Back to AI Tools
Litmaps
Risk Overview
Minimal Risk
3.4
/10
Research
·
Knowledge Assistant
·
Top Risks
Data hosted in US (CLOUD Act exposure); indefinite retention of anonymized data; no published security certifications for a tool used with pre-publication academic papers; no explicit AI training prohibition.
Mitigations
Use institutional/enterprise account with DPA in place; avoid uploading pre-publication or confidential manuscripts; submit GDPR deletion request after project completion; rely on Microsoft Azure's underlying security posture.
Get started
Is your team using
Litmaps
safely?
Highest Risk Categories
The highest-scoring risk categories identified in this assessment.
Data Retention
Retains personal data 'as long as reasonably necessary.' No fixed deletion timeline stated. Anonymized data may be retained indefinitely. User rights include deletion requests under GDPR. No zero-data-retention or explicit 30-day post-deletion policy. Moderately concerning for pre-publication research papers.
5
/10
Security Posture
No published SOC 2 or ISO 27001 certifications found. Uses Microsoft Azure infrastructure. DPA available for enterprise users. No mention of bug bounty or public vulnerability disclosure. Basic security measures described but limited third-party validation. Small NZ company with limited public security posture documentation.
5
/10
Data Sovereignty
Incorporated in New Zealand; data stored on Microsoft Azure, Boydton, VA, USA — subject to US CLOUD Act. NZ is a Five Eyes partner with MLAT treaties. GDPR compliant for EU users. Not an authoritarian jurisdiction but US CLOUD Act exposure applies.
4
/10
Unlock the complete assessment
Run a free assessment to access the full AI tool risk analysis.
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue
Reference Documentation
Official documentation and policies referenced as part of this assessment.
Terms of Service
https://www.litmaps.com/terms-and-conditions
Privacy Policy
https://www.litmaps.com/privacy-policy