Hebbia
Hebbia · Data analysis · US · www.hebbia.com
Last verified 2026-09-16
Entry
services/hebbia.yamlTraining on your data (default tier)
Customer data not used to train generalised or third-party models; improvement limited to internal purposes
Retention
Service data kept for the customer relationship and a period after
Data residency
Processed in the United States
Vendor data-handling terms
Training on your data (default tier)
Customer data not used to train generalised or third-party models; improvement limited to internal purposes
“We do not use Personal Data contained in Customer Data to train or improve generalized or third-party artificial intelligence or machine learning models. / To the extent we use Personal Data to improve our Services, such use is limited to internal purposes such as debugging, performance monitoring, and developing features.”
Retention
Service data kept for the customer relationship and a period after
“Hebbia retains service data for the duration of the customer’s business relationship with Hebbia and for a period of time thereafter, to analyze the data for Hebbia’s own operations, and for historical and archiving purposes associated with Hebbia’s services.”
Data residency
Processed in the United States
“Hebbia has its headquarters in the United States, and information we collect about you will be processed in the United States.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| app.hebbia.ai | app | observed |
| hebbia.ai | app | observed |
Assessment
Enterprise deployments: medium
Reasoning: A document-analysis platform for finance and legal teams, which means the input is deal documents and filings. No training on customer data is the right commitment; US processing with an unspecified post-relationship retention period is the remaining item. Contracts will refine both.
Flags: GDPR Chapter V (US processing) · Post-relationship retention period unspecified · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and processing terms verified against the Hebbia privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.