Is dbt Labs safe with your data?
dbt Labs
dbt Labs, LLC
Good disclosure · high confidence
dbt Labs earns a B (83/100) because it discloses most of its data practices.
#9
of 177 apps ranked
83
score · Data platform avg 62
+21
vs category average
A corporate website privacy policy that grants a full data-subject rights suite, names its international-transfer safeguards, and commits to no sale of personal information. It is silent on model training, breach notification timeframes, and a children age gate because it covers marketing and website data, not the dbt platform, which the policy expressly carves out. It reserves no harmful rights, so no dealbreaker applies and the grade sits in the B band.
What dbt Labs's privacy policy says about your data
Full rights suite
The policy grants access, deletion, portability, rectification, and objection across GDPR, CCPA, and Virginia frameworks, citing specific articles such as Art. 15 access, Art. 17 erasure, and Art. 20 portability.
Named transfer safeguards
International transfers rely on the European Commission standard contractual clauses, and dbt Labs holds an active EU-U.S., UK, and Swiss Data Privacy Framework certification with the U.S. Department of Commerce.
No sale of personal information
The CCPA section states that dbt Labs does not sell or share personal information, while disclosing limited sharing with service providers acting on its behalf.
Silent on breach and children
The data security section disclaims perfect security and names no breach notification timeframe, and the policy contains no children age gate. Both are scored as silent rather than adverse.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
dbt Labs privacy rating
Details
- Category
- Data platform
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2025-06-11
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.