// Trust & Security Report
Compose AI
Browser-based AI writing assistant: a free Chrome extension with premium tier offering AI-powered autocomplete and text generation across web applications.
Certifications held
0
Maturity
Growth
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 5 unconfirmed / not-held certifications
No public evidence on vendor domain; third-party security profiles claim this, but unconfirmed by Compose AI's official website.
No public evidence on vendor domain.
source: compose.aiPrivacy policy mentions CCPA (California) and Nevada privacy rights, but no GDPR or EU data protection language found on vendor domain.
No public evidence on vendor domain; not applicable for consumer writing tool.
No public evidence on vendor domain.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
US-based (company in San Francisco); no EU data residency option documented.
Privacy policy does not disclose whether user text/data is used to train AI models. Homepage mentions personalization learns user voice, but no explicit opt-out for training is documented.
// Security controls
Encryption in transit
Mentioned as protocol for Google/Gmail integration; TLS implied but not explicitly confirmed.
Physical/Technical/Administrative Safeguards
Policy states: 'appropriate physical, technical, organizational and administrative security measures'; no specifics on encryption at rest, key management, or audits disclosed.
compose.aiData Retention
Retained while account is open; longer if needed for legal compliance, dispute resolution, or fee collection. Anonymous/aggregated data retained indefinitely.
compose.aiThird-Party Integrations
Stripe (payments), Google Analytics, Mixpanel, Segment.io (analytics), Intercom (support), and others. No Data Processing Agreements published.
compose.ai// Products & data scope
Data it handles: Text typed in Chrome extension; integrated with Gmail, Google Docs, and other web applications.
Free tier with basic AI autocomplete. Data used for service improvement and personalization.
Data it handles: Same as free tier, plus advanced personalization features.
Paid subscription tier with enhanced personalization and advanced AI features.
// What to watch
- Nudge Security's third-party profile claims SOC 2, ISO 27001, HIPAA, PCI, FedRamp, and CSA STAR certifications, but none of these are mentioned on Compose AI's official website, so they cannot be verified from the vendor's own sources.
- The privacy policy addresses only US privacy laws (CCPA, Nevada). Despite an international user base, there is no mention of GDPR, EU data protection, Data Processing Agreements, or Standard Contractual Clauses.
- The privacy policy does not disclose whether user-submitted text trains the AI model. The homepage claims personalization 'learns your voice,' implying some form of model training, but no opt-out mechanism is documented.
- No public Data Processing Agreement or vendor Data Protection Addendum is available; this document is essential for EU customers.
- The company operates under US law only, with no regional compliance posture for international markets.
- The company remains at seed-stage funding ($2.22M, 2021); no Series A or later rounds in 5 years suggests capital constraints for compliance and security investments.
// At a glance
Pricing model
Freemium: free basic tier + optional premium subscription.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Compose AI, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
compose.ai