ByteDance
- Rank
- Score
- 66/149
- 44 out of 100
ByteDance is a Chinese technology company founded in 2012 by Zhang Yiming and Liang Rubo, and based in Beijing. It owns TikTok and the video editor CapCut. ByteDance makes the Doubao AI assistant and the Seed family of AI models for text, images and video.
Is Doubao safe?
Doubao scores 44 out of 100 and ranks 66 of 149. Its strongest category is Security, and its weakest category is Safety.
How is Doubao scored?
Doubao is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
52.8This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
4 events
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026These are reports, not proven findings.
Date Event Severity 1 Jul 2026 AIAAIC2197 · Chinese AI video tool accused of abusing US copyrighted works1 Jul 2026 · Medium (reported) Medium (reported) 13 Feb 2026 AIID #1377 · Seedance 2.0 Reportedly Generated Viral Tom Cruise-Brad Pitt Fight Video, Prompting Hollywood IP and Likeness Complaints13 Feb 2026 · Low (reported) Low (reported) 1 Sep 2025 AIID #1742 · ChatGPT Allegedly Helped a Teenager in Sarthe, France, Plan Terrorist Attacks on Schools and Government Buildings1 Sep 2025 · Medium (reported) Medium (reported) 1 Jul 2025 AIAAIC2130 · TikTok accused of promoting suicide amongst French youngsters1 Jul 2025 · High (reported) High (reported)
Protecting children
0Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim0/50doubao.com privacy policy (opens in a new tab) · 15 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Seed-OSS is a series of open-source large language models developed by ByteDance's Seed Team, designed for powerful long-context, reasoning,…” MoreLess
“Seed-OSS is a series of open-source large language models developed by ByteDance's Seed Team, designed for powerful long-context, reasoning, agent and general capabilities, and versatile developer-friendly features.”
huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“Benchmark: MMLU-Pro, Seed1.6-Base: 70, Qwen3-30B-A3B-Base-2507*: 59.8, Qwen2.5-32B-Base*: 58.5 (55.1), Seed-OSS-36B-Base ( w/ syn. ): 65.1,…” MoreLess
“Benchmark: MMLU-Pro, Seed1.6-Base: 70, Qwen3-30B-A3B-Base-2507*: 59.8, Qwen2.5-32B-Base*: 58.5 (55.1), Seed-OSS-36B-Base ( w/ syn. ): 65.1, Seed-OSS-36B-Base-woSyn ( w/o syn. ): 60.4”
huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026
Training-data disclosure
23.4Average of two independent training-data checks: the Stanford index and an academic grading of EU AI Act training-data summaries.
- 23.4
EU AI Act training-data summary grades (AI Accountability Lab)
Independent sourceAI Accountability Lab (opens in a new tab) · 10 Nov 2026
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
67Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“TikTok (bug bounty)”
hackerone.com (opens in a new tab) · 2 Nov 2026 - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33volcengine.com security page (opens in a new tab) · 19 Oct 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“火山引擎成功获得ISO27001信息安全管理体系认证，意味着火山引擎的IaaS、PaaS、SaaS平台产品及服务，从设计到交付及运营模式符合国际信息安全最佳实践的要求。”
volcengine.com security page (opens in a new tab) · 19 Oct 2026
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataNo problems found in 1 public record. That is not proof.
Strong written policies; outside evidence is weaker.
