Skip to main content
Streak logo

Streak

Based exclusively on public evidence • 20 criteria (Privacy + AI)
Last review: 21 Feb 2026

C-
AITS IA

AI Trust Summary

AI Training
NO — explicit policy
Data Retention
Partially mentioned (no defined period)
Opt-out
Training opt-out available
AIPrivacy
C-
BasePrivacy
A-
  • Regarding AI: it does not document a mechanism for contesting automated decisions, limiting user rights upon contracting.
  • Regarding Basic Privacy: data processing purposes are clearly listed, ensuring transparency in the use of collected information.

Safer Alternatives

Higher-rated software in the same category

See Full Alternative Comparison

Attention Points in AI (2)

AI criteria that require attention. Buy the Premium Analysis to see all 2 criteria.

  • Streak
  • does not mention a mechanism for contesting AI decisions, limiting user rights.
  • does not document ethical AI principles or anti-bias measures, raising concerns about responsible data use.
  • it is advisable to require a human review clause for automated decisions.

AI decision contestation mechanism not available

There is no specific mention of human review of automated decisions or contesting AI decisions, limiting user rights.

Ethical AI principles and anti-bias measures not documented

There is no mention of ethical AI principles or measures against bias and discrimination, raising concerns about responsible data use.

Source: vendor public documents

Compliances in AI (3)

AI criteria the company meets. Buy the Premium Analysis to see all 3 criteria.

  • Streak
  • provides separate data processing agreements for business clients, ensuring compliance with the GDPR.
  • documents data processing purposes by category, facilitating transparency.
  • these practices strengthen due diligence and trust in data management.

AI training opt-out control available

The policy contains an explicit statement that Google Workspace API data is not used to train AI models, ensuring user control.

Policy on data use for AI training clearly stated

The policy states that Streak DOES NOT use Google Workspace API data to develop or improve AI models, ensuring the privacy of contact data.

AI data retention policy clearly documented

The policy mentions collection and retention of interaction data, but does not specify concrete periods for AI inputs/outputs, creating uncertainty.

Source: vendor public documents

Highlights in Privacy (3)

Most relevant criteria for this category. Buy the Premium Analysis to see all 3 criteria.

Sensitive data processing without additional documented safeguards

The policy mentions optional data, but does not provide additional safeguards for processing sensitive data, increasing risks.

Performance of contract legal basis applied to essential data

The policy explicitly mentions the legal basis of contract performance, essential for processing contact data and sales interactions.

Data Processing Agreement (DPA) available for business customers

The policy mentions the existence of separate data processing agreements for business clients, ensuring GDPR compliance.

Source: vendor public documents

Critical Alerts

  • Princípios de IA ética e medidas anti-viés não documentados: Crucial para a confiança do cliente em como seus dados de contatos são tratados..
  • Tratamento de dados sensíveis sem salvaguardas adicionais documentadas: Importante para garantir a proteção de dados sensíveis de contatos e interações de vendas.

Conformance analysis (20)

Premium Feature
AITS Criterion 17
Compliant

Legal basis of contract performance applied to essential data

Reference: ISO/IEC 27701 (7.2.2)

AITS Criterion 20
Compliant

Data Processing Agreement (DPA) available for business clients

Reference: ISO/IEC 27701 (8.2) + LGPD Art. 39 + GDPR Art. 28

AITS Criterion 14
Compliant

Recipients of personal data clearly identified in the policy

Reference: ISO/IEC 27701 (7.3)

Source: vendor public documents

Follow this company and access all 20 criteria

Track score changes, get alerts on policy updates, and view the full conformance analysis

Sign up free

Don't miss any update

Sign up to follow this company and track changes in privacy and AI scores

Sign up free

Why trust the AITS Index: Open Community Audit

Public transparency, peer review and open evidence trails — all verifiable by the community

Trust guarantees

Peer review

users, professionals and experts confirm or contest items online.

Public history

vendor and index changes are versioned and accessible.

Participate

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Understanding Streak CRM: Privacy Strengths and Weaknesses

Transparency in Data Processing Agreements

Streak excels in its transparency regarding data processing agreements (DPA). With an AITS Privacy Score of 86%, users can feel confident knowing that Streak provides clear and accessible agreements for enterprise clients. This means that businesses can understand how their data will be handled, which is crucial for compliance with regulations like the GDPR and LGPD. For users, this transparency translates to a lower risk of unexpected data usage, as the purposes for data processing are clearly outlined. When considering Streak, ensure that you review the DPA to understand your rights and the obligations of Streak regarding your data.

Clear Purpose of Data Processing

Another strength of Streak is its clear listing of data processing purposes by category. This clarity helps users understand exactly how their data will be utilized, which is essential for maintaining trust. Knowing that Streak has categorized its data usage allows users to make informed decisions about what information they choose to share. When using Streak, take advantage of this feature by regularly checking the categories of data being processed and ensuring they align with your business needs and compliance requirements.

Lack of Mechanism for Contesting AI Decisions

Despite its strengths, Streak has notable weaknesses, particularly in its AI governance. The absence of a mechanism for contesting automated decisions limits users' rights, especially in contexts where AI impacts business outcomes. With an AITS AI Score of 42%, this is a significant concern for users who rely on AI-driven insights. To mitigate this risk, users should be cautious about how they interpret AI-generated recommendations and consider implementing additional checks or manual reviews of AI outputs to ensure they align with their business objectives.

Ethical AI Principles and Bias Mitigation

Streak also lacks documentation regarding ethical AI principles and anti-bias measures. This absence raises concerns about the fairness and reliability of the AI tools integrated within the CRM. Users should be aware that without these safeguards, there is a risk of biased outcomes that could affect decision-making processes. To address this, consider supplementing Streak's AI capabilities with external tools or frameworks that focus on ethical AI practices, ensuring that your data-driven decisions are as fair and unbiased as possible.

Handling of Sensitive Data

Another critical weakness is the treatment of sensitive data without documented additional safeguards. This is particularly concerning for users handling personal data that falls under strict regulations like GDPR and LGPD. The lack of clear protections for sensitive data could expose users to compliance risks. To protect yourself, ensure that you limit the sharing of sensitive information within Streak and regularly audit your data handling practices. Additionally, consider implementing encryption or other security measures for sensitive data to enhance protection.

Practical Steps for Enhancing Privacy and Security

To maximize your experience with Streak while addressing its weaknesses, consider the following practical steps: First, regularly review your data processing agreements and ensure that they meet your compliance needs. Second, stay informed about the data categories being processed and adjust your data sharing practices accordingly. Third, implement manual reviews of AI outputs to counterbalance the lack of contestation mechanisms. Lastly, prioritize the protection of sensitive data by using encryption and limiting access to only necessary personnel. By taking these precautions, you can enjoy the benefits of Streak while minimizing potential risks.

Other Sales CRM software

Dive into in-depth research and analysis of each player

Source: vendor public documents

Analyzed Sources

Public documents used in the audit of Streak:

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Scope & Limitations

TrustThis/AITS assessments are based exclusively on publicly available information, duly cited with date and URL, following the AITS methodology (privacy & AI transparency).

The content is indicative in nature, intended for screening and comparison, not replacing internal audits.

TrustThis/AITS does not perform invasive tests, does not access vendor technology environments and does not process customer personal data. Conclusions reflect only the vendor's public communication at the date of collection.

Source: vendor public documents