Provision record
Databricks · Databricks Security Practices · View original document ↗

Third-Party Penetration Test Report Publicly Shared

High confidence Common · 267 of 343 platforms

Key Facts · in the document’s own words

What does Databricks publicly share in its due diligence package?
“we publicly share our platform-wide third-party test report in our due diligence package.”
Version CA-V-006772, captured Sept. 11, 2026 · live source ↗
Our reading, not the document’s words
Databricks publicly shares its platform-wide third-party penetration test report in its due diligence package.
Stay ahead of the changes
Track Databricks and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Databricks's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

Public availability of the third-party test report allows customers and prospects to review independent security findings without a separate request or NDA.

Consumer impact (what this means for users)

Generated by a model from the captured document; not read by a person

You can access Databricks's platform-wide third-party penetration test report through its publicly available due diligence package.

How other platforms handle this

Ford

If you live in Connecticut, Minnesota, Oregon, or Rhode Island, you have the right to a list of third parties to which we disclosed Personal Data.

Smartsheet

Customer will promptly notify Smartsheet of any known unauthorized access to or use of Smartsheet Properties.

Hilton

California consumers also may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
we publicly share our platform-wide third-party test report in our due diligence package.

Excerpt from Databricks's Security Practices

Provision details

Document information
Document
Databricks Security Practices
Entity
Databricks
Tracking information
First captured by ConductAtlas
July 11, 2026
Text quoted from version
CA-V-006772, captured Sept. 11, 2026
Record ID
CA-P-074002
Document ID
CA-D-000839
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006772)
81d874e7d252a881c9fa08379252bb6c0e9e2246a7586f4ec7efd0b61bb67332
Analysis generated
July 12, 2026 16:02 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006772, captured Sept. 11, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: Databricks
Document: Databricks Security Practices
Record ID: CA-P-074002
Version: CA-V-006772
Captured: 2026-09-11 00:56:39 UTC
SHA-256: 81d874e7d252a881…
URL: https://conductatlas.com/platform/databricks/databricks-security-practices/provision/CA-P-074002/third-party-penetration-test-report-publicly-shared/
Accessed: Nov. 1, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Databricks's Third-Party Penetration Test Report Publicly Shared clause do?

Public availability of the third-party test report allows customers and prospects to review independent security findings without a separate request or NDA.

How does this clause affect you?

You can access Databricks's platform-wide third-party penetration test report through its publicly available due diligence package.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.

Is ConductAtlas affiliated with Databricks?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Databricks.