Spanglett LegalEnquire Now
Home › Research › Enterprise Agreements

Enterprise Agreements

An enterprise service is not governed by one contract. A master agreement sets the framework and incorporates other documents by reference — product terms, addenda, service-specific terms, policies, and SLAs — each of which can change on its own schedule. These pages track the agreement stacks of two vendors, Microsoft and Google.

2 vendor stacks · updated monthly · last check 2026-10-11

Microsoft

Microsoft agreement stack. A multi-layer stack, not one contract: master agreements, Product Terms updated about monthly, a versioned DPA, service-specific privacy and security terms, a consolidated SLA, an AI code of conduct, and a glossary that defines terms used across the whole stack.

23 instruments · In forceOpen the Microsoft stack →

Google

Google agreement stack. Layered terms: core framework terms plus "URL terms" incorporated by reference and updated online, service-specific terms, a data-processing addendum, policies, and service SLAs. New features are governed immediately on release.

13 instruments · In forceOpen the Google stack →
Latest changes

Most recent check 2026-10-11 — 15 instruments verified against their live documents,3 changed, 7 not reachable. Unreachable is a coverage gap, not a finding of “no change”.

Coverage after the 2026-10-11 sweep: 34 of 36 tracked instruments have a monitored public source. Still blocked: MS-16, GO-02.

  • 2026-10-11
    Products & Services Data Protection Addendum (DPA) (microsoft) — The DPA advanced from the 1 September 2025 edition to 22 May 2026. Microsoft’s change note identifies a specific new AI-subprocessor notice track: 30 days before Customer Data access, with a disable-use right for at least six months after notice. The current clause was checked; the prior edition was not independently line-diffed, so this is the vendor-described delta rather than a complete redline. Major · 10/15
    • 22 May 2026 DPA changeMicrosoft’s change note says it added a clarification for subprocessors supporting AI functionality. The current clause gives those subprocessors at least 30 days’ notice before access to Customer Data, instead of the general six-month advance-notice track, while allowing the customer to disable use of that subprocessor until at least six months after notice. This changes notice and customer response time; it does not make the entire DPA inapplicable to AI services. The prior full DPA text was not independently line-diffed, so this is the vendor-described change, verified against the current clause—not a complete redline.DPA editions and archiveMay 2026 DPA and change notePrior-edition archiveMicrosoft supplier guidance
  • 2026-10-11
    Product Terms — Summary of Changes (microsoft) — The Product Terms change log’s AI/privacy-relevant entries include a Web IQ DPA exception, a Copilot residency cross-reference, and new/updated Microsoft AI Customer Solution terms. The dated explanations below distinguish operative changes from a link and limit each conclusion to the affected service; none is a blanket change to all Microsoft AI processing. Major · 13/15
    • 1 Oct 2026 — Microsoft IQ patent clauseMicrosoft updated the Microsoft AI Customer Solution patent clause. The 15 September wording said Microsoft was not liable for patent claims arising from the solution; the 1 October wording expressly disclaims both defense obligations and liability for patent-infringement claims alleging that Standards implementation in a Customer Solution infringes. This is a licensing/IP-risk allocation change, not a data-processing change; the summary alone does not establish whether overall exposure broadened or narrowed.Official change entry15 Sep Microsoft IQ terms1 Oct Microsoft IQ terms
