Provision Registry

3805 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: High × Clear all
Mercury · Mercury Privacy Policy
The provision establishes the operational framework for data distribution necessary to Mercury's service delivery model, whereby core banking functions depend on controlled data sharing with specified categories of external service providers rather than retention within Mercury's systems alone.
CA-P-006599 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
Opting into research means your genetic information leaves Ancestry's systems and goes to third parties, even if under contract. Understanding what research purposes are covered and how partners are vetted is important for consumers sharing sensitive genetic data.
CA-P-009743 First tracked May 10, 2026 Last seen May 20, 2026 Compare across platforms →
Khan Academy · Khan Academy Privacy Policy
The clause establishes the scope of data sharing permitted under the privacy framework, identifying categories of recipients and purposes for which user information may be disclosed to external entities without separate user consent.
CA-P-002874 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Walmart · Walmart Privacy Notice
The disclosure that advertising and analytics partners may use shared data for their own purposes, rather than solely on Walmart's behalf, is operationally significant because it means data shared under this provision may not be restricted to service provider limitations under state privacy laws, and may instead qualify as a sale or sharing of personal information triggering opt-out rights.
CA-P-011076 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
high Data collection
X · X Privacy Policy
The clause establishes X's data collection infrastructure through third-party partnerships, enabling the service to incorporate external data sources into its user profiles and advertising systems without requiring direct data collection from users on those external platforms.
CA-P-000276 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Spotify · Spotify Privacy Policy
This clause establishes the operational mechanism by which third-party data inputs inform Spotify's ad targeting system. It clarifies that advertising partners may provide external signals about user interests, which Spotify incorporates into its ad selection and delivery process.
CA-P-002611 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
LinkedIn · LinkedIn Privacy Policy
The clause operationalizes LinkedIn's data collection model by explicitly authorizing the receipt of personal data from external business partners rather than solely from direct user interactions, thereby expanding the data sources that populate user profiles and LinkedIn's service operations.
CA-P-000647 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
OpenAI · Privacy Policy (ROW)
This provision establishes OpenAI's practice of sourcing training data from public internet content, which is a standard operational component of large language model development. The authorization applies across all Services without requirement for individual user consent to specific data collection instances.
CA-P-000045 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
LinkedIn · LinkedIn Privacy Policy
This provision establishes LinkedIn's operational data collection model by authorizing receipt of user information from external sources beyond direct user input. The sourcing mechanisms—including employer records, partner integrations, contact uploads, and public data—create multiple data input channels that inform user profiles and service functionality.
CA-P-002152 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
Paramount+ · Paramount+ Terms of Use
This clause establishes the operational framework for data collection and use across Paramount+'s advertising ecosystem. It defines the scope of tracking authorized during service use and specifies the business purposes—targeted advertising and analytics—that justify this data collection practice.
CA-P-003096 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Fitbit · Fitbit Privacy Policy
Once your health data leaves Fitbit and enters a third-party app's systems, it is governed by that app's privacy policy, which may permit uses you did not anticipate, including sale of your health data to data brokers.
CA-P-009040 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Plaid · Plaid Terms of Use
The clause establishes the scope of data recipients beyond the user and Plaid, including both user-directed third parties and Plaid's service provider network. This allocation of data sharing authority is foundational to Plaid's operational model as a financial data aggregation and connectivity platform.
CA-P-003485 First tracked Apr 27, 2026 Last seen Apr 27, 2026 Compare across platforms →
high Data sharing
Netflix · Netflix Privacy Statement
The clause establishes the scope of permissible third-party disclosures under Netflix's data handling practices, defining the categories of recipients rather than restricting disclosure to a narrow set of entities. This establishes the operational framework for how personal information flows within Netflix's business ecosystem.
CA-P-002623 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
Groq · Groq Privacy Policy
Your most sensitive personal data, including government ID documents and facial images, is handled by a company whose privacy practices are separate from Groq's policy commitments, creating a gap in the protections you might expect to apply.
CA-P-004213 First tracked Apr 30, 2026 Last seen May 22, 2026 Compare across platforms →
Uber · Uber Privacy Notice
The clause establishes the operational framework for cross-platform data sharing and audience analytics. It permits Uber to delegate data processing functions to external vendors who aggregate user behavior across multiple data sources to facilitate advertising operations.
