Hebbia
Hebbia · Data analysis · US · www.hebbia.com
services/hebbia.yamlVendor data-handling terms
“We do not use Personal Data contained in Customer Data to train or improve generalized or third-party artificial intelligence or machine learning models. / To the extent we use Personal Data to improve our Services, such use is limited to internal purposes such as debugging, performance monitoring, and developing features.”
“Hebbia retains service data for the duration of the customer’s business relationship with Hebbia and for a period of time thereafter, to analyze the data for Hebbia’s own operations, and for historical and archiving purposes associated with Hebbia’s services.”
“Hebbia has its headquarters in the United States, and information we collect about you will be processed in the United States.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| app.hebbia.ai | app | observed |
| hebbia.ai | app | observed |
Assessment
Reasoning: A document-analysis platform for finance and legal teams, which means the input is deal documents and filings. No training on customer data is the right commitment; US processing with an unspecified post-relationship retention period is the remaining item. Contracts will refine both.
Flags: GDPR Chapter V (US processing) · Post-relationship retention period unspecified · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and processing terms verified against the Hebbia privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Spotted something wrong or out of date? Send it with the source. Changes are checked and recorded in the changelog.