Vercel AI updated its privacy policy on June 2, 2026 to establish a formal dispute resolution process through VeraSafe for Data Privacy Framework complaints and added explicit language around the right to restrict processing of personal information. Previously, the policy stated that Vercel would comply with guidance from EU, UK, and Swiss data protection authorities for unresolved complaints. The updated terms now direct users to submit complaints to VeraSafe, which will provide recourse free of charge, and introduce a new 'Right to Restriction' allowing users to request limits on processing or disclosure of personal information.
Consumers: You can ask Vercel to limit how it uses or shares your personal information in certain situations.
Consumers: If Vercel doesn't resolve your privacy complaint internally, you can file it with VeraSafe for free review.
The updated policy establishes a new mechanism for resolving privacy disputes related to Data Privacy Framework transfers. Users in the EU, UK, and EEA who have unresolved privacy complaints can now submit them to VeraSafe for independent review, which will be conducted free of charge. Additionally, the policy introduces an explicit Right to Restriction, permitting users to request that Vercel limit processing of their personal information or restrict further disclosures in certain instances, particularly for sensitive information. You can file a complaint with VeraSafe by submitting required information at https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/.
→ Review Vercel's privacy policy to understand what personal information is processed.
→ Submit a dispute to VeraSafe at https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/ if an internal complaint remains unresolved.
→ Contact privacy@vercel.com to request restriction of processing or disclosure of sensitive personal information.
Unresolved DPF complaints now route to VeraSafe for independent review and recourse at no cost to users.
Users may request Vercel restrict processing or disclosure of personal information, particularly sensitive data.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Vercel replaced its prior commitment to cooperate with EU, UK, and Swiss data protection authorities with a formal participation in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. This change operationalizes how unresolved DPF complaints …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002576.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.