Document360 is a knowledge base software that helps companies create, manage, and share documentation. It's ideal for improving customer support and internal knowledge sharing.
Suited for SaaS companies and technical teams, it transforms static docs into dynamic hubs with version control and multimedia indexing. AI tools automate formatting and enable fast editing for non-technical users. Stands out for fast-growing teams needing robust, secure documentation. Integrates with tools like Jira for software teams.
The documents do not explicitly state whether user data is used to train AI models. The ToS mentions Document360 may use
The documents do not explicitly state whether user data is used to train AI models. The ToS mentions Document360 may use
Moderate risk. Suitable for internal data but avoid confidential information.
The documents do not explicitly state whether user data is used to train AI models. The ToS mentions Document360 may use customer data 'for service improvement' and grants a 'royalty-free, non-exclusive, irrevocable' right to 'gather and process Customer data solely for the purposes of providing the Services' (clause 3.8), but this language is vague regarding AI training specifically. No explicit opt-out or prohibition on training is stated.
“[ToS] 'The Customer hereby grants to Document360 Limited a royalty-free, non-exclusive, irrevocable, right to gather and process Customer data solely for the purposes of providing the Services' (clause 3.8)”
The ToS grants Document360 a broad, irrevocable license to customer data for service provision (clause 3.8), but the scope is stated as 'solely for the purposes of providing the Services.' However, clause 14.5 grants Document360 a 'fully paid, royalty-free, perpetual, irrevocable, worldwide, non-exclusive, and fully sub licensable right' to use customer 'Feedback,' which is broader. The license for core customer data appears limited to service delivery, but the feedback clause creates ambiguity about sublicensing rights.
“[ToS] Clause 14.5: 'Customer hereby grants Document360 Limited a fully paid, royalty-free, perpetual, irrevocable, worldwide, non-exclusive, and fully sub licensable right and license to use any comments, suggestions, proposals or recommendations ("Feedback")'”
The ToS does not explicitly detail third-party sharing practices or sub-processor lists. Clause 5 acknowledges third-party services (e.g., Microsoft Azure) but states Document360 has no liability for them. The Privacy Policy excerpt is incomplete and does not provide sufficient detail on data sharing with affiliates, partners, or analytics providers. The absence of a comprehensive sub-processor list and explicit sharing restrictions creates moderate concern.
“[ToS] Clause 5: 'The Customer acknowledges that the Services may enable or assist it to access or use third party services (including Microsoft BizTalk Azure Service Bus)' but no DPA or sub-processor list is provided in documents”
The ToS does not specify clear data retention periods or automatic deletion timelines. Clause 12.3(c) states 'Customer will have no access to State Customer data derived from the Services' upon termination, but does not guarantee deletion. Clause 8.6 mentions data deletion after 45 days of non-payment, but general retention policy is not documented. The GDPR Compliance page is incomplete in the provided excerpt.
“[ToS] Clause 12.3(c): 'Customer will have no access to State Customer data derived from the Services' upon termination, but no explicit deletion guarantee is stated”
Clause 3.7 of the ToS explicitly states 'The Customer shall own all right, title and interest in and to all of the Customer Data.' This clearly establishes that the customer retains ownership of their data and generated content. Document360 claims no ownership rights over customer-generated outputs.
“[ToS] Clause 3.7: 'The Customer shall own all right, title and interest in and to all of the Customer Data and shall have sole responsibility for the legality, reliability, integrity, accuracy and quality of the Customer Data'”
The Security page explicitly confirms Document360 has a SOC 2 Type II certification covering the period Nov 1, 2024 to Oct 31, 2025, with annual audits. The page also references GDPR compliance commitment. SOC 2 Type II is a robust security certification demonstrating controls over security, availability, confidentiality, and processing integrity.
“[Security] 'Document360 Limited has a SOC 2 Type II report for Document360 Limited... The Document360 Limited SOC 2 Type II report covers the period from Nov 1, 2024 to Oct 31, 2025. New reports are released annually.'”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai