Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

CoreWeave

Method v1.6As At 2026-08-1315 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-13.

Your Details

The Macro Picture17

Red · Adverse
6
of 17 banded observations across 1 offering band Adverse. 2 were never measured.

What Is Published8

Your Own Words3

[Controller] warrants that it has no reason to believe that the laws and practices in the third country of destination applicable to the processing of the personal data by the [Processor], including any requirements to disclose personal data or measures authorising access by public authorities, prevent the [Processor] from fulfilling its obligations under the Clauses.
DPA, Clause 14 (incorporated SCC text). This is the standard clause text itself, not an entity-specific evidenced assessment; no separate CoreWeave transfer impact assessment, FAQ, or supplementary-measures analysis is published on any surface read. · Source
In such instances, CoreWeave will ensure that appropriate safeguards are put in place to protect your personal data, such as the Standard Contractual Clauses approved by the European Commission.
International Data Transfers clause. No Data Privacy Framework claim appears on the Privacy Policy. The DPA separately names 'Controller-to-Processor' (Attachment I) and 'Processor-to-Processor' (Attachment II) SCC sets referencing EU Implementing Decision (EU) 2021/914, but does not state which Module of the standard clauses each Attachment implements. The UK safeguard is referenced only as a generic pointer to ICO guidance, and the Swiss safeguard only as a generic pointer to an FDPIC-referenced supplement -- neither is named as a specific, versioned instrument (contrast a named 'UK Addendum B1.0'), so neither earns a separate transfer-mechanism value under this record. · Source
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Data Retention clause. No specific number of days, months or years is published anywhere on the Privacy Policy, the DPA, or any other surface read. · Source

Parties You Name3

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 15 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-13
Standards Commit
85af5d483112
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-13. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish4

4 questions are open and 4 are established, read as at 2026-08-13 under method v1.6.

The One Thing To Publish First

Publish it: name the AI providers you use.

Red · AdverseAI Providers Named

Ai Provider Region: Not Stated

Where To Put It

This was read on your own page at https://docs.coreweave.com/docs/policies/terms-of-service/privacy-policy. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

73 organisations in the register name the AI providers they use. You do not.

What A Published Answer Looks Like

Microsoft Corp (Azure OpenAI); Google LLC (model hosting for the optional embedding and reranking model services); Baseten Labs, Inc. (inference services for the same). All three named United States.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published sub-processor page. Claim tier Quoted. The organisation that published it is not named.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.