Descartes Systems Group AI Tariff Management automates and optimizes tariff classification and compliance, helping companies manage customs duties and trade regulations efficiently.
Descartes Systems Group AI Tariff Management automates tariff classification, duty determination, and compliance screening, enabling companies to efficiently navigate complex global trade regulations, mitigate risks from tariffs, sanctions, and geopolitical volatility, and build resilient supply chains.[1][5][6] Key features include AI-driven product classification, configurable risk levels for denied party screening to reduce false positives, automated filtering of low-risk results, multilingual AI agents for trade data queries, and built-in audit trails with detailed status history for regulatory transparency.[1][2][3][4]
It targets logistics-intensive businesses, importers, exporters, and supply chain managers in industries like manufacturing, retail, and transportation who handle cross-border merchandise, commodities, and services amid evolving tariffs and export controls.[1][4] What sets it apart is its advanced machine learning that enhances accuracy while preserving human oversight, customizable sensitivity for diverse risk profiles, and seamless integration with broader trade intelligence tools, significantly cutting manual workloads and boosting decision-making speed.[2][3][6]
Sources
The documents do not explicitly address whether user data is used to train AI models. Section 6.4 grants Descartes broad
The documents do not explicitly address whether user data is used to train AI models. Section 6.4 grants Descartes broad
High risk across multiple dimensions. Only use with public, non-sensitive data.
The documents do not explicitly address whether user data is used to train AI models. Section 6.4 grants Descartes broad rights to use 'Feedback' without restriction, but this is limited to suggestions/ideas, not customer data itself. The absence of explicit protections or clear opt-out language regarding AI training creates moderate concern.
“[ToS] 'Nothing in this Agreement...will restrict Descartes' right to use, profit from, disclose, publish, keep secret, or otherwise exploit any Feedback' (Section 6.4)”
Section 6.1 grants Descartes ownership of all intellectual property derived from services, including modifications and enhancements. Section 6.3 restricts customer use of 'Application Data' but Descartes retains all rights. This represents a broad, unfavorable license scope where the vendor claims extensive ownership of outputs.
“[ToS] 'Descartes and its licensors shall have and retain all right, title and interest...in any software, documentation, algorithms, formulas, data models, processes or methodology produced by, used by, or derived by Descartes' (Section 6.1)”
The DPA permits sharing with 'Descartes Affiliates' and 'Third Party Processors' with notice and limited objection rights (10 business days). A Processor List is published. However, the definition of 'Affiliates' is broad (any entity with >50% control relationship), and sharing is permitted without explicit customer consent beyond the agreement.
“[DPA] 'Customer consents to Descartes' use of Descartes Affiliates and Third Party Processors...Descartes will notify Customer in advance of changes to the Processor List' (Section 8)”
Section 9.6 of ToS requires destruction of Confidential Information upon termination 'upon request' and 'except copies...as may be necessary to be retained by reason of legal, archival or regulatory requirements.' The DPA does not specify clear retention periods for Personal Data beyond legal/regulatory holds, creating ambiguity about how long data is retained post-termination.
“[ToS] 'Upon termination...Recipient shall promptly destroy...all Confidential Information...except copies...as may be necessary to be retained by reason of legal, archival or regulatory requirements' (Section 9.6)”
Section 6.1 explicitly assigns all IP rights in outputs to Descartes, including work-made-for-hire provisions. Customer irrevocably assigns ownership 'absolutely and without the necessity of any additional consideration.' This is a clear, unfavorable term where the vendor claims exclusive ownership of generated outputs.
“[ToS] 'Customer irrevocably agrees to assign and, upon its creation, automatically assigns to Descartes the ownership of such Intellectual Property Rights absolutely and without the necessity of any additional consideration' (Section 6.1)”
The DPA states Descartes conducts annual SSAE 18 SOC 2 Type 2 audits (Section 11), which is a positive indicator. However, no mention of ISO 27001, HIPAA, or formal GDPR compliance certification is provided. The audit report is confidential and only provided 'on request,' limiting transparency.
“[DPA] 'Descartes will conduct, at no charge to Customer, an SSAE 18 SOC 2, Type 2 audit of controls relating to the network operations' (Section 11)”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai