| Before | After | ||
|---|---|---|---|
| 3 | Perplexity Data Processing Addendum Legal overview Platform User Terms Enterprise & Developer Terms Policies & Guidelines Privacy & Data Protection Perplexity Data Processing Addendum Perplexity Privacy Notice Sub-Processor Notification Subscription Third-Party Models & Terms Last updated: July 8th, 2025 This Data Processing Addendum (“DPA”) forms part of and is incorporated into certain terms of service and other agreements that make express reference to it between Perplexity AI, Inc. | 3 | Perplexity Data Processing Addendum Legal overview Platform User Terms Enterprise & Developer Terms Policies & Guidelines Privacy & Data Protection Perplexity Data Processing Addendum Perplexity Privacy Notice Sub-Processor Notification Subscription Third-Party Models & Terms We’ve made a few updates to keep our subprocessor information easy to find and we’ve clarified how you’ll hear about additions, either through an in-product notification or by email. |
| 4 | (“Perplexity”) and business customers (“Customer”), including without limitation the Perplexity Pro for Enterprise Terms of Service and the Perplexity API Terms of Service , governing Customer’s use of Perplexity’s services (the “Services”, and such relevant terms of service or other agreement, the “Agreement”). | 4 | We encourage you to review and stay informed about how we operate and treat your data. |
| 5 | Last Updated: August 13, 2026 This Data Processing Addendum (“DPA”) forms part of and is incorporated into any terms of service or other agreement between Perplexity AI, Inc. | ||
| 6 | (“Perplexity”) and a business customer (“Customer”) that expressly references it (each such agreement, as updated from time to time, an “Agreement”), governing Customer’s use of Perplexity’s services (the “Services”). | ||
| 7 | For purposes of this DPA, “Services” means any Perplexity products, features, APIs, tools, or other offerings made available to Customer under the Agreement, including any future products, features, or updates that are governed by terms that incorporate this DPA by reference. | ||
| 8 | Certain Services (including but not limited to the Embeddings API and Perplexity Search) may operate under data postures that differ from this DPA, and with respect to those Services and the treatment of data processed through them, the applicable product-specific terms shall govern and control over this DPA. | ||
| 10 | Capitalized terms used but not defined in this DPA shall have the meanings given in the Perplexity Pro for Enterprise Terms and Conditions. | 14 | Capitalized terms used but not defined in this DPA shall have the meanings given in the Agreement. |
| 11 | All other capitalized terms in this DPA not otherwise defined in the Agreement shall have the corresponding meanings given to them in Privacy Laws. “ Controller to Processor Clauses ” means (i) in respect of transfers of Personal Data subject to the GDPR, the standard contractual clauses for the transfer of Personal Data to third countries set out in Commission Decision 2021/914 of 4 June 2021, specifically including Module 2 (Controller to Processor) (“EU SCCs”); and (ii) in respect of transfers of Personal Data subject to the UK GDPR, the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses (version B.1.0) issued by the UK Information Commissioner (“UK Addendum”), in each case as amended, updated or replaced from time to time. “ EU/UK Privacy Laws ” means, as applicable: (i) the General Data Protection Regulation 2016/679 (the “GDPR”); (ii) the Privacy and Electronic Communications Directive 2002/58/EC; (iii) the UK Data Protection Act 2018, the UK General Data Protection Regulation as defined by the UK Data Protection Act 2018 as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019 (together with the UK Data Protection Act 2018, the “UK GDPR”), and the Privacy and Electronic Communications Regulations 2003; and (iv) any relevant law, directive, order, rule, regulation or other binding instrument which implements any of the above, in each case, as applicable and in force from time to time, and as amended, consolidated, re-enacted or replaced from time to time. “ Personal Data ” means any information that Perplexity processes on behalf of Customer to provide the Services that is defined as “personal data,” “personal information” or “personally identifiable information” under any Privacy Law. “ Privacy Laws ” means, as applicable, EU/UK Privacy Laws, US Privacy Laws and any similar law of any other jurisdiction which relates to data protection, privacy or the use of Personal Data and requires Controllers and Processors to agree to specific contractual commitments regarding the processing of Personal Data, in each case, as applicable and in force from time to time, and as amended, consolidated, re-enacted or replaced from time to time. “ Processor to Processor Clauses ” means (i) in respect of transfers of Personal Data subject to the GDPR, the standard contractual clauses for the transfer of personal data to third countries set out in Commission Decision 2021/914 of 4 June 2021, specifically including Module 3 (Processor to Processor); and (ii) in respect of transfers of Personal Data subject to the UK GDPR, the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses (version B.1.0) issued by the UK Information Commissioner, in each case as amended, updated or replaced from time to time. “ Third Country ” means any country or territory outside of the scope of the data protection laws of the European Economic Area or the UK, as relevant, excluding countries or territories approved as providing adequate protection for Personal Data by the relevant competent authority from time to time. “ US Privacy Laws ” means, as applicable, the California Consumer Privacy Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, any similar law of any other state related to the processing of Personal Data, and any regulations promulgated under any of the foregoing, in each case, as applicable and in force from time to time, and as amended, consolidated, re-enacted or replaced from time to time. | 15 | All other capitalized terms in this DPA not otherwise defined in the Agreement shall have the corresponding meanings given to them in Privacy Laws. a. “ Controller to Processor Clauses ” means (i) in respect of transfers of Personal Data subject to the GDPR, the standard contractual clauses for the transfer of Personal Data to third countries set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021, specifically including Module 2 (Controller to Processor) (“EU SCCs”); and (ii) in respect of transfers of Personal Data subject to the UK GDPR, the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses (version B.1.0) issued by the UK Information Commissioner (“UK Addendum”), in each case as amended, updated or replaced from time to time. b. “ EU/UK Privacy Laws ” means, as applicable: (i) the General Data Protection Regulation 2016/679 (the “GDPR”); (ii) the Privacy and Electronic Communications Directive 2002/58/EC; (iii) the UK Data Protection Act 2018 (“UK DPA 2018”), the UK General Data Protection Regulation as defined by the UK DPA 2018 as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019 (together with the UK DPA 2018, the “UK GDPR”), and the Privacy and Electronic Communications Regulations 2003; and (iv) any relevant law, directive, order, rule, regulation or other binding instrument which implements any of the above, in each case, as applicable and in force from time to time, and as amended, consolidated, re-enacted or replaced from time to time. c. “ Personal Data ” means any information that Perplexity processes on behalf of Customer to provide the Services that is defined as “personal data,” “personal information” or “personally identifiable information” under any Privacy Law. d. “ Privacy Laws ” means, as applicable, EU/UK Privacy Laws (including GDPR), US Privacy Laws (including CCPA) and any similar applicable law of any other jurisdiction which relates to data protection, privacy or the use of Personal Data and requires Controllers and Processors to agree to specific contractual commitments regarding the processing of Personal Data, in each case, as applicable and in force from time to time, and as amended, consolidated, re-enacted or replaced from time to time. e. “ Processor to Processor Clauses ” means (i) in respect of transfers of Personal Data subject to the GDPR, the standard contractual clauses for the transfer of personal data to third countries set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021, specifically including Module 3 (Processor to Processor); and (ii) in respect of transfers of Personal Data subject to the UK GDPR, the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses (version B.1.0) issued by the UK Information Commissioner, in each case as amended, updated or replaced from time to time. f. “ Third Country ” means (i) in relation to Personal Data transfers subject to the GDPR, any country or territory outside of the scope of the data protection laws of the European Economic Area excluding countries or territories approved as providing adequate protection for Personal Data by the European Commission from time to time; (ii) in relation to Personal Data transfers subject to the UK GDPR, any country or territory outside of the scope of the data protection laws of the UK excluding countries or territories approved as providing adequate protection for Personal Data by the relevant competent authority of the UK from time to time; and (iii) in relation to Personal Data transfers subject to any other Privacy Laws, any country or territory other than those approved as providing adequate protection for Personal Data by the relevant competent authority from time to time. g. “ US Privacy Laws ” means, as applicable, the California Consumer Privacy Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, any similar law of any other state related to the processing of Personal Data, and any regulations promulgated under any of the foregoing, in each case, as applicable and in force from time to time, and as amended, consolidated, re-enacted or replaced from time to time. h. |
| 12 | The terms “ Business ,” “ Controller ,” “ Processor ,” “ Sell ,” “ Service Provider ,” and “ Share ” shall have the meaning given to them under applicable Privacy Laws. | 16 | The terms “ Business ,” “ Controller ,” “ Data Subject ,” “ Processor ,” “ Process ,” “ Sell ,” “ Service Provider ,” and “ Share ” shall have the meaning given to them under applicable Privacy Laws. |
