vivo
- Rank
- Score
- 73/149
- 41 out of 100
vivo is a Chinese consumer electronics company headquartered in Dongguan, Guangdong, founded in 2009 by Shen Wei and Duan Yongping. It designs smartphones and related software and develops BlueLM, a family of large language models released with open weights on Hugging Face.
Is BlueLM safe?
BlueLM scores 41 out of 100 and ranks 73 of 149, and the rating is low confidence. Its strongest category is Privacy, and its weakest category is Transparency.
How is BlueLM scored?
BlueLM is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“None of our services are intended for minors as defined by applicable laws.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“The models can support longer context understanding while maintaining the same basic capabilities.”
huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“评测结果/Benchmark Results” (results shown in a table on the source page)
huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
34Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Vulnerability reporters can submit potential vulnerabilities by email (security@vivo.com).”
vivo.com security page (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
80Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We may collect device-related information from you if you use our devices or access our services through a mobile device, for example, devic…” MoreLess
“We may collect device-related information from you if you use our devices or access our services through a mobile device, for example, device identifiers (IMEI (International Mobile Equipment Identity), serial number, eMMC ID (embedded Multi Media Card ID), UFS ID (Universal Flash Storage ID), MAC address (Media Access Control address), GAID (Google Advertising ID), GUID (Global Unique Identifier of the operating system), Android ID or other unique identifiers of the device/applications), SIM card serial number, IMSI (International Mobile Subscriber Identifier), phone number, device manufacturer and device model, country/region code, software version, operating system information, mobile operators, customisation information, language and other settings, application software information (including the list of installed applications, application identifiers, application names, application versions and status, etc.), device hardware information (including temperature, CPU information, screen configuration and parameters, etc.), device activation time, usage, and other necessary information related to the device or SIM card you use.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - No
Does the privacy policy say whether your data is used to train AI?
Company claim0/20privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We process your personal data for as long as is necessary to fulfill the purpose for which it was collected, including as described in this…” MoreLess
“We process your personal data for as long as is necessary to fulfill the purpose for which it was collected, including as described in this Privacy Policy or our privacy terms for specific services, or as required by applicable laws.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We will process your personal data by itself, or by entrusting our affiliates and service providers to process your personal data in accorda…” MoreLess
“We will process your personal data by itself, or by entrusting our affiliates and service providers to process your personal data in accordance with our instructions.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Where we have obtained your consent to process your personal data for certain activities (for example, for marketing), you may withdraw this…” MoreLess
“Where we have obtained your consent to process your personal data for certain activities (for example, for marketing), you may withdraw this consent at any time, we will cease to use your personal data.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“To the extent permitted by applicable laws, you have the right to request to receive your personal data in a convenient form or request to t…” MoreLess
“To the extent permitted by applicable laws, you have the right to request to receive your personal data in a convenient form or request to transmit those data between service providers, provided that (i) the personal data is processed by automated means; (ii) the personal data has been provided to us by data subjects; and (iii) the basis for processing is your consent, or that the data is being processed to fulfill a contract or steps preparatory to a contract.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“To the extent permitted by applicable laws, you have the right to request that we delete your personal data in certain circumstances.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you have any questions about the way we handle your personal data which have not been answered in this Privacy Policy, you may contact us…” MoreLess
“If you have any questions about the way we handle your personal data which have not been answered in this Privacy Policy, you may contact us or our Data Protection Officer through our Privacy Support website: https://www.vivo.com/global/about-vivo/privacy-support.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“You have the right to lodge a complaint with the relevant supervisory authority.”
privacy.vivo.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 41
Method 2 Nov 2026
+1
23 Oct 2026
Score 40
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 37
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 40
Method Not recorded
-