Employer Data Disclosure for Enterprise Users

What it is

If you use Fireworks AI through a company account, Fireworks may share your usage information with your employer or with other people at your company.

Why it matters (compliance & governance perspective)

The clause establishes a data sharing pathway for enterprise users, permitting direct disclosure of account and usage information to the employer organization without separate user consent at the point of disclosure.

Consumer impact (what this means for users)

If you access Fireworks AI through your employer's account, your personal data and potentially your usage activity could be shared with your employer or colleagues, with the scope of that sharing not clearly defined in this provision.

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision may implicate workplace privacy laws that vary significantly by jurisdiction, including employee monitoring regulations in the EU under GDPR, which require a valid legal basis and typically impose limitations on employer access to employee communications and activity. In California, CPRA does not fully exempt employee data from its protections in all contexts. GOVERNANCE EXPOSURE: Medium. The provision uses broad language by authorizing disclosure to any representative of the employer or company, without specifying data categories shared, purposes, or limitations on the employer's subsequent use of that data. This breadth may create exposure if employee data is shared more broadly than employees reasonably expect or that applicable law permits. JURISDICTION FLAGS: EU and UK users have GDPR and UK GDPR protections that constrain employer access to employee data and require a lawful basis for any such processing. California employees retain partial CPRA rights. Multinational employers using Fireworks services should assess whether this disclosure mechanism aligns with employee privacy frameworks in each operating jurisdiction. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers procuring Fireworks services should review whether their internal employee privacy notices disclose this potential data sharing to employees, and should assess whether their DPAs with Fireworks appropriately define the scope and purpose of employer-directed data disclosure. The phrase 'including another representative of your employer' is not scope-limited, which may create liability if data is accessed by unauthorized internal parties. COMPLIANCE CONSIDERATIONS: HR and legal teams at enterprise customers should confirm that employee-facing privacy notices account for Fireworks AI data sharing with the employer. Data processing agreements should specify which employer representatives may receive employee data and for what stated purposes, in order to satisfy purpose limitation requirements under GDPR and similar frameworks.

Applicable agencies

Provision details

Other risks in this policy

• No AI Training on User Data Without Opt-In low
• Zero Data Retention for Open Model Outputs low
• Third-Party Data Broker Acquisition for Marketing medium
• Do Not Track Non-Response low
• California Privacy Rights medium
• Policy Modification and Notice Procedure medium