Brandmark (brandmark.io) - indie AI logo design tool operating under the name "Brandmark" per its Terms of Service; independently founded by Jack Qiao and live since 2017. No formal operating legal entity is named on the vendor's own site; the Terms of Service state Canadian governing law (Burnaby, BC). NOTE: two same-name entities found in external registries are NOT confirmed to be this vendor and must not be conflated with it: Brandmark LLC, a local marketing/signage firm at 349 Marhil Ct, Crystal Lake, Illinois; and BRANDMARK.IO LIMITED, a dissolved UK shell (Companies House #15590183).

Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

• OVER-CLAIM DETECTED: Third-party reviews (VisionStack AI, 10web.io) claim 'regular audits', 'compliance certifications', and 'end-to-end encryption'. Vendor's own privacy policy and terms do NOT document these. Privacy policy only mentions encryption in transit for credit cards; no mention of audits or formal compliance program.
• IDENTITY / SAME-NAME CONFLATION: The vendor's own site names only 'Brandmark' as operator, with no formal legal entity. Two unrelated same-name entities were found in external registries and must NOT be attributed to this vendor without confirmation: (1) Brandmark LLC, a local marketing/signage firm at 349 Marhil Ct, Crystal Lake, Illinois (listed under Marketing on business directories), which is not the SaaS logo tool; (2) BRANDMARK.IO LIMITED, a UK shell (Companies House #15590183) registered at the Companies House default PO Box address, incorporated March 24, 2024 and dissolved November 5, 2024, with no evidence linking it to this tool (which has operated since 2017). The Terms of Service state Canadian governing law (Burnaby, BC), consistent with founder Jack Qiao's Canadian base; this is coherent, not anomalous.
• AI TRAINING DATA UNDISCLOSED: No documentation on whether user-generated logo designs or input data are used to train future models. Privacy policy is silent. Critical transparency gap for AI tools.
• GDPR POSTURE UNCLEAR: No GDPR compliance documentation despite tool serving potential EU users. No DPA offered.
• DATA RESIDENCY UNDISCLOSED: No information on where user data and generated designs are stored or processed.
• DATA RETENTION NOT SPECIFIED: Privacy policy does not specify how long user account data and designs are retained after account closure or deletion.
• NO TRUST CENTER: Vendor has no dedicated security, trust, or compliance page. Only basic privacy policy and terms.
• MINIMAL SECURITY DOCUMENTATION: Only explicit security measure documented is encryption in transit for credit cards. No mention of encryption at rest, security audits, incident response, access controls, or vendor security assessments.