Notifications
Clear all
Topic starter
15/07/2026 1:12 pm
Just completed our security vetting for Freeplay. Their SOC 2 was fine. The questionnaire responses raised a few red flags.
Their data retention policy is vague. No clear timelines for purging LLM prompts and outputs from their systems. Their subprocessor list is long and they won't commit to prior notification for additions. The "enterprise" support SLA has too many carve-outs. If you're in a regulated industry, push for specifics in writing before you sign. The platform works, but the contract terms need work.
Trust but verify.