. Customer Data. Customer retains all rights to any and all of its Customer Data, subject to a non-exclusive, transferable, sublicensable, worldwide, royalty-free license to Wrike as necessary to provide the Service hereunder. Each Party shall apply reasona…

    This segment establishes that Customer retains all rights to Customer Data while granting Wrike a non-exclusive, transferable, sublicensable, worldwide, royalty-free license to use Customer Data as necessary to provide t…

  • Model trainingdoes-not-train
    See the Azure OpenAI Service product documentation related to abuse monitoring for more information. 8.11 Improving Wrike AI. Wrike does not use Customer Data or permit others to use Customer Data to train the machine learning methods and data models underly…

    Expressly restricts Wrike from using Customer Data to train the machine learning methods and data models underlying Wrike AI, and clarifies that Customer's use of Wrike AI does not grant Wrike any right or license to use…

+ 33 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

4 verified clauses

What Wrike requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

  • Moderation & enforcementconduct restrictions
    2.2. Limitations on Use . Except to the extent permitted by applicable law, Customer and its Users shall not: (i) modify, copy, display, republish, distribute, prepare derivative works of, reverse engineer, reverse assemble, disassemble, decompile or attempt t…

    This segment enumerates specific prohibited uses of the Service, restricting Customer and Users from reverse engineering, creating derivative works, abusing networks, and other enumerated harmful activities — constitutin…

  • Moderation & enforcementconduct restrictions
    8.18. Assignment . Customer may not assign its rights or delegate its duties under the Agreement either in whole or in part without Wrike’s prior written consent, except that Customer may assign the Agreement in whole to one of Customer’s Affiliates, or to a s…

    Restricts Customer from assigning rights or delegating duties under the Agreement without Wrike's prior written consent, with narrow exceptions for affiliate assignment or corporate succession events, and voids any unaut…

  • Moderation & enforcementconduct restrictions
    or entity, or misrepresent an affiliation with a person or entity (e.g., “spoofing” or “phishing”); (xi) send unsolicited communications, promotions, advertisements or spam by using, or in connection with, the Service; (xii) upload any PHI to portions of the S…

    This segment continues the list of prohibited uses including spoofing, phishing, spam, uploading PHI without a BAA, violating content policies, and violating Wrike's Abusive Customer Policy — imposing moderation-related…

  • Moderation & enforcementconduct restrictions
    harmful materials; or (viii) contains any information that Customer does not have a right to make available under law or any contractual or fiduciary duty, or could otherwise cause damage to Wrike or any third party.

    This segment completes the list of prohibited content, restricting Customer from submitting information it has no right to share under law or contract, and that could cause damage to Wrike or third parties — extending mo…

What the policies actually cover

19 topics
  • Product telemetry & usage tracking13 clauses
  • Advertising & tracking3 protective9 clauses
  • Sale or sharing of personal data2 protective5 clauses
  • Sensitive data (biometric, location, health)1 protective2 clauses
  • Children's data1 protective1 clause
  • Government & law-enforcement disclosure5 clauses
  • Data shared with other AI providers1 clause
  • Does not train on your content1 protective1 clause
  • Arbitration & class-action waiver1 clause
  • Damages & liability cap4 clauses
  • Indemnity direction1 clause
  • Terms can change at any time1 protective3 clauses
  • Deletion rights & post-termination survival3 protective9 clauses
  • License survival after account deletion1 protective1 clause
  • Auto-renewal & cancel window1 clause
  • Feedback ownership1 clause
  • Attribution requirements1 clause
  • Human review of your content1 protective1 clause
  • Conduct restrictions4 obligations5 clauses

75 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Cross-referenceacross documents

Two verified clauses intersect on the same subject matter: the Privacy Policy, § 14 (Additional Privacy Details for California Residents) addresses how long content is retained, and the Terms of Service, § 8.10 addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.

Cross-referenceacross documents

The Terms of Service, § 1.20 describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “For the uses of information described above,” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.

Ambiguity — Caution

Verified retention clauses point in different directions: the Privacy Policy, § 9 (Data Retention) describes broad or open-ended retention, while the Privacy Policy, § 9 (Data Retention) describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

306
clauses
55
patterns
55
stances
privacy sharing · 22ip license · 14training use · 8tier conditionality · 5legal burden · 4dispute resolution · 2
dispute resolutionMEDIUM§ 10 (International Data Transfers)

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration- Procedures-dpf?tabset-35584=2 .
Open source citation
dispute resolutionMEDIUM§ 10 (International Data Transfers)

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration- Procedures-dpf?tabset-35584=2 .
Open source citation
ip licenseHIGH§ 5.1

The clause includes sublicensable, transferable, or assignable rights.

5.1. Customer Data. Customer retains all rights to any and all of its Customer Data, subject to a non-exclusive, transferable, sublicensable, worldwide, royalty-free license to Wrike as necessary to provide the Service hereunder. Each Party shall apply reasonable technical, organizational, and administrative security measures, as appropriate relative to the Service, to keep Customer Data protected in accordance wi...
Open source citation
ip licenseHIGH§ 2.1

The clause includes sublicensable, transferable, or assignable rights.

