Back to AI Tools
Submagic
Risk Overview
Moderate Risk
4
/10
Video Generation
·
Video Editing
·
Top Risks
Broad worldwide license to modify and distribute uploaded content (opt-out for promotional use only); social media scheduling integration accesses multiple platforms; advertising pixels (Google, TikTok) present; AI-generated avatar feature ('AI Actors Studio') potentially involves biometric-like processing; no SOC 2 certification.
Mitigations
Opt out of promotional content use via email to support@submagic.co. French GDPR protections are strong—exercise erasure rights at account closure. DPO is contactable for data concerns. Review social platform OAuth permissions granted through the scheduling integration.
Get started
Is your team using
Submagic
safely?
Highest Risk Categories
The highest-scoring risk categories identified in this assessment.
Data Retention
Explicit retention schedule: customer/account data max 3 years after contractual end; billing/accounting data 10 years (legal obligation); connection logs 12 months. GTS Article 20 states upon termination, company destroys customer data within 60 days if no portability request made. Relatively clear retention schedule—better than most peers.
5
/10
Security Posture
No SOC 2 Type II or ISO 27001 certifications mentioned. No bug bounty program. GDPR-required data security measures. DPO (Data Protection Officer) appointed (tsifei@submagic.co)—required for GDPR compliance, positive signal. AWS infrastructure. Data encrypted in transit (SCCs require this). Standard technical/organizational measures. Better baseline than non-GDPR peers due to DPO requirement.
5
/10
Training Use
Privacy policy (GDPR-compliant, French company) lists specific legal bases for each data use. No explicit statement that user video content is used for AI model training. Data minimization principle applies under GDPR. GTS (ToS) grants a worldwide non-exclusive license to 'use, modify, reproduce, and distribute' content 'on and through the Platform'—limited to platform operation. Content can be used for promotional purposes unless user explicitly opts out via email. No broad 'develop new products' training language found. Better disclosure than US peers.
4
/10
Unlock the complete assessment
Run a free assessment to access the full AI tool risk analysis.
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue
Reference Documentation
Official documentation and policies referenced as part of this assessment.
Terms of Service
https://www.submagic.co/terms-of-use
Privacy Policy
https://www.submagic.co/privacy