Palette.fm Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Palette.fm

Risk Overview

Moderate Risk

3.6

/10

Image Enhancement

Image Editing

Top Risks

Small company (Palette SAS) with limited security certifications; multiple analytics providers (Google/Firebase) with their own data practices; unclear retention period for uploaded photos; no explicit bug bounty program.

Mitigations

French/EU company with direct GDPR applicability; explicit no-training commitment without user permission; users own all outputs with full commercial rights; no arbitration clause; no class action waiver; French law consumer protection; very transparent and user-favorable IP terms.

Get started

Is your team using

Palette.fm

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Data Retention

Privacy policy states retention only as long as necessary for stated purposes. Legal obligations compliance, dispute resolution. Usage data retained for shorter periods. No specific upload image retention period stated. Images encrypted on platform. No clear post-deletion purge timeline specified.

/10

Security Posture

Images encrypted on platform. Uses Bugsnag, Sentry, and Firebase Crashlytics for error monitoring (adds third-party data access). No SOC 2 or ISO 27001 certifications mentioned. Smaller SaaS with basic security tooling. No major public breaches found. Multiple analytics/monitoring tools create some data surface expansion.

/10

Legal Terms

Governed by French law (France). Limitation of liability to amount paid for products/services. No arbitration clause found—French law consumer protection applies. No class action waiver identified. French/EU courts have jurisdiction. Relatively user-favorable legal terms with no forced arbitration. Standard EU consumer protection framework.

/10