{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "lindy", "name": "Lindy", "vendor": "Crivello Corp (doing business as Lindy)", "vendorUrl": "https://www.lindy.ai", "kind": "platform", "category": "personal-assistants", "summary": "Lindy is a hosted AI assistant from Crivello Corp. Each user has a private assistant for mail, calendar and meetings, reached by Slack, iMessage, SMS, email or the web app, and a team shares a second one in Slack channels.", "url": "https://www.anchorterminal.com/tools/lindy", "markdownUrl": "https://www.anchorterminal.com/tools/lindy.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/lindy.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/lindy.json", "license": "Proprietary service under Lindy's Terms of Service. No source is published", "transports": [], "packages": [], "auth": "oauth", "authNotes": "A person signs in with Google or Microsoft and connects mail and calendar from either, a phone number verified by code, and Slack through an app an owner or admin installs. Other tools connect by OAuth or an API key, and every action for a tool turns on at once with no scope choice in Lindy. A connection is personal until an owner or admin shares it with the workspace, after which everyone's Lindy works as that account. Saved API keys are write-only and can be rotated or revoked. No public API or key for outside callers was found in the docs.", "pricing": "paid", "pricingNotes": "$29.99 per active user a month with 3,000 credits, pooled across the workspace, and larger monthly credit amounts up to 1,750,000 for $9,999.50. Top-ups are $10 per 1,000 credits and do not expire, while monthly credits do not roll over. New accounts get $50 of credit for seven days with no card. The pricing page gives 2 to 250 credits for an everyday request and 1,000 to 2,500 for a large build. The docs name Plus, Pro and Max plans priced only inside the app, which the pricing page does not list (checked 2026-10-12).", "priceSummary": "$29.99 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the pricing page, the terms or the docs (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.lindy.ai", "llmsTxt": "https://docs.lindy.ai/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "agent.mcp-client" ], "tags": [ "hosted", "closed-source", "paid", "free-trial", "no-card", "slack", "imessage", "sms", "email", "chrome-extension", "mcp-client", "approvals", "llms-txt", "soc2", "team" ], "lastRelease": "2025-10-21", "graded": true, "anchor": { "graded": true, "score": 32.3, "grade": "F", "agentReady": false, "rank": 968, "ranked": true, "rankOf": 986, "categoryRank": 16, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 43, "maintenance": 9, "payments": 35, "reliability": 24, "schema": 32, "security": 49, "transparency": 52 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 24, "points": 4.8, "reason": "Graded as a hosted service, on the assistant itself, since no public API was found. No status page is linked from the site, the docs or the security page (0). With no page there is no incident history to read (5). No request limits are published. The pricing page gives credit ranges for a task (2 to 250, 250 to 1,000 and 1,000 to 2,500) and the memory page caps an upload at 100 files (4 of 15). The docs describe what happens at a limit, a pause with a message when credits run out and a prompt to continue or stop when a task draws more than usual, with no retry guidance for failed writes (5 of 15). No SLA was found on the pricing page, the terms or the docs (0). The product is not marked beta, and Microsoft Teams is marked coming soon (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 32, "points": 5.2, "reason": "There is no API, so this is read on the documentation of how the assistant behaves. No machine-readable contract (0). The docs publish `llms.txt` and a Markdown copy of every page (10). The pages on integrations, credentials, MCP servers, memory and routines say who can see and change each thing and where approval applies, in tables (11 of 20). Skills have a documented file format (`SKILL.md` in a `.skills/` folder), and nothing else is typed (2 of 15). The docs give example requests and troubleshooting steps, with no list of errors (6 of 15). The public changelog stops at 21 October 2025, and the docs and the pricing page disagree on plan names and on the number of integrations (3 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 43, "points": 6.99, "reason": "Read on how a person directs the assistant. Skills load their instructions on demand, and MCP tools can be switched off one by one or all at once, though every tool arrives on (12 of 25). Event triggers take a plain-language filter and a routine has a named destination. No control over the length of a reply was found (6 of 20). Connections show whether they are healthy or need reconnecting, the MCP page explains a zero tool count, and a usage warning asks before a costly task continues (8 of 20). A dry run fires a routine on real data and suppresses every send, post and write, and