Samsara

Summary

The diff indicates that approximately 47 words were added, but it does not include the actual wording of those additions.

Legal and Commercial Impact

• The specific changes cannot be assessed without the text of the added language.
• It is not possible to determine whether the additions:
• Expand or restrict either party’s rights;
• Change liability, indemnity, confidentiality, termination, payment, or data-protection obligations;
• Introduce new representations, warranties, or compliance requirements; or
• Modify governing law, dispute resolution, or other contractual terms.

Customer Data and AI Training

The provided diff does not reveal whether customer data may be used to train, fine-tune, evaluate, or otherwise improve AI models.

The added language should be reviewed for terms such as:

• “train,” “fine-tune,” “improve,” “develop,” or “evaluate” models or services;
• “machine learning,” “artificial intelligence,” “generative AI,” or “model outputs”;
• Rights to use customer content or data in aggregated, de-identified, anonymized, or derived form;
• Broad licenses allowing the provider to copy, retain, analyze, or use customer data;
• Opt-out mechanisms, customer consent requirements, or restrictions on human or automated access; and
• Deletion, retention, security, confidentiality, and subcontractor provisions applicable to training data.

Risk Assessment

No new legal or AI-related risks can be identified reliably from the information supplied. The actual 47 added words are necessary to determine whether the amendment creates broader data-use rights or other material obligations.

Structured Summary of Important Changes

1. AI-model training and product improvement

• The diff does not expressly add or remove a right to use customer data to train AI models.
• The existing statement remains substantially the same: Samsara uses the organization’s data “to provide our services and to improve Samsara’s products.”
• This language is broad and does not clarify:
• Whether customer data may be used to train, fine-tune, test, or validate AI or machine-learning models;
• Whether identifiable, pseudonymized, or aggregated data may be used;
• Whether data may be shared with AI vendors or subprocessors;
• Whether customer data is used to improve services for other customers;
• Whether customers can opt out or require deletion from training datasets; or
• Whether inputs, outputs, telemetry, or derived data are retained for model development.
• The addition of “TRUST IN AI: ISO 42001 CERTIFIED” and reference to ISO 42001:2023 signals a formal AI-governance framework, but certification does not itself create contractual limits on AI training or provide customer control rights.
• Risk: Customers requiring strict restrictions on AI training should not rely on this policy alone. The DPA, service agreement, AI terms, and product-specific documentation should be reviewed for explicit training permissions and opt-out rights.

2. Privacy governance and compliance language

• The policy is reorganized to emphasize Samsara’s Privacy and Ethics Board, transparency, responsible innovation, and company-wide safeguards.
• References to GDPR and CPRA are retained but consolidated. The policy now also expressly mentions the EU and UK GDPR, Swiss FADP, CPRA, and other relevant privacy laws.
• The language is more general and promotional in places, replacing specific descriptions of customer assistance and data portability with broader statements about transparency and compliance.
• Risk: General commitments may be less precise than the removed language and may not establish enforceable obligations unless incorporated into the customer contract or DPA.

3. Controller/processor roles

• The revised language expressly states that Samsara acts as the “data processor” or “service provider,” while customers act as the “data controller” or “business.”
• It directs customers to the DPA and customer contracts for details about processing.
• Positive effect: This more clearly frames the intended allocation of regulatory roles.
• Risk: The policy is not a substitute for the DPA and does not explain whether Samsara acts as an independent controller for any uses, such as analytics, product improvement, security, or AI development.

4. International transfers and security

• Data-transfer discussion is retained and tied to the DPA.
• Security claims remain broadly similar, including encryption, AWS hosting, SOC 2-related audits, and annual penetration testing.
• Risk: Marketing-level security statements do not specify service levels, incident obligations, deletion timelines, or remedies.

5. Editorial and practical changes

• Numerous changes merely standardize apostrophes, headings, punctuation, contact details, and formatting.
• A legal-information disclaimer is removed or repositioned during the rewrite.
• Action point: Confirm the final webpage is not presented as overriding the DPA or other negotiated contractual terms.

Summary of Important Changes

1. Website and Terms Navigation

• The page title and navigation were substantially reorganized.
• New or more prominently linked materials include:
• Hardware Terms of Service
• Product Terms of Service
• Third Party Terms of Service
• Training Webinars
• Privacy Policy
• Data Protection Addendum
• Hosted Software SLA
• Hardware Warranty and RMA Policy
• Biometric Data Retention and Destruction Policy
• Face Recognition and Biometric Data Commitment
• Transparency Report
• Requesting Customer Data
• These linked documents may contain important contractual, privacy, biometric-data, service-level, and data-processing obligations. Customers should review them separately because the changes to the navigation do not necessarily mean their substantive terms were amended.

