Where are Dropstone's legal documents and certifications?
Every legal document is on dropstone.io: terms, privacy policy, cookie policy, DPA, subprocessor list, EULA, and the trust page. And the certification answer stated plainly, including what Dropstone itself does not hold.
They are all on dropstone.io, one link each:
| Document | Where | What it covers |
|---|---|---|
| Terms of Service | dropstone.io/terms | The agreement for using Dropstone |
| Privacy Policy | dropstone.io/privacy | What is collected, why, and your rights over it |
| Data Processing Agreement | dropstone.io/dpa | The processor terms an organization signs, GDPR Article 28 |
| Subprocessors | dropstone.io/subprocessors | Every company that touches customer data, and what each is certified for |
| Trust page | dropstone.io/trust | Where requests run, what is retained, and what is certified |
| Cookie Policy | dropstone.io/cookies | The cookies the site sets, and the consent controls |
| End User License Agreement | dropstone.io/eula | The licence terms for the Dropstone software |
On certifications, the plain answer: inference runs on US providers certified to SOC 2 and ISO 27001, and Dropstone does not hold a SOC 2 certification of its own. A Dropstone-level SOC 2 Type I audit is planned for enterprise general availability and can be commissioned earlier on request; write to enterprise@blankline.org.
Related articles
- How Dropstone handles your dataWhat Dropstone stores, for how long, who can see it, whether it is used to improve the models, and the commitments that apply to every account. A plain-language summary of Dropstone's data practices.
- Where your requests runDropstone's servers and the inference providers that run its models are hosted in the United States. Requests are never routed through providers outside the US. What that means for your data.
- Security, SSO, and SCIM for an organizationThe five controls on the organization's Security page: an identity provider, requiring single sign-on, provisioning on first sign-in, directory sync over SCIM, and emergency access.
- Is your data used to train models?On an organization account, never. On a personal account, only if you leave the setting on. What is collected, what is never collected, and what deletion can and cannot undo.
- How to get supportHow to reach Dropstone support, what to include so we can help quickly, and the right address for billing, privacy, security, and enterprise questions.
Ctrl+I