Juro Subprocessors List (November 2026): Changes and History

We track Juro's DPA, privacy policy, terms of service, AI terms, and trust page. We haven't found a published subprocessor list for Juro yet.

Get an email when Juro changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Juro free

AI and customer data at Juro

What Juro's own documents say, with the sentence each answer comes from.

Trains AI models on customer data

No

“Juro may not use Customer Data as training data for any AI models, unless the AI model is used only to provide Services to Customer (Customer-Specific Model).”
AI terms, juro.com ↗
Sends customer data to AI model providers

Yes: Anthropic, Google Cloud, Microsoft Azure, Microsoft Copilot, and OpenAI

“We use Microsoft Azure servers to provide generative AI functionality.”
Privacy policy, juro.com ↗
How to opt out

Not stated in the documents we track.

How long AI features keep data

Juro must erase any Customer-Specific Models within 60 days after termination of the Agreement.

“If Juro does create any Customer-Specific Models, Juro must erase the Customer-Specific Models in its possession within 60 days after termination of the Agreement for any reason.”
AI terms, juro.com ↗

Key DPA terms at Juro

What Juro's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification

Without undue delay, with no set deadline

“Juro will notify Customer without undue delay after becoming aware of a Data Incident, and promptly take reasonable steps to minimize harm and secure Customer Personal Data.”
DPA, juro.com ↗
Notice of a new subprocessor

30 days ahead

“Juro will, at least 30 days before the New Subprocessor starts processing any Customer Data, notify Customer of the engagement”
DPA, juro.com ↗
Transfers outside the EU

Standard contractual clauses and adequacy decisions

“"SCCs" means the Standard Contractual Clauses for the transfer of Personal Data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and the Council approved by European Commission Implementing Decision (EU) 2021/914 of 4 June 2021”
“The parties acknowledge that European Data Protection Law does not require SCCs or an Alternative Transfer Solution in order for Customer Personal Data to be processed in or transferred to an Adequate Country.”
DPA, juro.com ↗
Customer data after the contract ends

Deleted within 60 days of the contract ending

“After a recovery period of up to 60 days from the termination date, Juro will comply with this Instruction as soon as reasonably practicable”
DPA, juro.com ↗
Audit rights

On request

“Juro will, if required under Applicable Data Protection Law, allow Customer or an independent auditor appointed by Customer to conduct audits (including inspections) to verify Juro's compliance with its obligations under the DPA”
DPA, juro.com ↗

Documents we track for Juro

AI terms
checked November 3, 2026 juro.com ↗
DPA
checked November 3, 2026 changed October 2, 2026 juro.com ↗
Privacy policy
checked November 3, 2026 changed October 18, 2026 juro.com ↗
Terms of service
checked November 3, 2026 juro.com ↗
Trust page
checked November 3, 2026 juro.com ↗

Change history

  1. AI terms changed

    Juro added Microsoft Copilot as a model provider.

  2. Privacy policy changed

    Juro added a new integration entry for "Microsoft (Copilot)" stating that enabling the MCP connector lets Microsoft call on your Juro data (contact details, data from your contracts, and identifying data) when you prompt within Copilot's services, and that OAuth-based authentication for this connector also routes data through Ory, Juro's OAuth provider.

  3. September 30, 2026 – October 2, 2026 2 minor wording edits (DPA, Privacy policy) Show Reworded without changing what the documents say.
    1. DPA changed

      This update is purely stylistic: it adds quotation marks around defined terms (e.g. "Additional Security Controls", "Instructions", "New Subprocessor"), capitalizes section headings (e.g. "1. DEFINITIONS"), renumbers one duplicate paragraph (4.3 to 4.4), and spells out "ICO" as "Information Commissioner" in a couple of places.

    2. Privacy policy changed

      The policy renames the 'UK Information Commissioner's Office (ICO)' to the 'UK Information Commission' in the complaints section, and updates the 'last updated' date from 2 April 2026 to 29 September 2026.

Tracking since October 14, 2026. Every change links to the two versions of the document it came from. All vendors' changes →

Juro subprocessors FAQ

Does Juro use customer data to train AI models?
According to its AI terms, Juro does not use customer data to train AI models: “Juro may not use Customer Data as training data for any AI models, unless the AI model is used only to provide Services to Customer (Customer-Specific Model).”
Which AI model providers does Juro send customer data to?
Anthropic, Google Cloud, Microsoft Azure, Microsoft Copilot, and OpenAI are named in Juro's privacy policy: “We use Microsoft Azure servers to provide generative AI functionality.”
How quickly does Juro report a personal data breach to customers?
According to its DPA, Juro reports a personal data breach to customers without undue delay, with no set deadline: “Juro will notify Customer without undue delay after becoming aware of a Data Incident, and promptly take reasonable steps to minimize harm and secure Customer Personal Data.”
How much notice does Juro give before adding a subprocessor?
Juro's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Juro will, at least 30 days before the New Subprocessor starts processing any Customer Data, notify Customer of the engagement”
How does Juro transfer personal data outside the EU?
Juro's DPA relies on standard contractual clauses and adequacy decisions: “"SCCs" means the Standard Contractual Clauses for the transfer of Personal Data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and the Council approved by European Commission Implementing Decision (EU) 2021/914 of 4 June 2021”
How do I find out when Juro adds or removes a subprocessor?
ClauseTrail monitors Juro's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.