Consensus Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Consensus

Risk Overview

Minimal Risk

2.9

/10

Research

Knowledge Assistant

Top Risks

Mandatory JAMS arbitration with class action waiver is inconsistent with otherwise privacy-respecting approach and is the primary risk. No SOC 2 certification confirmed. Small team with limited disclosed security infrastructure.

Mitigations

Best-in-class training data commitment: explicit no-training covering third-party providers as well. No PII collection. No ad partnerships. No data sales. Anonymized-only data model means minimal breach impact. Opt-in account model.

Get started

Is your team using

Consensus

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

Terms of Service (updated June 25, 2025) include binding arbitration administered by JAMS. Venue in Kent County, Delaware. Jury trial waiver. Class action waiver explicitly included. Despite otherwise excellent privacy practices, the dispute resolution structure is a significant risk factor for individual users.

/10

Data Sovereignty

US-based company (Delaware incorporation implied by arbitration venue in Kent County, DE). Data processed in US. No cross-border transfer to high-risk jurisdictions. GDPR compliance not explicitly confirmed but minimal data collection limits exposure. US CLOUD Act applies.

/10

Security Posture

Dedicated security page at help.consensus.app. Minimal data collection approach dramatically reduces breach surface area. No SOC 2 certification confirmed. No major public breaches found. Small academic startup team with limited published security controls documentation. Security-through-data-minimalism is a genuine approach.

/10