Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Cerebras Systems Inc.'s privacy practices for personal data collection, use, and sharing related to website visitors and users of its AI and cloud services. The policy authorizes collection of names, email addresses, business payment information, device data, and browsing activity, and permits combination of directly provided information with data obtained from third-party sources including LinkedIn and public databases. The policy permits data sharing with affiliates, business partners, and successor entities in corporate transactions, while establishing that Cerebras does not retain AI inputs and outputs after service delivery.
This document is Cerebras Systems Inc.'s Privacy Policy, effective August 27, 2024, governing the collection, storage, use, and disclosure of Personal Data from website visitors and service users, with a stated legal basis of contractual performance, legitimate interests, legal compliance, and user consent. The policy states that Cerebras collects identifiers, business payment information, transaction data, device and usage data, and inferences drawn from these categories; the terms authorize combination of directly collected data with information from third-party sources including LinkedIn, Facebook, Twitter, and public databases, and permit disclosure to service providers, affiliates, business partners, and successors in the event of a merger or acquisition. Notably, the policy states that inputs and outputs from training, inference, and chatbot services are not retained, which represents a user-favorable operational commitment, though the document does not specify technical enforcement mechanisms or audit procedures for this claim; the policy also asserts that Cerebras disclaims obligations and liability for personal data users may include in service inputs, which may have limited enforceability depending on jurisdiction and applicable data protection law. The policy explicitly acknowledges California residents' rights under the CCPA and CPRA, including the right to know, delete, correct, and opt out of sale or sharing of personal data, and references compliance obligations under applicable privacy laws more broadly; EU and UK users are not addressed with GDPR-specific mechanisms such as data transfer safeguards, a legal basis schedule, or a Data Protection Officer contact, which may create compliance gaps for operators serving those jurisdictions.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trialMonitoring
Cerebras has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle Disclaimer of Responsibility for User Inputs Containing Third-Party Data and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.