    • 15 Sep 2026 — Microsoft AI Customer Solution definitionMicrosoft added a Microsoft IQ section and glossary definition. The definition requires the customer app to add primary and significant functionality; prompt-interface or infrastructure-only apps do not qualify on their own. The Microsoft IQ terms put licensing/compliance responsibility for the resulting solution on the customer. This changes licensing scope, not data use.Official change entryMicrosoft IQ termsProduct Terms Glossary
    • 1 Aug 2026 — Web IQ DPA exceptionWeb IQ was added to the DPA-exceptions table and designated a Limited Access Service. The current terms say the DPA does not apply to Web IQ; the Microsoft Privacy Statement applies, and Customer Data used with Web IQ flows outside the customer’s compliance and geographic boundary. This is specific to Web IQ use, not all Microsoft AI or Copilot.Official change entryPrivacy & Security TermsWeb IQ Terms
    • 15 Jun 2026 — Copilot residency cross-referenceThe change was adding a link to Copilot/Copilot Chat residency material, not by itself a new residency commitment. The linked page says “no modifications” for Microsoft 365 Copilot and Copilot Chat, and separately describes a geography-limited at-rest commitment for Copilot Cowork. It does not establish that all Copilot data or processing stays in-region.Official change entryResidency details
  • 2026-10-11
    Google Terms of Service (google) — Compared with the 22 May 2024 text, the 30 July 2026 Google Terms add a background-network-use/cost clause, revise the professional-advice disclaimer, and clarify business-liability and governing-law wording. The content licence and listed AI restrictions appear materially unchanged; this general Terms comparison does not establish changes to separate Cloud or Workspace data-processing terms. Minor · 7/15
    • 30 Jul 2026 — background network use and costThe 2026 terms newly say Google services may use the internet in the background—even when a person is not actively using the service/device—for updates and service, security, user-experience, and advertising purposes. Such activity may consume a data allowance, and the user is responsible for network costs. This makes background connectivity and cost allocation explicit; it does not itself add a new personal-data category or retention period.Official 2024→2026 comparisonCurrent Canadian termsPrior terms
    • 30 Jul 2026 — professional-advice disclaimerThe disclaimer now permits reliance where service-specific terms explicitly allow it and expressly says professional-topic content is not medical diagnosis or treatment. The exception is conditional; the general Terms do not identify a qualifying service.Official comparisonCurrent termsPrior terms
    • 30 Jul 2026 — liability and governing-law wordingThe business-user liability exclusions are now expressly subject to the “For all users” exceptions, and the governing-law sentence now applies to the Terms as well as disputes. These are contract clarifications. The content licence and listed AI restrictions appear materially unchanged; this general Terms comparison does not cover Cloud/Workspace DPAs.Official comparisonCurrent termsPrior terms
The basis of comparison

