Vendor record · toloka.ai
What Toloka promises about your data.
Where Toloka publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Toloka lists its sub-processors at toloka.ai/legal/dpa_sag. We last read it on October 15, 2026.
- What has changed
We've read its sub-processor list and data processing agreement since October 1, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at toloka.ai/legal/dpa_sag (read October 1, 2026) gives you 30 days' notice.
- Window
- 30
- Sub-processors
- 4
- Pages
- 4
- Copies
- 9
days' notice when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Toloka DPA
We have not found a data processing agreement published by Toloka anywhere we looked. Toloka's sub-processor list gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our October 1, 2026 copy:
30
days' notice
“6.3. Changes. If the Processor adds or changes one or more Sub-Processor(s), it will notify the Controller at least 30 days prior to any such change and provide the Controller the opportunity to object to the engagement of the new Sub-Processors on reasonable grounds relating to the protection of Personal Data within 15 days.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Toloka published it.
toloka.ai/legal/dpa_sag · read 2026-10-01 · fingerprint 08a8bf5b0ac5df50…
Toloka sub-processors
Toloka publishes a sub-processor list at toloka.ai/legal/dpa_sag; we last read it on October 15, 2026. It names 4 entries. The entries, as the list prints them: Databricks, Inc.; Google LLC; Microsoft Azure; Toloka AI B.V.. The same list is in the full table below. The public record holds no change to the list read before September 16, 2026. A change we read after September 16, 2026 is published 30 days after we read it.
4 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Toloka keeps your data
Toloka's privacy policy (toloka.ai/legal/privacy-notice, in the copy read October 15, 2026) says: “The email address submitted for verification is deleted from the verification provider’s systems within 30 days.”
Training on customer data
“Toloka will not be liable for any loss or damage arising from or relating to your use of, or reliance on, any ThirdParty Service. - ## Submissions, Feedback, and Communications. If you submit inquiries, job applications, testimonials, or other materials via forms or email (collectively, "Submissions"), you retain ownership and grant Toloka a worldwide, royaltyfree license to host, use, and an…”
toloka.ai/legal/terms · read 2026-09-13
Training on customer data
“Data Solutions Enterprise Physical AI Platform β Resource Hub Company Arena Log in Talk to us # Toloka Terms of Use Date of publication: November 17, 2025Effective date: November 14, 2025 By accessing or using Toloka’s websites and publicly available pages, incl…”
toloka.ai/legal/terms · read 2026-09-13
Training on customer data
“Categories of recipients: email and marketing platform providers; customer relationship management providers; scheduling and video-conferencing providers; email validation service providers. Website and product analytics We process device, browser, IP address, and usage data from website visitors and platform users to understand how our sites and products are used and to improve them.”
toloka.ai/legal/privacy-notice · read 2026-10-15
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 4
Databricks, Inc.
Google LLC
Microsoft Azure
)
Toloka AI B.V.
Certifications the trust page names · ISO 27001 · ISO 27701 · SOC 2 Type II
Laws the trust page names · GDPR
The pages' own stamps: Last updated 2026-10-12
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Toloka does not publish where we can read it
Of the 4 public pages we watch for Toloka, these give us nothing right now.
Data processing agreement
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. Toloka may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Toloka. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Toloka? With an email at toloka.ai you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Toloka in your product? Hear the morning we read a change.
You get the lines that moved, in Toloka’s own words, and the date any window closes. No card. Nothing to cancel.