2.1. Right to Use Service for Business . Subject to the terms of the Agreement, Wrike, with the assistance of Wrike third-party service providers including its subcontractors, Sub-Processors, and Affiliates, will provide the Service set forth in any Order that Wrike has prepared and/or accepted in accordance with the Agreement. Customer acknowledges that the Service is not intended for use by consumers and is only...
Open source citation
ip licenseHIGH§ 2.1

The clause includes sublicensable, transferable, or assignable rights.

2.1. Right to Use Service for Business . Subject to the terms of the Agreement, Wrike, with the assistance of Wrike third-party service providers including its subcontractors, Sub-Processors, and Affiliates, will provide the Service set forth in any Order that Wrike has prepared and/or accepted in accordance with the Agreement. Customer acknowledges that the Service is not intended for use by consumers and is only...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersdata retentionworsensHIGH2
All applicable tiersindemnity liabilityconditionalMEDIUM3
All applicable tiersoutput ownershipconditionalMEDIUM2
All applicable tiersprivacy data useworsensHIGH1
All applicable tierstier differencesconditionalMEDIUM1
All applicable tierstraining useworsensHIGH1
Enterprisetraining useworsensHIGH1
Freecommercial useworsensHIGH2
Freedata retentionworsensHIGH2
Freeindemnity liabilityconditionalMEDIUM1
Freeoutput ownershipworsensHIGH4
Freeprivacy data useconditionalMEDIUM2

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

improvedhigh materialityJun 17Aug 21, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
At or before the time of collection of personal information from California residents, Wrike provides a notice at collection. This notice includes the categories of personal information to be collected (as detailed in the table above), the purposes for which the information is used (as described in Section 3), whether that information is "sold" or "shared" (as described in Section 14), and the criteria used to determine the period of time the information will be retained (as described in Sections 9 and 14). If you provide us with personal information through our website forms or via a lead generation tool, our Privacy Policy is provided via a link or text adjacent to the point of collection.
Before citation
After · medium
When Wrike receives personal data under the DPF and then transfers it to a third - party service provider acting as an agent on Wrike’s behalf, Wrike has certain responsibility under the DPF if both (i) the agent processes the information in a manner inconsi stent with the DPF, and (ii) Wrike is responsible for the event giving rise to the damage. Covered European residents should direct any questions, concerns, or complaints regarding Wrike’s compliance with the DPF to Wrike as described at the bottom of this Privacy Policy. Wrike will attempt to answer your questions and satisfy your concerns in a timely and complete manner as soon as possible. If, after discussing the matter with Wrike, your issue or complaint is not resolved, Wrike has agreed to participate in the DPF independent dispute resolution mechanisms listed below, free of charge to you. Please contact Wrike first.
After citation
Aug 21, 2026data sharingHIGH

Latest stance: sale or sell on data retention

At or before the time of collection of personal information from California residents, Wrike provides a notice at collection. This notice includes the categories of personal information to be collected (as detailed in the table above), the purposes for which the information is used (as described in Section 3), whether that information is "sold" or "shared" (as described in Section 14), and the criteria used to determine the period of time the information will be retained (as described in Sections 9 and 14). If you provide us with personal information through our website forms or via a lead generation tool, our Privacy Policy is provided via a link or text adjacent to the point of collection.
Open timeline citation
Aug 21, 2026dispute termsMEDIUM

Latest stance: arbitration or waiver on governing law disputes

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration- Procedures-dpf?tabset-35584=2 .
Open timeline citation
Aug 21, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

When Wrike receives personal data under the DPF and then transfers it to a third - party service provider acting as an agent on Wrike’s behalf, Wrike has certain responsibility under the DPF if both (i) the agent processes the information in a manner inconsi stent with the DPF, and (ii) Wrike is responsible for the event giving rise to the damage. Covered European residents should direct any questions, concerns, or complaints regarding Wrike’s compliance with the DPF to Wrike as described at the bottom of this Privacy Policy. Wrike will attempt to answer your questions and satisfy your concerns in a timely and complete manner as soon as possible. If, after discussing the matter with Wrike, your issue or complaint is not resolved, Wrike has agreed to participate in the DPF independent dispute resolution mechanisms listed below, free of charge to you. Please contact Wrike first.
Open timeline citation
Aug 21, 2026data sharingHIGH

Latest stance: sale or sell on commercial use

Inform you of the categories of personal information we have collected about you in the last twelve months; the categories of sources of such information; the categories of personal information that we “sold,” “shared,” or disclosed about you for a business purpose; the business or commercial purpose for collecting, “selling” or “sharing” your personal information; and the categories of third parties to whom we have “sold,” “shared,” or disclosed personal information for a business purpose.
Open timeline citation

Capture recency

  • Terms of Service:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
  • Privacy Policy:Last captured 2026-08-21· verified 2026-08-21

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 164 more findings this quarter vs last (320 vs 156). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Wrike's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Every finding above is a verbatim quote from Wrike's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.