| 15 | Customer Obligations: Customer shall comply with all Privacy Laws in providing Personal Data to Perplexity in connection with its use of the Services, including the use of any integrations with the Services. | 19 | Customer Obligations: Customer shall comply with all applicable Privacy Laws in providing Personal Data to Perplexity in connection with its use of the Services, including the use of any integrations with the Services. |
| 18 | Customer shall notify Perplexity without undue delay if Customer makes a determination that the processing of Personal Data under the Agreement does not or will not comply with Privacy Laws, in which case, Perplexity shall not be required to continue processing such Personal Data. | 22 | Customer shall notify Perplexity immediately if Customer makes a determination that the processing of Personal Data under the Agreement does not or will not comply with Privacy Laws, in which case, Perplexity shall not be required to continue processing such Personal Data. |
| 21 | In processing Personal Data under the Agreement, Perplexity shall: only process Personal Data on documented instructions from Customer, for the limited and specific purpose described in Annex 1, unless otherwise permitted to process such Personal Data by applicable Privacy Laws, and at all times in compliance with Privacy Laws and the terms of this DPA, providing the same level of privacy protection as is required by Privacy Laws; notify Customer promptly if it: (i) makes a determination that it can no longer comply with Customer’s instructions for the processing of Personal Data, its obligations under Privacy Laws or the terms of this DPA or (ii) believes that the instruction of Customer infringes applicable Privacy Laws; to the extent required by Privacy Laws, grant Customer the right to take reasonable and appropriate steps to help ensure that Perplexity uses the Personal Data in a manner consistent with Customer’s obligations under this DPA and Privacy Laws, and stop and remediate any unauthorized use of the Personal Data; and require that each employee or other person processing Personal Data is subject to an appropriate duty of confidentiality with respect to such Personal Data. | 25 | In processing Personal Data under the Agreement, Perplexity shall: a. only process Personal Data on documented instructions from Customer, for the limited and specific purpose described in Annex 1, unless otherwise permitted to process such Personal Data by applicable Privacy Laws, and at all times in compliance with Privacy Laws and the terms of this DPA, providing the same level of privacy protection as is required by Privacy Laws; b. notify Customer promptly if it: (i) makes a determination that it can no longer comply with Customer’s instructions for the processing of Personal Data, its obligations under Privacy Laws or the terms of this DPA or (ii) believes that the instruction of Customer infringes applicable Privacy Laws; c. to the extent required by Privacy Laws, grant Customer the right to take reasonable and appropriate steps to help ensure that Perplexity uses the Personal Data in a manner consistent with Customer’s obligations under this DPA and Privacy Laws, and stop and remediate any unauthorized use of the Personal Data; and d. require that each employee or other person processing Personal Data is subject to an appropriate duty of confidentiality with respect to such Personal Data. |
| 25 | If Perplexity receives (i) any legally binding request for disclosure of Personal Data by a law enforcement authority; or (ii) any notice, inquiry or investigations with respect to the Personal Data from any supervisory authority/regulator (or similar); or (iii) any complaint or request from a data subject, in each case related to Perplexity’s processing of Personal Data for on or behalf of the Customer under this DPA, then (to the extent permitted by law) Perplexity shall notify the Customer. | 29 | If Perplexity receives (i) any legally binding request for disclosure of Personal Data by a law enforcement authority; or (ii) any notice, inquiry or investigations with respect to the Personal Data from any supervisory authority/regulator (or similar); or (iii) any complaint or request from a data subject, in each case related to Perplexity’s processing of Personal Data for or on behalf of the Customer under this DPA, then (to the extent permitted by law) Perplexity shall notify the Customer. |
| 26 | Use of Subcontractors . | 30 | Use of Subcontractors . a. |
| 27 | Customer hereby grants Perplexity general written authorization to engage the subcontractors set out in Annex 2, subject to the requirements of this Section 6. | 31 | Customer hereby grants Perplexity general written authorization to engage the subcontractors set out at https://trust.perplexity.ai/subprocessors (“Trust Center Subprocessor List”), subject to the requirements of this Section 6. b. |
