Vendor drift

Document360

Classified material changes to Document360’s public trust documents, from continuous monitoring.

Data as of 2026-09-10 — refreshed on a rolling bake, not live. · document360.com

AI training posture

Prohibits training on customer data · verified

as of 2026-08-12

Recent material changes

  • high · AI subprocessor added · 2026-08-27 · tos

    Document360 added "Eddy AI" to its terms of service, indicating a new AI subprocessor has been integrated into the platform. This represents a material change as customer content may now be processed by this third-party AI service in connection with the platform's AI Components.

  • medium · AI feature launched · 2026-08-26 · trust_center

    Document360 added a new AI-powered feature called "Eddy AI" to their trust center page, described as a conversational assistant that can "Ask anything about Document360." This represents a newly disclosed AI-powered capability, though the diff does not provide details on data processing, retention, or training rights associated with this feature.

  • medium · AI feature launched · 2026-08-25 · ai_disclosure

    Document360 significantly expanded its AI disclosure to prominently feature Eddy AI, a comprehensive AI layer offering multiple new capabilities including AI Search, AI Chatbot, Article Summarizer, Text to Audio, AI Writing Agent, Duplicate Detection, Glossary Generator, MCP Server integration, AI Writer, AI FAQ Generator, and numerous other AI-powered features for both readers and writers. The document now emphasizes enterprise controls, data governance, and commitments that customer content stays within the knowledge base and is not used to train public models.

  • high · Terms changed · 2025-01-01 · ai_disclosure

    Document360 published a comprehensive new AI security policies document disclosing formal security controls, incident response procedures, and AI-specific risk management frameworks for Eddy AI. The document establishes new policies effective January 1, 2025 for AI Risk Assessment and Management and AI Fairness and Bias Management, including requirements for bias testing, quarterly risk reviews, and external bias audits, representing a material expansion of disclosed security and governance commitments.

  • high · AI feature launched · 2026-06-18 · ai_disclosure

    Document360 has newly disclosed Eddy AI, an AI-powered feature that processes customer content (queries and knowledge base data) through OpenAI's GPT-4.1 Mini and GPT-4o models via API. The feature involves data transmission to OpenAI's infrastructure with a 30-day retention period before deletion, and includes vector embeddings stored in MongoDB, representing a material new processing path for customer content.

  • high · Terms changed · 2026-07-16 · ai_disclosure

    Document360 published a comprehensive new AI security policies document for Eddy AI that discloses multiple material commitments including: (1) data retention practices where all prompts are stored for analysis and permanently deleted only when the knowledge base project is deleted; (2) new AI Risk Assessment and AI Fairness and Bias Management policies effective January 1, 2025; and (3) detailed security controls including encryption standards, incident response procedures, and OWASP LLM Top 10 threat mitigations. The document also clarifies that PII is masked before sending to third-party models and that no human reviewers process customer data.

  • high · AI feature launched · 2026-08-12 · ai_disclosure

    Document360 has published a comprehensive disclosure of its "Eddy AI" integrated AI layer, which includes multiple AI-powered features that process customer content: AI Writing Agent (transcribes videos, generates articles from prompts/audio), Article Summarizer, AI Chatbot, Text-to-Audio converter, and content management tools (Alt Text generation, Tag/Title recommendation, SEO metadata generation, Duplicate Content Detection). The disclosure also reveals MCP Server support (v12.3.1) enabling external AI tools like ChatGPT, Claude, and Copilot to connect to and perform operations on customer knowledge bases.

Which of your vendors can train on your data?

Paste your vendor list, confirm your email, and our engine builds your report automatically — which vendors add AI subprocessors or reserve the right to train on your data, and where your nth-party exposure concentrates. Free, delivered during your working day.

Request your free AI exposure report