AlphaSense

The ToS acknowledges AI technology is used in the Services (Section 4.5) but does not explicitly state whether user/customer data is used to train AlphaSense's AI models. Section 4.2.9 grants AlphaSense rights to use Customer Content 'solely to the extent necessary to provide Customer with access to and use of the Services,' which is ambiguous regarding AI training purposes. The absence of a clear prohibition on training combined with vague service improvement language warrants a moderate concern score.

“[ToS] 'Customer acknowledges that the Services may contain content or information that was generated using artificial intelligence ("AI") technology' and '[ToS] Customer hereby grants AlphaSense the right to transmit and use Customer Content solely to the extent necessary to provide Customer with access to and use of the Services'”

Section 4.2.9 grants AlphaSense broad rights to 'transmit and use Customer Content' for service provision and legal compliance, but the scope is vague. More critically, Section 4.4.1 states AlphaSense owns all IP in 'any and all AlphaSense materials furnished or made available' and reserves all rights not expressly granted. The license grant in Section 2.1 is limited to the customer's use only, but AlphaSense's ability to use Customer Content for undefined purposes beyond service delivery creates unfavorable terms.

“[ToS] 'Customer hereby grants AlphaSense the right to transmit and use Customer Content solely to the extent necessary to provide Customer with access to and use of the Services, as otherwise permitted by this Agreement, or as may be necessary or appropriate to comply with any request of a governmental or regulatory body'”

Section 10.1 requires confidentiality and restricts disclosure of Confidential Information except 'as a necessary part of performing its obligations hereunder.' However, Section 10.1 also states 'AlphaSense shall have the right to disseminate any usage or consumption data arising from Customer's use of the Services as necessary for AlphaSense to make payments to any third party provider,' which permits sharing with third parties. The Privacy Policy page returned a 404 error, preventing full assessment of third-party sharing practices. The absence of a published sub-processor list and vague language about 'necessary' sharing warrants moderate concern.

“[ToS] 'AlphaSense shall have the right to disseminate any usage or consumption data arising from Customer's use of the Services as necessary for AlphaSense to make payments to any third party provider' and '[ToS] The receiving party shall not disclose, transmit, inform or make available to any entity, person or body any of the Confidential Information, except as a necessary part of performing its obligations hereunder'”

The ToS does not explicitly state data retention periods, deletion timelines, or automatic purge policies upon account termination. Section 10.1 requires return or destruction of Confidential Information upon termination 'at the disclosing party's option,' but this is vague regarding timing and scope. The absence of clear retention limits, specific deletion timelines, or documented data lifecycle policies creates moderate concern, though the confidentiality obligations suggest some protection.

“[ToS] 'Upon termination of this Agreement for any reason, the receiving party shall promptly return or destroy (at the disclosing party's option), all copies of the other party's Confidential Information' and '[ToS] Even after termination or expiration of this Agreement, the receiving party will continue to treat Confidential Information received from the disclosing party (or its suppliers and providers) in accordance with this Agreement'”

Section 4.4.1 explicitly states 'AlphaSense and/or its licensors or providers, as applicable, own all intellectual property rights in and to any documentation, the Services, AlphaSense Content' and reserves all rights not expressly granted. However, the ToS does not explicitly claim ownership of outputs generated by customers using the Services. Section 4.2.9 permits AlphaSense to use Customer Content for service delivery and legal compliance, but does not explicitly grant AlphaSense a license to outputs. The ambiguity regarding ownership of generated content (vs. input content) and potential service improvement uses creates moderate concern.

“[ToS] 'AlphaSense and/or its licensors or providers, as applicable, own all intellectual property rights in and to any documentation, the Services, AlphaSense Content, any and all updates related to the foregoing, and any and all AlphaSense materials furnished or made available as part of the Services. Aside from the limited license(s) granted to Customer under Section 2 above, no such intellectual property rights are transferred to Customer hereunder.'”

The ToS references a Data Processing Agreement (DPA) at https://www.alpha-sense.com/data-processing-addendum/ (Section 6.3) and mentions a Trust Center link (https://trust.alpha-sense.com/) in the footer, suggesting some compliance infrastructure exists. However, the provided documents do not include the DPA or detail specific certifications (SOC 2, ISO 27001, GDPR compliance, HIPAA). The Privacy Policy page returned a 404 error. Without access to the actual DPA or published security certifications, compliance status cannot be fully verified, warranting a moderate concern score.

“[ToS] 'To the extent that personal data is processed pursuant to this Agreement, the Data Processing Agreement ("DPA") available at https://www.alpha-sense.com/data-processing-addendum/ (or such other link as may be updated from time to time) shall apply to such processing from the Effective Date' and footer reference to '[Trust Center](https://trust.alpha-sense.com/)'”