memory files keep every version. No guidance on retries was found (10 of 20). Routines default to daily at 9:00, setup is by sign-in with no keys, and there is no SDK or API (7 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 49, "points": 8.57, "reason": "Accounts connect by OAuth or an API key, personal by default and shared only by an owner or admin. Saved keys are write-only and can be rotated and revoked. Lindy has no scope choice, since every action of a tool turns on at once, and a shared connection lets everyone's Lindy act as that account (20 of 30). No deduction was taken for the MCP dialogue's option to send a server's static credential as a query parameter, because the secret is the third-party server's and a header is also available. Each integration can require approval or bar writes, but the docs say this applies in shared Slack threads only, that web chat, Slack direct messages, iMessage and SMS are not guarded, and that saved credentials are not covered. The default setting is not stated (9 of 20). Lindy reads mail, Slack, web pages and MCP results, and no prompt-injection guidance was found. Personal context is kept out of shared channels per the docs (2 of 15). The security page says every action is logged, and audit logs are an Enterprise item (9 of 15). The site claims SOC 2 Type II audited by Johanson Group, penetration tests and an incident response plan. The trust centre answered with a bot check and was not read. No security.txt, disclosure policy, bug bounty or advisory page was found (9 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 35, "points": 4.38, "reason": "No x402, MPP or L402 (0). The pricing page is public and gives a seat price, fifteen monthly credit amounts and a top-up price of $10 per 1,000 credits. A task's cost is given only as a range, and the docs name Plus, Pro and Max plans priced inside the app (15 of 20). New accounts get $50 of credit for seven days with no card (20). A person signs in with Google or Microsoft in a browser (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 9, "points": 0.79, "reason": "The public changelog's newest entry is 21 October 2025, 356 days before this check (0). No dated entry in the last 90 days (0). The docs repository on GitHub had 115 commits between 30 August and 9 October 2026, and the terms and privacy policy were revised on 24 and 28 September 2026, so the product is being worked on without release notes. Support is by email and phone, with group onboarding sessions. No public issue tracker (9 of 25). No SDK and no MCP registry entry, which a client would not have (0). No package to assess. The Chrome Web Store page redirected to a consent page and was not read (0)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 52, "points": 4.55, "note": "editorial 36, provenance 68", "reason": "Closed service. The terms are public and name the company, but read as a general website template. They forbid automated use and use for any commercial enterprise in a product sold to companies for automating work (10 of 30). The privacy policy and the security page agree that data is not sold and not used to train models, and that Google data is not used for AI training. Retention is as long as necessary with no period, health data is listed as a category processed, and no DPA was linked (14 of 30). No deprecation policy or dated notice was found (0). Processors are named by category in the privacy policy, with no locations (12 of 20)." } ], "assessment": { "date": "2026-10-12", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Read on how a person directs the assistant. Skills load their instructions on demand, and MCP tools can be switched off one by one or all at once, though every tool arrives on (12 of 25). Event triggers take a plain-language filter and a routine has a named destination. No control over the length of a reply was found (6 of 20). Connections show whether they are healthy or need reconnecting, the MCP page explains a zero tool count, and a usage warning asks before a costly task continues (8 of 20). A dry run fires a routine on real data and suppresses every send, post and write, and memory files keep every version. No guidance on retries was found (10 of 20). Routines default to daily at 9:00, setup is by sign-in with no keys, and there is no SDK or API (7 of 15).", "maintenance": "The public changelog's newest entry is 21 October 2025, 356 days before this check (0). No dated entry in the last 90 days (0). The docs repository on GitHub had 115 commits between 30 August and 9 October 2026, and the terms and privacy policy were revised on 24 and 28 September 2026, so the product is being worked on without release notes. Support is by email and phone, with group onboarding sessions. No public issue tracker (9 of 25). No SDK and no MCP registry entry, which a client would not have (0). No package to assess. The Chrome Web Store page redirected to a consent page and was not read (0).", "payments": "No x402, MPP or L402 (0). The pricing page is public and gives a seat price, fifteen