Ramp's Privacy Policy was reorganized and reworded in an update detected on August 22, 2026, shifting from 'Personal Information' terminology to 'Personal Data' throughout. The policy's section structure was revised, a new section on Automated Decision-Making and Artificial Intelligence was introduced at section 10, and scope language was updated to reflect expanded service offerings including banking, accounts receivable, and Token Spend Management. The substantive obligations and data processing practices remain similar, but the policy's structural organization and terminology changed materially.
Business customers and end users: Ramp must now disclose how it uses automated systems and AI to make or support decisions about you.
Business customers: The privacy policy now covers more Ramp products and services, requiring transparency about data handling for those additional offerings.
EU and UK residents: Policy language now more clearly maps to European data protection legal frameworks.
The updated policy retains core data processing practices but introduces formal disclosure of Automated Decision-Making and Artificial Intelligence procedures at section 10, reflects expanded service offerings including banking and accounts receivable functionality, and reorganizes policy sections for clarity. Terminology changed from 'Personal Information' to 'Personal Data' throughout to align with data protection regulatory conventions. The substantive rights and obligations for users remain operationally similar, though the explicit AI and automated decision-making disclosure creates new transparency expectations.
→ Review section 10 (Automated Decision-Making and Artificial Intelligence) to understand how Ramp uses AI and automated systems to support decisions affecting your account.
→ If your Company uses newly added services (banking, accounts receivable), confirm your Company has reviewed the expanded scope and approved Ramp's handling of data for those services.
New section added establishing transparency obligations regarding AI and automated decision-making processes used by Ramp.
Revised to explicitly include banking, accounts receivable, Token Spend Management, and other expanded service offerings beyond corporate cards and expense management.
Policy-wide shift from 'Personal Information' to 'Personal Data' aligns with data protection regulatory conventions.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Ramp's privacy policy restructuring on August 22, 2026 reflects regulatory convergence toward 'Personal Data' terminology and explicit AI disclosure practices. The addition of an Automated Decision-Making and Artificial Intelligence section suggests alignment with GDPR Article …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-004558.
Ramp removed hyperlinks from two references to California privacy notices in their privacy policy. The previous version linked directly to …
Ramp's UK privacy notice was revised to clarify its role in regulated financial services. The previous language stated Ramp provides …
In an update detected on July 25, 2026, Ramp added a new 'Additional Information for UK Residents' section to its …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.