Deep Dream Generator Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Deep Dream Generator

Risk Overview

Moderate Risk

4.4

/10

Image Generation

Image Editing

Top Risks

Removed content may persist in storage for legal obligations (indefinite potential retention); no SOC 2/ISO certifications; small company with limited security documentation; training use of user content not explicitly prohibited; content marked as non-confidential in policy; limited security investment expected for small Bulgarian startup.

Mitigations

EU/GDPR jurisdiction provides strong user rights and data protection (best sovereignty in batch); explicit full commercial IP ownership assigned to users; no data sales to advertisers stated; account deletion available by email; GDPR deletion rights apply; EU courts accessible for EU residents without forced arbitration; clear statement of not renting or selling personal information.

Get started

Is your team using

Deep Dream Generator

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Security Posture

No publicly disclosed SOC 2 Type II or ISO 27001 certifications found. No bug bounty program identified. Small Bulgarian company with limited public security documentation. Security profile assessed by Nudge Security. No major data breach specifically at DDG found, but the company is small with presumed limited security investment. Content is noted as non-confidential and non-proprietary per policy. No major enterprise security framework evidence. Unclear incident response procedures.

/10

Data Retention

Content removed from the Service may continue to be stored to comply with legal obligations but may not be retrievable without a valid court order. Account and data deletion available by email request to contact@deepdreamgenerator.com. Specific retention timelines not clearly published. Legal obligation retention can be indefinite. Removed content can persist in storage even after user deletion. No zero-data-retention commitment.

/10

Training Use

Deep Dream Generator does not explicitly disclose AI model training on user content in available policy summaries. Community platform with public galleries suggests user content is broadly visible. The platform's core technology is based on Google's DeepDream neural network — training practices for their own models are not clearly documented. No clear opt-out mechanism for training. Policies last updated December 2025. Lack of explicit prohibition on training use is a yellow flag.

/10