monthly credit amounts and a top-up price of $10 per 1,000 credits. A task's cost is given only as a range, and the docs name Plus, Pro and Max plans priced inside the app (15 of 20). New accounts get $50 of credit for seven days with no card (20). A person signs in with Google or Microsoft in a browser (0).", "reliability": "Graded as a hosted service, on the assistant itself, since no public API was found. No status page is linked from the site, the docs or the security page (0). With no page there is no incident history to read (5). No request limits are published. The pricing page gives credit ranges for a task (2 to 250, 250 to 1,000 and 1,000 to 2,500) and the memory page caps an upload at 100 files (4 of 15). The docs describe what happens at a limit, a pause with a message when credits run out and a prompt to continue or stop when a task draws more than usual, with no retry guidance for failed writes (5 of 15). No SLA was found on the pricing page, the terms or the docs (0). The product is not marked beta, and Microsoft Teams is marked coming soon (10).", "schema": "There is no API, so this is read on the documentation of how the assistant behaves. No machine-readable contract (0). The docs publish `llms.txt` and a Markdown copy of every page (10). The pages on integrations, credentials, MCP servers, memory and routines say who can see and change each thing and where approval applies, in tables (11 of 20). Skills have a documented file format (`SKILL.md` in a `.skills/` folder), and nothing else is typed (2 of 15). The docs give example requests and troubleshooting steps, with no list of errors (6 of 15). The public changelog stops at 21 October 2025, and the docs and the pricing page disagree on plan names and on the number of integrations (3 of 15).", "security": "Accounts connect by OAuth or an API key, personal by default and shared only by an owner or admin. Saved keys are write-only and can be rotated and revoked. Lindy has no scope choice, since every action of a tool turns on at once, and a shared connection lets everyone's Lindy act as that account (20 of 30). No deduction was taken for the MCP dialogue's option to send a server's static credential as a query parameter, because the secret is the third-party server's and a header is also available. Each integration can require approval or bar writes, but the docs say this applies in shared Slack threads only, that web chat, Slack direct messages, iMessage and SMS are not guarded, and that saved credentials are not covered. The default setting is not stated (9 of 20). Lindy reads mail, Slack, web pages and MCP results, and no prompt-injection guidance was found. Personal context is kept out of shared channels per the docs (2 of 15). The security page says every action is logged, and audit logs are an Enterprise item (9 of 15). The site claims SOC 2 Type II audited by Johanson Group, penetration tests and an incident response plan. The trust centre answered with a bot check and was not read. No security.txt, disclosure policy, bug bounty or advisory page was found (9 of 20).", "transparency": "Closed service. The terms are public and name the company, but read as a general website template. They forbid automated use and use for any commercial enterprise in a product sold to companies for automating work (10 of 30). The privacy policy and the security page agree that data is not sold and not used to train models, and that Google data is not used for AI training. Retention is as long as necessary with no period, health data is listed as a category processed, and no DPA was linked (14 of 30). No deprecation policy or dated notice was found (0). Processors are named by category in the privacy policy, with no locations (12 of 20)." }, "sources": [ { "what": "home page", "url": "https://www.lindy.ai/", "seen": "2026-10-12" }, { "what": "pricing page and its FAQ", "url": "https://www.lindy.ai/pricing", "seen": "2026-10-12" }, { "what": "security page", "url": "https://www.lindy.ai/security", "seen": "2026-10-12" }, { "what": "enterprise page", "url": "https://www.lindy.ai/enterprise", "seen": "2026-10-12" }, { "what": "executive assistant page", "url": "https://www.lindy.ai/hire/executive-assistant", "seen": "2026-10-12" }, { "what": "Chrome extension page", "url": "https://www.lindy.ai/chrome-extension", "seen": "2026-10-12" }, { "what": "Terms of Service, last updated 24 September 2026", "url": "https://www.lindy.ai/terms-of-service", "seen": "2026-10-12" }, { "what": "privacy policy, last updated 28 September 2026", "url": "https://www.lindy.ai/privacy", "seen": "2026-10-12" }, { "what": "changelog, newest entry 21 October 2025", "url": "https://www.lindy.ai/changelog", "seen": "2026-10-12" }, { "what": "robots.txt (200, allows the pages read); llms.txt and security.txt on this host return 404", "url": "https://www.lindy.ai/robots.txt", "seen": "2026-10-12" }, { "what": "docs robots.txt (200, Content-Signal ai-input=yes)", "url": "https://docs.lindy.ai/robots.txt", "seen": "2026-10-12" }, { "what": "docs