8 Total
0 High severity
6 Medium severity
2 Low severity
Summary

Amplitude's Terms of Service is the legal contract that governs business customers' use of Amplitude's analytics, session replay, and experimentation tools. The most important thing to understand is that while your behavioral and product usage data belongs to you, Amplitude separately collects and uses 'Operational Data' about how you use the platform for its own purposes, including improving its products, without this being governed by the same restrictions as your Customer Data. If you are a business evaluating Amplitude, review the separate Data Processing Agreement carefully, as it, not this ToS, contains the binding data protection commitments.

Technical / Legal Breakdown

This document governs access to and use of Amplitude's digital analytics platform, including product analytics, session replay, experimentation, and related services, and is structured as a binding contract between Amplitude, Inc. and the subscribing entity ('Customer'), with a separate Order Form or online checkout process establishing specific commercial terms. The agreement states that Customer Data remains the property of the Customer while granting Amplitude a limited license to process that data solely to provide the services, and the terms authorize Amplitude to collect and use 'Operational Data' (data about Customer's use of the platform) for its own business purposes including product improvement, which is a distinct data category from Customer Data. The terms impose a broad mutual indemnification structure, a mutual limitation of liability capping damages at fees paid in the preceding twelve months, and a disclaimer of consequential damages, with the Customer bearing significant responsibility for its own end users' compliance and for ensuring lawful collection of data sent to Amplitude; the agreement also permits Amplitude to modify pricing with notice and to suspend or terminate service for breach. The agreement engages GDPR and CCPA frameworks primarily through incorporation by reference to Amplitude's Data Processing Agreement and Privacy Policy, and the treatment of Operational Data for Amplitude's own purposes may warrant evaluation under GDPR's data minimization and purpose limitation principles, as well as CCPA's definitions of sale and sharing. Compliance teams should note that the DPA is a separate document whose terms govern data processing obligations, meaning the ToS alone does not fully capture the data protection framework, and that Amplitude's role as a data processor versus independent controller with respect to Operational Data creates a material distinction that should be assessed in any vendor due diligence exercise.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
Medium — 6 provisions
Low — 2 provisions

Monitoring

Amplitude has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Acceptable Use and Prohibited Activities and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
DSA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 06:38 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000701
Version ID CA-V-001337
SHA-256 05bd2cb72bea1dbd3878abf0e3caab8fa9cb6d38205bc75a445966eb3271d8d3
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans