Provision record
Postman · Postman Privacy Policy · View original document ↗

Organization as Data Controller Override

High severity Explicit document language Common · 297 of 352 platforms
Stay ahead of the changes
Track Postman and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Postman's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Grubhub Medium

To the extent that the rules or terms of those promotions concerning the treatment of your personal information conflict with this Privacy Policy, the rules of those promotions will control.

Stripe Medium

If we rely on certain legal bases (such as "legal obligation" or "contractual necessity") and you do not provide us with your Personal Data, we may not be able to lawfully provide you services.

DoorDash Medium

By placing an order, you acknowledge and agree that, if the Merchant is responsible for the delivery of an order, the Merchant may use your Personal Information to facilitate the delivery of the order to you...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Where we provide the Services under contract with an organization (for example your employer), that organization controls the information processed and acts as the data controller...we operate as the data processor and the contract may require us to process the information pursuant to the organization's instructions instead of pursuant to this Policy.

Excerpt from Postman's Privacy Policy

Provision details

Document information
Document
Postman Privacy Policy
Entity
Postman
Tracking information
First captured by ConductAtlas
May 5, 2026
Text quoted from version
CA-V-005090, captured July 19, 2026
Record ID
CA-P-077246
Document ID
CA-D-000678
Evidence Provenance
Source URL
Wayback Machine
Extracted-text SHA-256 (version CA-V-005090)
08e2c9077f6a68467264c32c13c895d409b5e665061a5e9dcda0c6f67288c2aa
Analysis generated
September 28, 2026 22:31 UTC
Methodology
Evidence
✓ Excerpt found verbatim in version CA-V-005090 (checked Oct. 5, 2026)
Citation Record
Entity: Postman
Document: Postman Privacy Policy
Record ID: CA-P-077246
Version: CA-V-005090
Captured: 2026-07-19 21:25:17 UTC
SHA-256: 08e2c9077f6a6846…
URL: https://conductatlas.com/platform/postman/postman-privacy-policy/provision/CA-P-077246/organization-as-data-controller-override/
Accessed: Oct. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Postman's Organization as Data Controller Override clause do?

The clause states: “Where we provide the Services under contract with an organization (for example your employer), that organization controls the information processed and acts as the data controller...we operate as the data processor and the contract may require us to process the information pursuant to the organization's instructions instead of pursuant to …”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 297 platforms. See the full comparison.

Is ConductAtlas affiliated with Postman?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Postman.