2. Effective Date and Contract Formation

• The page now states “Last Updated: May 2026.”
• The terms appear to apply to Samsara, Inc., a Nevada corporation, and other legal entities accessing the Site on whose behalf a user acts.
• The acceptance mechanism was clarified:
• Samsara may provide notice of changes when a user logs in or by email.
• Continued use or access after revised terms are posted constitutes acceptance.
• Account holders may reject changes by requesting account termination within seven days after receiving notice.
• Risk: The seven-day termination window may be short, and continued use can bind the customer to revised terms without a separately signed amendment. Customers should maintain current email details and monitor notices.

3. Customer Information and Contributions

• The provisions concerning information submitted through the Site continue to defer processing of personal data to Samsara’s Privacy Policy.
• Samsara retains discretion to monitor, remove, refuse, or disclose user Contributions, including their transmission circumstances, for legal enforcement or other purposes.
• Samsara disclaims responsibility for storing Contributions and user information or personalization settings.
• Risk: The Website Terms themselves do not provide detailed limits on retention, secondary use, security, or deletion of customer-submitted information. Those issues must be assessed under the Privacy Policy and Data Protection Addendum.

4. AI Model Training and Use of Customer Data

• No express new provision authorizing or restricting the use of customer data to train AI models appears in this diff.
• The presence of links to “Samsara Intelligence,” AI-related products, the Privacy Policy, and biometric-data policies does not itself establish whether customer data may be used for:
• Training or improving generative AI or machine-learning models;
• Product development, analytics, or benchmarking;
• Human review or labeling;
• Training by vendors or subprocessors; or
• Opt-out, deletion, or model-retention rights.
• Important gap/risk: Customers should not assume that the Website Terms prohibit AI training or provide an opt-out. Review the Product Terms, Privacy Policy, Data Protection Addendum, and any order-specific terms for an explicit data-use restriction and customer-control mechanism.

5. Other Notable Changes and Issues

• The warranty disclaimer was reformatted to state that the Site is provided “AS IS” AND “AS AVAILABLE,” without apparent substantive expansion.
• Contact and DMCA information was reorganized. One new email appears as legalnotices@samara.com, while other provisions use legalnotices@samsara.com.
• Risk: The inconsistent “samara.com” address may be a typographical or routing error and could cause notices to be misdirected.
• Most remaining changes appear editorial, formatting-related, or navigation-related rather than substantive.

Summary

The diff states only that approximately 47 words were added to the document. It does not provide the actual added language.

Legal and Business Impact

Because the text of the addition is unavailable, it is not possible to determine whether the change:

• Creates new obligations or liabilities;
• Changes payment, termination, confidentiality, security, or indemnity provisions;
• Expands the customer’s grant of rights or licenses;
• Changes ownership of data, content, or intellectual property;
• Permits disclosure of information to third parties;
• Modifies compliance, audit, or regulatory requirements; or
• Conflicts with existing provisions.

AI Training and Customer Data

The diff does not identify whether customer data may be used to train, fine-tune, evaluate, or improve AI models. The available description contains no substantive language addressing:

• Use of customer data or prompts for model training;
• Whether training is automatic, optional, or subject to consent;
• Use of de-identified, aggregated, or pseudonymized data;
• Retention of customer inputs or outputs;
• Sharing data with model providers or subprocessors;
• Opt-out rights or deletion procedures; or
• Restrictions on using confidential or personal information for training.

Risk Assessment

Assessment: Unable to determine. The stated addition may contain material legal changes, but no reliable risk analysis can be performed without the actual 47 words and, ideally, the surrounding contractual language.

The added text should be provided in full, together with the relevant prior wording if it replaces or modifies an existing provision.

Executive Summary

The diff is primarily a rewrite, reorganization, and grammatical cleanup of Samsara’s privacy/trust content. It does not appear to introduce an express right to use customer data to train AI models. However, existing broad language allowing use of organizational data to “provide our services and to improve Samsara’s products” remains important and could potentially encompass AI development unless limited elsewhere in the governing agreement or DPA.

Key Legal and Commercial Changes

1. Customer-data use remains broadly defined

• The revised language states that Samsara uses the customer’s data:
• “to provide our services”; and
• “to improve Samsara’s products.”
• There is no added limitation stating that customer data will not be used to train, fine-tune, validate, or evaluate AI or machine-learning models.
• There is also no express customer consent, opt-out, de-identification requirement, retention limit, or restriction on using aggregated or derived data for product development.

Risk: “Improve products” is broad and potentially ambiguous. It may permit uses beyond ordinary service delivery, including analytics, model development, benchmarking, or AI feature improvement, depending on the contract and definitions of “customer data” and “personal data.”

