Carta updated its Privacy Policy twice in 2026.
In May 2026, Carta’s Privacy Policy brought Carta Law (Avantia Law Limited) into its scope and explained when Carta Law acts as controller or processor. It says it replaces earlier privacy notices, including Carta Law’s.
In September 2026, we detected a new version of the Privacy Policy, effective June 4, 2026, with an additional notice for users outside the US, including the EEA and UK.
We monitor 101 Carta documents, most of them service terms for fund administration, SPVs and tax preparation.
What Carta’s documents say about client data.
Quoted from the current version of each document. The right-hand column shows how many of the 75 vendors we monitor have a matching clause.
Sharing data with third parties
Addressed“We may collect, use, and share data that has been aggregated or anonymized in a manner that does not identify You personally for any purpose permitted under applicable law.”
What changed, and when.
Notable changes since monitoring began in March 2026, newest first. Each is written from our automated comparison of the before and after versions, then reviewed by a person.
Published a new Privacy Policy with a notice for non-US users
The policy is effective June 4, 2026. A new section applies to people using the services from outside the US, including the EEA and UK.
Brought Carta Law into the Privacy Policy’s scope
Covers Avantia Law Limited, trading as Carta Law, and explains when it acts as controller or processor. Replaces earlier privacy notices, including Carta Law’s.
+ 3 other updates detected, such as formatting, page layout and wording changes.
- Sep 9, 2026: Privacy Policy
- Aug 10, 2026: List of Sub-Processors
- Aug 9, 2026: Payment TOS
- Aug 9, 2026: Master Subscription Agreement
101 Carta documents.
Sub-documents are other Carta documents that its policies link to, such as addenda and product terms. We list the ones identified so far; there may be others.
Carta terms: common questions.
When did Carta last change its privacy policy?
We detected a new version of Carta’s Privacy Policy on September 9, 2026. It is effective June 4, 2026 and adds a notice for users outside the US. An earlier change on May 15, 2026 brought Carta Law into scope.
Does Carta share anonymized data?
Its Terms of Service say Carta may collect, use and share aggregated or anonymized data that does not identify the user personally, for any purpose permitted by law.
Does Carta publish a sub-processor list?
Yes. Carta publishes a List of Sub-Processors, which Legal Sentinel monitors along with its Privacy Policy and terms.