index for agents", "url": "https://docs.lindy.ai/llms.txt", "seen": "2026-10-12" }, { "what": "docs, What is Lindy", "url": "https://docs.lindy.ai/index.md", "seen": "2026-10-12" }, { "what": "docs, integrations and guardrails", "url": "https://docs.lindy.ai/integrations/overview.md", "seen": "2026-10-12" }, { "what": "docs, credentials", "url": "https://docs.lindy.ai/integrations/credentials.md", "seen": "2026-10-12" }, { "what": "docs, MCP servers", "url": "https://docs.lindy.ai/integrations/mcp.md", "seen": "2026-10-12" }, { "what": "docs, memory", "url": "https://docs.lindy.ai/teammate/memory.md", "seen": "2026-10-12" }, { "what": "docs, routines and dry runs", "url": "https://docs.lindy.ai/teammate/routines.md", "seen": "2026-10-12" }, { "what": "docs, setup and Slack install", "url": "https://docs.lindy.ai/teammate/setup.md", "seen": "2026-10-12" }, { "what": "docs, team setup, seats and credit limits", "url": "https://docs.lindy.ai/start-here/team-setup.md", "seen": "2026-10-12" }, { "what": "docs, iMessage and SMS", "url": "https://docs.lindy.ai/features/imessage-sms.md", "seen": "2026-10-12" }, { "what": "docs, email drafting", "url": "https://docs.lindy.ai/features/inbox-management/email-drafting.md", "seen": "2026-10-12" }, { "what": "docs, pricing and its FAQ", "url": "https://docs.lindy.ai/pricing.md", "seen": "2026-10-12" }, { "what": "docs, security", "url": "https://docs.lindy.ai/resources/security.md", "seen": "2026-10-12" }, { "what": "docs source repository, read from a shallow clone for commit dates and the usage and billing pages", "url": "https://github.com/lindy-ai/docs", "seen": "2026-10-12" }, { "what": "RDAP record for lindy.ai", "url": "https://rdap.org/domain/lindy.ai", "seen": "2026-10-12" } ], "openQuestions": [ "Kind is `platform`, the briefs' kind for a web or phone app, because Lindy is a hosted product with no public API, MCP server or SDK. Hosted lines were used for Reliability and the hosted rubric for Payments.", "Lindy is a team product with a personal assistant half. The home page calls it an AI teammate for the whole team, and the enterprise page and docs describe a private personal Lindy for one user's mail, calendar and meetings. It was graded in personal-assistants on that half.", "The lead's phrase about an AI employee that connects to all your tools was not found on the home page as read today, which says AI teammate. The pricing FAQ says AI employee.", "The terms forbid any automated use of the system, robots and scrapers. Recorded as a fact with no deduction. It matters before any probe is run.", "Maintenance scores recency on the public changelog, which stops at 21 October 2025. Scored on the docs repository's last commit of 9 October 2026 the recency line would be 30.", "Whether the default approval setting for a new integration is always allow or require approval is not stated in the pages read.", "Where OAuth tokens are stored, and whether Pipedream holds them, is not stated. The privacy policy lists Pipedream and WorkOS under integrations and authentication.", "The Chrome extension page shows a model picker with Gemini and DeepSeek models in an illustration. The privacy policy's list of AI providers has neither Google as a model provider nor DeepSeek.", "The docs say a saved credential cannot be read back through the API. No API documentation was found.", "unchecked: the trust centre at app.drata.com, which answered robots.txt with a bot check (403). The SOC 2 report, sub-processor list and any DPA there are unread.", "unchecked: the Chrome Web Store page, which redirected to a Google consent page, so the extension's version, date and permissions are unread.", "unchecked: plan prices for Plus, Pro and Max, which the docs say are shown only in the app's billing settings.", "unchecked: the Slack app's permission scopes, which appear only on Slack's approval screen.", "unchecked: the integrations catalogue, the blog and the case studies, which were not read." ] }, "negative": -3, "negativeNotes": [ "2026-10-12. The pricing page and the docs pricing page answer the question of whether Lindy does anything without approval with No, and say anything with outside impact waits for approval. The integrations page says approval settings apply in shared Slack threads only, that web chat, Slack direct messages, iMessage and SMS are not guarded, and that an integration can be set to always allow writes (https://www.lindy.ai/pricing, https://docs.lindy.ai/pricing.md, https://docs.lindy.ai/integrations/overview.md). 