Vendor record · ibm.com
What IBM promises about your data.
Where IBM publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We haven't found a sub-processor list from IBM anywhere we've looked.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 3, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
We couldn't find a notice window in IBM's data processing agreement at ibm.com/dpa.
- Window
- —
- Pages
- 3
- Copies
- 5
no window we can quote yet
pages we watch
dated copies of all its pages, since August 31, 2026
IBM DPA
IBM's data processing agreement is at ibm.com/dpa; we last read it on October 15, 2026. We have not found a sentence in it that states how much notice customers get before a new sub-processor is engaged, so there is no window we can quote. That is a gap in our reading, not proof that no such term exists.
IBM sub-processors
We have not found a sub-processor list published by IBM anywhere we looked.
Every public change we have recorded · Where vendors publish their lists
How long IBM keeps your data
We hold no statement about data retention from IBM's watched pages. The pages we watch: data processing agreement ibm.com/dpa; privacy policy ibm.com/privacy; terms of service ibm.com/terms. On training with customer data, IBM's privacy policy (ibm.com/privacy, in the copy read October 1, 2026) says: “We use this information to improve and personalize your experience with our websites, provide you with content that you may be interested in, create marketing insights, and to improve our websites, online services, and related technologies.”
Retention windows vendors publish · What vendors say about training
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What IBM does not publish where we can read it
Of the 3 public pages we watch for IBM, these give us nothing right now.
Model or system card
the page at that URL is not that document
www.ibm.com/think/perspectives/model-that-built-it-has-met-its-limits?lnk=hprc3usTrust and security
the page at that URL is not that document
ibm.com/trustSub-processor list
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. IBM may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates IBM. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at IBM? With an email at ibm.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is IBM in your product? Hear the morning we read a change.
You get the lines that moved, in IBM’s own words, and the date any window closes. No card. Nothing to cancel.