Audit rights are limited to once per 12 months, require 30 days advance written notice, require agreed scope, and are subject to auditor confidentiality obligations; access that would breach Perplexity's confidentiality obligations to other customers is excluded.
This analysis describes what Perplexity AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision limits the frequency and conditions under which Customer may exercise audit rights over Perplexity's DPA compliance, which is a standard but operationally significant constraint for compliance programs that require more frequent or broader audit access.
Interpretive note: Whether the 12-month frequency cap and agreed-scope precondition fully satisfy GDPR Article 28(3)(h) audit requirements is subject to regulatory interpretation and supervisory authority guidance.
Business customers using Perplexity services are now governed by an updated DPA with two material operational changes. First, subprocessor disclosures have shifted from a static document attachment (Annex 2) to a live online list maintained at https://trust.perplexity.ai/subprocessors, with notifications of changes coming through in-product notification or email rather than through formal amendment. Second, certain Perplexity services (specifically Embeddings API and Perplexity Search) now operate under product-specific data postures and terms that control over the main DPA, meaning the data handling for those services may differ from the baseline agreement. Business customers should review the Trust Center list regularly and check for in-product notifications regarding subprocessor changes, as the updated terms no longer require static amendment cycles.
View change record →Under this clause, the agreement limits formal audit requests to once per 12-month period, with 30 days advance notice, agreed scope, and auditor confidentiality as preconditions, and excludes access to information that would breach Perplexity's obligations to other customers.
Cross-platform context
See how other platforms handle Audit Rights Limitation and similar clauses.
Compare across platforms →"Customer shall be permitted to request such information and/or audit (to the extent required by Privacy Laws) no more than once every 12 months, upon 30 days' advance written notice to Perplexity, and only after the Parties come to agreement on the scope of the audit and provided the auditor is bound by a duty of confidentiality. Notwithstanding the foregoing, in no event shall Vendor be required to give Customer access to information, facilities or systems to the extent doing so would cause Vendor to be in violation of confidentiality obligations owed to other customers or its legal obligations.Excerpt from Perplexity AI's Perplexity Data Processing Addendum
REGULATORY LANDSCAPE: This provision engages GDPR Article 28(3)(h), which requires processor agreements to make available to the controller all information necessary to demonstrate compliance and allow for and contribute to audits.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision limits the frequency and conditions under which Customer may exercise audit rights over Perplexity's DPA compliance, which is a standard but operationally significant constraint for compliance programs that require more frequent or broader audit access.
Under this clause, the agreement limits formal audit requests to once per 12-month period, with 30 days advance notice, agreed scope, and auditor confidentiality as preconditions, and excludes access to information that would breach Perplexity's obligations to other customers.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Perplexity AI.