Nonlinear demonstrates strong privacy practices and user-favorable terms for professional AEC teams. Users retain ownership of all inputs and outputs, the platform only uses aggregated/anonymized data for improvements, and enterprise-grade security measures are in place. The policies are transparent and well-structured, with clear data controller/processor distinctions.

AI Transparency Facts

Input Data Ownership

Low Risk

Users retain full ownership of all data, files, and documents uploaded to the platform. Nonlinear only processes this data to provide services.

Confidence

95%

Output Data Ownership

Low Risk

Users own all AI-generated outputs and have perpetual, royalty-free license to use them without restrictions.

Confidence

95%

Training Data Usage

Low Risk

Nonlinear explicitly does NOT use identifiable customer data to train models. Only aggregated or de-identified data is used for improvements, ensuring customer data isolation.

Confidence

90%

Data Retention & Deletion

Low Risk

Clear deletion rights with data removed within commercially reasonable period upon request or contract termination. No specific retention schedules provided but commitment to delete unless legally required.

Confidence

80%

Third-Party Data Sharing

Low Risk

No selling or renting of personal information. Data shared only with essential service providers under strict confidentiality obligations, user-authorized integrations, or for legal compliance.

Confidence

95%

Opt-Out Rights

Moderate Risk

Users have GDPR/CCPA rights to object to processing activities and can revoke logo usage, but no explicit opt-out mechanism for aggregated data analysis is described.

Confidence

70%

Compliance & Certifications

Moderate Risk

References GDPR and CCPA compliance with Standard Contractual Clauses for international transfers, but no specific certifications (SOC 2, ISO 27001) are mentioned.

Confidence

75%

Model Explainability & Auditability

Moderate Risk

No specific provisions for model explainability or enterprise auditing rights mentioned in the policies.

Confidence

60%

Security Practices & Breach History

Low Risk

Industry-standard security measures including encryption at rest/in transit, access controls, monitoring, and least-privilege access. Uses trusted providers like AWS S3 and Clerk. No breach history mentioned.

Confidence

85%

Enterprise vs. Consumer Risk Delta

Moderate Risk

No explicit differentiation between free and paid tiers mentioned. Terms reference Order Forms which suggests enterprise agreements may have different terms.

Confidence

50%

Human Review of User Inputs

Moderate Risk

No explicit mention of human review rights or restrictions. Support communications are collected which may involve content review.

Confidence

60%

Regulatory & Litigation Exposure

Low Risk

Standard legal compliance provisions with notification where possible. Arbitration clause limits litigation exposure. No current disputes or regulatory issues mentioned.

Confidence

80%

PII & SPI Data Inventory

Low Risk

Collects minimal PII (name, email, company, IP address, device info). Explicitly prohibits uploading sensitive data like PHI, PCI data, or government-classified information.

Confidence

90%

You've read all 15 risk ratings for Nonlinear. Create a free account to see the exact policy wording behind each rating.