Provision record
RunPod · RunPod Privacy Policy · View original document ↗

US Not Adequate for GDPR Data Protection

High severity High confidence Explicit document language Common · 267 of 352 platforms

Key Facts

Is the US the subject of an adequacy decision under the GDPR?
RunPod discloses that the US is not the subject of an adequacy decision under the GDPR, meaning the US legal regime is not considered by relevant European bodies to provide an adequate level of protection for personal information.
Stay ahead of the changes
Track RunPod and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what RunPod's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This disclosure signals to European users that transfers of their personal information to the US occur without the baseline protection that an adequacy decision would provide under the GDPR.

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 1499 other provisions on other platforms.

Consumer impact (what this means for users)

RunPod informs you that the US legal regime is not considered by relevant European bodies to adequately protect personal information under GDPR standards.

How other platforms handle this

Glassdoor Medium

Glassdoor complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

Plaid Medium

The jurisdiction and venue for actions related to these Terms will be the state and United States federal courts located in San Francisco, California and both Parties submit to the personal jurisdiction of such courts

Google Cloud Medium

the data controller responsible for Service Data we collect for Google Workspace and Google Workspace for Education is Google LLC, and the data controller responsible for Service Data we collect for Google Cloud Platform is Cloud Brasil Computação e Serviços de Dados Ltda.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
the US is not the subject of an 'adequacy decision' under the GDPR – basically, this means that the U.S. legal regime is not considered by relevant European bodies to provide an adequate level of protection for personal information...

Excerpt from RunPod's Privacy Policy

Provision details

Document information
Document
RunPod Privacy Policy
Entity
RunPod
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-069398
Document ID
CA-D-00652
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0c0dcb1e01be2cb2e4dea43a89b75099145bebdff905af66b2b8a8590f345027
Analysis generated
July 9, 2026 09:35 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: RunPod
Document: RunPod Privacy Policy
Record ID: CA-P-069398
Captured: 2026-07-09 09:35:07 UTC
SHA-256: 0c0dcb1e01be2cb2…
URL: https://conductatlas.com/platform/runpod/runpod-privacy-policy/provision/CA-P-069398/us-not-adequate-for-gdpr-data-protection/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does RunPod's US Not Adequate for GDPR Data Protection clause do?

This disclosure signals to European users that transfers of their personal information to the US occur without the baseline protection that an adequacy decision would provide under the GDPR.

How does this clause affect you?

RunPod informs you that the US legal regime is not considered by relevant European bodies to adequately protect personal information under GDPR standards.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.

Is ConductAtlas affiliated with RunPod?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by RunPod.