3 points for a misleading claim." ], "verdict": "Lindy keeps what it remembers in files the owner can read and edit, and publishes credit prices. Its approval setting applies in shared Slack threads only, so writes asked for by direct message, text or web chat run unasked, which its pricing page does not say. It has no status page, and its changelog stops in October 2025.", "bestFor": "Lindy suits a person or small team that lives in Slack and Google or Microsoft mail and wants briefs, drafts, scheduling and meeting notes done on a schedule.", "strengths": [ "Memory is a set of plain files in the web app, split into Personal, Team and System scopes, which the owner can read, edit and restore by version.", "Each integration has a setting that makes Lindy ask in Slack before writing, or stops it writing with that tool at all.", "Saved API keys are write-only. The docs say a value cannot be read back in the app, through the API or by asking Lindy, and keys can be rotated or revoked.", "The privacy policy of 28 September 2026 names its processors by category, among them Anthropic, OpenAI, Perplexity AI, Pipedream, WorkOS, Twilio and Recall.ai.", "Credit prices are public. A seat is $29.99 a month with 3,000 credits, top-ups are $10 per 1,000, and new accounts get $50 of credit with no card." ], "weaknesses": [ "The integrations page says approval settings apply in shared Slack threads only. Web chat, Slack direct messages, iMessage and SMS are not covered, and reads are never covered.", "The pricing page and the docs pricing page both answer that Lindy does nothing with outside impact without approval, which the integrations page contradicts.", "No status page, uptime record or SLA was found on the site or in the docs.", "The public changelog's newest entry is dated 21 October 2025, and it describes an agent builder the current docs no longer cover.", "Deleting a memory file keeps its earlier versions, and no way to purge them or a retention period was found. The privacy policy gives no period either.", "The terms of 24 September 2026 forbid automated use of the system and use for any commercial enterprise, in a product sold to companies. This matters before any probe is run." ], "agentNotes": [ "Treat a request sent by direct message, text or web chat as unguarded. Approval prompts appear in shared Slack threads only.", "Run a routine as a dry run before turning it on. A dry run reads real data and sends, posts and writes nothing.", "Turn off unused tools after adding an MCP server. Every supported tool arrives switched on, and a large server adds more than a hundred.", "Expect a billed seat for anyone who mentions Lindy in Slack. A teammate who joins that way has seven free days first.", "Connect only hosted MCP servers on public HTTPS with streamable HTTP, the one kind the docs describe." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 32.3 } ], "editorialScores": { "ergonomics": 43, "maintenance": 9, "payments": 35, "reliability": 24, "schema": 32, "security": 49, "transparency": 36 }, "provenanceScore": 68 }, "connect": {}, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/lindy" }, "notable": [ "Lindy is sold as a team product with a personal half. The enterprise page describes a personal executive assistant that works in a user's direct messages on their own email, calendar and meetings, and a shared one that works in channels on team sources (https://www.lindy.ai/enterprise)", "Each integration is set to always allow writes, require approval in Slack, or never write. The same page says reads are never guarded and that the setting applies in shared Slack threads only, not in web chat, Slack direct messages, iMessage or SMS (https://docs.lindy.ai/integrations/overview.md)", "Memory is a browser file explorer with Personal, Team and System scopes. Every save is a version, and deleting a file keeps its earlier versions (https://docs.lindy.ai/teammate/memory.md)", "Routines run on a schedule or on an event such as an email received, a Slack message or a meeting ending, and report to chat, a text message or a Slack direct message. Built-in routines cover daily briefs, email drafting and labelling, urgent email alerts, follow-up drafts, meeting recording, preparation and scheduling (https://docs.lindy.ai/teammate/routines.md)", "Lindy connects as a client to hosted MCP servers over public HTTPS with streamable HTTP, and creates an action for every tool whose schema it supports, all switched on (https://docs.lindy.ai/integrations/mcp.md)", "The privacy policy, last updated 28 September 2026, lists processors by name, with Anthropic, OpenAI, Perplexity AI, Exa Labs, ElevenLabs and Deepgram as AI providers and Google Cloud Platform, Amazon Web Services, DigitalOcean, MongoDB and Cloudflare for hosting and storage (https://www.lindy.ai/privacy)", "The security page claims SOC 2 Type II audited by Johanson Group, with HIPAA, GDPR and PIPEDA compliance, and says customer data is not used to train models. The trust centre it links answered our request with a bot check and was not read (https://www.lindy.ai/security)", "The changelog's newest entry is dated 21 October 2025 (https://www.lindy.ai/changelog)" ], "area": "frameworks", "details": [ { "label": "What it is", "value": "A hosted assistant with two halves. A personal Lindy works on one user's mail, calendar and meetings. A shared Lindy answers in Slack channels from sources an admin approves" }, { "label": "Channels", "value": "Slack direct messages and channel threads, iMessage, SMS and voice notes, email, the web app at chat.lindy.ai and a Chrome