Photoroom
- Rank
- Score
- 72/149
- 42 out of 100
Photoroom is a French company headquartered in Paris that publishes AI photo editing applications and an image editing API. It trains its own image models, including PRX, a 1.3-billion-parameter text-to-image model released under an Apache 2.0 license. Its enterprise offering includes visual agents, the API and a Trust Center.
Is Photoroom safe?
Photoroom scores 42 out of 100 and ranks 72 of 149. Its strongest category is Privacy, and its weakest category is Transparency.
How is Photoroom scored?
Photoroom is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our Applications and Services are not intended for and should not be used by children under the age of 13.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
25Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“PRX generates high-quality images from text using a simplified MMDiT architecture where text tokens don’t update through transformer blocks.”
huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card report test results?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
33Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“SOC 2 Type 2 certified, with a live Trust Center for your review.”
photoroom.com security page (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds ISO 27001 certification?
Company claim0/33photoroom.com security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“Email address via GoogleAuth, FacebookAuth or AppleAuth (optional)”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s produc…” MoreLess
“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“Data is kept for a period of 6 months in the active database, after which it is deleted”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“Your Personal data may be transmitted to third-party processors involved in the provision of the Services (technical and hosting service pro…” MoreLess
“Your Personal data may be transmitted to third-party processors involved in the provision of the Services (technical and hosting service providers, sending of notifications or newsletters, user tracking, management of security incidents, etc.).”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“You have in particular the following rights: Right of access: you can request an access to the personal data we process; Right to rectificat…” MoreLess
“You have in particular the following rights: Right of access: you can request an access to the personal data we process; Right to rectification: you can request us to correct or modify personal data about you that we process; Right to erasure/right to be forgotten: You can request the deletion of your personal data, in particular when it’s no longer needed by Photoroom, when you have withdrawn your consent or when you have objected to the processing.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s produc…” MoreLess
“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models. You can opt-out of this at any time by changing the settings on your account.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Right to restriction of processing: You can request the restriction of the processing of your personal data; please note this may have an im…” MoreLess
“Right to restriction of processing: You can request the restriction of the processing of your personal data; please note this may have an impact on the quality or level of the Services; Right to data portability: you can request the transfer of your personal data to another provider, when technically feasible; Right to object: You can object to the processing of your personal data if the processing is based on our legitimate interest, for reasons relating to your particular situation.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“You have in particular the following rights: Right of access: you can request an access to the personal data we process; Right to rectificat…” MoreLess
“You have in particular the following rights: Right of access: you can request an access to the personal data we process; Right to rectification: you can request us to correct or modify personal data about you that we process; Right to erasure/right to be forgotten: You can request the deletion of your personal data, in particular when it’s no longer needed by Photoroom, when you have withdrawn your consent or when you have objected to the processing.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“Photoroom has an external Data Protection Officer (DPO), who has been declared to the CNIL, and whom you can contact by writing to: privacy@…” MoreLess
“Photoroom has an external Data Protection Officer (DPO), who has been declared to the CNIL, and whom you can contact by writing to: privacy@photoroom.com”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“If you believe that the processing of your personal data is unlawful, you also have the right to file a complaint with: Photoroom’s main dat…” MoreLess
“If you believe that the processing of your personal data is unlawful, you also have the right to file a complaint with: Photoroom’s main data control authority: the Commission Nationale de l'Informatique et des Libertés, or the "CNIL", or Your local supervisory authority.”
photoroom.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 42
Method 2 Nov 2026
+1
23 Oct 2026
Score 41
Method 21 Oct 2026
+10 · Data fix
21 Oct 2026
Score 31
Method 21 Oct 2026
-2
20 Oct 2026
Score 33
Method Not recorded
-