Altered Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Altered

Risk Overview

Moderate Risk

4.1

/10

Audio Generation

Voice Cloning

Top Risks

Altered retains irrevocable worldwide license over submitted Content and Outputs for software development — broader than expected for a voice transformation tool. Users cannot claim ownership of AI voices used in outputs and cannot register them in content ID systems. No SOC 2/ISO 27001 certification reduces verifiable security assurance. IP indemnification falls entirely on users for third-party claims.

Mitigations

UK GDPR applies — exercise data subject rights including erasure requests. Avoid using Altered for content where Content ID registration is important (e.g., YouTube monetization). Review the broad irrevocable license grant carefully before submitting proprietary content. For enterprise use, request security documentation and DPA.

Get started

Is your team using

Altered

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

UK company (London) — governed by English law and UK courts. UK GDPR applies. No mandatory US-style arbitration clause with class action waiver. English law jurisdiction is generally more balanced for consumers than US arbitration-heavy terms. Company explicitly disclaims indemnification obligations to users for third-party IP claims — risk of IP infringement falls on user.

/10

Output/IP Ownership

Altered retains full ownership of all AI Voices on the platform — users receive a license to use outputs in distributed projects but cannot claim ownership of the underlying voices. Users cannot register AI voices in content ID systems (YouTube Content ID, Facebook Rights Manager). The company retains an irrevocable worldwide license over user Content and Outputs for software development. Users own their original input content but the AI voice used in output belongs to Altered. Moderately restrictive IP model.

/10

Security Posture

UK-based startup with ethical AI focus. Consent required for voice cloning. Watermarking of outputs for traceability. No SOC 2 or ISO 27001 certification publicly documented. No bug bounty program found. Smaller company — security practices appear adequate but lack enterprise-grade third-party certification. Contact center deployments suggest some enterprise security review process exists.

/10