Adobe
- Rank
- Score
- 15/149
- 52 out of 100
Adobe is an American software company headquartered in San Jose, California, known for creative and document software such as Photoshop and Acrobat. It develops the Firefly family of generative AI models for images, video and design, built into its Creative Cloud apps.
Is Firefly safe?
Firefly scores 52 out of 100 and ranks 15 of 149. Its strongest category is Security, and its weakest category is Transparency.
How is Firefly scored?
Firefly is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Compare
No problems found in 1 public record. That is not proof.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
No events
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026
Protecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“All other Adobe Services and Software are not intended for use by children and certain products specifically prohibit users who are under a…” MoreLess
“All other Adobe Services and Software are not intended for use by children and certain products specifically prohibit users who are under a certain age.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026
Outside evidence is stronger than its written policies.
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
62.5Average of two independent training-data checks: the Stanford index and an academic grading of EU AI Act training-data summaries.
- 62.5
EU AI Act training-data summary grades (AI Accountability Lab)
Independent sourceAI Accountability Lab (opens in a new tab) · 10 Nov 2026
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
100Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Contact: psirt@adobe.com”
adobe.com security contact (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“Adobe Creative Cloud for enterprise [2] (including Adobe Express and Adobe Firefly) SOC 2-Type 2 (Security, Availability, & Confidentiality)”
adobe.com security page (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“Adobe Creative Cloud for enterprise [2] (including Adobe Express and Adobe Firefly) SOC 2-Type 2 (Security, Availability, & Confidentiality)…” MoreLess
“Adobe Creative Cloud for enterprise [2] (including Adobe Express and Adobe Firefly) SOC 2-Type 2 (Security, Availability, & Confidentiality) SOC 3 (Security, Availability, & Confidentiality) ISO 9001:2015 ISO 27001:2022”
adobe.com security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Confirmed data breaches, last 36 months.
No events
Independent sourceHave I Been Pwned (opens in a new tab) · 12 Nov 2026
No problems found in 1 public record. That is not proof.
Clear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We also collect or generate information about how you access and use our Services and Software, including when you use a desktop or mobile a…” MoreLess
“We also collect or generate information about how you access and use our Services and Software, including when you use a desktop or mobile app feature that takes you online (such as a photo syncing feature).”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“The following links provide further information on: Adobe product improvement program; Usage Data FAQ: Creative Cloud and Document Cloud App…” MoreLess
“The following links provide further information on: Adobe product improvement program; Usage Data FAQ: Creative Cloud and Document Cloud Apps Adobe Genuine Software Your privacy choices regarding how we use this information; Adobe products and services licensed by educational institutions; How Adobe uses cookies and similar technologies; and How Adobe analyzes your content using techniques such as machine learning in order to improve our Services and Software, and how to opt out of this.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“When you register for an account and create an Adobe ID, we process and keep most personal information we process on your behalf for as long…” MoreLess
“When you register for an account and create an Adobe ID, we process and keep most personal information we process on your behalf for as long as you are an active user of our Services and Software.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We will disclose your personal information within the Adobe family of companies for the purposes identified above (see a list of Adobe entit…” MoreLess
“We will disclose your personal information within the Adobe family of companies for the purposes identified above (see a list of Adobe entities and our acquired companies).”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“You can ask us to stop processing this information.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“The following links provide further information on: Adobe product improvement program; Usage Data FAQ: Creative Cloud and Document Cloud App…” MoreLess
“The following links provide further information on: Adobe product improvement program; Usage Data FAQ: Creative Cloud and Document Cloud Apps Adobe Genuine Software Your privacy choices regarding how we use this information; Adobe products and services licensed by educational institutions; How Adobe uses cookies and similar technologies; and How Adobe analyzes your content using techniques such as machine learning in order to improve our Services and Software, and how to opt out of this.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“When provided for by applicable law, you have the right to ask us for a copy of your personal information; to correct, delete or restrict (s…” MoreLess
“When provided for by applicable law, you have the right to ask us for a copy of your personal information; to correct, delete or restrict (stop any active) processing of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this information to another controller.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“When provided for by applicable law, you have the right to ask us for a copy of your personal information; to correct, delete or restrict (s…” MoreLess
“When provided for by applicable law, you have the right to ask us for a copy of your personal information; to correct, delete or restrict (stop any active) processing of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this information to another controller.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. UK competition regulator cases, US Justice Department settlements, last 5 years, and regulator actions and open investigations into the company's AI products at half severity, last 3 years.
No events
RegulatorUK CMA cases (opens in a new tab) · 12 Nov 2026No events
RegulatorUS Justice Department (opens in a new tab) · 12 Nov 2026
Court judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you are outside North America, you can also get in touch with Adobe Ireland's data protection officer at DPO@Adobe.com or by postal mail…” MoreLess
“If you are outside North America, you can also get in touch with Adobe Ireland's data protection officer at DPO@Adobe.com or by postal mail at 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland.”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“If you have unresolved concerns, you have the right to report them to your local privacy regulator or data protection authority and, where a…” MoreLess
“If you have unresolved concerns, you have the right to report them to your local privacy regulator or data protection authority and, where applicable, you also have the right to lodge a complaint with Adobe Ireland's lead supervisory authority (the Irish Data Protection Commission) or Adobe KK’s privacy regulator (the Personal Information Protection Commission).”
adobe.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 52
Method 2 Nov 2026
-2
28 Oct 2026
Score 54
Method 28 Oct 2026, update 2
-9 · combines both 28 Oct updates (28 Oct 2026 - Update 1 and 28 Oct 2026 - Update 2)
23 Oct 2026
Score 63
Method 21 Oct 2026
+6 · Data fix
21 Oct 2026
Score 57
Method 21 Oct 2026
-6 · Method update
20 Oct 2026
Score 63
Method Not recorded
+10 · Reason not recorded
14 Oct 2026
Score 53
Method Not recorded
-