extension inside Gmail. Microsoft Teams is marked coming soon" }, { "label": "Acts without asking", "value": "Reads always. Writes too in web chat, Slack direct messages, iMessage and SMS, where approval settings do not apply. Email drafting saves replies to the drafts folder for the owner to send" }, { "label": "Approval controls", "value": "Per integration, one of always allow, require approval, or never write, applied in shared Slack threads. The requester or a workspace owner or admin approves with a button. One setting covers every account under an integration. Saved credentials used from shell commands are not covered" }, { "label": "Accounts", "value": "Google or Microsoft mail and calendar, a phone number, Slack, and tools by OAuth or API key. The site says 1,500+ integrations and the docs say 1,000+. All actions of a tool are on once it is connected" }, { "label": "Credentials", "value": "Saved API keys are write-only, personal by default, shareable with the workspace, and can be rotated or revoked. Where OAuth tokens are held is not stated. The privacy policy lists Pipedream and WorkOS under integrations and authentication" }, { "label": "Memory", "value": "Files in the web app, in Personal (private, per workspace), Team (edited by owners and admins) and System scopes. Every save is a version. Deleting a file keeps earlier versions. No purge or retention period found" }, { "label": "Where it runs", "value": "On the vendor's servers. The privacy policy lists Google Cloud Platform, Amazon Web Services, DigitalOcean, MongoDB and Cloudflare. No region or data location is stated" }, { "label": "Model providers", "value": "The privacy policy lists Anthropic, OpenAI, Perplexity AI, Exa Labs, ElevenLabs and Deepgram. The enterprise page names Anthropic, OpenAI and Gemini models. Users can pick a model for each task" }, { "label": "Proactive work", "value": "Routines on a schedule or an event trigger with a plain-language filter, default daily at 9:00. A dry run reads real data and suppresses every send, post and write" }, { "label": "MCP", "value": "Client only. Hosted servers on public HTTPS with streamable HTTP. A static credential can go in an `Authorization` header, a custom header or a query parameter. Approval for a server is set per person" }, { "label": "Cost", "value": "$29.99 per active user a month for 3,000 credits, about a cent a credit, pooled. Admins can cap a member's credits, though a running task can finish past the cap. Anyone who mentions Lindy in Slack takes a seat" }, { "label": "Compliance claims", "value": "SOC 2 Type II (Johanson Group), HIPAA with a BAA on Enterprise, GDPR and PIPEDA, per the security page. SSO, SCIM and audit logs are Enterprise items" }, { "label": "Advisories and incidents", "value": "No security advisory, incident report or status history was found on the site or in the docs. No security.txt" } ], "unitPrices": [ { "item": "Team seat", "unit": "seat-month", "usd": 29.99, "note": "3,000 credits a month, pooled across the workspace. Every active user is billed" }, { "item": "Top-up credit", "unit": "credit", "usd": 0.01, "note": "$10 per 1,000 credits. Top-up credits do not expire, monthly credits do not roll over" } ], "provenance": { "legalEntity": "Crivello Corp (doing business as Lindy)", "domain": "lindy.ai", "domainRegistered": "2019-05-16", "endpointOnVendorDomain": true, "terms": "https://www.lindy.ai/terms-of-service", "privacy": "https://www.lindy.ai/privacy", "statusPage": "", "changelog": "https://www.lindy.ai/changelog", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The Terms of Service, last updated 24 September 2026, name Crivello Corp, doing business as Lindy, registered in Oregon at 9450 SW Gemini Dr, Beaverton, OR 97008, and are governed by California law with binding arbitration.", "The terms cover the site and all related products and services. No separate service agreement or DPA was linked from the pages read.", "The privacy policy was last updated 28 September 2026.", "The web app and sign-in are at chat.lindy.ai.", "www.lindy.ai/.well-known/security.txt returns 404. No disclosure policy or bug bounty was found.", "No status page is linked from the site, the docs or the security page.", "RDAP gives a registration date of 2019-05-16 for lindy.ai, with NameCheap as registrar." ], "score": 68, "checks": [ { "check": "Legal entity named", "value": "Crivello Corp (doing business as Lindy)", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "lindy.ai, registered 2019-05-16 (7 years)", "points": 11, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "lindy.ai", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 3 clauses that cost points", "points": 3.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.lindy.ai/terms-of-service", "state": "read", "readAt": "2026-10-12", "statedDate": "2026-09-24", "words": 10237, "points": 3.