Suno
- Rank
- Score
- 133/149
- 30 out of 100
Suno is a generative artificial intelligence music platform developed by Suno, Inc. of Cambridge, Massachusetts. Founded by Mikey Shulman, Georg Kucsko, Martin Camacho and Keenan Freyberg, it generates songs with vocals and instrumentation from text prompts and has been widely available since December 2023.
Is Suno safe?
Suno scores 30 out of 100 and ranks 133 of 149. Its strongest category is Privacy, and its weakest category is Security.
How is Suno scored?
Suno is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
66.3This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
2 events
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026These are reports, not proven findings.
Date Event Severity 1 Jul 2025 AIAAIC1952 · 18 percent of daily uploads to Deezer are fully AI-generated1 Jul 2025 · Low (reported) Low (reported) 1 Jul 2025 AIAAIC2073 · Suno AI accused of violating "Mambo no.5 " copyright1 Jul 2025 · Medium (reported) Medium (reported)
Protecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our Services are not intended to be used by individuals under the age of 13, and we do not knowingly collect personal information from child…” MoreLess
“Our Services are not intended to be used by individuals under the age of 13, and we do not knowingly collect personal information from children under 13.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
0Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
Not enough dataData breaches
49.1This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Confirmed data breaches, last 36 months.
1 event
Independent sourceHave I Been Pwned (opens in a new tab) · 12 Nov 2026Date Event Severity 25 Nov 2025 Suno25 Nov 2025 · High High
Clear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We collect Contact Information, User Account Information, User Activity Information, and Content, as such terms are defined below.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We use certain User Activity Information, Submissions, Interactive Chat Information, and other Content to improve our Services, product offe…” MoreLess
“We use certain User Activity Information, Submissions, Interactive Chat Information, and other Content to improve our Services, product offerings, promotional activity, and business, including to train and enhance the models that power our Services as it is in our legitimate interests to improve our Services and provide effective Services to you.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We work with third parties that provide to us engine or application development and/or processing services; information systems hosting, inf…” MoreLess
“We work with third parties that provide to us engine or application development and/or processing services; information systems hosting, infrastructure, maintenance, backup, storage, security, support and other information technology-related services; artificial-intelligence or machine-learning services that support certain features of the Services; advertising, marketing and related analytics services; promotion, distribution, resale and support services related to our products and services; consulting and other technical and/or business services, which may require access to information about you to perform such services on our behalf.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“You may have a right to request that we correct inaccurate personal information we maintain about you.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50suno.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Access: You have the right to receive a copy of your information that we process.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“You can request that we delete your information at any time, subject to certain exceptions as discussed below.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“To make such an inquiry, please contact VeraSafe using this contact form: https://verasafe.com/public-resources/contact-data-protection-repr…” MoreLess
“To make such an inquiry, please contact VeraSafe using this contact form: https://verasafe.com/public-resources/contact-data-protection-representative”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“If you think we have infringed data protection laws, you have the right to file a complaint with the data protection supervisory authority i…” MoreLess
“If you think we have infringed data protection laws, you have the right to file a complaint with the data protection supervisory authority in the EEA country in which you live or work or where you think we have infringed data protection laws, or with the UK Information Commissioner’s Office, as applicable to you.”
suno.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 30
Method 2 Nov 2026
-9 · Method update
28 Oct 2026
Score 39
Method 28 Oct 2026, update 2
-3 · combines both 28 Oct updates (28 Oct 2026 - Update 1 and 28 Oct 2026 - Update 2)
23 Oct 2026
Score 42
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 39
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 42
Method Not recorded
+3 · Reason not recorded
14 Oct 2026
Score 39
Method Not recorded
-