Writer
- Rank
- Score
- 11/149
- 54 out of 100
Writer is a US AI company founded in 2020 by May Habib and Waseem AlShikh, and based in San Francisco. It focuses on AI for businesses. Writer makes the Palmyra family of AI models and a platform that lets companies build AI agents and writing tools for their teams.
Is Palmyra safe?
Palmyra scores 54 out of 100 and ranks 11 of 149. Its strongest category is Security, and its weakest category is Safety.
How is Palmyra scored?
Palmyra is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Outside evidence is stronger than its written policies.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026
Safety test results
82.3Average of two independent safety tests of the company's models: Stanford HELM Safety and Stanford AIR-Bench. Each test is compared with the best company's result.
- 93.6
Stanford HELM Safety mean score, averaged across the company's tested models: 91.6, against 97.9 for the top company of 13 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026 - 71
Stanford AIR-Bench 2024 refusal rate, averaged across the company's tested models: 61.6, against 86.7 for the top company of 14 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our Services are not directed to persons under 16.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026
Model documentation
75Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“The palmyra-mini model demonstrates exceptional capabilities in complex reasoning and mathematical problem-solving domains.”
huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“Benchmark Performance” (results shown in a table on the source page)
huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the model card state the model's limitations?
Company claim25/25“As with any language model, there is a potential for generating biased or inaccurate information.”
huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026
Training-data disclosure
30Average of two independent training-data checks: the Stanford index and an academic grading of EU AI Act training-data summaries.
- 60
Stanford Foundation Model Transparency Index: training-data indicators met
Independent sourceStanford FMTI (opens in a new tab) · 14 Oct 2026 - 0
EU AI Act training-data summary grades (AI Accountability Lab)
Independent sourceAI Accountability Lab (opens in a new tab) · 10 Nov 2026
Independent transparency index
72Stanford Foundation Model Transparency Index total, out of 100.
- 72
Transparency index score
Independent sourceStanford FMTI (opens in a new tab) · 14 Oct 2026
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
50Average of the commitments signed.
- Yes
Has it signed the EU code of practice for general-purpose AI?
Company claim100/100“ServiceNow WRITER”
European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
66Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for…” MoreLess
“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for security, privacy, and responsible AI management.”
writer.com security page (opens in a new tab) · 15 Oct 2026 - Yes
Does it state it holds ISO 27001 certification?
Company claim33/33“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for…” MoreLess
“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for security, privacy, and responsible AI management.”
writer.com security page (opens in a new tab) · 15 Oct 2026
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“Account Information: we collect identifying information, such as your name, email address, and account credentials when you sign up for a Wr…” MoreLess
“Account Information: we collect identifying information, such as your name, email address, and account credentials when you sign up for a Writer account.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“We may use your information for various purposes, including to: Provide you with the Services and operate, maintain, and administer the Serv…” MoreLess
“We may use your information for various purposes, including to: Provide you with the Services and operate, maintain, and administer the Services; Respond to your requests, communicate with you about the Services, and provide you with customer service; Contact you by email, postal mail, or phone with statements, news, alerts, updates, information, promotions, surveys or contests relating to the Services or other services that may be of interest to you, in accordance with applicable law; Customize the content you see on the Services; Engage in analysis and research about use of the Services, improve the Services (but in no event will we use any data you provide to us when you access or use our Services to train our models, including any inputs or outputs), and develop new services; Deliver relevant advertising to you, including to let us and our advertising partners personalize the content and advertising you see; Measure the effectiveness of our advertising; Secure the Services and resolve technical issues being reported; Comply with any procedures, laws, and regulations which apply to us; Establish, exercise, or defend our legal rights; and With your consent or at your direction, for any other purpose.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“Retention: We will only retain your information for as long as we need it to fulfil the purposes for which we collected it.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We may disclose the information we collect to the following categories of recipients: Affiliates and subsidiaries: We may disclose your info…” MoreLess
“We may disclose the information we collect to the following categories of recipients: Affiliates and subsidiaries: We may disclose your information within the Writer family of companies.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Upon request and subject to applicable legal exceptions, we will: Inform you about the types of personal information we collect or disclose…” MoreLess
“Upon request and subject to applicable legal exceptions, we will: Inform you about the types of personal information we collect or disclose about you, the types of sources of this information, the business or commercial purpose for collecting this information, and the categories of third parties to which we disclose this information; Provide you access to and/or a copy of certain personal information we hold about you; Correct or update personal information we hold about you; Delete certain personal information we have about you; Restrict or object to certain uses of your personal information; or Opt you out of the processing of your personal information for purposes of profiling that furthers decisions that produce legal or similarly significant effects, if applicable.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50writer.com privacy policy (opens in a new tab) · 15 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Upon request and subject to applicable legal exceptions, we will: Inform you about the types of personal information we collect or disclose…” MoreLess
“Upon request and subject to applicable legal exceptions, we will: Inform you about the types of personal information we collect or disclose about you, the types of sources of this information, the business or commercial purpose for collecting this information, and the categories of third parties to which we disclose this information; Provide you access to and/or a copy of certain personal information we hold about you; Correct or update personal information we hold about you; Delete certain personal information we have about you; Restrict or object to certain uses of your personal information; or Opt you out of the processing of your personal information for purposes of profiling that furthers decisions that produce legal or similarly significant effects, if applicable.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Upon request and subject to applicable legal exceptions, we will: Inform you about the types of personal information we collect or disclose…” MoreLess
“Upon request and subject to applicable legal exceptions, we will: Inform you about the types of personal information we collect or disclose about you, the types of sources of this information, the business or commercial purpose for collecting this information, and the categories of third parties to which we disclose this information; Provide you access to and/or a copy of certain personal information we hold about you; Correct or update personal information we hold about you; Delete certain personal information we have about you; Restrict or object to certain uses of your personal information; or Opt you out of the processing of your personal information for purposes of profiling that furthers decisions that produce legal or similarly significant effects, if applicable.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
50Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“To exercise these rights, please complete this online form.”
writer.com privacy policy (opens in a new tab) · 15 Oct 2026 - No
Does it tell you that you can complain to a regulator?
Company claim0/50writer.com privacy policy (opens in a new tab) · 15 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 54
Method 2 Nov 2026
+1
28 Oct 2026
Score 53
Method 28 Oct 2026, update 2
-4 · combines both 28 Oct updates (28 Oct 2026 - Update 1 and 28 Oct 2026 - Update 2)
23 Oct 2026
Score 57
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 54
Method 21 Oct 2026
-3 · Method update
19 Oct 2026
Score 57
Method Not recorded
+3 · Reason not recorded
14 Oct 2026
Score 54
Method Not recorded
-