General Data Protection Regulation (GDPR) | Drata is drafted as if it could incorporate Terms of Service | Drata
General Data Protection Regulation (GDPR) | Drata is a public notice and Terms of Service | Drata is part of the agreement. ¶6 reads: "Via Terms of Service - Subscription Agreement and Opt-in of Terms and Conditions."
- GDPR ¶6
“Consent: Via Terms of Service - Subscription Agreement and Opt-in of Terms and Conditions. Removal of consent will be done on request or via the Drata Web App.”
- TOS — first clause
“Terms of Service - Subscription Agreement”
Wrong? Ask for access to correct it.
General Data Protection Regulation (GDPR) | Drata is drafted as if it could incorporate Data Processing Addendum | Drata
General Data Protection Regulation (GDPR) | Drata is a public notice and Data Processing Addendum | Drata is part of the agreement. ¶15 reads: "Drata's breach notification process is outlined within its Terms of Service - Subscription Agreement, Data Processing Addendum and Incident Response Policy, and made available upon request."
- GDPR ¶15
“Drata's breach notification process is outlined within its Terms of Service - Subscription Agreement, Data Processing Addendum and Incident Response Policy, and made available upon request.”
- DPA — first clause
“Data Processing Addendum”
Wrong? Ask for access to correct it.
PP names a Cookie Notice we could not find published
Privacy Notice | Drata ¶84 refers to a Cookie Notice. No page of that name appears in the sitemap, the legal index or the trust centre. It may exist and be available on request.
Wrong? Ask for access to correct it.
TOS relies on a statement of work that is not published
Terms of Service | Drata ¶7 relies on a statement of work. No statement of work was found anywhere in the published set.
Wrong? Ask for access to correct it.
Vulnerability Disclosure Policy | Drata is published but no other document refers to it
Vulnerability Disclosure Policy | Drata sits in the published set with no incoming reference from any other document in the corpus.
Wrong? Ask for access to correct it.
Privacy Notice for Drata Employment Candidates | Drata is published but no other document refers to it
Privacy Notice for Drata Employment Candidates | Drata sits in the published set with no incoming reference from any other document in the corpus.
Wrong? Ask for access to correct it.
General Data Protection Regulation (GDPR) | Drata is published but no other document refers to it
General Data Protection Regulation (GDPR) | Drata sits in the published set with no incoming reference from any other document in the corpus.
Wrong? Ask for access to correct it.
The minimum age of a user is stated 2 times, in 2 different figures
The minimum age of a user appears in 2 documents. The figures stated are 16, 13. These may each be right for a different thing. What the corpus does not do is say which figure governs which question.
- PNDE ¶86 — states 16
“We do not recruit, and have no actual knowledge of having sold or shared the personal information in the past 12 months of, candidates under age 16.”
- UT ¶7 — states 13
“If you are under 13 years of age, you are not authorized to use the Service, with or without registering.”
Wrong? Ask for access to correct it.
Held back
6 readings, on top of the 8 above
Each puts two clauses side by side that answer the same question differently, and quotes both.
I work here
