
Sesame
- Rank
- Score
- 67/149
- 43 out of 100
Sesame is an AI company that builds voice agents designed as everyday collaborators, available on iOS and Android. It develops conversational speech models and has released CSM 1B, an open Conversational Speech Model that generates speech from text and audio inputs, on Hugging Face.
Is CSM safe?
CSM scores 43 out of 100 and ranks 67 of 149. Its strongest category is Privacy, and its weakest category is Transparency.
How is CSM scored?
CSM is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 22 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 22 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 22 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“We do not direct or target our Services to children under the age of 13.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“CSM (Conversational Speech Model) is a speech generation model from Sesame that generates RVQ audio codes from text and audio inputs.”
huggingface.co (opens in a new tab) · 22 Oct 2026 - No
Does the model card report test results?
Company claim0/25huggingface.co (opens in a new tab) · 22 Oct 2026 - Yes
Does the model card state the model's limitations?
Company claim25/25“CSM is trained to be an audio generation model and not a general purpose multimodal LLM. It cannot generate text.”
huggingface.co (opens in a new tab) · 22 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 22 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
34Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Contact: mailto:security@sesame.com”
sesame.com security contact (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“A summary of the categories and a description of the types of data collected in each category are as follows: Category Examples of Personal…” MoreLess
“A summary of the categories and a description of the types of data collected in each category are as follows: Category Examples of Personal Information Collected in Category Identifiers A real name, unique personal identifier, online identifier, cookies, Internet Protocol (IP) address, email address, or other similar identifiers.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“IF YOU ARE AN UNREGISTERED USER OF OUR SERVICES ACCESSING SUCH SERVICES SOLELY VIA OUR WEBSITE, WE WILL NOT USE YOUR USER DATA, INCLUDING PE…” MoreLess
“IF YOU ARE AN UNREGISTERED USER OF OUR SERVICES ACCESSING SUCH SERVICES SOLELY VIA OUR WEBSITE, WE WILL NOT USE YOUR USER DATA, INCLUDING PERSONAL INFORMATION, TO TRAIN OUR LANGUAGE LEARNING MODELS WITHOUT YOUR CONSENT AND WE WILL AUTOMATICALLY DELETE YOUR USER DATA, INCLUDING PERSONAL INFORMATION, WITHIN THIRTY (30) DAYS UNLESS WE HAVE A LEGITIMATE BUSINESS PURPOSE TO RETAIN SUCH DATA.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“IF YOU ARE AN UNREGISTERED USER OF OUR SERVICES ACCESSING SUCH SERVICES SOLELY VIA OUR WEBSITE, WE WILL NOT USE YOUR USER DATA, INCLUDING PE…” MoreLess
“IF YOU ARE AN UNREGISTERED USER OF OUR SERVICES ACCESSING SUCH SERVICES SOLELY VIA OUR WEBSITE, WE WILL NOT USE YOUR USER DATA, INCLUDING PERSONAL INFORMATION, TO TRAIN OUR LANGUAGE LEARNING MODELS WITHOUT YOUR CONSENT AND WE WILL AUTOMATICALLY DELETE YOUR USER DATA, INCLUDING PERSONAL INFORMATION, WITHIN THIRTY (30) DAYS UNLESS WE HAVE A LEGITIMATE BUSINESS PURPOSE TO RETAIN SUCH DATA.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“As further detailed herein, we may share your Personal Information when required by law, or with third parties that perform functions on our…” MoreLess
“As further detailed herein, we may share your Personal Information when required by law, or with third parties that perform functions on our behalf or for whom we perform services.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“If your Personal Information changes, or if you no longer desire our Services, you can delete your account by following prompts in the user…” MoreLess
“If your Personal Information changes, or if you no longer desire our Services, you can delete your account by following prompts in the user administrative console or you may request to correct, update, amend, or delete/remove it by emailing us at support@sesame.com.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“IF YOU ARE A LOGGED-IN USER, SESAME RESERVES THE RIGHT TO USE ANY OF YOUR INFORMATION AND CONTENT GENERATED DURING SUCH TIME AS YOU ARE LOGG…” MoreLess
“IF YOU ARE A LOGGED-IN USER, SESAME RESERVES THE RIGHT TO USE ANY OF YOUR INFORMATION AND CONTENT GENERATED DURING SUCH TIME AS YOU ARE LOGGED-IN AND USING THE SERVICES, FOR ANY LEGITIMATE BUSINESS PURPOSE, INCLUDING WITHOUT LIMITATION, TO TRAIN ANY OF OUR LANGUAGE LEARNING MODELS OR OTHERWISE (UNLESS YOU ELECT TO OPT OUT OF TRAINING THROUGH YOUR ACCOUNT SETTINGS).”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“If you are a resident in the European Economic Area (“EEA”), Switzerland or the United Kingdom (collectively, “Europe” and each such user, a…” MoreLess
“If you are a resident in the European Economic Area (“EEA”), Switzerland or the United Kingdom (collectively, “Europe” and each such user, a “Data Subject”), you may have the following rights under the EU General Data Protection Regulation, the UK General Data Protection Regulation, UK Data Protection Act 2018, and related data protection laws in Europe (collectively, the “GDPR”) in relation to your Personal Information: Request access to your Personal Information; Request correction of the Personal Information that we hold about you; Request erasure of your Personal Information; Object to processing of your Personal Information; Request restriction of processing of your Personal Information; Request the transfer of your Personal Information to you or to a third party; and Withdraw consent at any time where we are relying on consent to process your Personal Information.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“If your Personal Information changes, or if you no longer desire our Services, you can delete your account by following prompts in the user…” MoreLess
“If your Personal Information changes, or if you no longer desire our Services, you can delete your account by following prompts in the user administrative console or you may request to correct, update, amend, or delete/remove it by emailing us at support@sesame.com.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If your Personal Information changes, or if you no longer desire our Services, you can delete your account by following prompts in the user…” MoreLess
“If your Personal Information changes, or if you no longer desire our Services, you can delete your account by following prompts in the user administrative console or you may request to correct, update, amend, or delete/remove it by emailing us at support@sesame.com.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“In addition to the above rights, you have the right to lodge a complaint with the relevant EEA member state, Swiss governmental authority, o…” MoreLess
“In addition to the above rights, you have the right to lodge a complaint with the relevant EEA member state, Swiss governmental authority, or UK supervisory authority.”
sesame.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 43
Method 2 Nov 2026
+2
28 Oct 2026
Score 41
Method 28 Oct 2026, update 2
-1
23 Oct 2026
Score 42
Method 21 Oct 2026
+4 · Data fix
20 Oct 2026
Score 38
Method Not recorded
-