Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Vercel retains ownership of all traffic data, telemetry, logs, and usage statistics generated through service use, and may use this System Data for any business purpose at its sole discretion both during and after the term of the agreement. Disclosure of System Data to third parties is limited to aggregate or de-identified form.
This analysis describes what Vercel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision asserts perpetual ownership and unrestricted business use rights over System Data, which encompasses operational data generated through user activity on the platform including logs and telemetry. The post-term use authorization means these rights persist after account termination or agreement expiration.
Interpretive note: Whether System Data constitutes personal data under GDPR or personal information under CCPA depends on the granularity of logs and telemetry, which is not specified in the agreement.
The updated terms establish that users are legally responsible for configuring autonomous AI features and third-party tools, must monitor their settings and output, and are bound by the autonomous actions those tools take on their behalf. Users also bear the cost of any services those third-party tools consume through the Vercel platform. The terms state that Vercel is not responsible for loss, damage, or liability arising from AI or third-party tool actions. You can manage this responsibility by carefully configuring settings, permissions, and safeguards before enabling AI features or third-party integrations, and by establishing human review processes for AI-generated output.
View change record →The agreement establishes that Vercel owns all System Data generated through service use and may use it for any business purpose indefinitely, including after the agreement ends. Disclosure of System Data to third parties is limited to aggregate or de-identified form under these terms.
Cross-platform context
See how other platforms handle System Data Ownership and Use and similar clauses.
Compare across platforms →Monitoring
Vercel has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Vercel may collect, and retains all right, title and interest in and to, data or information created, analyzed, generated, or derived in connection with the provision, use, and performance of the Services and related systems and technologies, including traffic data, telemetry, logs generated from the Services, and usage statistics (collectively, "System Data," which in all cases excludes Account Information). Vercel may (during and after the term of this Agreement) (i) use System Data for any business purposes in its sole discretion, and (ii) disclose such data solely in aggregate or de-identified form in connection with its business.Excerpt from Vercel's Terms of Service
(1) REGULATORY LANDSCAPE: System Data as defined may include data that constitutes personal data under GDPR or personal information under CCPA depending on the granularity of logs and telemetry. If System Data can be linked to identifiable individuals, the perpetual and unrestricted use authorization may require evaluation under GDPR lawful basis and purpose limitation requirements. The post-term use authorization may interact with GDPR data retention principles. (2) GOVERNANCE EXPOSURE: Medium. The claim of perpetual ownership and unrestricted business use over operational data generated through service use is a material data governance consideration, particularly for organizations in regulated industries where data generated through platform activity may be subject to retention, deletion, or audit requirements under sector-specific regulations. (3) JURISDICTION FLAGS: EEA users face heightened exposure if System Data contains or can be re-linked to personal data, as unrestricted post-term business use may conflict with GDPR data subject rights including the right to erasure. California residents should evaluate whether telemetry or usage data qualifies as personal information under CCPA and whether the stated use purposes require disclosure. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations subject to data residency, retention, or audit requirements should assess whether Vercel's perpetual System Data use rights create compliance gaps. The exclusion of Account Information from System Data provides some boundary, but the definition of System Data is otherwise broad and encompasses all derived operational data. (5) COMPLIANCE CONSIDERATIONS: Data mapping exercises should document the categories of data that fall within the System Data definition and assess compatibility with organizational data governance policies. Legal teams in regulated industries (financial services, healthcare, government) should evaluate whether operational data generated through Vercel service use is subject to sector-specific restrictions that may conflict with this provision.
This provision asserts perpetual ownership and unrestricted business use rights over System Data, which encompasses operational data generated through user activity on the platform including logs and telemetry. The post-term use authorization means these rights persist after account termination or agreement expiration.
The agreement establishes that Vercel owns all System Data generated through service use and may use it for any business purpose indefinitely, including after the agreement ends. Disclosure of System Data to third parties is limited to aggregate or de-identified form under these terms.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Vercel.