Square Point of Sale

Block, Inc.

Restricted

At a glance

Administrative details

Application type

Web (SaaS)

MFA / SSO

Confirmed at intake

Schools using

Group pricing

Available

Pricing tier

Tier 1 (<$1k)

User type

Staff only

Account manager

Dana Reyes

Customer success

Block, Inc. Customer Success

Illustrative admin fields — real values load from contracts / vendor records in production.

Round 1 · Privacy Triage

Do Not Approve

Privacy score 84.0% · band Good · addresses 5 of 17

Hard no: the vendor explicitly does something disqualifying — Q16 (AI & Model-Training). An explicit gate violation beats the privacy score. Coverage note: the policy addresses 5 of 17 questions (29%); a vendor cannot reach the Best band below 70% coverage.

Waive a finding that doesn't apply to your school (e.g. a feature you don't enable). Re-scores instantly; recorded as a cited footnote.)

Q3 · Purpose & Use — Does the vendor commit to use the school's data only to provide the contracted service, and not for its own purposes? answer: unclearQ5 · Data Sharing — Does the vendor limit sharing with third parties to the purpose for which the data was collected? answer: unclearQ16 · AI & Model-Training — Does the vendor use customer or staff data, including uploaded documents, to train or improve AI or machine-learning models? answer: negative

Re-vet from the live policy (re-reads the vendor's published policy set now — privacy policy plus the security, sub-processor and terms pages it links to — and re-runs Round 1. The current verdict stays until the new one lands; a partial or blocked page never replaces it.)

View full cited report ↗

Round 2 · Vendor-supplied documents

What the vendor sent you — a data-processing agreement, a completed security questionnaire, a SOC 2 or ISO summary, a contract. Stored with this record. Every re-vet and every Drift Sentinel scan reads these first, ahead of the public pages, and quotes from them carry evidence tier T2 (contractual) instead of T3 (public claim).

No vendor documents on file. Round 1 reads the public policy set only.

Add a document (PDF, DOCX, TXT or MD, up to 25 MB — or paste the text). It re-vets the vendor as soon as it is stored.

…or paste the document text

Demo: — labelled as a sample, not from the vendor.

Safeguarding summary

Round 1 privacy triage runs from the vendor's policy page.

Vetting queued — automated review pending.