
Luma AI
- Rank
- Score
- 125/149
- 31 out of 100
Luma AI is an American artificial intelligence company that develops generative video and 3D models. Its Dream Machine product creates realistic videos from text prompts and images, and its Ray video models are also offered to businesses and developers through an API for use in creative production tools.
Is Dream Machine safe?
Dream Machine scores 31 out of 100 and ranks 125 of 149. Its strongest category is Privacy, and its weakest category is Security.
How is Dream Machine scored?
Dream Machine is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our Services are not intended for use by children under 13 years of age, and no part of our Services is directed to children.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
0Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“When you sign up for an account, Luma will collect your personal information, such as your first and last name and email address.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We use the information we collect to: Provide, maintain, operate, support, and improve our Services; Train, develop, and improve the artific…” MoreLess
“We use the information we collect to: Provide, maintain, operate, support, and improve our Services; Train, develop, and improve the artificial intelligence, machine learning, and models that we use to support our Services; Process your payments and complete transactions with you; Communicate with you about our Services, including by sending announcements, updates, security alerts, and support and administrative messages; Provide support, and respond to requests, questions, and feedback; Personalize your experience on our Services; Facilitate the connection of third-party services or applications; Analyze and improve our Services and to develop new products, services, features and functionality; Conduct marketing or advertising activities as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email and in-app notifications; Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities; Prevent fraud, promote safety, and enforce our legal rights, including to: (a) protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); (b) enforce the terms and conditions that govern our Services; and (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity; and Generate anonymous or aggregate data, containing only de-identified, non-personal information, that we may use for any lawful business purpose, including to analyze and improve our Services, conduct research, and promote our business.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“When determining the retention period, we take into account various criteria, such as the type of products and services requested by or prov…” MoreLess
“When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, the impact on our Services we provide to you if we delete some personal information from or about you, mandatory retention periods provided by law, and any relevant statute of limitations.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We may share your personal information with third-party companies and individuals that provide services on our behalf or help us operate our…” MoreLess
“We may share your personal information with third-party companies and individuals that provide services on our behalf or help us operate our Services (such as customer support, hosting, analytics, email delivery, marketing, payment processing, and database management services).”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“To exercise your rights, you or an authorized agent may submit a request by emailing us at hello@lumalabs.ai or by writing to us via postal…” MoreLess
“To exercise your rights, you or an authorized agent may submit a request by emailing us at hello@lumalabs.ai or by writing to us via postal mail at 380 Hamilton Ave, P.O. Box 102, Palo Alto, CA, 94301.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal information: To…” MoreLess
“Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal information: To request access to and/or a copy of certain information we hold about you (including in a portable and/or machine-readable format); To object to how we process your personal information; To update or correct your personal information; To request that we delete certain personal information we hold about you; To restrict how we process certain personal information about you; To request that we transfer your information to a third-party provider of services; To opt out of the sharing of your personal data for targeted advertising; and To withdraw your consent at any time (where you have provided consent for the processing of your personal information).”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal information: To…” MoreLess
“Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal information: To request access to and/or a copy of certain information we hold about you (including in a portable and/or machine-readable format); To object to how we process your personal information; To update or correct your personal information; To request that we delete certain personal information we hold about you; To restrict how we process certain personal information about you; To request that we transfer your information to a third-party provider of services; To opt out of the sharing of your personal data for targeted advertising; and To withdraw your consent at any time (where you have provided consent for the processing of your personal information).”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“Please direct any questions or comments about this Policy or privacy practices to hello@lumalabs.ai.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or…” MoreLess
“In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.”
lumalabs.ai privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 31
Method 2 Nov 2026
-9 · Method update
28 Oct 2026
Score 40
Method 28 Oct 2026, update 2
-2
23 Oct 2026
Score 42
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 39
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 42
Method Not recorded
+3 · Reason not recorded
15 Oct 2026
Score 39
Method Not recorded
-1
14 Oct 2026
Score 40
Method Not recorded
-