{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"4c6bd434-f4fd-41eb-b4b2-f4cf1be389e9","screeningDate":"2026-10-21T10:40:15.372Z","publicationGate":"published","company":{"id":"fc0a9a77-eb4b-432a-8229-00185c53d30e","name":"Klarna","slug":"klarna","industry":"FinTech"},"policy":{"id":"e687d4ad-423e-4073-a236-362ca0e2c121","name":"Klarna Balance Agreement","type":"terms","jurisdiction":"US","sourceUrl":"https://cdn.klarna.com/1.0/shared/content/legal/terms/en-US/klarna-balance"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-23T11:38:51.019Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"41f79256fbbce2d6d14c6198285043a2d6425d36ce70559fe7fa977b9ba5dac6","capturedAt":"2026-10-02T04:56:18.016Z"},"current":{"version":2,"sha256":"c7f965caa2da39ae27c71f019322e8e266eea04cf716e1bab7f945b41a254eb5","capturedAt":"2026-10-21T10:40:15.364Z"}},"analysisLineage":{"status":"verified","requestSha256":"d5483c35cf39379f6b56020e933de8666f619d0401941b6363ca6ffe92311b88","responseSha256":"75b69e09ca39f7c0c3e5ed4addba4dee74db1ab7fb570819f7a0ca0057edfbb9","model":"gemini-2.5-flash","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"41f79256fbbce2d6d14c6198285043a2d6425d36ce70559fe7fa977b9ba5dac6","charLength":21429,"byteLength":21511,"rangeUnit":"utf16-code-unit","includedRanges":[[0,21429]],"excludedRanges":[]},"new":{"sha256":"c7f965caa2da39ae27c71f019322e8e266eea04cf716e1bab7f945b41a254eb5","charLength":21766,"byteLength":21848,"rangeUnit":"utf16-code-unit","includedRanges":[[0,21766]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-02T04:56:18.016Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://cdn.klarna.com/1.0/shared/content/legal/terms/en-US/klarna-balance","requestedUrl":"https://cdn.klarna.com/1.0/shared/content/legal/terms/en-US/klarna-balance","finalUrl":"https://cdn.klarna.com/1.0/shared/content/legal/terms/en-US/klarna-balance","capturedAt":"2026-10-21T10:40:15.364Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"Klarna rebranded its 'Klarna balance' to 'Klarna Personal Cashback account' with no significant changes to user rights or obligations in this agreement.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"info","textEn":"Product name updated for clarity, no functional changes.","textIt":"Nome prodotto aggiornato per chiarezza, nessuna modifica funzionale.","deltaScore":0,"evidenceQuote":"This Klarna Personal Cashback account","evidenceSide":"new","relatedKpi":null,"anchorStatus":"verified"},{"icon":"warning","textEn":"Mandatory arbitration clause persists, limiting legal recourse.","textIt":"La clausola di arbitrato obbligatorio persiste, limitando il ricorso legale.","deltaScore":0,"evidenceQuote":"MANDATORY ARBITRATION OF DISPUTES (THE \"ARBITRATION PROVISION\") SECTION OF THE TERMS FOR KLARNA SHOPPING SERVICE TO WHICH YOU ARE ALREADY A PARTY.","evidenceSide":"old","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"info","textEn":"No changes to data processing terms; still refers to Privacy Policy.","textIt":"Nessuna modifica ai termini di trattamento dati; rimanda ancora alla Privacy Policy.","deltaScore":0,"evidenceQuote":"Klarna processes your personal data in order to carry out our obligations in this Agreement and for the additional purposes set out in our Privacy Policy.","evidenceSide":"old","relatedKpi":"kpiDataCollection","anchorStatus":"verified"}],"keyPoints":[{"textEn":"The product name changed from 'Klarna balance' to 'Klarna Personal Cashback account' for clarity.","textIt":"Il nome del prodotto è cambiato da 'Klarna balance' a 'Klarna Personal Cashback account' per maggiore chiarezza.","sentiment":"neutral"},{"textEn":"No new clauses or changes to existing terms regarding user rights or obligations were introduced.","textIt":"Non sono state introdotte nuove clausole o modifiche ai termini esistenti sui diritti o obblighi degli utenti.","sentiment":"neutral"},{"textEn":"Mandatory arbitration for disputes remains a core part of the agreement.","textIt":"L'arbitrato obbligatorio per le controversie rimane una parte fondamentale dell'accordo.","sentiment":"negative"},{"textEn":"Data processing details still refer to a separate, incorporated Privacy Policy.","textIt":"I dettagli sul trattamento dei dati rimandano ancora a una Privacy Policy separata e incorporata.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"EU businesses integrating Klarna should assess compliance with GDPR and the upcoming AI Act, as this policy lacks specific provisions for EU data protection and AI governance. The US-centric nature poses compliance challenges.","complianceNoteEn":"GDPR, AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"This policy is US-centric and does not explicitly address GDPR requirements. EU individuals may face higher risks due to the lack of specific data protection clauses and cross-border transfer mechanisms.","complianceNoteEn":"GDPR Article 49"},{"region":"Global","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"Global enterprises must ensure their use of Klarna aligns with diverse international data protection and consumer laws. The US-centric nature of this agreement necessitates careful review for cross-border operations.","complianceNoteEn":"Global Compliance"},{"region":"Global","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"For individuals outside the US, this policy offers minimal protection as it is not designed for international compliance. Lack of specific global data rights or local law considerations increases risk.","complianceNoteEn":"International Data Laws"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"US enterprises using Klarna should be aware of the mandatory arbitration and the need to comply with state-specific consumer protection laws. The policy's clarity on US residency and AML compliance is beneficial.","complianceNoteEn":"AML, State Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The policy is tailored for US residents, outlining eligibility and state-specific unclaimed property laws. However, the mandatory arbitration clause limits individual legal recourse, which is a common concern under US consumer protection laws.","complianceNoteEn":"CCPA, Arbitration Law"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Klarna Balance Agreement source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/4c6bd434-f4fd-41eb-b4b2-f4cf1be389e9","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"378a0d6fa5fc8310e6216dffbfa249b4361cfafc6a26a3969c271a6f1be099b6"}