Kindo Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Kindo

Risk Overview

Moderate Risk

4.3

/10

AI Agents

Workflow Automation

Conversational AI

Top Risks

Broad ToS license allows Kindo to use customer data to refine its products, and Aggregate Data derived from customer data may be sold to third parties. Third-party AI model providers (OpenAI etc.) receive Your Data under their own terms with no Kindo oversight. Mandatory arbitration with class action waiver. Security operations context means Kindo processes highly sensitive security data (incident response, threat intelligence, vulnerability data).

Mitigations

Negotiate enterprise Master SaaS Agreement (controls over public ToS in case of conflict). Use on-premises deployment to eliminate cloud data exposure. Carefully audit which third-party AI models are used and their data policies. Request explicit contractual prohibition on Aggregate Data sales. Strong security certifications are a positive differentiator for security-focused enterprises.

Get started

Is your team using

Kindo

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

Mandatory binding arbitration (FAA-governed, JAMS rules). Explicit CLASS ACTION WAIVER (prominently capitalized in ToS). Disputes resolved individually only. California law, California courts (contradicting arbitration-first but for injunctive relief). Liability cap: greater of fees paid in prior 3 months OR $100 — standard enterprise SaaS but arbitration+class waiver is high-risk combination.

/10

Training Use

Terms explicitly grant Kindo a broad license to use Your Data 'for Kindo's business purposes, including but not limited to, enhancing, updating, evolving and refining the Products.' Aggregate Data (derived from Your Data) may be 'sold, transferred, and otherwise exploited.' Third-party AI models may use data per their own terms — 'Kindo has no control over the use of Your Data by such third parties.' This is a significant training/use risk.

/10

3rd-Party Sharing

Data shared with third-party AI model providers (OpenAI, etc.) per their own terms — user assumes risk. Kindo explicitly disclaims control over third-party AI model use of user data. Aggregate Data may be sold to third parties per ToS. Standard subprocessor sharing for infrastructure. The explicit right to sell Aggregate Data is above-average risk.

/10