Gigapixel AI Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Gigapixel AI

Risk Overview

Moderate Risk

3.7

/10

Image Enhancement

Top Risks

Cloud processing required for 'Everything' feature exposes images to servers; mandatory arbitration in EULA; CLI/on-premise deployments transmit licensing/usage data to Topaz; no confirmed SOC 2 certification; subscription required for cloud features with retention tied to plan tier.

Mitigations

Explicit prior consent required before training on user media; local desktop processing keeps images off cloud by default; no data selling; strong facial data protection policy; GDPR compliance with SCCs; very detailed and transparent September 2025 privacy policy; user retains full IP on outputs.

Get started

Is your team using

Gigapixel AI

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

EULA requires arbitration for dispute resolution. Arbitration varies by region: non-China/US users use Texas law with ICDR; China users use Hong Kong law with HKIAC. No explicit class action waiver confirmed in available review but standard US arbitration clauses typically include them. Topaz does not transfer title or IP rights for software. Liability capped and disclaimer-heavy EULA.

/10

Data Retention

For API: input/output media temporarily stored, subject to automatic deletion after limited period. Users can permanently delete content before automatic deletion. For Web Applications: retention period determined by subscription plan (specified at purchase). Local desktop software: images processed locally, not uploaded to cloud unless using 'Everything' feature requiring cloud processing. Local processing is a major privacy advantage.

/10

Data Sovereignty

Topaz Labs LLC is a US company (Dallas, Texas 75254). US CLOUD Act applies. GDPR compliance for EEA users with SCCs. Desktop software with local processing reduces cloud data exposure significantly. For cloud features, data processed on US servers. Texas state law and federal law govern. No foreign ownership concerns.

/10