Grok (xAI) procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ In the EU: Lionheart Squared (Europe) Ltd, FAO x.ai, 2 Pembroke House, Upper Pembroke Street 28-32, Dublin, D02 EK84, Republic of Ireland xai@lionheartsquared.eu ” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ European Economic Area (EEA), United Kingdom (UK) or Switzerland Residents ("Europe Specific Terms" or “EST”) ” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ When we have a legal obligation to do so (e.g., if we receive a court order, we would retain your information for longer than our usual retention periods);” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We may aggregate, pseudoanonymize, or de-identify your information so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Service is being used, to improve and add features to them, and to conduct research. We will maintain and use pseudoanonymized or de-identified information in pseudoanonymized or de-identified form and will not attempt to reidentify the information, unless required by law.” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ For litigation, regulatory or other legal matters (e.g., we would retain your information if there was an ongoing legal claim and the information was relevant to the claim).” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ The length of time we retain data may depend on the features or settings you use. For example, when Private Chat is turned on, conversations will not appear in your conversation history and your conversations will be deleted from xAI systems within 30 days unless it is necessary that they be kept longer for legal, compliance, or safety purposes. Further, if you choose to delete any or all of your conversations or if you choose to delete your account, we will delete the data within 30 days unless it is necessary to retain the data for legal, compliance, or safety purposes.” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain your personal information where we have an ongoing legitimate business need to do so. In certain circumstances, we will retain your information for legal reasons after our contractual relationship has ended. The specific retention periods depend on the nature of the information and why it is collected and processed and the nature of the legal requirement. For example, we may retain your personal information:” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To our contracted service providers: To assist in providing the Service to you or performing business operations, we provide your personal information to service providers including providers of hosting, cloud, analytics, content delivery, support and safety monitoring, payment and transaction, and other technology services, for the purposes described above.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ How we may collect it: Through a third-party processor (ex., Apple App Store, Google Play Store, or Stripe).” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ How we may disclose it: To our contracted service providers; in connection with business transfers, and for legal purposes.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ For legal purposes: To (i) comply with laws or to respond to lawful requests and legal process, (ii) protect the rights and property of xAI and our agents, customers, and others, including to enforce our agreements, policies, and terms of service, (iii) to protect against legal liability, or (iv) to protect the personal safety of xAI, its customers, or any person.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Our Service may contain links to external websites or social media platforms that are not operated by us. Third-party websites and services have their own terms and conditions and privacy policies, and you should read these carefully before you submit any personal information to them.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Connecting to third-party services. Certain features of the Service may facilitate your ability to connect to a third-party service, such as X or other companies. If you select a feature that involves sending your User Content to, or accessing your User Content hosted on, such a third-party service, you are instructing and authorizing xAI to send your User Content out of the Service. Please review the policies of any third-party service providers for additional information about how they may use those materials.” | Captured 2026-08-17Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Payment Data: Where payment is required to access the Service (ex., if you are paying for a subscription), we may have a third-party process payment information, such as payment card information, and details regarding your transactions for us.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ For legal purposes: For example, to comply with our legal obligations and to protect the rights, privacy, safety, or property of our users, xAI, or third-parties. This may include detecting what country you are located in so we can comply with relevant legal obligations.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ How we may disclose it: To our contracted service providers; in connection with business transfers, for legal purposes; and to our related companies.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ How we may disclose it: To our contracted service providers; in connection with business transfers, for legal purposes; and to our related companies” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We must do so to comply with the law;” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To third-parties with which you interact or share information: Certain features may allow you to share information with third-parties, such as through the X platform. Information you share with third-parties is governed by that third-party’s terms and policies.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ How we may disclose it: To our contracted service providers; in connection with business transfers, for legal purposes; to our related companies; and to third-parties with which you interact or share information.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In connection with business transfers: In connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. If required by applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third-party.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ How we may collect it: Public X posts are provided by X and internet search data is provided by internet search providers.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Connecting to third-party services. Certain features of the Service may facilitate your ability to connect to a third-party service, such as X or other companies. If you select a feature that involves sending your User Content to such a third-party service, you are instructing and authorizing xAI to send your User Content out of the Service. Please review the policies of any third-party service providers for additional information about how they may use those materials.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To our related companies: To our related companies to the extent such sharing is necessary to fulfill a request you have submitted via our Service or for customer management, customer support, technical operations, or the purposes described above.” | Captured 2026-06-10Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “Fees; Payments; Cancellation. If you purchase any aspect of the Service, you must provide complete and accurate billing information, including a valid payment method. For paid subscriptions, we will automatically charge your payment method on each periodic renewal until you cancel. We will charge tax when required. If your payment is not successful, we may downgrade your account or suspend your access to the Service until payment is received. You can cancel your paid subscription at any time; however, payments already made are non-refundable, except where required by law. For questions regarding payments or cancellation, please contact [support@x.ai](mailto:support@x.ai).” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “- EST Right of Withdrawal. As a European Consumer, you have the right to close your account and withdraw from this contract within 14 days of entering into the contract. To exercise your right of withdrawal, you must inform us of your decision to withdraw from this contract by an unequivocal statement sent to [support@x.ai](mailto:support@x.ai). You may use the Model Withdrawal Form below, but it is not obligatory.” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “Business Domains. If you use an email address associated with your employer or other organization, your account may be linked to that organization’s Grok Enterprise subscription. In such cases, the organization’s administrator may access, monitor and control your account in accordance with xAI’s [Enterprise Terms of Service](https://x.ai/legal/terms-of-service-enterprise).” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “- EST Consumer Guarantee. For European Consumers, the applicable European consumer laws provide you with a guarantee covering the Service. Questions regarding the Service can be directed to [support@x.ai](mailto:support@x.ai).” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “Price changes. We may adjust subscription prices periodically. If prices increase, we will provide 30 days' notice, and the new price will apply at your next renewal, allowing you to cancel if you disagree with the change.” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “No refund. Upon Service termination, you will not be entitled to any refund, except where required by law.” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “Beta Modes and Trial Features. In some cases, we may permit you to evaluate our Service for a limited time or with limited functionality, including beta, preview, or trial features. Use of our Service for evaluation purposes is for your personal, non-commercial use only. You may need to accept additional terms to use certain features of the Service.” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “- EST Withdrawal Form. If you wish to withdraw from the contract, send an email requesting withdrawal to [support@x.ai](mailto:support@x.ai) and include the following information: Full legal name, login/user name (e.g., email and/or X user name), residential address, date of order/subscription, date submitting withdrawal.” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “- Our [Enterprise Terms of Service](https://x.ai/legal/terms-of-service-enterprise) govern the use of our Services for developers and businesses, including xAI APIs and PromptIDE.” | Captured 2026-08-17Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “- EST Consequences of Exercising Right of Withdrawal. If you withdraw from this contract and you have signed up for a paid subscription, we will repay you for payments that we verify have already been received by us from you for the subscription term active at the time of your withdrawal notice, within 14 days from the day on which we received the notification of your withdrawal from this contract. For this repayment, we will use the same means of payment that you used for the original transaction, unless expressly agreed otherwise with you. Please note this does not include X Premium or X Premium+ account charges because that is not part of this Service. Please refer to the X Premium Terms of Use for further details of how to claim a refund for those charges.” | Captured 2026-08-17Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.