Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

MongoDB

Method v1.6As At 2026-08-1119 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-11.

Your Details

The Macro Picture17

Red · Adverse
3
of 17 banded observations across 1 offering band Adverse. 2 were never measured.

1 conditional row (Deployment Mode = Self-Hosted) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.

What Is Published8

Your Own Words3

Schedule 1 of our DPA incorporates the 2021 EU SCCs, the 2022 United Kingdom international data transfer addendum, and certain modifications to the EU SCCs for purposes of the Swiss Federal Act on Data Protection.
Question 2.3. The privacy policy §11 additionally names the EU-US Data Privacy Framework, the UK Extension and the Swiss-U.S. DPF. Schedule 1 §3.1 records the SCC options taken: Clause 7 does not apply; Clause 9(a) Option 2 with the 30-day notice period; Clause 11(a) optional language does not apply; Clause 17 Option 1, Irish law; Clause 18(b) Irish courts. The module is incorporated by formula — 'as the circumstances may require, the applicable module(s)' — rather than by naming the module that governs. · Source
Acting as a data controller under Article 4 of GDPR, and in accordance with our Privacy Policy, we may engage other service providers to perform certain processing activities, including the following:
Framing of the fourth table, 'Other Third-Party Service Providers'. Nineteen processor-side recipients are named across the first three tables, so recipients are named rather than given as categories. The fourth table is expressly non-exhaustive on its face — 'including the following' — and its column is headed 'Headquartered Location'. Several of its entries are described as receiving customer personal data pasted into support tickets, chats and emails, which is the same data population, reached by a different route. Names are recorded for identification only; nothing here is a finding about any of them. · Source
Microsoft Corp (Azure OpenAI); Google LLC (model hosting for the optional embedding and reranking model services); Baseten Labs, Inc. (inference services for the same). All three named United States.
AI Features & Products table, all three rows · Source

Parties You Name19

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 19 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-11
Standards Commit
66058de9d9a2
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-11. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish3

3 questions are open and 5 are established, read as at 2026-08-11 under method v1.6.

The One Thing To Publish First

Publish it: say how long what is sent to an AI provider is kept.

Red · AdverseAI Input Retention

AI Input Retention Value was not measured under method v1.6. The band on this row is the reading of AI Input Retention, not of that value.

Where To Put It

This was read on your own page at https://www.mongodb.com/legal/terms-and-conditions/cloud. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

26 organisations in the register say how long what is sent to an AI provider is kept. You do not.

What A Published Answer Looks Like

By default, all media associated with a recording is retained indefinitely. You can configure your workspace to support zero-data retention, or any other data retention configuration through our API.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published privacy notice. Claim tier Quoted. The organisation that published it is not named.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.