| 28 | If Perplexity appoints a new subcontractor or intends to make any changes concerning the addition or replacement of any subcontractor that is not a Model Provider (as defined below), it shall provide Customer with ten business days’ prior written notice (email sufficient), during which Customer can object to the appointment or replacement on reasonable and documented grounds related to the confidentiality or security of Personal Data or the subcontractor’s compliance with Privacy Laws (and if Customer does not so object, Perplexity may proceed with the appointment or replacement). | 32 | If Perplexity appoints a new subcontractor or intends to make any changes concerning the addition or replacement of any subcontractor that is not a Model Provider (as defined below), it shall provide Customer with ten business days’ prior notice, during which Customer can object to the appointment or replacement on reasonable and documented grounds related to the confidentiality or security of Personal Data or the subcontractor’s compliance with Privacy Laws (and if Customer does not so object, Perplexity may proceed with the appointment or replacement). |
| 29 | If the Customer does object within five days, the Customer and Perplexity shall work together in good faith to agree upon a resolution to the objection (e.g. restricting use of Personal Data or the Customer temporarily or permanently not using a particular aspect or feature of the Services). | 33 | Perplexity will provide notice of new or replacement subcontractors (other than Model Providers) by: (i) updating the Trust Center Subprocessor List and (ii) notifying Customer by in-app or in-product notification within the Services, by email, or by any combination of the foregoing, provided that, in the case of email notice, Customer has signed up for subprocessor notification alerts via the subscription mechanism then available on Perplexity’s legal or trust center website (currently at https://www.perplexity.ai/hub/legal/sub-processor-notification-subscription , or such other URL or mechanism as Perplexity may designate from time to time). |
| 30 | If despite those good faith discussions, a resolution cannot be found, then Customer (as its sole remedy) may terminate the Agreement, and receive a refund of any unused prepaid Fees (as defined in the Agreement). | 34 | If the Customer does object within five business days of receiving the notification, the Customer and Perplexity shall work together in good faith to agree upon a resolution to the objection (e.g. restricting use of Personal Data or the Customer temporarily or permanently not using a particular aspect or feature of the Services). |
| 31 | If Perplexity appoints a new subcontractor or intends to make any changes concerning the addition or replacement of any subcontractor that provides large language models or other generative artificial intelligence models (a “Model Provider”), Perplexity will notify Customer (email sufficient) and will update the list of “Third-Party Providers” set forth at www.perplexity.ai/hub/legal/third-party-models (each of which is, for clarity, a Model Provider under this DPA). | 35 | If despite those good faith discussions, a resolution cannot be found, then Customer (as its sole remedy) may terminate the Agreement, and receive a refund of any prepaid but unused fees under the Agreement. c. |
| 32 | If Customer objects to the appointment or replacement, Customer’s sole recourse is to (and Customer must) cease all use of the relevant Third-Party Model via the Services (which, for clarity, Customer may do at any time after the appointment or replacement). | 36 | If Perplexity appoints a new subcontractor or intends to make any changes concerning the addition or replacement of any subcontractor that provides large language models or other generative artificial intelligence models (a “Model Provider”), Perplexity will notify Customer (email or in-app or in-product notification sufficient) and will update the list of “Third-Party Providers” set forth at https://www.perplexity.ai/hub/legal/third-party-models (each of which is, for clarity, a Model Provider under this DPA). |
| 33 | Perplexity shall engage subcontractors only pursuant to a written agreement that contains obligations on the subcontractor which are no less onerous on the relevant subcontractor than the obligations on Perplexity under this DPA. | 37 | If Customer objects to the appointment or replacement, Customer’s sole recourse is to cease all use of the relevant Third-Party Model via the Services (which, for clarity, Customer may do at any time after the appointment or replacement). d. |
| 34 | In the event Perplexity engages a subcontractor to carry out specific processing activities on behalf of Customer pursuant to EU/UK Privacy Laws, where that subcontractor fails to fulfil its obligations, Perplexity shall remain fully liable under applicable EU/UK Privacy Laws to Customer for the performance of that subcontractor’s obligations. | 38 | Perplexity shall engage subcontractors only pursuant to a written agreement that contains obligations on the subcontractor which are no less onerous on the relevant subcontractor than the obligations on Perplexity under this DPA. e. |
| 39 | In the event Perplexity engages a subprocessor to carry out specific processing activities on behalf of Customer pursuant to applicable Privacy Laws, Perplexity shall remain liable to Customer for that subprocessor’s performance of the data-protection obligations flowed down to it, to the same extent and subject to the same limitations as apply to Perplexity’s own performance under this DPA. | ||
