// Trust & Security Report

    Google LLC (Alphabet Inc.) logo

    Google LLC (Alphabet Inc.)

    AutoDraw – a free, web-based drawing tool powered by machine learning that recognizes sketches and suggests refined vector versions. Created by Google Creative Lab as an AI experiment, operates in-browser without login.

    Certifications held

    0

    Maturity

    Startup

    Trains on your data

    Unknown

    Trust center

    No

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    > Show 5 unconfirmed / not-held certifications
    SOC 2 Type II
    NOT CONFIRMED

    No public evidence of SOC 2 certification specific to Autodraw. Autodraw is a free consumer experiment, not an enterprise offering with compliance certifications.

    ISO 27001
    NOT CONFIRMED

    No public evidence of ISO 27001 certification for Autodraw. Autodraw is a free consumer tool without enterprise-grade security certifications.

    GDPR Compliant
    NOT CONFIRMED

    No public evidence of a GDPR compliance claim or certification specific to Autodraw. Google's general Privacy Policy references EU/UK data protection law ('If European Union (EU) or United Kingdom (UK) data protection law applies to the processing of your information...'), but neither autodraw.com nor the Autodraw experiment page states GDPR compliance for this product, and GDPR is a legal regime rather than a certification a product 'holds'.

    source: experiments.withgoogle.com
    HIPAA
    NOT CONFIRMED

    No evidence of HIPAA compliance. Autodraw is a free consumer drawing tool, not designed for healthcare or protected health information.

    source: autodraw.com
    PCI DSS
    NOT CONFIRMED

    Not applicable. Autodraw is a free tool with no payment processing or credit card handling.

    source: autodraw.com

    // Privacy & AI training

    Trains on customer data

    Not stated

    Data processing agreement

    Not offered

    Data region

    Not specified; likely processed globally via Google infrastructure

    Google's updated privacy policy (as of 2024) allows use of publicly available data to train AI models. Autodraw sketches may be used for Google's AI training, but no explicit opt-out mechanism exists for Autodraw specifically. Status unclear.

    // Security controls

    Encryption in transit

    HTTPS enabled on autodraw.com

    autodraw.com

    Login required

    No login required; runs in browser as anonymous user

    experiments.withgoogle.com

    Trust center

    None; uses Google's standard policies

    autodraw.com

    // Products & data scope

    Autodraw Web AppDrawing / Creative Tool

    data: User sketches and drawing strokes; no persistent user accounts

    Free, browser-based. No account creation required. Uses ML to recognize sketches and suggest improvements. Works on desktop, tablet, mobile.

    // What to watch

    • Thin compliance surface: Autodraw has no dedicated trust center, privacy page, or security documentation. Relies entirely on Google's standard policies.
    • Data training opacity: Google's updated privacy policy allows public data use for AI training, but no explicit statement on whether Autodraw sketches are included. No opt-out available.
    • Over-claim risk: Some third-party review sites (e.g., 10web.io) imply Autodraw has robust privacy/security features, but the vendor's own site provides no such detail.
    • No DPA: As a free consumer tool, Autodraw does not offer Data Processing Agreements, making it unsuitable for business or regulated-industry use.
    • Consumer-only: Explicitly positioned as a free, simple drawing experiment. No enterprise features, no SLA, no support contract. Expect minimal backwards-compatibility guarantees.

    // At a glance

    Pricing model

    Free, no paid tiers

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Google LLC (Alphabet Inc.)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    policies.google.com

    > Browse all vendor trust reports