Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

Whimsical

Method v1.6As At 2026-08-1510 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-15.

Your Details

The Macro Picture17

Red · Adverse
2
of 17 banded observations across 1 offering band Adverse. 2 were never measured.

What Is Published8

Your Own Words3

The provisions set forth in this Appendix 2 apply to Customer Personal Information originating from or relating to Data Subjects located in the EEA ... Non-receipt of directives under FISA Section 702 ... 'Back Doors' ... Security Testing ... Government Requests: Whimsical shall, unless prohibited by law ..., promptly notify Customer of any request for the disclosure of European Personal Data ... and shall provide reasonable information and assistance ... Whimsical will review applicable law to evaluate and challenge the Disclosure Request ...
Data Processing Addendum, Appendix 2 (EDPB Recommendations 01/2020-based supplementary measures), §1.2-1.6.4. This is a set of standing contractual warranties and procedures, not a published, transfer-specific Transfer Impact Assessment document. Recorded as Onward-Transfer Commitment Only because no dedicated TIA record was located on any surface read this session; Appendix 2 is carried in the narrative report as a materially stronger-than-typical set of supplementary measures for the same reason a TIA would look for one, without treating the commitment itself as the assessment. · Source
Whimsical shall ... promptly notify Customer of any request for the disclosure of European Personal Data by a governmental or regulatory body or law enforcement authority ... and shall provide reasonable information and assistance to customer regarding the request. ... Whimsical will maintain a record of Disclosure Requests and its evaluation, response, and handling of the requests and upon written request will provide Customer with access to such records.
Data Processing Addendum, Appendix 2, §1.6.1 and §1.6.4 · Source
Whimsical currently transfers Customer Personal Information from the EEA or the UK to countries outside the EEA and UK under the Standard Contractual Clauses and UK Addendum, as applicable. ... To the extent such a transfer includes Customer Personal Information subject to Data Protection Legislation of Switzerland, the Standard Contractual Clauses shall be adapted to use for Switzerland.
Data Processing Addendum §7.3, §7.2(c), §7.8. No Data Privacy Framework certification and no Binding Corporate Rules are named anywhere in the DPA; the mechanism relied on is SCCs, extended by the UK ICO Addendum and adapted for Switzerland. · Source

Parties You Name19

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 10 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-15
Standards Commit
3487bce7
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-15. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish3

3 questions are open and 5 are established, read as at 2026-08-15 under method v1.6.

The One Thing To Publish First

Publish it: say how long what is sent to an AI provider is kept.

Red · AdverseAI Input Retention

AI Input Retention Value was not measured under method v1.6. The band on this row is the reading of AI Input Retention, not of that value.

Where To Put It

This was read on your own page at https://whimsical.com/terms/ai-terms. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

26 organisations in the register say how long what is sent to an AI provider is kept. You do not.

What A Published Answer Looks Like

By default, all media associated with a recording is retained indefinitely. You can configure your workspace to support zero-data retention, or any other data retention configuration through our API.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published privacy notice. Claim tier Quoted. The organisation that published it is not named.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.