Datadog

Datadog explicitly states it will use Generative AI Service output for 'quality control and service improvements,' indicating some training use. However, the policy also states 'Datadog claims no ownership in Generative AI Service output' and assigns ownership to Customer, which provides partial protection. The language is somewhat vague on whether non-AI-service data is used for training, and no explicit opt-out mechanism is documented for general service data.

“[ToS] 'Datadog will have the right to use Generative AI Service output for quality control and service improvements. To the extent that Datadog has any other right in the Generative AI Service output, Datadog assigns that ownership to Customer.'”

For Generative AI Services, Datadog assigns ownership of outputs to the Customer, which is favorable. However, the broader terms are not fully detailed in the provided documents. The Privacy Policy indicates Datadog uses information 'to improve the Datadog Products' and may 'link or combine information' for service improvement, suggesting a broad service improvement license without explicit termination language.

“[ToS] 'Datadog claims no ownership in Generative AI Service output... Datadog assigns that ownership to Customer.' [Privacy] 'We use the information we collect... to improve the Datadog Products... so that we can continually improve them or create new ones.'”

The Privacy Policy states Datadog shares personal information with 'service providers,' 'affiliates,' and 'analytics, advertising, and search-engine providers.' While some controls are mentioned (service providers work 'on our behalf'), the scope of sharing with affiliates and marketing partners is vague. No explicit DPA requirement for all sub-processors is stated, though a DPA is referenced as available.

“[Privacy] 'We use third-party service providers who work on our behalf... We may share your personal information with our affiliate companies... We may share your personal information with analytics, advertising, and search-engine providers...'”

The Privacy Policy states Datadog retains personal information 'for as long as necessary to fulfill the purposes we collected it for' and considers 'the terms of our agreements,' 'legitimate interests,' and 'legal obligations.' However, specific retention periods are not clearly defined. The policy mentions data may be 'anonymized' and retained indefinitely, and 'cached or archived copies' may be retained for 'a certain period' without specifying duration.

“[Privacy] 'We only keep your personal information for as long as necessary to fulfill the purposes we collected it for... we may anonymize your personal information so that you are no longer identifiable, in which case we may use the resulting information without further notice to you.'”

For Generative AI Services, Datadog explicitly states 'Datadog claims no ownership in Generative AI Service output' and 'Datadog assigns that ownership to Customer.' This is a clear, enterprise-friendly protection that grants full IP ownership of outputs to the customer with no restrictions on commercial use.

“[ToS] 'Datadog claims no ownership in Generative AI Service output. To the extent that Datadog has any other right in the Generative AI Service output, Datadog assigns that ownership to Customer.'”

The Privacy Policy references compliance with GDPR, EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. DPF, and mentions a 'Security page' and 'Trust Center' for certifications. However, the provided documents do not explicitly list SOC 2 Type II, ISO 27001, or HIPAA certifications. The reference to a DPA and Trust Hub suggests certifications exist but are not detailed in the provided text.

“[Privacy] 'We comply with the EU-U.S. Data Privacy Framework... View our Security page to learn more about the specific security controls we have put in place... If you would like to see Datadog's commitments on PCI-DSS and our third party audits and certifications, please visit our Trust Center.'”