| 36 | Perplexity shall, in relation to the processing of Personal Data and to enable Customer to comply with its obligations which arise as a result thereof, provide assistance to Customer by: notifying Customer of requests from individuals pursuant to their rights under Privacy Laws, including by providing, deleting or correcting the relevant Personal Data, or by enabling Customer to do the same, insofar as this is possible ; to the extent required by Privacy Laws, conducting data protection impact assessments and, if required, prior consultation with relevant competent authorities; and notifying Customer of any unauthorized or illegal access, destruction, use, loss, modification, or disclosure of Personal Data (“ Personal Data Breach ”) without undue delay after Perplexity becomes aware of such Personal Data Breach. | 41 | Perplexity shall, in relation to the processing of Personal Data and to enable Customer to comply with its obligations which arise as a result thereof, provide assistance to Customer by: a. notifying Customer of requests from individuals pursuant to their rights under Privacy Laws, including by providing, deleting or correcting the relevant Personal Data, or by enabling Customer to do the same, insofar as this is possible ; b. to the extent required by Privacy Laws, conducting data protection impact assessments and, if required, prior consultation with relevant competent authorities; and c. notifying Customer of any accidental, unauthorized or illegal access, destruction, use, loss, modification, or disclosure of Personal Data (“ Personal Data Breach ”) without undue delay after Perplexity becomes aware of such Personal Data Breach. |
| 38 | Perplexity shall, taking into account the state-of-the-art, the costs of implementation and the nature, scope, context and purpose of the processing, implement appropriate technical, physical and organizational measures designed to provide a level of security appropriate to the risk, as set out in Annex 3, or otherwise agreed and documented between Customer and Perplexity from time to time, and shall continue to comply with them during the term of the Agreement. | 43 | Perplexity shall, taking into account the state-of-the-art, the costs of implementation and the nature, scope, context and purpose of the processing, implement appropriate technical, physical and organizational measures in accordance with applicable Privacy Laws designed to provide a level of security appropriate to the risk, as set out at https://trust.perplexity.ai/ , or otherwise agreed and documented between Customer and Perplexity from time to time, and shall continue to comply with them during the term of the Agreement. |
| 43 | Customer shall be permitted to request such information and/or audit (to the extent required by Privacy Laws) no more than once every 12 months, upon 30 days’ advance written notice to Perplexity, and only after the Parties come to agreement on the scope of the audit and provided the auditor is bound by a duty of confidentiality. | 48 | Customer shall be permitted to request such information and/or audit (to the extent required by Privacy Laws) no more than once every 12 months, upon 30 days’ advance written notice to Perplexity, and only after the Parties come to a good faith agreement on the reasonable scope of the audit and provided the auditor is bound by a duty of confidentiality. |
| 44 | Notwithstanding the foregoing, in no event shall Vendor be required to give Customer access to information, facilities or systems to the extent doing so would cause Vendor to be in violation of confidentiality obligations owed to other customers or its legal obligations. | 49 | Notwithstanding the foregoing, in no event shall Perplexity be required to give Customer access to information, facilities or systems to the extent doing so would cause Perplexity to be in violation of confidentiality obligations owed to other customers or its legal obligations. |
| 48 | To the extent Perplexity processes Personal Data subject to EU/UK Privacy Laws in a Third Country, and it is acting as a data importer, Perplexity shall comply with the data importer’s obligations set out in the Controller to Processor Clauses or the Processor to Processor Clauses (as applicable), which are hereby incorporated into and form part of this DPA, and: for the purposes of Annex I or Part 1 (as relevant), (i) Customer is a controller or processor (as applicable) and Perplexity is a processor, and (ii) the parties, contact person’s details and processing details set out in the Agreement, this DPA and Annex 1 shall apply and the Start Date is the effective date of the Agreement; if applicable, for the purposes of Part 1 of the UK Addendum, the relevant Addendum EU SCCs (as such term is defined in the UK Addendum) are the EU SCCs as incorporated into this DPA by virtue of this Section 11; for the purposes of Annex II or Part 1 (as relevant), the technical and organizational security measures, and the technical and organizational measures taken by Perplexity to assist Customer, as each are set out in Annex 3, shall apply; if applicable, for the purposes of Annex III or Part 1 (as relevant), the list of authorized sub-contractors set out in Annex 2 shall apply; and if applicable, for the purposes of: (i) Clause 9, Option 2 (“General written authorization”) is deemed to be