Provision registry

Every clause, classified and comparable

4425 classified provisions across 309 platforms, each clause typed by severity and platform. Browse, filter, and compare. Updated as policies change.

Stay ahead of the changes

Track specific clauses across platforms

Get provision-level alerts and cross-platform comparisons the moment a clause changes.

Filtering: Data sharing × Clear all
Plaid · Plaid Terms of Use
If the Privacy Shield has been invalidated or if Plaid does not maintain an active certification under the Privacy Shield, then any such data transfer will be conducted pursuant to the Standard Contractual Clauses
CA-P-051377 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
AWS Bedrock · AWS Service Terms
Customers who rely on SCCs as their legal transfer mechanism should confirm both conditions are met; if either condition is absent, the SCCs do not apply and an alternative transfer mechanism may be required.
CA-P-052297 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
LinkedIn · LinkedIn Ads Agreement
if and to the extent you do provide to LinkedIn any Personal Data in connection with the Ad Services, the sharing of which pursuant to the Agreement is regulated by the General Data Protection Regulation, you and LinkedIn will enter …
CA-P-063347 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Sourcegraph Cody · Sourcegraph Privacy Policy
Standard Contractual Clauses are a specific legal mechanism required to lawfully transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, establishing the legal basis for such transfers.
CA-P-065717 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Postman · Postman Privacy Policy
When we share information of customers regulated by the data protection laws of the European Economic Area, the UK, or Switzerland, we make use of standard contractual data protection clauses approved by those jurisdictions (Standard Contractual Clauses) or other appropriate …
CA-P-077326 First tracked Jul 19, 2026 Last seen Jul 19, 2026 Compare across platforms →
Palantir · Palantir Privacy Statement
The use of Standard Contractual Clauses is the named legal mechanism Palantir relies on to legitimise international personal data transfers from the EEA and UK, providing a defined level of contractual protection.
CA-P-069699 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Ticketmaster · Ticketmaster Privacy Policy
We will use contractual clauses, such as the Standard Contractual Clauses approved by the European Commission and other Regulatory Bodies where applicable.
CA-P-038310 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Stash · Stash Terms of Use
Users' Subscription Data is shared with unspecified third parties, and users must permit this as a condition of use, with sharing limited to verification and account-charging purposes.
CA-P-021191 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
State Farm · State Farm Privacy Policy
This establishes a categorical prohibition on the sale of customer information, which is a significant data protection commitment.
CA-P-053804 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Walgreens · Walgreens Privacy Policy
we may share the following categories of Personal Data with entities who are considered "third parties" as defined under State Privacy Laws...for purposes of "targeted advertising," which may constitute a "sale" of Personal Data...
CA-P-054265 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Steam · Steam Privacy Policy
The claim establishes that Steam User Account data is publicly accessible to anyone with a Steam ID query, not limited to authenticated partners or specific parties.
CA-P-028423 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Anthropic · Anthropic Sub-Processors
Billing data for paying and developer-tier users is shared with a third-party sub-processor in the United States, while free-tier and government users are not covered by this arrangement.
CA-P-066893 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Canva · Canva Privacy Policy
We will share student data with our third party service providers who have security, privacy, and data retention policies consistent with our policies and solely to the extent necessary for them to perform a business or technology support function for …
CA-P-068788 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Skillshare · Skillshare Terms of Service
Enrollment constitutes affirmative consent to personal data sharing with individual Teachers, meaning a user's personal data leaves Skillshare's direct control upon each class enrollment.
CA-P-033975 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Replit · Replit Privacy Policy
Student profiles created by teachers using Teams for Education and students' code are never publicly viewable or searchable, and students may not post content on publicly viewable forums.
CA-P-045379 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Pinecone · Pinecone Data Processing Addendum
Pinecone shall enter into a written agreement with its Subprocessors which includes data protection and security measures no less protective than the measures set forth in this DPA.
CA-P-062543 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Google Ads · Google Ads Data Processing Terms
Google will: (a) ensure via a written contract that the Subprocessor only accesses and uses Customer Personal Data to the extent required to perform the obligations subcontracted to it
CA-P-062810 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Greenhouse · Greenhouse Terms of Service
Greenhouse contractually extends data protection obligations to every subprocessor it uses, creating a chain of data protection agreements covering personal data processed downstream.
CA-P-066845 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
ADP · ADP Privacy Statement
The Subprocessor Contract shall impose similar data protection-related Processing terms on the Third Party Subprocessor that will be not less protective than those imposed on the ADP Contracting Entity by the Service Agreement...
CA-P-036775 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Unity · Unity Privacy Policy
Incorporation by reference means the list of sub-processors is contractually part of the DPA, making Unity's use of those third parties a binding element of the data processing agreement.
CA-P-064237 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Baseten · Baseten Terms of Service
Baseten will ensure that each Sub-Processor shall be bound by a written agreement that includes terms which offer at least a level of protection for Customer Personal Data substantially similar to those set out in this DPA...
CA-P-073838 First tracked Jul 11, 2026 Last seen Jul 11, 2026 Compare across platforms →
Zoom · Zoom Sub-Processors
By flowing down equivalent DPA obligations to subprocessors, Zoom extends its own data protection commitments through the subprocessing chain, rather than allowing a lower standard at the subprocessor level.
CA-P-067048 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Google Ads · Google Ads Data Processing Terms
When engaging any Subprocessor, Google will ensure via a written contract that if the processing of Customer Personal Data is subject to European Data Protection Legislation, the data protection obligations in these Data Processing Terms... are imposed on the Subprocessor.
CA-P-062837 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Segment · Segment Sub-Processors
Sub-processors are contractually required to meet data protection standards set by applicable law, not merely Segment's internal standards, meaning legal compliance obligations flow down through the sub-processing chain.
CA-P-067191 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Segment · Segment Sub-Processors
The written contract requirement—with the qualifier 'strict accordance'—means sub-processors cannot operate outside documented, binding terms, creating an enforceable framework for sub-processing conduct.
CA-P-067190 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Substack · Substack Privacy Policy
Subscribing to a Creator's publication on Substack results in the Creator receiving the subscriber's name and email address, transferring personal data to a third party outside Substack's direct control.
CA-P-028076 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Twilio · Twilio Privacy Notice
Where required by local law, we share Subscriber Records with local carriers or authorities solely to provide connectivity, maintaining the highest confidentiality for these records.
CA-P-033360 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Meta · Meta Platform Policy
ensure the Service Provider requires the Sub-Service Provider in writing to comply with the above requirements.
CA-P-018293 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Zoom · Zoom Sub-Processors
Suki may process the following data if the AI Clinical Notes feature is enabled: Customer Content and context
CA-P-067129 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Suno · Suno Terms of Service
Suno may preserve Content and your Voice Model and may also disclose Content and your Voice Model if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) …
CA-P-044814 First tracked Jul 10, 2026 Last seen Jul 10, 2026 Compare across platforms →
Stay ahead of the changes

Governance intelligence across platforms

Monitor specific governance provisions with regulatory mapping and audit-ready analysis.