UiPath
UiPath · Agent platform · US · www.uipath.com
services/uipath.yamlVendor data-handling terms
The public policy covers personal data of users, customer employees and site visitors. Handling of data processed by customer automations and agents is set by the customer agreement and product documentation.
“Data used for training purposes. / We may use open-source data sets from legitimate sources to train or fine-tune our machine learning models.”
“This means that we retain different categories of data for different periods of time depending on the type of data, the category of data subject to whom the data relates, and the purposes for which we collected the data.”
Automation Cloud region is selected per tenant; that is a product setting rather than a policy commitment.
“UiPath is a global software company offering an end-to-end platform for automation that has its main offices in Romania and the United States of America. / Whenever your personal data is transferred outside the EU or outside UK, to a third country, UiPath makes sure that there is a valid transfer mechanism in place, such as Standard Contractual Clauses or an International Data Transfer Addendum to the European Commission's standard contractual clauses for international data transfers, to make sure that your personal data is protected.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| uipath.com | app | observed |
Assessment
Reasoning: An enterprise automation platform with agentic features, sold under contract. The public policy covers people, not the data that robots and agents move; that sits in the agreement and the tenant configuration. Unrated outside a signed agreement. Self-serve trial tenants should be treated as unapproved.
Flags: Customer data terms not in the public policy · Region is a tenant setting, not a policy commitment · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention and transfer terms verified against the UiPath privacy policy; customer data terms contractual.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.