PolyAI
- Rank
- Score
- 50/149
- 47 out of 100
PolyAI is an enterprise voice AI company founded in 2017 by Cambridge machine learning researchers, including Nikola Mrkšić, Shawn Wen and Eddy Su. It builds voice agents that handle customer service calls and develops its own dialog models, such as Dialog-RSN-1 and Raven.
Is PolyAI safe?
PolyAI scores 47 out of 100 and ranks 50 of 149. Its strongest category is Security, and its weakest category is Transparency.
How is PolyAI scored?
PolyAI is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 13.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
66Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“Certified SOC 2+ Type 2, ISO 27001, PCI DSS, GDPR.”
poly.ai (opens in a new tab) · 2 Nov 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“ISO 27001-certified”
poly.ai security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We collect personal data that you submit directly to us when you contact us about our Service, request a product demo, correspond with us by…” MoreLess
“We collect personal data that you submit directly to us when you contact us about our Service, request a product demo, correspond with us by e-mail, webchat, or otherwise, interact with us on social media or sign up to our newsletter.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We use this information to train, test, and improve our virtual assistants.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We will store the personal data we collect for no longer than necessary for the purposes set out and in accordance with our legal obligation…” MoreLess
“We will store the personal data we collect for no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“When you visit the Website, we will place cookies and similar tracking technologies on your device to: identify you and your device, and sha…” MoreLess
“When you visit the Website, we will place cookies and similar tracking technologies on your device to: identify you and your device, and share this information with the relevant advertising networks, so that they can serve you advertising based on the information those advertising networks (or the partners they work with) have about your internet usage history and the inferences they can draw from your online activity; collect information about how you use the Website, so that when you visit another website that works with the same advertising network as us, we can play you adverts for the Service which are tailored to how you have used the Website (such as if you visited the Website or requested a demo of the Service).”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Right of access. You have the right to obtain: (i) confirmation of whether, and where, we are processing your personal data; (ii) informatio…” MoreLess
“Right of access. You have the right to obtain: (i) confirmation of whether, and where, we are processing your personal data; (ii) information about the categories of personal data we are processing, the purposes for which we process your personal data and information as to how we determine applicable retention periods; (iii) information about the categories of recipients with whom we may share your personal data; and (iv) a copy of the personal data we hold about you.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50poly.ai privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“You have the right to obtain: (i) confirmation of whether, and where, we are processing your personal data; (ii) information about the categ…” MoreLess
“You have the right to obtain: (i) confirmation of whether, and where, we are processing your personal data; (ii) information about the categories of personal data we are processing, the purposes for which we process your personal data and information as to how we determine applicable retention periods; (iii) information about the categories of recipients with whom we may share your personal data; and (iv) a copy of the personal data we hold about you.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“You have the right, in some circumstances, to require us to erase your personal data without undue delay if the continued processing of that…” MoreLess
“You have the right, in some circumstances, to require us to erase your personal data without undue delay if the continued processing of that personal data is not justified.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you have any questions, comments or requests regarding this Privacy Notice or the personal data that we process about you, please contact…” MoreLess
“If you have any questions, comments or requests regarding this Privacy Notice or the personal data that we process about you, please contact us at compliance@poly.ai or legal@poly.ai.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“You also have the right to lodge a complaint to your national data protection authority.”
poly.ai privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
3 Nov 2026
Score 47
Method 3 Nov 2026
+8 · Method update and new evidence
2 Nov 2026
Score 39
Method 2 Nov 2026
-5 · Method update
28 Oct 2026
Score 44
Method 28 Oct 2026, update 2
-2
23 Oct 2026
Score 46
Method 21 Oct 2026
+4 · Data fix
21 Oct 2026
Score 42
Method 21 Oct 2026
-2
20 Oct 2026
Score 44
Method Not recorded
+2
14 Oct 2026
Score 42
Method Not recorded
-