Provision Registry

3805 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: High × Clear all
high Intellectual property
Squarespace · Squarespace Terms of Service
This clause establishes Squarespace's operational authority to utilize user content across its service delivery, business activities, and related operations without additional compensation or per-use permission. The perpetual nature of the license means Squarespace retains these rights regardless of account status.
CA-P-004665 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
high Intellectual property
Whoop · Whoop Terms of Use
The clause establishes broad operational rights for the company to repurpose user content without geographic limitation or compensation, enabling use across multiple distribution channels and platforms without requiring additional user consent for each application.
CA-P-004634 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
high Intellectual property
ZipRecruiter · ZipRecruiter Terms of Use
The clause operationalizes ZipRecruiter's authority to incorporate user-submitted content into service delivery, marketing initiatives, and derivative uses without ongoing compensation or restrictions on territorial scope or duration.
CA-P-005797 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Microsoft · Microsoft Services Agreement (Legacy)
The clause establishes Microsoft's operational rights to incorporate user content into product development, service operations, and derivative applications without payment obligations or exclusivity restrictions, enabling broad internal utilization of submitted materials.
CA-P-002062 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
Replit · Replit Terms of Service
The clause establishes the scope of Replit's rights over user-submitted content, explicitly permitting the company to repurpose content for service improvement and to extend distribution rights to third parties. This provision defines the operational framework under which user content may be used beyond the immediate service platform.
CA-P-004275 First tracked Apr 30, 2026 Last seen Apr 30, 2026 Compare across platforms →
Dun & Bradstreet · D&B Terms of Use
The clause defines the permitted scope of data use and establishes that D&B retains control over downstream applications of its data. The restrictions limit commercial repackaging and derivative product development while requiring authorization for specific use cases including legal disclosure and credit/employment decision support.
CA-P-005389 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
high Indemnification
Character.AI · Character.ai Terms of Service
This indemnification clause is unusually broad, requiring users to cover all losses and expenses Character.AI incurs related to their use of the Services, including attorneys' fees, without any apparent cap or carve-out for situations where Character.AI is at fault.
CA-P-000797 First tracked Apr 3, 2026 Last seen May 22, 2026 Compare across platforms →
high Indemnification
FanDuel · FanDuel Terms of Use
The indemnification clause establishes a procedural allocation of legal and financial responsibility under which users assume defense costs and damages liability for claims connected to their service use, rather than FanDuel bearing those costs. This mechanism affects the operational relationship between the parties regarding claims origination from user conduct.
CA-P-006592 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Liability limitation
Binance.US · Binance.US Terms of Use
The indemnification clause establishes a cost-allocation mechanism that assigns to users the financial and legal burden of defending Binance.US against third-party claims connected to the user's conduct or platform use. This shifts defense costs and liability exposure from the platform operator to individual users.
CA-P-002745 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Character.AI · Character.ai Terms of Service
This indemnification clause allocates risk by establishing that users bear financial responsibility for losses Character.AI and its personnel may incur in connection with user activities on the platform. The clause extends to death-related claims, which expands the scope of user liability to potentially include fatal incidents connected to service use.
CA-P-005718 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Stripe · Stripe Terms of Service
The indemnification obligation establishes a mechanism by which Stripe transfers certain categories of financial risk to users, requiring users to cover Stripe's legal costs, settlements, and damages associated with specified user-caused events. This shifts liability exposure for enumerated loss categories from Stripe to the user.
CA-P-000753 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
high Liability limitation
Replit · Replit Terms of Service
This indemnification clause shifts responsibility to users for defending Replit against third-party claims related to user conduct or content. The obligation extends to legal and accounting costs, creating a direct cost mechanism for users when claims are brought against Replit in connection with user activity.
CA-P-004277 First tracked Apr 30, 2026 Last seen Apr 30, 2026 Compare across platforms →
Midjourney · Midjourney Terms of Service
The indemnification obligation allocates legal and financial risk to users for third-party claims connected to their service usage, establishing that users bear responsibility for defending the company against such claims and their associated costs.
CA-P-000681 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Stripe · Stripe Terms of Service
The indemnification obligation establishes that users bear financial and legal responsibility for defending Stripe against a broad class of claims related to user conduct, compliance failures, or third-party grievances connected to the user's account or service use.
CA-P-001886 First tracked Apr 4, 2026 Last seen Apr 27, 2026 Compare across platforms →
General Motors · GM Privacy Statement
The provision establishes the operational framework for continuous telematics data collection, which enables GM to gather behavioral and location information during vehicle use. This creates the institutional basis for data processing activities that the privacy statement details elsewhere regarding data use, sharing, and retention.
