
Superhuman
- Rank
- Score
- 45/149
- 48 out of 100
Grammarly is an American English-language writing assistant founded in 2009 by Alex Shevchenko, Max Lytvyn and Dmytro Lider. It started as a tool that reviews spelling, grammar and tone, has added generative AI writing tools, and is now part of the Superhuman company, which also publishes research models on Hugging Face.
Is Grammarly safe?
Grammarly scores 48 out of 100 and ranks 45 of 149. Its strongest category is Security, and its weakest category is Transparency.
How is Grammarly scored?
Grammarly is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Compare
Outside evidence is stronger than its written policies.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
65This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
2 events
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026These are reports, not proven findings.
Date Event Severity 11 Mar 2026 AIID #1407 · Grammarly's AI Expert Review Allegedly Used Journalists' and Authors' Names Without Consent 11 Mar 2026 · Medium (reported)Also listed under Superhuman (opens in a new tab)
Also reported by AIAAIC (opens in a new tab)
Medium (reported) 20 Nov 2024 AIID #843 · Generative AI Plagiarism Incident at Hingham High School Reportedly Tied to Inaccurate Citation Outputs from Grammarly AI20 Nov 2024 · Low (reported) Low (reported)
Protecting children
0Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim0/50superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card report test results?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
100Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Grammarly uses HackerOne for vulnerability coordination and as a bug bounty platform.”
grammarly.com security contact (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“Grammarly’s SOC 2 (Type 2) report validates our controls based on the security, privacy, availability, and confidentiality trust services cr…” MoreLess
“Grammarly’s SOC 2 (Type 2) report validates our controls based on the security, privacy, availability, and confidentiality trust services criteria.”
grammarly.com security page (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“Grammarly’s information security management system meets the requirements of ISO 27001 and 27002 international standards. Read our certifica…” MoreLess
“Grammarly’s information security management system meets the requirements of ISO 27001 and 27002 international standards. Read our certificate.”
grammarly.com security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“Account information: When you create an individual or organizational account, we collect information such as your email address, password, n…” MoreLess
“Account information: When you create an individual or organizational account, we collect information such as your email address, password, name, email preferences, job titles, and phone numbers.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We also use information we collect to train our AI models.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We retain personal data for as long as necessary to provide our products to you, to complete the transactions you have requested, to comply…” MoreLess
“We retain personal data for as long as necessary to provide our products to you, to complete the transactions you have requested, to comply with our legal obligations, to resolve disputes, and for other legitimate business purposes.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We may disclose information about you to governmental agencies, regulators, and other authorities or authorized parties to comply with any a…” MoreLess
“We may disclose information about you to governmental agencies, regulators, and other authorities or authorized parties to comply with any applicable law, regulation, legal process, or appropriate governmental request.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Depending on where you live, you may have rights under privacy laws to access, correct, or delete your personal data, as well as other right…” MoreLess
“Depending on where you live, you may have rights under privacy laws to access, correct, or delete your personal data, as well as other rights, all as described below.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“You can decide whether Superhuman can use your user content to train our AI models by adjusting the available training control(s) in your ac…” MoreLess
“You can decide whether Superhuman can use your user content to train our AI models by adjusting the available training control(s) in your account settings.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“If you live in a country in the European Union or the European Economic Area or live in the UK or Switzerland, you have the following rights…” MoreLess
“If you live in a country in the European Union or the European Economic Area or live in the UK or Switzerland, you have the following rights: The right of access, which enables you to receive a copy of your information.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request delet…” MoreLess
“You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you are an authorized agent seeking to make a request to opt out of sales, sharing, or targeted advertising on behalf of a consumer, plea…” MoreLess
“If you are an authorized agent seeking to make a request to opt out of sales, sharing, or targeted advertising on behalf of a consumer, please see our Privacy and Data Rights, Choices and Cookies page, or you can email us at privacy@superhuman.com.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“You also have the right to complain to a data protection authority in the country that you reside in, the country of your place of work, or…” MoreLess
“You also have the right to complain to a data protection authority in the country that you reside in, the country of your place of work, or the country where the alleged infringement took place.”
superhuman.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 48
Method 2 Nov 2026
-2
28 Oct 2026
Score 50
Method 28 Oct 2026, update 2
-7 · combines both 28 Oct updates (28 Oct 2026 - Update 1 and 28 Oct 2026 - Update 2)
23 Oct 2026
Score 57
Method 21 Oct 2026
+11 · Data fix
21 Oct 2026
Score 46
Method 21 Oct 2026
-10 · Method update
20 Oct 2026
Score 56
Method Not recorded
-