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated September 24, 2026", "says": "Last updated 2026-09-24" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These Legal Terms and your use of the Services are governed by and construed in accordance with the laws of the State of California applicable to agreements made and to be entirely performed within the State of California, without regard to its conflict of law principles.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE LESSER OF THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE SIX (6) MONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING OR $100.00 USD.", "says": "Capped at the lesser of $100.00 and the fees paid in the 6 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Any breach of these intellectual property rights will constitute a material breach of these Legal Terms and your right to use our Services will terminate immediately." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We will alert you about any changes by updating the “Last updated” date of these Legal Terms, and you waive any right to receive specific notice of each such change.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "…Security Management Act (FISMA), etc.), so if your interactions would be subjected to such laws, you may not use the Services." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "(e) you will not access the Services through automated or non-human means, whether through a bot, script or otherwise;", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "Use the Services as part of any effort to compete with us or otherwise use the Services and/or the Content for any revenue-generating endeavor or commercial enterprise.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We reserve the right to change, modify, or remove the contents of the Services at any time or for any reason at our sole discretion without notice.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "WE MAY TERMINATE YOUR USE OR PARTICIPATION IN THE SERVICES OR DELETE YOUR ACCOUNT AND ANY CONTENT, CONTRIBUTIONS OR INFORMATION THAT YOU POSTED AT ANY TIME, WITHOUT WARNING, IN OUR SOLE DISCRETION." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "If the Parties are unable to resolve a Dispute through informal negotiations, the Dispute (except those Disputes expressly excluded below) will be finally and exclusively resolved by binding arbitration." } ], "notes": [ { "date": "2026-10-08", "text": "Liability is capped at the lesser of the amount paid in the six months before the claim arose or 100 US dollars.", "quote": "OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE LESSER OF THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE SIX (6) MONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING OR $100.00 USD." }, { "date": "2026-10-08", "text": "The customer grants an irrevocable licence to use its contributions for analytics in perpetuity, alongside a revocable licence to run, improve and monitor the service during the agreement.", "quote": "You grant us a limited, non-exclusive, royalty-free, revocable, world-wide license to use and display Contributions as necessary to provide, improve, and monitor the Services for the duration of this Agreement, and an irrevocable license to use Contributions for analytics purposes in perpetuity." }, { "date": "2026-10-08", "text": "The terms say customer contributions are not used to train AI models and that the vendor's AI model providers have agreed not to train on them.", "quote": "We do not use your Contributions to train AI models, and our AI model providers have agreed not to use them to train their models." } ] }, { "kind": "privacy", "url": "https://www.lindy.ai/privacy", "state": "read", "readAt": "2026-10-12", "statedDate": "2026-09-28", "words": 5298, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated September 28, 2026", "says": "Last updated 2026-09-28" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We share your information with our partners, service providers, contractors, agents, and third-party vendors as they need it to fulfill Services or orders, or for other requests you make of us." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We do not sell your personal information to third parties.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you still have any questions or concerns, please contact us at privacy@lindy.ai", "says": "privacy@lindy.ai" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": false } ], "notes": [ { "date": "2026-10-08", "text": "After an account is ended on request, some information may be kept to prevent fraud, troubleshoot problems, assist investigations, enforce the legal terms and meet legal requirements.", "quote": "However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements." }, { "date": "2026-10-08", "text": "Data obtained through Google APIs is not used or shared for training or evaluating AI models.", "quote": "Where our Services use Google APIs to access user data from Google services, we do not use or share that Google-sourced data for any artificial intelligence model training or evaluation purposes." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/lindy.json" } }