2. No express AI-training authorization or prohibition

• The diff does not add language specifically authorizing AI-model training.
• It also does not add a prohibition on using customer content, telemetry, video, location data, driver information, or other customer inputs to train general-purpose or internal AI models.
• The addition of ISO 42001 certification language signals Samsara’s AI-governance efforts, but certification is not a contractual restriction on data use and does not establish ownership, confidentiality, or model-training limits.

Recommended review: Examine the DPA, master agreement, product-specific terms, acceptable-use terms, and any AI addendum for language addressing:

• training or fine-tuning models;
• human review of inputs or outputs;
• use of data to improve services;
• de-identification and aggregated data;
• model ownership and derived data;
• deletion and retention after termination; and
• opt-out or consent mechanisms.

3. Processor/service-provider positioning is emphasized

The revised text more clearly states that Samsara acts as the customer’s “data processor” or “service provider,” while the customer acts as the “data controller” or “business.”

Risk: This may reinforce a limited processing role for customer personal data, but the public-facing statement is not a substitute for the DPA. If Samsara uses data for its own product-development or AI purposes, the parties should confirm that such use is compatible with the processor/service-provider role under applicable law.

4. Compliance and transparency statements are reorganized

References to GDPR, UK GDPR, FADP, CPRA, data transfers, DPIAs, security, and transparency reporting are consolidated and rephrased. These appear largely descriptive rather than granting new contractual rights.

Important limitation: Statements such as “we will not disclose” data without permission unless legally compelled may be subject to exceptions and should be compared with the operative agreement and subprocessors provisions.

Executive Summary

The diff is primarily editorial and reorganizes the privacy/compliance content. Most changes replace typographic apostrophes with straight apostrophes, correct grammar, or restructure headings and contact information. However, several substantive changes affect how the document describes data use, regulatory roles, and customer protections.

Important Substantive Changes

1. Customer data use and product improvement

• The document continues to state that Samsara uses the organization’s data:
• “to provide our services”; and
• “to improve Samsara’s products” and provide a better experience.
• The diff does not expressly add or remove permission to use customer data to train AI models, nor does it define:
• whether customer data may be used to train, fine-tune, or validate generative or predictive AI models;
• whether data is de-identified or aggregated before such use;
• whether customer content, telemetry, video, or personal data is excluded from training;
• whether customers have an opt-out or deletion right; or
• whether trained models may be retained after contract termination.
• The new reference to Samsara’s ISO 42001:2023 certification signals an AI-management framework, but certification alone does not establish contractual limits on AI training or create a customer opt-out right.
• Risk: The broad “improve products” language may be interpreted as permitting certain analytics or machine-learning development, depending on the governing agreement and DPA. Customers should confirm the separate contract, DPA, and AI/data-use terms.

2. Clarified controller/processor relationship

The revised text expressly states that:

• Samsara acts as the “data processor” or “service provider”; and
• customers act as the “data controller” or “business.”

This is helpful for regulatory clarity, but the operative obligations remain in the DPA and customer contracts. The webpage language should not be treated as replacing those agreements.

3. Privacy-law coverage

The revised section expressly references:

• EU and UK GDPR;
• Swiss FADP;
• CPRA; and
• other relevant privacy laws.

The wording shifts from emphasizing assistance with international data mobility and compliance to a more general statement about transparency regarding how Samsara maintains and uses personal data. This may reduce the specificity of the prior marketing commitment concerning seamless and safe cross-border data movement.

4. Removal of legal disclaimer

The prior disclaimer stating that the content was informational, not legal advice, and that customers should consult legal counsel is removed. This does not itself create a customer obligation, but it makes the webpage appear more like an authoritative compliance statement and could create interpretive or reliance concerns.

5. Governance and transparency

The Privacy and Ethics Board discussion is substantially reorganized, with customers directed to contact their account representative or sales@samsara.com for more information. The transparency statement that Samsara will not disclose customer data without permission unless legally compelled remains substantively unchanged.

Recommended Review

Confirm that the DPA and AI-specific terms expressly address customer-data training, model development, de-identification, retention, opt-out rights, subprocessors, and post-termination use.

Summary

The diff only states: “Added approximately 47 words to the document.” It does not include the actual text that was added, deleted, or replaced.

Key Legal Changes

• No substantive changes can be identified from the information provided.
• The nature of the added language—such as changes to liability, confidentiality, intellectual property, data rights, termination, or governing law—cannot be assessed.

AI Training and Customer Data

• No determination is possible regarding whether the customer’s data may now be:
• Used to train, fine-tune, or improve AI models;
• Shared with affiliates, vendors, or third parties for AI development;
• Retained for model-training purposes after account termination;
• De-identified, aggregated, or otherwise processed for model training; or
• Excluded from training except with the customer’s consent.

