Writesonic procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ We implement administrative, technical, and physical safeguards designed to protect personal information. We are SOC 2 Type 2 audited and publish details about our security program at our trust center: writesonic.trust.site .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ Writesonic is headquartered in the United States. When you use the Services, your personal information may be transferred to, stored in, and processed in the United States and other countries where we, our Affiliates, or our sub-processors operate.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ For transfers of personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been deemed adequate by the relevant authority, we rely on Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum , and other lawful transfer mechanisms, as set out in our Data Processing Agreement .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ This Policy does not govern personal information that our business customers ("Customers") submit to the Services as Inputs or content they manage through the Services. For that personal information, the Customer is the controller and Writesonic acts as a processor under our Data Processing Agreement . As between Writesonic and the Customer, the Customer's own privacy notice governs the Customer's collection and use of personal information relating to its end users.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We may retain information longer where required to comply with legal obligations, defend legal claims, or address security or fraud incidents.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Marketing-list data Until you unsubscribe or 24 months of inactivity, whichever is sooner ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal information only as long as necessary for the purposes for which it was collected, and as required by applicable law.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Active account information For the duration of the account, plus the period required by law Customer Data after account deletion Up to 30 days, then permanent deletion (subject to the DPA) Billing and tax records 7 years, or as required by tax law in the relevant jurisdiction ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ comply with legal obligations and respond to lawful requests by public authorities;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Meta (Facebook) ads: facebook.com/help/568137493302217 ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Each Model Provider has its own data-handling terms. The summary below reflects the providers' published policies and the configurations we use.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Sub-processors Cloud hosting (Microsoft Azure, AWS), Model Providers (OpenAI, Anthropic, Azure, others), CRM, helpdesk, error monitoring, analytics, billing, email Provide and operate the Services Affiliates Writesonic group entities Internal operations, support, sales, billing Integrations you enable Google services, CMSs, ad platforms, social platforms, third-party AI platforms Provide the integration you authorized Professional advisers Lawyers, auditors, accountants Run the business; comply with law Authorities and others Regulators, law enforcement, courts Comply with valid legal process; protect rights, safety, security Buyers and successors In a merger, financing, acquisition, restructuring, or sale of all or part of the business Continuation of the business ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We share personal information in the situations below.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The current list of sub-processors used to deliver the Services is in Schedule 3 of our Data Processing Agreement . Customers receive at least 30 days' notice of updates to our sub-processors in accordance with the terms of the DPA.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Compliance with legal obligations , to comply with applicable laws, regulations, legal processes, and governmental requests.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ When you use AI Features, we send Inputs to the relevant Model Provider, receive Outputs, and return them to you in the Services. We may also send a limited amount of operational metadata (for example, a request identifier or model parameters).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ enforce our Terms of Service and protect our rights, property, or safety, or that of others;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ LinkedIn Ads: linkedin.com/help/linkedin/answer/a1339724 ” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.