Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement establishes that customers retain ownership of Customer Data and grants Harvey a non-exclusive, worldwide, royalty-free license to process Customer Data and Input only to the extent necessary to provide the Service, address technical problems, or comply with applicable law.
This analysis describes what Harvey AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision defines the scope of Harvey's processing rights over Customer Data and Input. The license is limited in purpose to service provision, technical problem resolution, and legal compliance, which constrains Harvey's authority to use Customer Data for purposes outside those categories.
Under this clause, customers retain all intellectual property rights in their Customer Data, and Harvey's license to process Customer Data is limited to the three stated purposes. The agreement does not authorize Harvey to use Customer Data for commercial development, AI training, or purposes outside service delivery.
Cross-platform context
See how other platforms handle Customer Data Ownership and Processing License and similar clauses.
Compare across platforms →Monitoring
Harvey AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"As between the parties, You retain all right, title and interest (including any and all intellectual property rights) in and to the Customer Data. You grant to Harvey and its Affiliates a non-exclusive, worldwide, royalty-free right to process the Customer Data and Your Input to the extent necessary to provide the Service to You or Your Affiliates, to prevent or address service or technical problems with the Service, or as may be required by applicable law.Excerpt from Harvey AI's Terms of Service
(1) REGULATORY LANDSCAPE: The data processing license engages GDPR Article 6 lawful basis and Article 28 processor obligations, which require that processing be documented and limited to controller-specified purposes. The DPA, which controls on data processing subject matter, governs the detailed mechanics of Customer Data processing and should be reviewed alongside this provision. CCPA requires that service providers process personal information only for the disclosed business purpose. (2) GOVERNANCE EXPOSURE: Low. The purpose limitation in the processing license is consistent with standard data processor obligations under GDPR and CCPA. The combination of this provision with the no-AI-training commitment in Section 11.9 provides layered contractual protection against unauthorized use of Customer Data. (3) JURISDICTION FLAGS: EEA and UK customers should confirm that the DPA includes the required GDPR Article 28 clauses and standard contractual clauses where applicable for international transfers. California customers should confirm that the processing purposes stated here align with the business purpose limitations required under CCPA for service providers. (4) CONTRACT AND VENDOR IMPLICATIONS: The worldwide scope of the processing license is standard for cloud-hosted SaaS services where infrastructure may be globally distributed, but customers with data residency requirements should confirm that the DPA and Security Addendum address applicable geographic restrictions. (5) COMPLIANCE CONSIDERATIONS: Data mapping exercises should confirm that all Customer Data processing activities by Harvey and its Subprocessors align with the three stated license purposes. Any processing by Subprocessors not covered by cloud storage should be assessed against the no-human-review restriction in Section 11.9.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision defines the scope of Harvey's processing rights over Customer Data and Input. The license is limited in purpose to service provision, technical problem resolution, and legal compliance, which constrains Harvey's authority to use Customer Data for purposes outside those categories.
Under this clause, customers retain all intellectual property rights in their Customer Data, and Harvey's license to process Customer Data is limited to the three stated purposes. The agreement does not authorize Harvey to use Customer Data for commercial development, AI training, or purposes outside service delivery.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Harvey AI.