Dropstone 法律文件与认证
所有法律文件均可在 dropstone.io 上找到：条款、隐私政策、Cookie 政策、DPA、子处理方列表、EULA 以及信任页面。认证问题的答案也明确列出，包括 Dropstone 自身未持有的认证。
它们都位于 dropstone.io 上，每个对应一个链接：
| 文档 | 位置 | 涵盖内容 |
|---|---|---|
| 服务条款 | dropstone.io/terms | 使用 Dropstone 的协议 |
| 隐私政策 | dropstone.io/privacy | 收集哪些信息、为何收集以及您对其享有的权利 |
| 数据处理协议 | dropstone.io/dpa | 组织签署的处理者条款，符合 GDPR 第 28 条 |
| 子处理方 | dropstone.io/subprocessors | 涉及客户数据的每家公司及其各自的认证情况 |
| 信任页面 | dropstone.io/trust | 请求在何处运行、保留哪些数据以及哪些内容已获认证 |
| Cookie 政策 | dropstone.io/cookies | 网站设置的 Cookie 及同意控制选项 |
| 最终用户许可协议 | dropstone.io/eula | Dropstone 软件的许可条款 |
关于认证，明确的答案是：推理在美国提供商上运行，这些提供商已通过 SOC 2 和 ISO 27001 认证，且 Dropstone 自身未持有 SOC 2 认证。面向企业的 SOC 2 Type I 审计计划在企业版正式发布时进行，也可应要求提前委托；请发送邮件至 enterprise@blankline.org。
Related articles
- How Dropstone handles your dataWhat Dropstone stores, for how long, who can see it, whether it is used to improve the models, and the commitments that apply to every account. A plain-language summary of Dropstone's data practices.
- Where your requests runDropstone's servers and the inference providers that run its models are hosted in the United States. Requests are never routed through providers outside the US. What that means for your data.
- Security, SSO, and SCIM for an organizationThe five controls on the organization's Security page: an identity provider, requiring single sign-on, provisioning on first sign-in, directory sync over SCIM, and emergency access.
- Is your data used to train models?On an organization account, never. On a personal account, only if you leave the setting on. What is collected, what is never collected, and what deletion can and cannot undo.
- How to get supportHow to reach Dropstone support, what to include so we can help quickly, and the right address for billing, privacy, security, and enterprise questions.
Ctrl+I