{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"1493b82f-7a69-43a5-b1c8-612560d39a1d","screeningDate":"2026-11-13T23:39:13.973Z","publicationGate":"published","company":{"id":"51f8db0f-3aef-472e-91d7-da30b3ceec4d","name":"Plaid","slug":"plaid","industry":"FinTech"},"policy":{"id":"0659472c-2737-40b2-83db-9f238aeade0b","name":"Plaid Account Terms","type":"terms","jurisdiction":"US","sourceUrl":"https://plaid.com/legal/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-11-13T23:39:13.962Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"d3dca7615ff285c73ed819816e03a456ec68c39771b128027b86dcf178d758b7","capturedAt":"2026-10-02T04:57:12.311Z"},"current":{"version":2,"sha256":"91e9bc7b8860db14ed460ed1837ff75c312690fa2e6a7ed0a2bf7647af88eb4f","capturedAt":"2026-11-13T23:39:13.962Z"}},"analysisLineage":{"status":"verified","requestSha256":"3964f2f29b0a9104a6e1cad670ba9c9232bb08f314b5b18af32561a50248ccfc","responseSha256":"72f077778d2ca385ba827c9cc28dc2d065b70912a694bb985d08e92f3cf3f51c","model":"gemini-2.5-flash","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"d3dca7615ff285c73ed819816e03a456ec68c39771b128027b86dcf178d758b7","charLength":16740,"byteLength":16801,"rangeUnit":"utf16-code-unit","includedRanges":[[0,16740]],"excludedRanges":[]},"new":{"sha256":"91e9bc7b8860db14ed460ed1837ff75c312690fa2e6a7ed0a2bf7647af88eb4f","charLength":16783,"byteLength":16846,"rangeUnit":"utf16-code-unit","includedRanges":[[0,16783]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-02T04:57:12.311Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://plaid.com/legal/","requestedUrl":"https://plaid.com/legal/","finalUrl":"https://plaid.com/legal/","capturedAt":"2026-11-13T23:39:13.962Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"Plaid's Account Terms now offer a Spanish version, improving accessibility, but core data practices remain unchanged.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"info","textEn":"Improved language accessibility for Spanish speakers.","textIt":"Migliorata accessibilità linguistica per gli ispanofoni.","deltaScore":1,"evidenceQuote":"- Español - Términos de la Cuenta de Plaid","evidenceSide":"new","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"warning","textEn":"No changes to extensive data collection and sharing practices.","textIt":"Nessuna modifica alle pratiche estese di raccolta e condivisione dati.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiDataCollection","anchorStatus":"not-recorded"},{"icon":"alert","textEn":"Biometric data collection clause remains, raising privacy concerns.","textIt":"La clausola sui dati biometrici rimane, sollevando preoccupazioni sulla privacy.","deltaScore":0,"evidenceQuote":"data we receive from this verification process, including data that is potentially considered biometric data in your jurisdiction, may be stored in your Plaid Account","evidenceSide":"new","relatedKpi":"kpiDataCollection","anchorStatus":"verified"}],"keyPoints":[{"textEn":"New Spanish language option improves accessibility for users.","textIt":"La nuova opzione in spagnolo migliora l'accessibilità per gli utenti.","sentiment":"positive"},{"textEn":"No changes to data collection, use, or sharing policies.","textIt":"Nessuna modifica alle politiche di raccolta, utilizzo o condivisione dei dati.","sentiment":"neutral"},{"textEn":"Biometric data collection and storage clauses are unchanged.","textIt":"Le clausole sulla raccolta e archiviazione di dati biometrici sono invariate.","sentiment":"negative"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises using Plaid for EU customers benefit from improved accessibility. They must ensure their data processing agreements with Plaid align with GDPR requirements, especially concerning cross-border transfers and sensitive data.","complianceNoteEn":"GDPR Art. 28, 44"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The addition of Spanish improves accessibility for EU users. However, extensive data collection, including biometric data, and broad sharing with third parties raise GDPR concerns regarding consent and data minimization.","complianceNoteEn":"GDPR Art. 5, 6, 9"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises using Plaid will find improved user experience for Spanish speakers. They must conduct due diligence to ensure Plaid's data handling practices align with diverse international data protection regulations.","complianceNoteEn":"International Data Laws"},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The policy's increased language options benefit global users. However, individuals worldwide should be aware of the broad data collection, potential biometric data storage, and sharing with third parties, which may exceed local privacy expectations.","complianceNoteEn":"Global Privacy Norms"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises serving US customers gain accessibility. They must ensure their use of Plaid's services, especially consumer reporting and data sharing, complies with FCRA and various state privacy laws.","complianceNoteEn":"FCRA, State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Spanish language support is a positive for US users. Extensive data collection, including biometric data, and sharing practices require users to understand their rights under state privacy laws like CCPA/CPRA.","complianceNoteEn":"CCPA/CPRA, FCRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Plaid Account Terms source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/1493b82f-7a69-43a5-b1c8-612560d39a1d","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"bef6156b01b2bd85d22c0ee0738d86a78c07fd2b11546b040be2ba4a8d8dff60"}