Vendor record · ultralytics.com

What Ultralytics promises about your data.

Where Ultralytics publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

We haven't found a sub-processor list from Ultralytics anywhere we've looked.

What has changed

We can't read a sub-processor list or data processing agreement from Ultralytics yet, so we can't record a change to either.

Its window

We couldn't quote a notice window: we haven't found a data processing agreement from Ultralytics anywhere we've looked.

Window
—

no window we can quote yet

Pages
5

pages we watch

Copies
50

dated copies of all its pages, since August 31, 2026

Ultralytics DPA

We have not found a data processing agreement published by Ultralytics anywhere we looked. There is no sub-processor notice window we can quote.

Notice windows across every vendor we watch

Ultralytics sub-processors

We have not found a sub-processor list published by Ultralytics anywhere we looked.

Every public change we have recorded · Where vendors publish their lists

How long Ultralytics keeps your data

Ultralytics's privacy policy (ultralytics.com/privacy, in the copy read October 10, 2026) says: “For the Ultralytics Platform (SaaS), technical logs, access logs, and system backups are retained for up to 12 months and then deleted or anonymized.”

Training on customer data

“Where applicable data protection law grants you a right of erasure, nothing in these Terms shall be construed as limiting that right. 9.7 Technical Modifications. You acknowledge that Ultralytics may need to make technical modifications to your User Submissions to conform them to the requirements of connection networks, devices, services, or media, and the licenses above include the right to …”

www.ultralytics.com/legal/terms-of-service · read 2026-10-11

Training on customer data

“We use this data to provide and improve our services, manage our relationship with you, and for the other purposes described in this Policy.”

ultralytics.com/privacy · read 2026-10-10

Training on customer data

“(c) Your Responsibility. You are solely responsible for: (i) determining whether your access to and use of any Third-Party Dataset, and of any model, model weights, or outputs trained, fine-tuned, or evaluated using it, is permitted under the applicable Dataset Terms and applicable law; and (ii) obtaining any rights, licenses, or consents required for such use, including for any commercial de…”

www.ultralytics.com/legal/terms-of-service · read 2026-10-11

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Certifications the trust page names · ISO 27001 · SOC 2

Laws the trust page names · GDPR · HIPAA

International transfer notice · United States

“International Data Transfers# When you access our website or use our Services, your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States.”

ultralytics.com/privacy · read 2026-10-10

Data location · United States

“Multi-region infrastructure: EU, US and APAC residency regions for dataset and model content data”

ultralytics.com/security · read 2026-10-10

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Pricing

ultralytics.com/pricing

2026-10-10

Privacy policy

ultralytics.com/privacy

2026-10-10

Trust and security

ultralytics.com/security

2026-10-10

Where we get nothing

What Ultralytics does not publish where we can read it

Of the 5 public pages we watch for Ultralytics, these give us nothing right now.

Sub-processor list

we have not found one published anywhere we looked

Data processing agreement

we have not found one published anywhere we looked

Before you conclude anything

This only means we couldn’t read it on a public page. Ultralytics may share it in its agreement, a trust portal, or with any customer who asks.

So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”

What this page doesn’t tell you

No score.

Nothing here rates Ultralytics. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Ultralytics? With an email at ultralytics.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Ultralytics in your product? Hear the morning we read a change.

You get the lines that moved, in Ultralytics’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email