Is Sana safe with your data?
Sana
Sana Labs AB
Good disclosure · high confidence
Sana earns a B (63/100) because it discloses most of its data practices.
#22
of 216 apps ranked
63
score · Enterprise copilot avg 46
+17
vs category average
Sana states plainly that neither it nor its service providers use personal data to train AI or machine learning models, and that it will not sell personal data, but it names no retention period, no deletion timeline after account closure, and no specific security controls.
What Sana's privacy policy and terms of service say about your data
No training on user data
The notice states that neither Sana nor any of its third party service providers use personal data to train artificial intelligence or machine learning models, and it names the providers it shares data with, including OpenAI, Google, Intercom and Slack.
No sale, and automated decisions ruled out
Sana says it will not sell personal data, confirms it does not sell or share under the CCPA/CPRA, and states it uses no processes for automatic decision-making.
Retention left open-ended
Data is kept only for as long as necessary for the original purposes, with the notice conceding the retention time depends on context and cannot in all cases be specified. No number of days, months or years appears anywhere, and there is no deletion timeline after an account closes.
Security described only in adjectives
Safeguards are called appropriate and consistent with industry-standard practices, without naming encryption, access control or any certification, and the breach commitment promises contact without stating a deadline.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: a deletion timeline after closure or request
- Not stated: shorter retention for AI conversation logs
- Only partial: whether training use differs by plan
Sana privacy rating
Details
- Category
- Enterprise copilot
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-04-22
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other enterprise copilot apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.