
Recraft
- Rank
- Score
- 33/149
- 49 out of 100
Recraft is a generative artificial intelligence image service developed by the London-based startup Recraft, Inc. The company was founded in 2022 by machine learning scientist Anna Veronika Dorogush, best known for co-creating the CatBoost library, and its models include Recraft V3.
Is Recraft safe?
Recraft scores 49 out of 100 and ranks 33 of 149, and the rating is low confidence. Its strongest category is Privacy, and its weakest category is Transparency.
How is Recraft scored?
Recraft is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“We do not want your personal information if you are under 13 years old, and you are not allowed to provide it to us or use the Services if y…” MoreLess
“We do not want your personal information if you are under 13 years old, and you are not allowed to provide it to us or use the Services if you are under 13 years old.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
67Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“To submit a vulnerability report to Recraft, Inc. and Recraft AI Limited’s Product Security Team, please utilize the following email vulnera…” MoreLess
“To submit a vulnerability report to Recraft, Inc. and Recraft AI Limited’s Product Security Team, please utilize the following email vulnerability@recraft.ai.”
recraft.ai security page (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“We are pleased to share that we have successfully obtained our SOC 2 Type II certification, effective December 18, 2025.”
trust.recraft.com security page (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds ISO 27001 certification?
Company claim0/33trust.recraft.com security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We collect your name and contact information, including your email address, as part of the creation of your account.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We may use such information to train Recraft’s own proprietary AI models, but you may disallow such use of your information by opting out in…” MoreLess
“We may use such information to train Recraft’s own proprietary AI models, but you may disallow such use of your information by opting out in your account profile settings.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We only keep your personal information for as long as is needed to do what we collected it for.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We share information about you when: We have asked & received your consent to share it.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“The following rights are granted under the European General Data Protection Regulation (“GDPR”) and California Consumer Privacy Act (“CCPA”)…” MoreLess
“The following rights are granted under the European General Data Protection Regulation (“GDPR”) and California Consumer Privacy Act (“CCPA”), and Recraft applies these rights to all users of our products, regardless of location: (i) the right to know what personal information we collect from you; (ii) the right to know if your personal information is being shared and to whom; (iii) the right to access your personal information; and (iv) the right to exercise your privacy rights without being discriminated against.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“We may use such information to train Recraft’s own proprietary AI models, but you may disallow such use of your information by opting out in…” MoreLess
“We may use such information to train Recraft’s own proprietary AI models, but you may disallow such use of your information by opting out in your account profile settings.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Under the GDPR, EEA, UK, and Swiss users have additional rights, including: (i) the right to request correction or erasure of personal infor…” MoreLess
“Under the GDPR, EEA, UK, and Swiss users have additional rights, including: (i) the right to request correction or erasure of personal information; (ii) the right to object to processing your personal information; (iii) the right to right to transfer or receive a copy of the personal information in a usable and portable format, when any automated processing of personal data is based on your consent or a contract with you; and (iv) the rights to withdraw your consent to processing, when the processing is based on your consent.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“California Users: Under the CCPA, California residents have additional rights, including: (i) the right to request personal information abou…” MoreLess
“California Users: Under the CCPA, California residents have additional rights, including: (i) the right to request personal information about to be deleted, subject to several exceptions; (ii) the right to opt-out of the sale of personal information (note that we do not “sell” personal information as defined by the CCPA and have not done so in the past 12 months; and (iii) the right to designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us. To provide or delete specific pieces of personal information, we will need to verify your identity to the degree of certainty required by law. We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your account.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“To exercise the rights described above or if you have a question or concern, please contact us at help@recraft.ai and we will try to address…” MoreLess
“To exercise the rights described above or if you have a question or concern, please contact us at help@recraft.ai and we will try to address or resolve it.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or co…” MoreLess
“You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.”
recraft.ai privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 49
Method 2 Nov 2026
+1
28 Oct 2026
Score 48
Method 28 Oct 2026, update 2
-1
23 Oct 2026
Score 49
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 46
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 49
Method Not recorded
+3 · Reason not recorded
14 Oct 2026
Score 46
Method Not recorded
-