This provision directs subscribers to the Duo Privacy Data Sheet for details on how Duo processes customer data, incorporating that document as an additional reference instrument alongside the Cisco Privacy Statement.
This analysis describes what Duo Security's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The Duo Privacy Data Sheet is identified as the operative document for understanding Duo-specific data processing practices, and compliance assessments of Duo deployments require review of that document in addition to the Cisco General Terms and Cisco Privacy Statement.
Interpretive note: The operative data processing details depend entirely on the content of the externally referenced Duo Privacy Data Sheet, which is not reproduced on this page.
The agreement directs subscribers seeking information about how their data is processed by Duo to a separate Duo Privacy Data Sheet document. The data types, processing purposes, retention practices, and data subject rights specific to Duo services are disclosed in that instrument rather than in this terms page.
Cross-platform context
See how other platforms handle Duo Privacy Data Sheet Reference and similar clauses.
Compare across platforms →"For additional details on how Duo processes customer data, please refer to the Duo Privacy Data Sheet.Excerpt from Duo Security's Duo Terms of Service
(1) REGULATORY LANDSCAPE: The reference to a Duo-specific Privacy Data Sheet is particularly relevant under GDPR Article 28 processor obligations and CCPA service provider disclosure requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The Duo Privacy Data Sheet is identified as the operative document for understanding Duo-specific data processing practices, and compliance assessments of Duo deployments require review of that document in addition to the Cisco General Terms and Cisco Privacy Statement.
The agreement directs subscribers seeking information about how their data is processed by Duo to a separate Duo Privacy Data Sheet document. The data types, processing purposes, retention practices, and data subject rights specific to Duo services are disclosed in that instrument rather than in this terms page.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Duo Security.