Clear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“你可以通过对话框向我们发送文字、语音、图片、文件等内容或点击操作栏按键直接发送操作指令请求，我们收集上述信息以便于向你提供文字、语音（包括实时通话）形式的智能对话以及图片、音乐生成服务。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“b.在你未进行本条a款所述的反馈时，我们可能会将你向豆包输入的数据、发出的指令以及豆包相应生成的回复（合称“内容数据”）、你对产品的访问和使用情况进行分析和用于模型训练，以不断调整优化模型效果和产品体验。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“你输入的信息、反馈的信息、点赞、点踩及相关信息，在你未撤回、删除或未注销账号期间，我们会保留相关信息用于向你提供持续的业务功能。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“对于委托处理个人信息的场景，我们会与受托合作方根据法律规定签署相关处理协议，并对其个人信息使用活动进行监督。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“6.3.1 你可以根据《账号注销协议》在【设置】-【豆包账号管理】-【删除账号】注销账号，具体说明详见《豆包账号服务须知》。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“如果豆包个人版的用户不希望将输入或提供的内容数据用于模型训练和优化，可以通过”设置-隐私与权限-帮助模型改进效果”来关闭此设置（关于不同类型内容数据的收集和使用，详见《帮助模型改进效果FAQ》）。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“你可以通过如下方式查阅、复制、更正、补充或删除你的个人信息： a.查阅/复制/删除历史对话：点击对话框--点击单个对话--删除 b.管理/删除你的作品：点击我的--个人页--作品，可以选择将作品设置为公开/私密或删除 c.查阅收藏：点击我的--个人页--收藏，可以查看已收藏的内容…” MoreLess
“你可以通过如下方式查阅、复制、更正、补充或删除你的个人信息： a.查阅/复制/删除历史对话：点击对话框--点击单个对话--删除 b.管理/删除你的作品：点击我的--个人页--作品，可以选择将作品设置为公开/私密或删除 c.查阅收藏：点击我的--个人页--收藏，可以查看已收藏的内容（如音乐、对话记录） *如果你通过上述方式无法完成操作的，可以通过Dataprivacy@bytedance.com与我们联系。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“你可以通过如下方式查阅、复制、更正、补充或删除你的个人信息： a.查阅/复制/删除历史对话：点击对话框--点击单个对话--删除 b.管理/删除你的作品：点击我的--个人页--作品，可以选择将作品设置为公开/私密或删除 c.查阅收藏：点击我的--个人页--收藏，可以查看已收藏的内容…” MoreLess
“你可以通过如下方式查阅、复制、更正、补充或删除你的个人信息： a.查阅/复制/删除历史对话：点击对话框--点击单个对话--删除 b.管理/删除你的作品：点击我的--个人页--作品，可以选择将作品设置为公开/私密或删除 c.查阅收藏：点击我的--个人页--收藏，可以查看已收藏的内容（如音乐、对话记录） *如果你通过上述方式无法完成操作的，可以通过Dataprivacy@bytedance.com与我们联系。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026
Privacy fines
50.2This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. EU privacy (GDPR) fines and Irish regulator decisions, last 5 years.
3 events
RegulatorCMS GDPR Enforcement Tracker (opens in a new tab) · 12 Nov 2026Date Event Severity 2 May 2025 ETid-25842 May 2025 · High High 1 Sep 2023 ETid-20321 Sep 2023 · High High 4 Apr 2023 ETid-17304 Apr 2023 · Medium Medium No events
RegulatorIrish Data Protection Commission (opens in a new tab) · 12 Nov 2026
Independent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
66This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. UK competition regulator cases, US Justice Department settlements, last 5 years, and regulator actions and open investigations into the company's AI products at half severity, last 3 years.
1 event
RegulatorUS Justice Department (opens in a new tab) · 12 Nov 2026Date Event Severity 21 Aug 2026 https://www.justice.gov/opa/pr/justice-department-secures-400m-settlement-tiktok-and-bytedance-resolve-childrens-privacy · Justice Department Secures $400M Settlement with TikTok and ByteDance to Resolve Children’s Privacy Litigation21 Aug 2026 · Low Low
Court judgments
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Court rulings against the company on privacy, consumer or competition claims, upheld on appeal, last 5 years.
No events
Regulatorcourtlistener.com (opens in a new tab) · 10 Nov 2026
Privacy contact and complaints
50Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“但请你放心，如你不愿接受这些信息，你可以通过手机短信中提供的退订方式进行退订，也可以直接通过Dataprivacy@bytedance.com与我们联系进行退订。”
doubao.com privacy policy (opens in a new tab) · 15 Oct 2026 - No
Does it tell you that you can complain to a regulator?
Company claim0/50doubao.com privacy policy (opens in a new tab) · 15 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
3 Nov 2026
Score 44
Method 3 Nov 2026
-3 · Method update
2 Nov 2026
Score 47
Method 2 Nov 2026
-4 · Method update
28 Oct 2026
Score 51
Method 28 Oct 2026, update 2
-7 · combines both 28 Oct updates (28 Oct 2026 - Update 1 and 28 Oct 2026 - Update 2)
23 Oct 2026
Score 58
Method 21 Oct 2026
+4 · Data fix
21 Oct 2026
Score 54
Method 21 Oct 2026
-4 · Method update
19 Oct 2026
Score 58
Method Not recorded
+4 · Reason not recorded
14 Oct 2026
Score 54
Method Not recorded
-