Vendor record · spellbook.legal

What Spellbook promises about your data.

Where Spellbook publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

We watch trust.spellbook.legal/subprocessors for Spellbook's sub-processor list, but the page we were watching has gone, and we have not found a replacement.

What has changed

We can't read a sub-processor list or data processing agreement from Spellbook yet, so we can't record a change to either.

Its window

We couldn't quote a notice window: we haven't found a data processing agreement from Spellbook anywhere we've looked.

Window
—

no window we can quote yet

Pages
4

pages we watch

Copies
16

dated copies of all its pages, since August 31, 2026

Spellbook DPA

We have not found a data processing agreement published by Spellbook anywhere we looked. There is no sub-processor notice window we can quote.

Notice windows across every vendor we watch

Spellbook sub-processors

We watch trust.spellbook.legal/subprocessors for Spellbook's sub-processor list, and the page we were watching has gone, and we have not found a replacement.

Every public change we have recorded · Where vendors publish their lists

How long Spellbook keeps your data

Two statements on retention, quoted from its own pages. Spellbook's terms of service (spellbook.legal/terms-of-service, in the copy read October 11, 2026) says: “(v) Abuse Monitoring. Solely with respect to Customers and Users accessing the Spellbook AI Platform through self-service onboarding options, Spellbook may collect, retain for up to 30 days (or longer if required for ongoing investigations or legal compliance), and use Customer Data (including Inputs) to detect and prevent malicious, abusive, or illegal activity.”

Retention

“QA Data will be: (A) retained for no longer than 90 days from the date of collection, then permanently deleted;”

spellbook.legal/terms-of-service · read 2026-10-11

Training on customer data

“(iv) No Third Party LLM Model Training. Customer Data transmitted to Third Party LLMs via the Spellbook AI Platform will not be used to train, improve, or develop the AI models of those Third Party LLMs.”

spellbook.legal/terms-of-service · read 2026-10-11

Training on customer data

“(ii) Usage Data. Spellbook collects certain technical and analytics data and information from its users ("Usage Data"), solely to improve service delivery and platform performance.”

spellbook.legal/terms-of-service · read 2026-10-11

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Certifications the trust page names · SOC 2 Type II

Laws the trust page names · GDPR · HIPAA

Data location · United States

“Where is customer data stored and processed? Spellbook uses cloud providers with data centers in Canada and US for storing and processing customer data.”

spellbook.legal/security · read 2026-10-10

The pages' own stamps: Updated 2026-06-04 · Updated 2026-09-17

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Pricing

spellbook.legal/pricing

2026-10-10

Privacy policy

spellbook.legal/privacy-policy

2026-10-10

Terms of service

spellbook.legal/terms-of-service

2026-10-11

Trust and security

spellbook.legal/security

2026-10-10

Where we get nothing

What Spellbook does not publish where we can read it

Of the 4 public pages we watch for Spellbook, these give us nothing right now.

Sub-processor list

the page we were watching has gone, and we have not found a replacement

trust.spellbook.legal/subprocessors

Data processing agreement

we have not found one published anywhere we looked

Before you conclude anything

This only means we couldn’t read it on a public page. Spellbook may share it in its agreement, a trust portal, or with any customer who asks.

So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”

What this page doesn’t tell you

No score.

Nothing here rates Spellbook. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Spellbook? With an email at spellbook.legal you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Spellbook in your product? Hear the morning we read a change.

You get the lines that moved, in Spellbook’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email