“You agree not to process any medical information or sensitive personal data such as social security numbers, birth dates, passport information, bank account, and credit card numbers in using the Services.”
This analysis describes what Windsurf's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The prohibition shifts all risk of processing such data to the customer and establishes a usage boundary that, if violated, could trigger customer indemnification or termination obligations.
Interpretive note: The clause uses 'such as', indicating the listed data types are examples rather than an exhaustive list; the full scope of prohibited sensitive personal data may be broader than what is enumerated.
You are prohibited from inputting or processing medical information or sensitive personal data of the types listed when using Windsurf's Services.
How other platforms handle this
If you are a Client providing or submitting Job Advertisements, you further agree that such content will not contain any personally identifiable information.
An employee, operator or consultant to a sports governing body where such employee, operator or consultant is prohibited from participating in applicable Contests by such governing body.
Prohibited User Content includes...material that...contains restricted or password only access pages or hidden pages or images...or solicits...passwords or personal identifying information for commercial or unlawful purposes from other users...
"You agree not to process any medical information or sensitive personal data such as social security numbers, birth dates, passport information, bank account, and credit card numbers in using the Services.Excerpt from Windsurf's Cognition Platform Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The prohibition shifts all risk of processing such data to the customer and establishes a usage boundary that, if violated, could trigger customer indemnification or termination obligations.
You are prohibited from inputting or processing medical information or sensitive personal data of the types listed when using Windsurf's Services.
ConductAtlas has identified this type of provision across 238 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Windsurf.