Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

n8n

Method v1.6As At 2026-08-0719 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-07.

Your Details

The Macro Picture17

Red · Adverse
2
of 17 banded observations across 1 offering band Adverse. 1 was never measured.

1 conditional row (Deployment Mode = Self-Hosted on customer infrastructure. The n8n-operated AI Assistant is not available, and product telemetry is enabled by default.) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.

What Is Published8

Your Own Words3

These safeguards include in particular reliance on adequacy decisions, such as the EU-U.S. Data Privacy Framework, where applicable, the use of Standard Contractual Clauses (SCCs) approved by the European Commission, and additional technical and organizational measures.
Privacy Policy, updated 24 June 2026, international transfers section. The UK route is named separately in the DPA at cl 7.1: 'For data transfers subject to UK GDPR, the parties shall incorporate the UK Addendum'. This records the mechanisms n8n names as EXPORTER. It is not a claim that n8n is itself a DPF participant, and n8n GmbH could not be -- see dpf_regulator_listing. · Source
The data processing agreement found at https://n8n.io/legal/data-processing-agreement/ shall apply ... n8n will not use Customer Content or Output to train machine learning models, as further set out in the AI Terms.
Self-Serve Terms, 6 July 2026. The exclusion is carried by the Terms, which incorporate the AI Terms by reference. It is a contractual term, not a policy statement. · Source
We do not make decisions about you based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
Privacy Policy, 24 June 2026, automated decision-making section. This is a statement about n8n's own processing of its users' data. It says nothing about what a customer's workflow does with its own data subjects, which is the customer's controller obligation, not n8n's. · Source

Parties You Name10

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 19 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-07
Standards Commit
bf4879816614
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-07. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish2

2 questions are open and 6 are established, read as at 2026-08-07 under method v1.6.

The One Thing To Publish First

Publish it: say how long what is sent to an AI provider is kept.

Amber · PartialAI Input Retention

AI Input Retention Value: No period is published. The AI Terms bound retention by a criterion only: n8n will not retain Customer Content 'beyond the time required for AI Feature processing and delivery of Output to Customer'. No retention period is published for AI Assistant conversation history on any surface read.

Where To Put It

This was read on your own page at https://n8n.io/legal/ai-terms/. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

26 organisations in the register say how long what is sent to an AI provider is kept. You publish on it, but not completely.

What A Published Answer Looks Like

By default, all media associated with a recording is retained indefinitely. You can configure your workspace to support zero-data retention, or any other data retention configuration through our API.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published privacy notice. Claim tier Quoted. The organisation that published it is not named.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.