Risk Assessment

The actual 47-word addition is required to evaluate whether it creates new risks, including:

• Expanded rights to use customer content or personal data;
• Reduced confidentiality protections;
• Broader licensing or ownership provisions;
• Use of data to train commercial AI systems;
• Lack of opt-out or consent requirements;
• Indefinite retention or reuse of data; and
• Conflicts with privacy laws or the parties’ data-processing obligations.

Please provide the full redline text, including the words inside {}, [], and []{}, for a substantive analysis.

Key Changes and Risks

1. Customer-data use and AI training

• The statement that Samsara uses the customer’s data “to provide our services and to improve Samsara’s products” remains substantively unchanged, aside from punctuation/typographical edits.
• The diff does not expressly add or remove language authorizing the use of customer data to train AI models, nor does it define:
• whether customer data may be used to train, fine-tune, or evaluate models;
• whether data is aggregated, anonymized, or de-identified first;
• whether customer data may be shared with AI vendors or subprocessors;
• whether customers can opt out; or
• whether AI models retain or reproduce customer information.
• The addition of an ISO 42001:2023 certification for Samsara’s Connected Operations Cloud signals an AI-governance and responsible-AI framework. However, certification alone does not establish contractual limits on AI training or provide customer-specific protections.
• Risk: The broad phrase “improve Samsara’s products” may continue to permit product-development activities, potentially including machine-learning development, unless the DPA or other contract documents impose narrower restrictions. Customers should obtain express written confirmation of Samsara’s AI-training practices and any opt-out rights.

2. Expanded and reorganized privacy/compliance description

• The material is substantially rewritten and reorganized around privacy principles, product controls, security, compliance, and customer support.
• References to the EU and UK GDPR, Swiss FADP, and CPRA are retained or repositioned. The revised text presents Samsara as committed to transparency and compliance but generally does not create specific new contractual obligations.
• The revised wording emphasizes assistance with customer compliance rather than the prior focus on customers’ ability to move data seamlessly between countries.
• Risk: Marketing and explanatory statements may be less specific than the removed language and should not be treated as replacing the operative DPA, data-transfer terms, or customer agreement.

3. Data-controller/processor relationship clarified

• New language expressly states that Samsara acts as the customer’s “data processor” or “service provider,” while the customer acts as the “data controller” or “business.”
• The text now directs customers to the DPA for details on how Samsara processes customer personal data.
• Risk: This reinforces customer responsibility for determining lawful purposes, notices, and instructions. The practical effect depends on the DPA, including permitted processing, subprocessors, international transfers, deletion, audits, and assistance obligations.

4. Transparency and disclosure language

• The commitment not to disclose customer data to third parties without permission unless legally compelled is retained, with minor editorial changes.
• References to the Privacy and Ethics Board are expanded and repositioned, with customers directed to contact an account representative or sales email for further information.
• Risk: Statements about permission and disclosure may be qualified by the operative agreement, legal process, subprocessors, and applicable law.

5. Security and governance

• Security claims, encryption, AWS hosting, SOC 2 processes, audits, and penetration testing remain generally unchanged.
• The ISO 42001 certification is newly highlighted.
• Most remaining changes are grammatical, formatting, heading, and contact-information corrections rather than substantive allocation of liability or security duties.

Summary

The provided diff does not include the actual contractual language. It only states:

> “Added approximately 93 words to the document”

Without the 93 added words—and any surrounding text—it is not possible to determine:

• What contractual obligations or rights changed;
• Whether liability, indemnity, confidentiality, security, or termination terms were revised;
• Whether the customer granted new rights to use its data;
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
• Whether such use is subject to consent, opt-out, anonymization, aggregation, or purpose limitations; or
• Whether data may be shared with affiliates, subprocessors, or third-party model providers.

AI-Training Review

No AI-training language is visible in the supplied diff. Accordingly, no conclusion can be reached about whether the amendment:

• Permits training on customer prompts, inputs, outputs, files, or personal data;
• Allows retention of data for model development or improvement;
• Grants the provider ownership or a broad license over customer data;
• Uses data in de-identified or aggregated form;
• Applies different rules to consumer and enterprise services; or
• Provides an opt-out or deletion mechanism.

Information Needed

Please provide the actual redline text, including:

1. The 93 added words;

2. Any deleted or replaced language;

3. The section heading and surrounding provisions; and

4. If applicable, the prior and revised versions of the affected clause.

Once provided, the changes can be analyzed for legal effect and specific risks, particularly regarding AI-model training and the use, retention, disclosure, and ownership of customer data.

