Genmo, Inc.

Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

• No security certifications found (SOC 2, ISO 27001, ISO 42001, etc.). Typical for growth-stage AI research labs but limits enterprise adoption.
• AI training on customer data explicitly enabled with no documented opt-out; both inputs and generated images used to improve models. Organizations with sensitive use cases or IP concerns should verify terms carefully.
• Data storage location/region not disclosed in public documentation; only references 'cloud computing services' and names Stability.ai as a third party without detailed processor agreements.
• Encryption standards not documented; company acknowledges internet transmission cannot be 100% secure but does not detail TLS version, key rotation, or at-rest encryption.
• Liability capped at $50 in ToS; company disclaims warranties on service accuracy, completeness, or security. Appropriate for research tool but limits recourse for enterprise users.
• No Data Processing Agreement (DPA) or formal GDPR compliance certification available, though privacy policy does reference data subject rights and EU authorities. May require custom DPA negotiation for EU data subject processing.
• Mandatory California jurisdiction and binding arbitration in ToS; 30-day opt-out window for arbitration clause.
• Open-source Mochi 1 model allows local self-hosting (Apache 2.0) and can avoid data collection, but commercial playground enforces ToS and privacy policy with mandatory training usage.