Vendor record · h2o.ai

What H2O.ai promises about your data.

Where H2O.ai publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

We haven't found a sub-processor list from H2O.ai anywhere we've looked.

What has changed

We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.

Its window

When it adds a sub-processor, its clause at h2o.ai/legal/dpa (read October 15, 2026) gives you 30 days to object.

Window
30

days to object when it adds a sub-processor

Pages
5

pages we watch

Copies
14

dated copies of all its pages, since August 31, 2026

H2O.ai DPA

H2O.ai's data processing agreement gives 30 days to object to a new sub-processor. Here is the clause, from our October 15, 2026 copy:

30

days to object

“Customer may object to a new Subprocessor within thirty (30) days of such notice on reasonable data protection grounds.”

Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that H2O.ai published it.

h2o.ai/legal/dpa · read 2026-10-15 · fingerprint c84cb97fb0e5f547…

Notice windows across every vendor we watch

H2O.ai sub-processors

We have not found a sub-processor list published by H2O.ai anywhere we looked.

Every public change we have recorded · Where vendors publish their lists

How long H2O.ai keeps your data

We hold no statement about data retention from H2O.ai's watched pages. The pages we watch: data processing agreement h2o.ai/legal/dpa; privacy policy h2o.ai/privacy; terms of service h2o.ai/legal/terms-of-use/; trust and security page h2o.ai/trust; trust and security page h2o.ai/security. On training with customer data, H2O.ai's data processing agreement (h2o.ai/legal/dpa, in the copy read October 15, 2026) says: “AI and Data Use Restrictions Notwithstanding anything to the contrary: (a) H2O.ai will not use Customer Data to train, retrain, fine-tune, or improve any artificial intelligence or machine learning models, except solely for Customer’s benefit and only where expressly agreed in writing.”

Training on customer data

“Customer-provided input data, metadata, and model data are not used to train H2O.ai AI models, unless explicitly agreed in writing.”

h2o.ai/privacy · read 2026-08-31

Training on customer data

“Company will process Customer Personal Data solely as necessary to: (a) provide, operate, support, and improve the Services in accordance with the Agreement and this DPA;”

h2o.ai/legal/dpa · read 2026-10-15

Training on customer data

“In addition to the information you provide, we automatically collect telemetry, logs, and metrics to maintain, secure, and improve our Services.”

h2o.ai/privacy · read 2026-08-31

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Certifications the trust page names · FedRAMP · FedRAMP · IRAP · ISO 27001 · SOC 2 · SOC 2 Type II

Data location · United States

“Personal data is primarily processed in the U.S., but customers can select data residency options where available.”

h2o.ai/privacy · read 2026-08-31

The pages' own stamps: Last updated 2026-04-01 · Last updated 2026-04-25 · Last updated 2025-04-10

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Data processing agreement

h2o.ai/legal/dpa

2026-10-15

Privacy policy

h2o.ai/privacy

2026-10-10

Terms of service

h2o.ai/legal/terms-of-use/

2026-10-11

Trust and security

h2o.ai/trust

2026-10-10

Trust and security

h2o.ai/security

2026-10-12

Where we get nothing

What H2O.ai does not publish where we can read it

Of the 5 public pages we watch for H2O.ai, these give us nothing right now.

Sub-processor list

we have not found one published anywhere we looked

Before you conclude anything

This only means we couldn’t read it on a public page. H2O.ai may share it in its agreement, a trust portal, or with any customer who asks.

So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”

What this page doesn’t tell you

No score.

Nothing here rates H2O.ai. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at H2O.ai? With an email at h2o.ai you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is H2O.ai in your product? Hear the morning we read a change.

You get the lines that moved, in H2O.ai’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email