Provision Registry

7353 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Medium × Clear all
medium Liability limitation
Mistral AI · Mistral AI Commercial Terms
Organizations that build workflows or customer offerings dependent on Beta Products bear the full operational risk of sudden access termination and have no warranty protections if Beta Products malfunction or produce harmful outputs.
CA-P-010624 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
medium Liability limitation
Betterment · Betterment Terms of Use
ERISA plan services carry distinct legal obligations for both Betterment (as a covered service provider) and employers (as plan fiduciaries), meaning the agreement governing this relationship has materially different terms and protections than a retail investment account.
CA-P-007229 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
medium Content moderation
Hugging Face · Hugging Face Model Card Guidelines
Bias and limitations disclosures are directly relevant to responsible AI deployment decisions, particularly in regulated contexts such as hiring, lending, healthcare, or law enforcement, where algorithmic bias may create legal liability.
CA-P-012037 First tracked May 12, 2026 Last seen May 20, 2026 Compare across platforms →
ActiveCampaign · ActiveCampaign Terms of Service
The non-refundable, auto-renewal billing structure means that customers who do not cancel before a renewal date will be charged for the next subscription period without recourse to a refund under the stated terms, which is operationally significant for customers managing annual or multi-period subscriptions.
CA-P-012241 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
Steam · Steam Subscriber Agreement
Refund eligibility for digital games is limited by Steam's external refund policy, which generally requires a request within 14 days of purchase and less than 2 hours of playtime, so purchases outside those parameters are typically non-refundable.
CA-P-009223 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
ADP · ADP Privacy Statement
The BCR mechanism addresses the regulatory requirement that personal data transfers outside the EEA must include adequate safeguards when recipient jurisdictions lack equivalent legal protections. This provision establishes the contractual framework ADP uses to facilitate intra-group data transfers while maintaining compliance with data protection standards.
CA-P-005454 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
medium Data collection
Arlo · Arlo Privacy Policy
The UET implementation establishes a data-sharing pathway between Arlo and Microsoft's advertising infrastructure, permitting the collection and transfer of user behavioral signals tied to advertising exposure and service interactions. This integration supports the operational capability to track and attribute user actions across the Arlo service ecosystem.
CA-P-006677 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Windsurf · Windsurf Security & Data Handling
The document explicitly states that no zero-data retention agreement exists with Bing, meaning data derived from user code and conversation history sent via web search queries may be retained by Microsoft's Bing service, with no contractual guarantee of deletion.
CA-P-010665 First tracked May 11, 2026 Last seen May 20, 2026 Compare across platforms →
Windsurf · Windsurf Security & Data Handling
This provision identifies a specific subprocessor relationship where code-derived data is transmitted to a third party without the zero-data retention agreement that applies to other inference providers. Enterprise compliance teams should assess the Bing API data flow against their data classification policies and third-party risk frameworks before enabling this feature.
CA-P-013135 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
Wealthfront · Wealthfront Privacy Policy
This provision establishes the operational framework for biometric data handling during account onboarding, establishing both the authorization for collection and a mandatory retention window followed by destruction protocols. The requirement for vendor compliance on data destruction creates a specific procedural obligation tied to Wealthfront's third-party vendor management.
CA-P-001755 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Wealthfront · Wealthfront Privacy Policy
Biometric data carries heightened legal protection in several states, and the 90-day vendor destruction timeline is a contractual commitment rather than a statutory minimum, meaning enforcement depends on Wealthfront's vendor contracts rather than direct regulatory obligation in all jurisdictions.
CA-P-008297 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Calm · Calm Terms of Service
This warranty disclaimer operates to define the baseline condition of service delivery and allocates responsibility for service performance. The clause clarifies that Calm does not guarantee specific performance standards, uptime, or data accuracy as contractual obligations.
CA-P-004465 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Uniswap · Uniswap Privacy Policy
This clause clarifies that privacy protections in the policy do not extend to on-chain data, which is permanently and publicly visible by anyone including data brokers, analytics firms, and regulators.
CA-P-008145 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Ledger · Ledger Privacy Policy
The operational significance is that transaction data visibility occurs by design of the blockchain system rather than through Ledger's data collection or sharing practices. This distinguishes between data Ledger controls and data visibility that results from the user's choice to use a public blockchain network.
CA-P-001465 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Uniswap · Uniswap Privacy Policy
The provision establishes a data collection and screening mechanism that operates as a condition of wallet connection, enabling the Service to maintain transaction compliance and risk assessment records tied to user wallet addresses.