Summary

The provided diff states only that approximately 47 words were added, but does not include the actual added language or identify where it appears in the document.

Key Changes

• No substantive contractual changes can be evaluated from the information provided.
• The nature, scope, and legal effect of the 47 added words are unknown.
• It is not possible to determine whether the additions modify:
• Data ownership or licensing rights;
• Confidentiality obligations;
• Security or privacy requirements;
• Customer use restrictions;
• Liability, indemnification, or termination rights; or
• Any other contractual obligations.

AI Training and Customer Data

The diff does not provide enough text to determine whether customer data may be used to train, fine-tune, evaluate, or improve AI models.

In particular, the available information does not reveal whether the contract:

• Permits use of customer data or prompts for model training;
• Limits training use to de-identified, aggregated, or anonymized data;
• Requires the customer’s prior consent or provides an opt-out;
• Allows use of data by affiliates, subprocessors, or third-party model providers;
• Grants the provider ownership or broad usage rights over inputs, outputs, or derived data; or
• Requires deletion or prevents retention of customer data after termination.

Risk Assessment

No specific new legal risks can be identified without the actual 47-word addition. The missing text could materially affect the customer’s privacy, intellectual-property, confidentiality, or AI-related risks.

Required for a reliable analysis: the full text of the added language, preferably with the surrounding unchanged provisions and any deleted or replaced text.

Summary

The provided diff does not include the actual contract language. It only states that approximately 112 words were added. As a result, it is not possible to identify:

• Changes to the parties’ rights or obligations;
• New liability, indemnity, confidentiality, or security risks;
• Changes to data ownership or permitted data uses;
• Whether customer data may be used to train, fine-tune, test, improve, or evaluate AI models; or
• Whether the customer has any consent, opt-out, deletion, or restriction rights concerning AI training.

AI-Training Review

No conclusion can be reached regarding AI-model training because the added wording is not provided. In particular, the review should determine whether the new language:

• Authorizes use of customer data, prompts, outputs, or usage metadata to train or improve models;
• Applies by default or only with the customer’s affirmative consent;
• Covers personal data, confidential information, or regulated data;
• Permits use by affiliates, subprocessors, or third-party model providers;
• Allows retention of data after termination;
• Provides anonymization or de-identification protections;
• Gives the customer an opt-out or deletion right; and
• Limits the provider from using customer data to develop products for competitors.

Information Needed

Please provide the actual redline text, including the approximately 112 added words and any surrounding provisions. The additions should be shown in {braces} and deletions in [brackets] as described. Without the substantive language, a legal-risk analysis would be speculative.

Summary of Important Changes

1. No express change to AI-model training rights

The diff does not expressly authorize or prohibit using customer data to train AI models. It contains no clear language addressing:

• Training, fine-tuning, or validating AI or machine-learning models;
• Whether customer data or derived data may be used for model development;
• De-identification or aggregation of customer data for AI purposes;
• Whether customer data is excluded from training by default;
• Customer opt-out, consent, or deletion rights relating to AI training; or
• Ownership of AI-generated outputs or model improvements.

The statement that Samsara uses the organization’s data “to provide our services and to improve Samsara’s products” remains broad. Depending on the governing contract and definitions of “improve,” this could potentially encompass analytics or AI-related product development. Customers should seek an express clarification that customer data, including telemetry, video, personal data, and usage data, will not be used for AI training except as specifically permitted in the agreement.

The addition or retention of an “ISO 42001” certification reference indicates an AI-governance framework, but certification does not itself limit data use or create a customer opt-out right.

2. More explicit controller–processor allocation

The revised language expressly states that, under the EU and UK GDPR, Swiss FADP, CPRA, and other applicable laws:

• Samsara acts as the customer’s “data processor” or “service provider”; and
• The customer acts as the “data controller” or “business.”

This may provide useful compliance clarity, but it also reinforces that customers remain responsible for determining the purposes and lawful basis for processing, providing notices, and managing employee/driver privacy obligations. The precise legal effect will depend on the DPA and customer contract, which should control over this general privacy statement.

3. Reduced or reframed compliance and portability language

The prior text emphasized helping customers comply with privacy laws and move data seamlessly and safely between countries. The revised text focuses more on Samsara’s transparency regarding how it maintains and uses personal data and on helping customers comply with GDPR and CPRA.

Potential risks include:

• Less prominent commitment to data portability or migration assistance;
• No clear operational promise regarding cross-border transfers in this text; and
• Removal of the express disclaimer directing customers to their legal teams and outside counsel, which may make the page appear more substantive, although it remains general marketing/compliance content.

4. Governance and transparency changes

The revised text gives greater prominence to Samsara’s Privacy and Ethics Board and directs customers to contact an account representative for more information. This may improve governance visibility, but it does not create specific contractual rights, audit rights, approval rights, or remedies.

