Hebbia
- Rank
- Score
- 49/149
- 47 out of 100
Hebbia is an American technology company that develops artificial intelligence and automation tools for financial and legal research. It was founded in 2020 by George Sivulka, a former Stanford University PhD student, and is headquartered in New York City. Its products include Matrix, an AI platform for analysing large sets of documents.
Is Hebbia Matrix safe?
Hebbia Matrix scores 47 out of 100 and ranks 49 of 149, and the rating is low confidence. Its strongest category is Security, and its weakest category is Transparency.
How is Hebbia Matrix scored?
Hebbia Matrix is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“We do not knowingly collect Personal Data from anyone under the age of 16 through the Website.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
66Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“SOC 2 Type II - Full Report [June 2026]”
trust.hebbia.ai security page (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“ISO 27001:2022 Certificate [September 2026]”
trust.hebbia.ai security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“As is true of most other websites, Hebbia’s website collects certain information automatically and stores it in log files. The information m…” MoreLess
“As is true of most other websites, Hebbia’s website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of Hebbia’s website, including a history of the pages you view.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We do not use Personal Data contained in Customer Data to train or improve generalized or third-party artificial intelligence or machine lea…” MoreLess
“We do not use Personal Data contained in Customer Data to train or improve generalized or third-party artificial intelligence or machine learning models.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“Hebbia retains service data for the duration of the customer’s business relationship with Hebbia and for a period of time thereafter, to ana…” MoreLess
“Hebbia retains service data for the duration of the customer’s business relationship with Hebbia and for a period of time thereafter, to analyze the data for Hebbia’s own operations, and for historical and archiving purposes associated with Hebbia’s services.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We share personal information only with subprocessors who are essential to facilitating the delivery of our services.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“You have a right to correct (rectify) the record of your personal data maintained by Hebbia if it is inaccurate.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“When technically feasible, Hebbia will-at your request-provide your personal data to you.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“All personal data that Hebbia controls may be deleted upon verified request from Data Subjects or their authorized agents.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“Email: privacy@hebbia.ai”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Hebbi…” MoreLess
“In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Hebbia processes your personal data.”
hebbia.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 47
Method 2 Nov 2026
+1
23 Oct 2026
Score 46
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 43
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 46
Method Not recorded
-