Is Cyera safe with your data?
Cyera
Cyera Inc.
Weak disclosure · high confidence
Cyera earns a D (44/100) because it leaves much about its data practices unstated.
#125
of 216 apps ranked
44
score · Security & compliance avg 49
-5
vs category average
Cyera's privacy policy documents data categories, legal bases, named recipients and transfer safeguards in detail, but it says nothing about AI model training, names no retention period, and omits any breach notification commitment.
What Cyera's privacy policy and terms of service say about your data
No training-data disclosure
The policy never addresses whether data submitted to the Cyera platform is used to train or improve models, and offers no opt-out mechanism for such use.
Retention left open-ended
Personal data is kept "for as long as we need to maintain it for legitimate business purposes" with no stated number of days, months or years, though the policy says an internal policy prevents perpetual retention.
Strong transfer and legal-basis detail
Each collection scenario is mapped to a legal basis and named recipients such as Salesforce, Marketo, Frontegg and Mixpanel, and international transfers cite Adequacy Decisions, Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
Security described only in general terms
Protection is described as "a variety of technical, organizational and security measures" with no named controls, and there is no commitment to notify users of a data breach.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Cyera privacy rating
Details
- Category
- Security & compliance
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-02-12
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.