selected and reference is made to Section 6.b and 6.c with respect to notice periods; (ii) Clause 11(a), the optional wording in relation to independent dispute resolution is deemed to be included; (iii) Clause 13 and Annex I.C, the competent supervisory authority shall be the Irish regulator; (iv) Clauses 17 and 18, Option 1 is deemed to be selected and the governing law and the competent courts shall be Irish law and Irish courts, respectively; and (v) Part 1, Customer as exporter may terminate the UK Addendum pursuant to Section 19 of such UK Addendum. | 53 | To the extent Perplexity processes Personal Data subject to EU/UK Privacy Laws in a Third Country, and it is acting as a data importer, Perplexity shall comply with the data importer’s obligations set out in the Controller to Processor Clauses or the Processor to Processor Clauses (as applicable), which are hereby incorporated into and form part of this DPA, and: a. for the purposes of Annex I or Part 1 (as relevant), (i) Customer is a controller or processor (as applicable) and Perplexity is a processor, and (ii) the parties, contact person’s details and processing details set out in the Agreement, this DPA and Annex 1 shall apply and the Start Date is the effective date of the Agreement; b. if applicable, for the purposes of Part 1 of the UK Addendum, the relevant Addendum EU SCCs (as such term is defined in the UK Addendum) are the EU SCCs as incorporated into this DPA by virtue of this Section 11; c. for the purposes of Annex II or Part 1 (as relevant), the technical and organizational security measures, and the technical and organizational measures taken by Perplexity to assist Customer, as each are set out at https://trust.perplexity.ai/ , shall apply; d. if applicable, for the purposes of Annex III or Part 1 (as relevant), the list of authorized sub-contractors set out at https://trust.perplexity.ai/subprocessors shall apply; and e. if applicable, for the purposes of: (i) Clause 9, Option 2 (“General written authorization”) is deemed to be selected and reference is made to Section 6.b and 6.c with respect to notice periods; (ii) Clause 11(a), the optional wording in relation to independent dispute resolution is deemed to be included; (iii) Clause 13 and Annex I.C, the competent supervisory authority shall be the Irish Data Protection Commission; (iv) Clauses 17 and 18, Option 1 is deemed to be selected and the governing law and the competent courts shall be Irish law and Irish courts, respectively; and (v) Part 1, Customer as exporter may terminate the UK Addendum pursuant to Section 19 of such UK Addendum. |
| 56 | Liability . | ||
| 57 | Subject to Clause 12 of the EU SCCs and any applicable law that cannot be limited by contract, each party’s total aggregate liability arising out of or related to this DPA, the EU SCCs and the UK Addendum, whether in contract, tort or otherwise, is subject to the exclusions and limitations of liability set out in the Agreement, and any liability under this DPA, the EU SCCs or the UK Addendum counts toward and does not increase that limit. | ||
| 58 | Nothing in this Section limits either party’s liability to a data subject under Clause 12(b) or 12(c) of the EU SCCs, or any liability that cannot be limited under applicable data protection law. | ||
| 55 | Any personal information contained within Input will be stored until the later of (a) the date it is deleted by Customer through the Services’ interface and (b) the date that is thirty days after Perplexity is no longer providing the Services to Customer. | 63 | Any personal information contained within Input will be stored until the earlier of (a) the date it is deleted by Customer through the Services’ interface and (b) the date that is thirty days after Perplexity is no longer providing the Services to Customer. |
| 58 | The subject matter, nature and duration of processing carried out by any sub-processors authorized pursuant to Section 6 is as set out in this Annex 1 and in Annex 2. | 66 | The subject matter, nature and duration of processing carried out by any sub-processors authorized pursuant to Section 6 is as set out in this Annex 1 and at https://trust.perplexity.ai/subprocessors . |
| 59 | ANNEX 2 Authorized Subcontractors: Subcontractor Name Type of Service Location Amazon Web Services Cloud infrastructure Worldwide Each of the “Third-Party Providers” set forth at www.perplexity.ai/hub/legal/dpa LLMs Worldwide ANNEX 3 Security Measures: Perplexity maintains reasonable Security Measures in proportionate measure to the risk presented by the processing of Personal Data and otherwise relies on security measures implemented and maintained by subcontractors set out in Annex 2, including Amazon and Microsoft. | 67 | ANNEX 2 Authorized Subcontractors: As set forth at https://trust.perplexity.ai/subprocessors (“Trust Center Subprocessor List”). |
| 68 | ANNEX 3 Security Measures: Perplexity maintains the technical, physical and organizational security measures set forth at https://trust.perplexity.ai/ in proportionate measure to the risk presented by the processing of Personal Data and otherwise relies on security measures implemented and maintained by subcontractors as appropriate to the risk set out in Annex 2. | ||
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.