NEWS
Verax AI Risk Assessment is live. See what's exposed
Tripo Studio
Tripo Studio
 
Risk Overview
Significant Risk
6.4
/10
Image Generation
·
Video Generation
·
Avatar Generation
·
Top Risks

Chinese-founded company with Hong Kong governing law and HKIAC arbitration — high sovereignty risk. Free users forfeit all IP rights to Tripo entirely. Public content retained in perpetuity after account termination. No third-party security certifications confirmed. Broad corporate structure links to Beijing-based VAST with Alibaba/Baidu investors.

Mitigations

Enterprise/paid plan required for any IP ownership. Avoid using free tier for proprietary creative work. Request enterprise DPA and data processing agreements. Consider alternative tools with clearer US/EU sovereignty for sensitive commercial projects. Do not share proprietary assets to any public galleries.

Get started
Is your team using 
Tripo Studio
 
safely?

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

Governed by laws of Hong Kong. All disputes submitted to Hong Kong International Arbitration Centre (HKIAC) — mandatory binding arbitration, Hong Kong-seated. Arbitral award 'final and binding.' Liability cap: greater of fees paid in prior 12 months or $500. No class action mechanism mentioned but arbitration-only effectively eliminates class actions. California residents waive Civil Code Section 1542.
8
/10

Output/IP Ownership

Free users: Tripo retains ALL rights, title and interest in inputs and outputs with no IP transfer to users whatsoever — extremely unfavorable. Paid users: users generally retain rights to inputs/outputs with a broad license back to Tripo (royalty-free, perpetual, irrevocable, worldwide, non-exclusive). Feedback grants Tripo fully paid, perpetual, irrevocable worldwide license. Free plan is essentially an IP assignment to Tripo.
8
/10

Data Sovereignty

Holymolly Ltd is registered in Hong Kong; parent company VAST is Beijing-founded with Cayman Islands registration. Investors include Alibaba Group and Baidu Ventures. Governing law is Hong Kong. Data may be subject to Chinese national security laws through corporate structure. Company address is Hong Kong. Significant sovereignty risk for US/EU enterprise users.
7
/10

Unlock the complete assessment

Run a free assessment to access the full AI tool risk analysis.
Start Free Assessment
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue

Reference Documentation

Official documentation and policies referenced as part of this assessment.