generated: '2026-09-19'
method: searched
probe: true
source: https://ambr.run/privacy
sources:
- https://ambr.run/privacy
- https://ambr.run/terms
- https://getamber.dev/docs
- https://ambr.run/spec/ricardian-v1
probed_paths:
  note: Conventional paths probed live on ambr.run 2026-09-19 — every one a hard 404 (18,119-byte Next.js not-found page); /docs/data-residency 307s to getamber.dev/docs/data-residency which also 404s.
  misses: [/accessibility, /accessibility/vpat, /legal/subprocessors, /legal/dpa, /privacy/requests, /transparency, /trust, /security/sbom, /docs/data-residency, /ai, /ai/transparency, /legal/report-content]
signals:
  data_subject_request:
    url: https://ambr.run/privacy
    section: '6. Your Rights / 8. Contact'
    channel: privacy@ambr.run
    stated_sla: 'We will respond to all requests within 30 days.'
    rights_named: [access, rectification, erasure, portability, objection]
    evidence:
    - source: https://ambr.run/privacy
      http_status: 200
      fetched: '2026-09-19'
      dated: 'Last updated: March 11, 2026'
      quote: >-
        "Under GDPR, you have the right to: Access ... Rectification ... Erasure: Request deletion of your
        data. For contracts, this means the human-readable text and principal declaration will be replaced
        with "[REDACTED]". The SHA-256 hash is preserved to maintain chain integrity ... Portability: Export
        your contracts in JSON, Markdown, or plain text format via the API or Reader Portal. Objection ...
        We will respond to all requests within 30 days." / "For privacy-related inquiries, data access
        requests, or erasure requests, contact us at privacy@ambr.run."
    note: >-
      A documented request process with a named channel, a response period and a stated erasure mechanism
      specific to the product (redaction that preserves the hash chain). It is a section of the privacy
      policy, not a dedicated intake page (/privacy/requests 404), and no DSR API endpoint is documented.
  ai_transparency:
    url: https://ambr.run/terms
    section: '3. Not Legal Advice / 4. AI-Generated Content'
    evidence:
    - source: https://ambr.run/terms
      http_status: 200
      fetched: '2026-09-19'
      dated: 'Last updated: April 8, 2026'
      quote: >-
        "Contracts generated by Ambr are produced by artificial intelligence from template structures
        informed by legal research. Generated contracts have NOT been reviewed by an attorney." /
        "Contracts are generated using large language models. ... AI-generated output may contain errors,
        omissions, or inaccuracies. You are solely responsible for reviewing all generated contracts
        before use."
    - source: https://ambr.run/privacy
      http_status: 200
      quote: 'Contract data is processed using Anthropic''s Claude API for AI-generated contract text — Anthropic does not retain API inputs/outputs for training purposes.'
    note: >-
      A published, contractual disclosure that the product's output is AI-generated, naming the model
      provider, carried in the Terms and Privacy Policy rather than on a dedicated /ai page (/ai and
      /ai/transparency 404). The A2C consumer templates additionally carry an agent_disclosure parameter,
      and the repo's discovery notes describe them as EU AI Act Art. 50-framed, but that is template
      content, not a page — only the Terms statement is credited here.
  exit_assistance:
    url: https://ambr.run/privacy
    section: '6. Your Rights — Portability'
    evidence:
    - source: https://ambr.run/privacy
      http_status: 200
      fetched: '2026-09-19'
      quote: 'Portability: Export your contracts in JSON, Markdown, or plain text format via the API or Reader Portal.'
    - source: https://github.com/getambr/ambr/blob/master/open-source/reader-portal/README.md
      http_status: 200
      quote: 'contract viewer with human/machine toggle, SHA-256 hash verification, and export (JSON, Markdown, text)'
    note: >-
      Export/portability of the customer's own data in three open formats via API and portal, and an
      MIT-licensed reader that verifies exported contracts independently of Ambr (the spec page: "requires
      no trust in Ambr as an intermediary"). Recorded as the portability half of exit assistance; there is
      no switching/termination-assistance page and no stated exit period.
not_found:
  note: Searched and absent — recorded so the next pass can measure movement rather than re-hunt.
  sbom: 'no SBOM published (never derived); /security/sbom 404'
  support_lifetime: 'no support period stated; the spec page''s URN versioning rule is a compatibility policy, not a support commitment'
  accessibility_conformance: 'no VPAT/WCAG statement; /accessibility 404'
  training_data_summary: none
  global_privacy_control: 'no GPC statement on the privacy page (honored must never be set from a header probe)'
  subprocessors: >-
    no subprocessor list; the privacy policy names Anthropic (Claude API) and Supabase (storage) inside
    prose and /api/health names Stripe, Resend and Base RPC as dependencies, but there is no dated
    subprocessor table, so the signal is not credited
  data_residency: 'not stated (templates carry a data_processing_location parameter for the CONTRACTS they generate, which is not a statement about where Ambr stores data)'
  incident_notification: 'no DPA or breach-notification SLA published; /legal/dpa 404'
  age_assurance: none
  notice_and_action: 'none; /legal/report-content 404'
  transparency_report: 'none; /transparency 404'