Paperpal Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Paperpal

Risk Overview

Minimal Risk

2.7

/10

Writing Assistant

Text Editing

Top Risks

90-day document retention period means uploaded research manuscripts stay on servers for 3 months; Indian operational presence introduces DPDP Act jurisdiction uncertainty; full ToS arbitration terms not confirmed.

Mitigations

Paperpal has the best overall risk profile in this batch. For maximum protection: use account deletion after each project to trigger secure erasure; request explicit data deletion; consider HIPAA-ready enterprise tier for life sciences research.

Get started

Is your team using

Paperpal

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Data Retention

Retains documents for 90 days from upload to allow repeated editing sessions. Account deletion triggers secure erasure with 'no traces remaining.' Retains name and email until account deactivation or deletion request. 90-day document retention is the main risk for confidential research papers.

/10

Legal Terms

Cactus Communications Pte. Ltd. is Singapore-registered. Singapore law likely governs. No mandatory arbitration clause confirmed in publicly available terms. Singapore has a respected legal system. Full ToS not directly accessible for review in this research. Moderate assumed risk pending full ToS review.

/10

Data Sovereignty

Headquartered in Singapore (Tokio Marine Centre). Operations in India (Cactus Communications has Indian offices). Singapore is a strong rule-of-law jurisdiction not subject to US CLOUD Act. India's DPDP Act 2023 applies to Indian operations. EU/GDPR compliance documented. PECR compliance noted. Better sovereignty profile than US-based tools.

/10