The commitment not to disclose customer data to third parties without permission unless legally compelled appears substantively unchanged.

5. Mostly non-substantive edits

Many changes merely standardize apostrophes, punctuation, headings, contact details, and formatting. Security descriptions—encryption, AWS hosting, SOC 2-related audits, and annual penetration testing—appear materially unchanged.

Summary of Important Changes

1. Updated Terms and Website Structure

• The terms are now labeled “Last Updated: May 2026.”
• The website header and navigation have been substantially reorganized, adding or highlighting links to:
• Terms of Service
• Hardware and Product Terms
• Third-Party Terms
• Training Webinars and Videos
• Hosted Software SLA
• Hardware Warranty and RMA Policy
• Data Protection Addendum
• Privacy Policy
• Biometric Data Retention and Destruction Policy
• Face Recognition and Biometric Data Commitment
• Requesting Customer Data and Transparency Report pages
• These appear primarily to be navigational or presentation changes, but the linked policies may contain material obligations. Customers should review them because incorporation or practical reliance on linked terms may affect their rights.

2. Acceptance of Modified Terms

• The amendment process is expanded. Users agree to modified terms by:

1. Continuing to access or use the Site after updated terms are posted; or

2. If they have an Account, failing to request termination of the Account.

• This creates a stronger “passive acceptance” mechanism and may make it harder for account holders to reject changes without terminating their accounts.

3. Data Use and AI Training

• No express new language authorizing Samsara to use Customer Data to train AI models appears in this diff.
• The changes add links to materials concerning Samsara Intelligence, facial recognition, biometric data, privacy, and data protection, but the diff does not amend the operative data-use provisions or expressly state that customer data may—or may not—be used for:
• Training generative AI or machine-learning models;
• Improving AI systems;
• Creating aggregated or de-identified datasets; or
• Sharing data with AI vendors.
• Accordingly, this diff does not establish a clear new AI-training right, but customers should not assume that no such use is permitted. The Privacy Policy, Data Protection Addendum, Product Terms, and any AI-specific terms should be reviewed for those permissions, especially concerning video, audio, location, driver, biometric, and other telemetry data.

4. Copyright Notice Email Error

• A new copyright-notice address appears as legalnotices@samara.com, while the corrected address elsewhere is legalnotices@samsara.com.
• “Samara.com” appears to be a typo and could cause notices to be misdirected or ineffective. This should be corrected before publication.

5. Other Changes

• The company is described as a Nevada corporation with a principal place of business, and contact details are more fully displayed.
• Formatting, spacing, punctuation, navigation, and typographical corrections are extensive but generally non-substantive.
• The disclaimer formatting changes “AS IS AND AS AVAILABLE” to “AS IS” AND “AS AVAILABLE” without changing the apparent legal effect.

Summary of Important Changes

1. No Apparent Change to Customer-Data AI Training Rights

• The diff does not add or modify language expressly authorizing Samsara to use customer data, personal data, telemetry, video, biometric data, or other Customer Content to train, fine-tune, test, or improve AI models.
• The revised website navigation adds links to materials concerning:
• Samsara Intelligence;
• Face recognition and biometric data;
• Biometric data retention and destruction;
• Privacy and data protection.
• These appear to be website-navigation changes rather than substantive contractual grants of AI-training rights. However, the linked documents may contain relevant terms and should be reviewed separately.
• The existing language concerning the Privacy Policy and user Contributions remains generally broad: Samsara may process information submitted through the Site as described in the Privacy Policy, and may monitor, remove, disclose, or otherwise handle Contributions in its discretion. This could still create data-use issues depending on how “Contributions” and “personal data” are defined in the linked policies.

2. Website-Terms Acceptance Mechanism Clarified

The amendment states that users agree to modified Website Terms by either:

1. continuing to use or access the Site after revised terms are posted; or

2. if they have an Account, failing to request termination within seven days after receiving notice.

Risk: Continued use and inaction may constitute acceptance of material changes, including changes in privacy, data use, liability, or dispute terms. Customers should monitor notices and terminate or object within the stated period where appropriate.

3. Expanded/Reorganized Website Navigation

The page now presents links to additional Samsara terms, policies, and resources, including Hardware Terms, Product Terms, Third-Party Terms, Training Webinars, a Data Protection Addendum, Privacy Policy, and biometric-data commitments.

Risk: Incorporation by hyperlink or practical reliance on multiple linked documents may make the overall contractual framework harder to assess. Confirm which documents are incorporated into the agreement and which can be changed independently.