CA-P-001534 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
FanDuel · FanDuel Terms of Use
The provision creates operational requirements around bonus credit lifecycle management, including expiration windows, usage prerequisites, and reclamation mechanisms. These conditions structure how FanDuel administers promotional credits and defines the timeframes within which users must engage with the platform to retain bonus value.
CA-P-006595 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
medium Platform discretion
Minecraft · Minecraft Usage Guidelines
Using Minecraft's brand assets in ways not permitted by these guidelines could expose creators or businesses to intellectual property enforcement by Mojang or Microsoft.
CA-P-010945 First tracked May 12, 2026 Last seen May 20, 2026 Compare across platforms →
Salesforce · Salesforce Privacy Statement
The breadth of sharing categories means your personal data may reach a wide range of organizations beyond Salesforce itself. Understanding which categories are most likely to apply to your interactions helps you assess the real scope of data distribution.
CA-P-007222 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
Bluesky · Bluesky Terms of Service
This clause establishes the operational authority by which the platform may enforce compliance and manage platform risk without advance notification requirements. It permits account termination based on both defined policy violations and discretionary risk assessments by the service provider.
CA-P-005540 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Cash App · Cash App Privacy Policy
The clause establishes an internal data sharing framework that permits cross-company information flow without explicit per-instance user consent, based on the stated purposes of service integration and product development.
CA-P-000613 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Bluesky · Bluesky Privacy Policy
Bluesky collects detailed behavioral data about your activity within the app, including content you view but do not interact with, which goes beyond what many users expect from a social media platform and may be used for analytics, product development, and marketing purposes.
CA-P-007838 First tracked May 9, 2026 Last seen May 22, 2026 Compare across platforms →
medium Data collection
Anyscale · Anyscale Privacy Policy
The provision establishes the operational scope of automatic data collection and establishes Anyscale's authority to aggregate disparate technical signals into unified user profiles. This provides the technical and contractual basis for cross-service user identification and behavioral tracking.
CA-P-006711 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Sony PlayStation · PlayStation Privacy Policy
The scope of automatic collection is broad, covering behavioral and location data even when you are not connected online, and includes granular in-game actions, which goes beyond what many users expect from a gaming platform.
CA-P-002947 First tracked Apr 18, 2026 Last seen May 22, 2026 Compare across platforms →
Netflix · Netflix Privacy Statement
The clause defines the scope of data collection that occurs as a standard operational practice within the service delivery model, establishing which information categories Netflix gathers and processes in connection with platform operation.
CA-P-002183 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
X · X Terms of Service
The provision establishes X's operational authority to curate platform content through removal mechanisms and creates jurisdiction-specific enforcement obligations that govern X's content moderation practices in regulated markets. These obligations create differential content enforcement standards across geographic markets based on statutory requirements.
CA-P-000261 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
medium Platform discretion
Strava · Strava Terms of Service
This license allows Strava to use your personal fitness content for commercial purposes without paying you, and the rights are transferable and sublicensable, meaning they can be passed to third parties.
CA-P-009662 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Platform discretion
eBay · eBay User Agreement
The perpetual and irrevocable nature of this license means eBay can continue to use content you have posted even after you delete your account or remove the content, and eBay can sublicense it to third parties.
CA-P-007532 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
medium Content moderation
Threads · Threads Terms of Use
The license grant establishes Threads' operational authority to process, store, and repurpose user-generated content across its service infrastructure and derivative applications without paying licensing fees, while retaining user ownership of the underlying content.
CA-P-009421 First tracked May 10, 2026 Last seen May 11, 2026 Compare across platforms →
medium Data usage
eBay · eBay User Agreement
The broad scope of this license grant enables eBay to incorporate user-generated content into service operations, promotional activities, and platform expansion without obtaining separate permissions or providing compensation. The perpetual and sublicensable nature means these rights extend indefinitely and may be delegated to third parties eBay engages.
CA-P-001357 First tracked Apr 3, 2026 Last seen May 7, 2026 Compare across platforms →
medium Data usage
Google · Google Terms of Service
The provision establishes the scope of Google's operational rights to content users provide to the service, enabling Google to process, store, and deliver that content across its systems and partnerships. This authorization is foundational to Google's ability to operate the services users access.
CA-P-001891 First tracked Apr 4, 2026 Last seen May 11, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial