Octoparse Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Octoparse

Risk Overview

Moderate Risk

4.6

/10

Web Scraping

Data Extraction

Top Risks

Chinese parent company ownership (Chinese VC-backed) raises sovereignty concerns despite US incorporation. Third-party advertiser data sharing is above average for scraping tools. No public security certifications. Limited transparency on data flows between US subsidiary and Chinese parent.

Mitigations

US incorporation and operations. Privacy policy includes explicit Google Workspace API no-training commitment. GDPR rights available to EEA users. Explicit encryption at rest and in transit. DPO contact available (isabel@octoparse.com).

Get started

Is your team using

Octoparse

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Data Sovereignty

Octopus Data Inc. is a US entity (California) but is a US subsidiary of a Chinese national high-tech enterprise with Chinese VC backing (Huayi Ventures, Miracleplus, Redpoint China Ventures, CITIC Capital). Operations span Shenzhen and California. Chinese parent company ownership creates potential Chinese data access risk. Not confirmed under Chinese PIPL/DSL direct jurisdiction but parent ownership is a material concern.

/10

3rd-Party Sharing

Shares with third-party vendors, service providers, contractors. Notably includes 'Third-Party Advertisers' — may use cookies and tracking tech for ad targeting. Business transfers included. Does not sell data per stated policy, but advertiser data sharing is an elevated-risk category.

/10

Data Retention

Retains 'for as long as it is necessary' and 'no purpose will require us to keep your personal information for longer than the period of time in which users have an account.' Some data retained in files post-account-deletion for fraud prevention and legal compliance. Vague retention periods.

/10