Back to AI Tools
Leonardo.AI
Risk Overview
Moderate Risk
4.6
/10
Image Generation
·
Top Risks
Public-mode content subject to broad Leonardo license including training use; arbitration clause (ACICA) for all disputes; no confirmed SOC 2/ISO certifications; post-deletion retention timeline unclear; Five Eyes jurisdiction (Australia) means potential intelligence access to data.
Mitigations
Paid subscribers own all privately generated images with no training use; clear public vs. private content distinction; Standard Contractual Clauses for EU data transfers; Irish law for EU data disputes; Data Processing Addendum available for enterprise; no evidence of data sold to advertisers; explicit prohibition on private content training use.
Get started
Is your team using
Leonardo.AI
safely?
Highest Risk Categories
The highest-scoring risk categories identified in this assessment.
Legal Terms
Disputes for non-Australian users referred to arbitration administered by Australian Centre for International Commercial Arbitration (ACICA), conducted in Sydney under ACICA Arbitration Rules. EU/UK data disputes handled under Irish law courts. Class action waiver implied by individual arbitration requirement. Governing law is complex (Australian for most, Irish for EU data). Liability limitations apply. Less aggressive than US-style arbitration clauses but still binding arbitration required.
7
/10
Data Retention
No explicit short data retention period specified. Account data retained during account lifetime. Deletion requests appear supported but specific timelines after deletion not clearly published. Private content protected from training use but specific storage duration post-deletion unclear. Standard industry retention for operational and legal compliance purposes.
5
/10
Security Posture
No major publicly disclosed data breaches found. Security profile reviewed by Nudge Security showing basic security posture. Data Processing Addendum available indicating some enterprise security considerations. No publicly confirmed SOC 2 Type II or ISO 27001 certifications found in research. Standard cloud security practices assumed (likely uses AWS/GCP infrastructure). No bug bounty program identified in research.
5
/10
Unlock the complete assessment
Run a free assessment to access the full AI tool risk analysis.
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue
Reference Documentation
Official documentation and policies referenced as part of this assessment.
Terms of Service
https://leonardo.ai/terms-of-service
Privacy Policy
https://leonardo.ai/privacy-policy