4. Liability and Warranty Language

The “as is” disclaimer was reformatted to read "AS IS" AND "AS AVAILABLE"; no apparent substantive limitation was added. Existing broad warranty disclaimers, liability limitations, release provisions, and indemnities remain.

5. Contact and Copyright-Notice Changes

• The general contact address was added as info@samsara.com.
• A copyright notice includes legalnotices@samara.com, which appears to omit the second “s” in “Samsara” and may be a defective or misdirected address.
• The correct address legalnotices@samsara.com is also shown elsewhere.

6. Primarily Editorial Changes

Most remaining changes correct spacing, punctuation, headings, formatting, navigation text, and possessives. No clear substantive change to ownership of Site content, feedback assignment, conduct restrictions, termination rights, or governing legal protections is apparent.

Summary

The provided diff does not include the actual added or deleted contractual language. It only states:

> “Added approximately 47 words to the document”

Accordingly, no reliable legal analysis can be performed.

AI Training and Customer Data

• The diff does not identify whether customer data may be used to:
• Train or fine-tune artificial intelligence or machine-learning models;
• Improve products or services;
• Create aggregated, anonymized, or de-identified datasets;
• Develop features, algorithms, or models for other customers;
• Share data with affiliates, vendors, or model providers.
• It is therefore impossible to determine whether the contract introduces new permissions, restrictions, ownership rights, confidentiality obligations, or opt-out rights concerning AI training.

Other Potential Legal Changes

The missing 47 words could affect important issues such as:

• Data ownership and license scope;
• Confidentiality and permitted use;
• Security and privacy obligations;
• Data retention and deletion;
• Subprocessors or third-party service providers;
• Intellectual-property ownership;
• Warranties, indemnities, or liability limitations;
• Termination rights or post-termination data handling.

Required Information

Please provide the actual text of the 47-word addition, together with any surrounding language or a complete redline. Without that text, it is not possible to identify the specific contractual changes or associated risks.

Summary

Scope of the Change

• The diff states only that approximately 47 words were added to the document.
• The actual added language is not provided.

Legal and Commercial Impact

• No substantive legal changes can be identified from the information supplied.
• It is not possible to determine whether the addition changes:
• Customer rights or obligations;
• Liability, indemnities, warranties, or remedies;
• Confidentiality or data-protection obligations;
• Ownership or licensing of data, content, or intellectual property;
• Termination, audit, security, or compliance requirements.

AI Training and Data Use

• The diff does not reveal whether customer data may be:
• Used to train, fine-tune, or improve AI models;
• Combined with other customers’ data;
• Retained after termination;
• Reviewed by personnel or shared with third-party AI providers;
• Used in anonymized, aggregated, or de-identified form.
• Accordingly, no conclusion can be reached about whether the contract introduces or expands any AI-training rights.

Risk Assessment

• Assessment: Not determinable from the supplied diff.
• The precise 47-word addition is required to identify new permissions, restrictions, or risks.

Recommended Next Step

Provide the actual inserted wording, ideally with the surrounding clause and any related definitions. Particular attention should be given to terms such as “customer data,” “improve,” “develop,” “train,” “machine learning,” “models,” “aggregated,” “de-identified,” and “service providers.”

Summary

The diff only states that approximately 93 words were added, but does not include the actual added language or identify where it appears.

Legal and Risk Analysis

• Substantive changes: Cannot be determined without the text of the 93 added words.
• Customer data use: No conclusion can be drawn about whether the changes:
• Permit customer data to be used to train, fine-tune, or improve AI models;
• Allow use of customer content for model evaluation, testing, or analytics;
• Expand data-sharing rights with affiliates, vendors, or third parties;
• Make customer data part of a broader “service improvement” or “product development” permission;
• Create opt-in, opt-out, consent, or deletion rights; or
• Change confidentiality, ownership, retention, or security obligations.
• New legal risks: Cannot be assessed from the information provided. The added language could potentially affect data ownership, privacy compliance, confidentiality, intellectual-property rights, or regulatory obligations, but there is no basis to determine whether it does.

Needed Information

Please provide the actual 93-word addition, preferably with the surrounding contract language and any deletion or replacement markers. Without the text, a reliable legal comparison is not possible.

Executive Summary

The diff is primarily a substantial rewrite and reorganization of Samsara’s privacy, compliance, and security content. Most changes are stylistic, grammatical, or structural. However, several substantive changes affect how Samsara describes data use, regulatory roles, international compliance, and AI governance.

Key Changes and Risks

1. Customer-data use remains broad

The revised language states that Samsara uses the organization’s data:

• “to provide our services”; and
• “to improve Samsara’s products” and provide a better experience.

This continues to permit product improvement using customer data. The language does not define:

• what “improve” includes;
• whether data may be aggregated, de-identified, or shared internally;
• whether customer data may be used to develop or train machine-learning or generative-AI models;
• whether customer consent or an opt-out is required; or
• how long data used for improvement is retained.

AI-training impact: The diff does not expressly add or remove a right to train AI models on customer data. It also does not expressly prohibit that use. Because “improve Samsara’s products” is broad, the revised wording could potentially be relied on to support AI-related product development unless the DPA, service agreement, or AI-specific terms impose clearer restrictions.

2. New AI-governance reference

The revised text adds that Samsara’s Connected Operations Cloud has received ISO 42001:2023 certification, an AI-management-system standard.

This is a positive governance and risk-management signal, but certification:

• does not itself authorize use of customer data for AI training;
• does not guarantee that customer data is excluded from model training;
• does not replace contractual limits, data-processing instructions, or security obligations; and
• does not necessarily cover every Samsara product or processing activity.

Customers should request confirmation of the scope of the certification and Samsara’s specific AI-training policy.

3. DPA and controller/processor language is made more prominent

The revised material expressly states that, under the EU and UK GDPR, Swiss FADP, CPRA, and other relevant laws, Samsara will act as the customer’s “data processor” or “service provider,” while the customer acts as the “data controller” or “business.”

This clarifies the intended relationship and may support customer compliance. However, the statement is qualified by references to applicable law and customer contracts; it should not be treated as controlling if a particular processing activity makes Samsara an independent controller or business.

4. Reduced operational detail

The prior text included more specific discussion of:

• moving data seamlessly and safely between countries;
• helping customers understand GDPR and CPRA compliance; and
• certain compliance-related support.

The revised wording focuses more generally on transparency, personal-data use, and contractual safeguards. This may reduce practical commitments and should be checked against the DPA and service agreement.

5. Security and privacy commitments

The revised text continues to describe encryption, AWS storage, access controls, audits, penetration testing, privacy controls, and non-disclosure of customer data absent permission or legal compulsion. These appear largely preserved, though the repeated restructuring makes it important to verify that no operative contractual language was inadvertently omitted from the final publication.

Recommended Follow-Up

Obtain written confirmation that customer data, prompts, outputs, telemetry, and derived data will not be used to train or fine-tune AI models without express authorization, and identify the controlling terms in the DPA or AI addendum.

Summary of Important Changes

1. No apparent AI-training authorization

• The diff does not add language permitting Samsara to use customer data, user content, vehicle data, video, audio, biometric data, or other customer information to train AI models.
• It also does not appear to add an express prohibition on such training.
• The existing language continues to direct users to Samsara’s Privacy Policy for information about personal-data processing and addresses “Contributions” submitted through the website. The excerpt does not clarify whether those materials may be used for machine-learning development.
• This website-terms update should not be assumed to govern AI-data use in Samsara’s hosted services. The linked Terms of Service, Product Terms of Service, Data Protection Addendum, Privacy Policy, and biometric-data policies should be reviewed separately for any AI-training rights or restrictions.

2. Terms-change mechanism clarified and potentially broadened

The acceptance language is reformatted and appears to clarify that users agree to modified terms by:

1. Continuing to use or access the Site after revised terms are posted; or

2. If they have an account, failing to request account termination within seven days after receiving notice.

Risk: Continued access may constitute acceptance without a separate affirmative click. Account holders may have only a short seven-day period to reject changes by terminating their account. Businesses should monitor notices and preserve prior versions of the terms.

3. Expanded navigation and policy links

The revised page adds or prominently links to:

• Hardware and Product Terms of Service;
• Third-Party Terms of Service;
• Training Webinars;
• Hosted Software SLA;
• Hardware Warranty and RMA Policy;
• Product End-of-Life Policy;
• Data Protection Addendum;
• Privacy, biometric-data, face-recognition, transparency, and customer-data-request materials; and
• Partner and community conduct policies.

Risk: These documents may contain separate contractual obligations, data-processing terms, service limitations, or AI-related provisions. The added links alone do not establish whether they are incorporated into the Website Terms.

4. Copyright-notice contact information changed

• A new DMCA address appears as legalnotices@samara.com, which omits the “s” in “Samsara.”
• Other portions retain or specify the apparently correct address: legalnotices@samsara.com, together with a physical address and telephone number.

Risk: The inconsistent/incorrect address could cause notices or counter-notices to be misdirected and create procedural uncertainty.

5. Other changes largely editorial

The remaining changes primarily correct punctuation, spacing, headings, apostrophes, formatting, navigation, and footer content. The revised page identifies “Last Updated: May 2026” and adds corporate-address wording, but the excerpt does not show a material change to warranties, liability limits, indemnity, termination, ownership, or governing legal rights.