Decart
- Rank
- Score
- 74/149
- 41 out of 100
Decart is an AI lab that builds the infrastructure and models that make AI run in real time. Its models include Lucy for live AI video and video editing and Oasis, a realtime interactive world model for physical AI, and its Decart Optimization Stack runs models across NVIDIA, AWS Trainium and Google TPU chips.
Is Decart safe?
Decart scores 41 out of 100 and ranks 74 of 149. Its strongest category is Privacy, and its weakest category is Transparency.
How is Decart scored?
Decart is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“We do not offer our products or services for use by children and, therefore, we do not knowingly collect Personal Data from, and/or about ch…” MoreLess
“We do not offer our products or services for use by children and, therefore, we do not knowingly collect Personal Data from, and/or about children under the age of thirteen (13).”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Lucy Edit 1.1 Dev is an open-weight video editing model that performs instruction-guided edits on videos using free-text prompts - it suppor…” MoreLess
“Lucy Edit 1.1 Dev is an open-weight video editing model that performs instruction-guided edits on videos using free-text prompts - it supports a variety of edits, such as clothing & accessory changes, character changes, object insertions, and scene replacements while preserving the motion and composition perfectly.”
huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card report test results?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the model card state the model's limitations?
Company claim25/25“⚠️ Mixed reliability. Sometimes subtle, sometimes exaggerated.”
huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
33Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“SOC 2 Type II Certified Cogito inherits SOC 2 Type II certification from Decart AI's audited control environment.”
cogito.decart.ai (opens in a new tab) · 2 Nov 2026 - Not found
Does it state it holds ISO 27001 certification?
Company claim0/33cogito.decart.ai (opens in a new tab) · 2 Nov 2026
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataClear privacy policy
80Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“The Website may use a tool called “Google Analytics” to collect information about use of the Website. Google Analytics collects information…” MoreLess
“The Website may use a tool called “Google Analytics” to collect information about use of the Website. Google Analytics collects information such as how often users visit this Website, what pages they visit when they do so, and what other websites they used prior to coming to this Website.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - No
Does the privacy policy say whether your data is used to train AI?
Company claim0/20decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“Your Personal Data will be stored until we delete the record and we proactively delete it or you send a valid deletion request, please note…” MoreLess
“Your Personal Data will be stored until we delete the record and we proactively delete it or you send a valid deletion request, please note that in some circumstances we may store your Personal Data for longer periods of time, for example (i) where we are required to do so in accordance with legal, regulatory, tax or accounting requirements, or (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges, or (iii) if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We may also share Personal Data with our affiliated companies.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“This means that you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and that yo…” MoreLess
“This means that you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and that you have the right to transmit that data to another controller; You have the right to object to profiling; You have the right to withdraw your consent at any time.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50decart.ai privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“This means that you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and that yo…” MoreLess
“This means that you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and that you have the right to transmit that data to another controller; You have the right to object to profiling; You have the right to withdraw your consent at any time.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Your right of access may normally be exercised free of charge, however we reserve the right to charge an appropriate administrative fee wher…” MoreLess
“Your right of access may normally be exercised free of charge, however we reserve the right to charge an appropriate administrative fee where permitted by applicable law; You have the right to request that we rectify any Personal Data we hold that is inaccurate or misleading; You have the right to request the erasure/deletion of your Personal Data (e.g. from our records).”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you want to receive the list of the current recipients of your Personal Data, please make your request by contacting us to privacy@Decart…” MoreLess
“If you want to receive the list of the current recipients of your Personal Data, please make your request by contacting us to privacy@Decart.ai.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“You have a right to lodge a complaint with your local data protection supervisory authority (i.e., your place of habitual residence, place o…” MoreLess
“You have a right to lodge a complaint with your local data protection supervisory authority (i.e., your place of habitual residence, place or work or place of alleged infringement) at any time or before the relevant institutions in your place of residence.”
decart.ai privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
3 Nov 2026
Score 41
Method 3 Nov 2026
+9 · Method update and new evidence
2 Nov 2026
Score 32
Method 2 Nov 2026
+1
23 Oct 2026
Score 31
Method 21 Oct 2026
+2
21 Oct 2026
Score 29
Method 21 Oct 2026
-2
20 Oct 2026
Score 31
Method Not recorded
+2
14 Oct 2026
Score 29
Method Not recorded
-