AI21 shares your personal data with external companies that help run its business — like cloud hosts, analytics firms, and payment processors. These companies are supposed to use your data only for the agreed purpose, but AI21 also shares data with business partners for joint offerings.
Your personal data may be shared with an unspecified number of business partners beyond just technical service providers, and those partners may have independent rights to use your data — the policy does not name these partners or describe their data use.
Cross-platform context
See how other platforms handle Disclosure to Third Parties and Service Providers and similar clauses.
Compare across platforms →The inclusion of 'business partners for joint offerings' as a separate category from 'service providers' is significant — business partners may have independent data use rights beyond just processing on AI21's behalf, which could constitute data sharing or selling under CCPA.
(1) REGULATORY FRAMEWORK: GDPR Art. 28 requires written Data Processing Agreements with all processors; Art. 26 requires Joint Controller Agreements when business partners jointly determine processing purposes. CCPA/CPRA §1798.140 defines 'service providers' (restricted use) versus 'third parties' (potentially constituting 'sale' or 'sharing'). FTC Act Section 5 applies to deceptive disclosure practices regarding third-party sharing. GDPR Art. 13(1)(e) requires disclosure of categories of recipients at collection. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.