CA-P-004819 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Verizon · Verizon Privacy Policy
Your location and behavioral data is being aggregated and shared with outside companies for commercial purposes unless you opt out, which is a form of third-party data sharing with significant privacy implications.
CA-P-010483 First tracked May 11, 2026 Last seen May 20, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
This clause establishes the operational framework for data continuity during corporate transactions, ensuring genetic and health data classified as business assets remain accessible to successor entities. The provision addresses the status of personal information under standard business acquisition protocols rather than treating it as separately governed by user consent requirements.
CA-P-000901 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
high Privacy rights
Notion · Notion Terms of Service
The availability of a Business Associate Agreement is operationally significant for healthcare organizations and covered entities that need contractual assurances under HIPAA before using Notion to process protected health information.
CA-P-011709 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
high Content moderation
Notion · Notion Terms of Service
The BAA creates a formal compliance framework that obligates Notion to implement administrative, physical, and technical safeguards for PHI, establish breach notification procedures, permit audit and inspection rights for the covered entity, and ensure that any subcontractors also comply with HIPAA requirements. This provision is operationally significant because it establishes the legal basis under which healthcare organizations can lawfully use Notion's platform to store or process patient health information.
CA-P-006466 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Poshmark · Poshmark Privacy Policy
This provision extends the use of your personal data beyond Poshmark itself, allowing outside businesses to market directly to you based on information you provided to Poshmark, which may not match users' reasonable expectations.
CA-P-009111 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
The clause establishes the mechanism by which user data may be transferred outside the original entity's control during corporate restructuring events. This defines the scope of permissible data transfers beyond standard operational sharing and identifies the conditions under which data custodianship may change.
CA-P-006459 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
This clause operationalizes the user's ability to terminate participation in the service and Research program, while establishing that sample disposal is automated upon deletion. The irreversibility specification creates a procedural checkpoint regarding data and sample retention.
CA-P-008856 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
23andMe · 23andMe Privacy Statement
This provision is particularly significant given that 23andMe has publicly reported financial difficulties; it means your most sensitive personal data, your DNA, could be acquired and controlled by an entity you did not originally consent to share it with.
CA-P-011716 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Adobe · Adobe Terms of Use
Employees and students using Adobe through an institutional account have no independent privacy protections from their employer or school within that account, including for content created prior to the current terms.
CA-P-010081 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
Adobe · Adobe Terms of Use
This provision clarifies the division of control and responsibility between Adobe, the business account holder, and individual users within an organization. It establishes that business administrators have defined management rights over account content and user activity, which affects how organizations can enforce internal policies and compliance requirements.
CA-P-001062 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Unreal Engine · Epic Games Privacy Policy
The provision operationalizes Epic's compliance framework for child accounts by creating a technical and procedural structure that limits data collection scope and disables certain service features pending parental authorization. This mechanism establishes the conditions under which child accounts function within the Epic Services ecosystem and defines the data categories necessary for age verification and account administration.
CA-P-004479 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Unreal Engine · Epic Games Privacy Policy
The provision operationalizes age-based access controls by automatically limiting feature availability for child accounts, establishing a baseline privacy posture that requires affirmative parental authorization to modify. This mechanism ensures that certain features—specifically voice communication and paid transactions—do not activate for child users without explicit guardian consent.
CA-P-000629 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Unreal Engine · Epic Games Privacy Policy
This provision authorizes collection of persistent identifiers from users identified as children for purposes including analytics and personalization, which requires evaluation against COPPA's restrictions on data use for child-directed services and equivalent national youth privacy frameworks. The policy states that technical and organizational measures are in place to prevent use of Cabined Account identifiers for other purposes, but the breadth of stated collection purposes may warrant review by compliance teams assessing COPPA and GDPR Article 8 alignment.
CA-P-013235 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
Unreal Engine · Epic Games Privacy Policy
Persistent identifiers collected from children, including IP addresses and device IDs, are sensitive data categories under COPPA and equivalent laws, and the sufficiency of the asserted technical controls determines whether this practice complies with those frameworks.
CA-P-007187 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
Comcast · Comcast Terms of Service
This clause establishes the operational scope of data collection and use under the service agreement. It conditions continued service on Comcast's authority to gather and process subscriber information according to the Privacy Policy, which constitutes the primary mechanism for disclosing data practices under cable subscriber privacy regulations.
CA-P-003787 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial