Recraft Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Recraft

Risk Overview

Moderate Risk

/10

Image Generation

Image Editing

UI Design

Top Risks

Free plan users have no IP ownership and content is used for training by default. Training opt-out only available to paid users. Retention period is vague ('as long as necessary'). SOC 2 certification status unclear from public documents.

Mitigations

Upgrade to paid plan for IP ownership and training opt-out. Execute DPA for GDPR compliance. Review subprocessors list. Request Trust Center documentation for enterprise due diligence.

Get started

Is your team using

Recraft

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

Terms of Service include dispute resolution section but full ToS content was partially inaccessible. Privacy policy is GDPR and CCPA compliant with stated user rights. Trust Center and DPA available. No clear evidence of mandatory arbitration clause in the accessible portion of the ToS — score moderate pending full review.

/10

Training Use

Default opt-in for training on free plans; paid users can opt out via account profile settings. Privacy policy states: 'We may use such information to train Recraft's own proprietary AI models, but you may disallow such use of your information by opting out in your account profile settings.' Free plan images are owned by Recraft and used for training by default.

/10

Data Retention

Retains personal data 'for as long as necessary to provide the services.' No specific deletion timeline stated. Users can request deletion. Data may be stored in countries outside home country. DPA available for enterprise clients for GDPR compliance.

/10