Back to AI Tools
Reflect
Risk Overview
Minimal Risk
2.9
/10
Productivity Assistant
·
Text Generation
·
Top Risks
US jurisdiction (CLOUD Act) — mitigated significantly by E2E encryption architecture. ToS last updated August 2023 may not reflect current AI integrations fully. AI API calls (OpenAI, Anthropic, Google) for AI features processed by third parties whose own policies apply. $100 liability cap.
Mitigations
End-to-end encryption (XChaCha20-Poly1305) prevents Reflect from reading note content. Independent Doyensec security audit with clean findings. No AI training on notes. Audio files deleted post-transcription. AI calls not linked to user accounts. User retains full IP ownership. No mandatory arbitration.
Get started
Is your team using
Reflect
safely?
Highest Risk Categories
The highest-scoring risk categories identified in this assessment.
Legal Terms
Terms state 'You agree to first try to resolve the dispute informally by contacting the Company' — no mandatory arbitration clause. US law (Austin, TX, Reflect App LLC). Standard limitation of liability: lesser of amount paid or $100. No class-action waiver found. ToS last updated August 2023 — slightly outdated. Simple, relatively user-friendly terms.
4
/10
Data Sovereignty
US company (Reflect App LLC, Austin, TX). US CLOUD Act applies to company. E2E encryption is a critical practical mitigant — even with a CLOUD Act demand, server-side data is encrypted ciphertext only. Notes content cryptographically protected from government access as well as from Reflect itself. Strong practical sovereignty protection despite US jurisdiction.
4
/10
3rd-Party Sharing
Shares with service providers for monitoring, analytics, and payment processing. Shares with affiliates (parent, subsidiaries, JV partners). May share in M&A transactions. Does not share notes content — E2E encrypted. AI API calls (OpenAI, Anthropic, Google) are not associated with user accounts per policy. Limited sharing scope.
3
/10
Unlock the complete assessment
Run a free assessment to access the full AI tool risk analysis.
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue
Reference Documentation
Official documentation and policies referenced as part of this assessment.
Terms of Service
https://reflect.app/terms
Privacy Policy
https://reflect.app/privacy