CA-P-002307 First tracked Apr 9, 2026 Last seen Apr 9, 2026 Compare across platforms →
Stash · Stash Privacy Policy
The provision establishes the operational scope of third-party data sharing by permitting disclosure to specific categories of partners (market research firms and marketing partners) for defined purposes (analysis, aggregation, ad optimization) while maintaining a contractual prohibition against selling Personal Information.
CA-P-000528 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Uber · Uber Privacy Notice
The clause establishes a data sharing framework that permits transfer of driver personal information to multiple external platforms for commercial purposes beyond Uber's direct service delivery. This operationalizes Uber's data monetization model through partnered advertising and analytics functions.
CA-P-003993 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
Acorns · Acorns Privacy Policy
Sharing personal and financial data with marketing and advertising networks goes beyond what many consumers expect from a financial services app and may constitute a sale or sharing of personal information under the CPRA, triggering opt-out rights for California residents.
CA-P-007362 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
Webull · Webull Privacy Policy
This provision establishes the operational scope of data sharing practices and designates third-party recipients of user information. The availability of an opt-out mechanism creates a conditional authorization structure where data sharing occurs unless the user exercises the specified rights.
CA-P-003960 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
Ledger · Ledger Privacy Policy
The clause establishes the operational scope of data recipients beyond Ledger's direct control, affecting how user information flows through the company's business ecosystem and defining which external entities have access to usage patterns and account information.
CA-P-001464 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Apple Intelligence · Apple Private Cloud Compute Security Guide
Requests forwarded to third-party AI providers such as ChatGPT are not subject to PCC's privacy architecture, meaning the stateless computation, no privileged access, and non-targetability guarantees described elsewhere in this guide do not apply to those interactions.
CA-P-011938 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
AWS Bedrock · AWS Service Terms
The clause creates a bifurcated governance structure in which data processing for third-party models falls outside AWS's direct control and contractual scope, requiring users to separately evaluate and comply with each model provider's distinct terms, privacy policies, and data handling practices.
CA-P-008311 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
Anthropic · Anthropic Privacy Policy
The clause establishes the scope of data sources available for model training and specifies that Anthropic relies on third-party commercial datasets and user-generated content as training material alongside publicly available information, subject to user opt-out mechanisms for user-provided data.
CA-P-002129 First tracked Apr 4, 2026 Last seen Apr 4, 2026 Compare across platforms →
Pinterest · Pinterest Privacy Policy
This provision establishes the operational mechanism through which Pinterest receives user data from external sources beyond direct user interaction with the Pinterest platform. The clause specifies that third-party platforms are authorized to share user information with Pinterest as part of the account creation and login workflow.
CA-P-000693 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Disney+ · Disney+ Privacy Policy
The clause operationally separates data collection and privacy governance by source: Disney+ collects and processes data under its own policy terms, while third-party platforms operate under their own privacy frameworks. This distinction establishes that Disney+ privacy choices made elsewhere do not extend to data flows through Disney+'s own applications.
CA-P-003351 First tracked Apr 27, 2026 Last seen Apr 27, 2026 Compare across platforms →
Grindr · Grindr Privacy Policy
The provision establishes the operational scope of data sharing across the Grindr service ecosystem. By authorizing both indirect sharing with service providers and direct collection by third-party partners, the clause structures how user data flows through multiple entities involved in platform delivery and monetization.
CA-P-001411 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Paramount+ · Paramount+ Privacy Policy
The clause establishes the operational framework under which user activity data flows to external service providers beyond Paramount+'s direct control. This authorization determines the scope of third-party data access permitted under the agreement and defines the technical mechanisms through which data collection occurs.
CA-P-006261 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Liability limitation
Amazon · Amazon Conditions of Use
This provision allocates responsibility for third-party seller conduct and product quality to the individual sellers rather than to Amazon as the platform operator. It establishes the contractual basis for Amazon's limited liability regarding transactions between users and third-party merchants on the platform.
CA-P-002537 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
Mistral AI · Mistral AI Additional Product Terms
The agreement authorizes Customer Data to be transmitted to third-party services upon customer configuration, while fully disclaiming Mistral AI's liability for any resulting data loss, which shifts significant operational and legal risk to the customer.
CA-P-010586 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
high Liability limitation
MetaMask · MetaMask Terms of Use
The clause allocates responsibility for third-party integrations by establishing that MetaMask's duty of care does not extend to linked external services, limiting the scope of MetaMask's operational obligations to its own platform functionality.
CA-P-003663 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial