Legal
Privacy
and
terms
Last updated November 4, 2026. Replace this sample text with your own reviewed policy before launch.
Privacy
We collect the account details you give us (name, work email, company) and the evaluation data you send through the SDK. We use it only to run Holdout for you.
Customer data is never used to train models, ours or anyone else’s. Zero retention mode deletes prompts and outputs once a run is scored.
Data and security
Holdout is SOC 2 Type II audited and GDPR compliant. Data is encrypted in transit and at rest, and EU data residency and self-hosting are available.
Terms of service
You may use Holdout to evaluate your own AI features. You keep ownership of your test sets, results and traces, and can export them as JSON at any time.
Plans renew monthly or yearly until cancelled. The hard spend cap you set limits overage billing.
Contact
Questions about privacy or these terms: privacy@holdout.dev.