The monthly agreement-stack check treats each document as a tracked row and diffs it over time. These are the signals it compares for every instrument.

Version / effective date (DPA versions; master-agreement dates; Product Terms update dates).

Content hash / change-log entry (Microsoft "Summary of Changes"; Google terms update history).

New-feature carve-out text — does newly released AI functionality sit inside or outside protections?

Data-use / retention statements (for example, Workspace Privacy Hub feedback retention).

Subprocessor lists (additions and removals; processing locations).

Glossary / definitions (Microsoft) — meaning-level change across the stack.

Precedence / order-of-precedence clauses — any reordering changes how documents are read.

New instruments appearing in the stack, or instruments renamed or withdrawn.

Data-residency commitments (for example, Copilot).

Each check produces updated rows in the agreement registry, a dated entry in each stack page's activity log, and a developments note — each carrying the original source URL.

Compiled from public vendor documents and the tracked change log. Not legal advice — verify against the primary source before relying on it.

Changelog

The full running log of every agreement-stack check, newest first. Each entry carries the source URL it was observed at.

  • 2026-10-11
    Products & Services Data Protection Addendum (DPA) (microsoft) — The DPA advanced from the 1 September 2025 edition to 22 May 2026. Microsoft’s change note identifies a specific new AI-subprocessor notice track: 30 days before Customer Data access, with a disable-use right for at least six months after notice. The current clause was checked; the prior edition was not independently line-diffed, so this is the vendor-described delta rather than a complete redline.
    • 22 May 2026 DPA changeMicrosoft’s change note says it added a clarification for subprocessors supporting AI functionality. The current clause gives those subprocessors at least 30 days’ notice before access to Customer Data, instead of the general six-month advance-notice track, while allowing the customer to disable use of that subprocessor until at least six months after notice. This changes notice and customer response time; it does not make the entire DPA inapplicable to AI services. The prior full DPA text was not independently line-diffed, so this is the vendor-described change, verified against the current clause—not a complete redline.DPA editions and archiveMay 2026 DPA and change notePrior-edition archiveMicrosoft supplier guidance
  • 2026-10-11
    Product Terms — Summary of Changes (microsoft) — The Product Terms change log’s AI/privacy-relevant entries include a Web IQ DPA exception, a Copilot residency cross-reference, and new/updated Microsoft AI Customer Solution terms. The dated explanations below distinguish operative changes from a link and limit each conclusion to the affected service; none is a blanket change to all Microsoft AI processing.
    • 1 Oct 2026 — Microsoft IQ patent clauseMicrosoft updated the Microsoft AI Customer Solution patent clause. The 15 September wording said Microsoft was not liable for patent claims arising from the solution; the 1 October wording expressly disclaims both defense obligations and liability for patent-infringement claims alleging that Standards implementation in a Customer Solution infringes. This is a licensing/IP-risk allocation change, not a data-processing change; the summary alone does not establish whether overall exposure broadened or narrowed.Official change entry15 Sep Microsoft IQ terms1 Oct Microsoft IQ terms
    • 15 Sep 2026 — Microsoft AI Customer Solution definitionMicrosoft added a Microsoft IQ section and glossary definition. The definition requires the customer app to add primary and significant functionality; prompt-interface or infrastructure-only apps do not qualify on their own. The Microsoft IQ terms put licensing/compliance responsibility for the resulting solution on the customer. This changes licensing scope, not data use.Official change entryMicrosoft IQ termsProduct Terms Glossary
    • 1 Aug 2026 — Web IQ DPA exceptionWeb IQ was added to the DPA-exceptions table and designated a Limited Access Service. The current terms say the DPA does not apply to Web IQ; the Microsoft Privacy Statement applies, and Customer Data used with Web IQ flows outside the customer’s compliance and geographic boundary. This is specific to Web IQ use, not all Microsoft AI or Copilot.Official change entryPrivacy & Security TermsWeb IQ Terms
    • 15 Jun 2026 — Copilot residency cross-referenceThe change was adding a link to Copilot/Copilot Chat residency material, not by itself a new residency commitment. The linked page says “no modifications” for Microsoft 365 Copilot and Copilot Chat, and separately describes a geography-limited at-rest commitment for Copilot Cowork. It does not establish that all Copilot data or processing stays in-region.Official change entryResidency details
  • 2026-10-11
    Google Terms of Service (google) — Compared with the 22 May 2024 text, the 30 July 2026 Google Terms add a background-network-use/cost clause, revise the professional-advice disclaimer, and clarify business-liability and governing-law wording. The content licence and listed AI restrictions appear materially unchanged; this general Terms comparison does not establish changes to separate Cloud or Workspace data-processing terms.
    • 30 Jul 2026 — background network use and costThe 2026 terms newly say Google services may use the internet in the background—even when a person is not actively using the service/device—for updates and service, security, user-experience, and advertising purposes. Such activity may consume a data allowance, and the user is responsible for network costs. This makes background connectivity and cost allocation explicit; it does not itself add a new personal-data category or retention period.Official 2024→2026 comparisonCurrent Canadian termsPrior terms
    • 30 Jul 2026 — professional-advice disclaimerThe disclaimer now permits reliance where service-specific terms explicitly allow it and expressly says professional-topic content is not medical diagnosis or treatment. The exception is conditional; the general Terms do not identify a qualifying service.Official comparisonCurrent termsPrior terms
    • 30 Jul 2026 — liability and governing-law wordingThe business-user liability exclusions are now expressly subject to the “For all users” exceptions, and the governing-law sentence now applies to the Terms as well as disputes. These are contract clarifications. The content licence and listed AI restrictions appear materially unchanged; this general Terms comparison does not cover Cloud/Workspace DPAs.Official comparisonCurrent termsPrior terms