// Trust & Security Report

    ZMO.AI logo

    ZMO.AI

    ImgCreator: AI image generation and editing tool (text-to-image, image-to-image, inpainting) operated by ZMO AI ecosystem alongside CreatiAI (video generation).

    Certifications held

    0

    Maturity

    Growth

    Trains on your data

    Unknown

    Trust center

    No

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    > Show 9 unconfirmed / not-held certifications
    SOC 2 (Type 1)
    NOT CONFIRMED

    No public evidence of SOC 2 Type 1 certification found on vendor domain or trust resources

    source: imgcreator.ai
    SOC 2 (Type 2)
    NOT CONFIRMED

    No public evidence of SOC 2 Type 2 certification found on vendor domain or trust resources

    source: imgcreator.ai
    ISO 27001
    NOT CONFIRMED

    No public evidence of ISO 27001 certification found on vendor domain or trust resources

    source: imgcreator.ai
    ISO 27017
    NOT CONFIRMED

    No public evidence of ISO 27017 certification found

    source: imgcreator.ai
    ISO 27018
    NOT CONFIRMED

    No public evidence of ISO 27018 certification found

    source: imgcreator.ai
    GDPR Compliance Posture
    NOT CONFIRMED

    No GDPR compliance statement or DPA found on the ZMO.AI ImgCreator product. The vendor's primary domain (imgcreator.ai) is under construction and the product itself is served from imgcreator.zmo.ai. A privacy policy exists on the same-name domain imgcreatorai.io, but that site identifies only as 'ImgCreator AI' with no stated affiliation to ZMO.AI and cannot be attributed to this vendor.

    source: imgcreator.ai
    HIPAA
    NOT CONFIRMED

    Not applicable - ImgCreator is a consumer/SMB image generation tool with no healthcare data handling scope

    source: imgcreator.ai
    ISO 42001 (AI Governance)
    NOT CONFIRMED

    No public evidence of ISO/IEC 42001 certification found

    source: imgcreator.ai
    CSA STAR AI
    NOT CONFIRMED

    No public evidence of CSA STAR AI certification found

    source: imgcreator.ai

    // Privacy & AI training

    Trains on customer data

    Not stated

    Data processing agreement

    Not offered

    Data region

    Not verified. No data residency or regional processing commitments were located on the vendor's own domain.

    The AI-training posture for the ZMO.AI ImgCreator product could not be verified: the primary domain imgcreator.ai is under construction and no privacy policy or terms were located on the vendor's own domain (imgcreator.zmo.ai / zmo.ai). An earlier draft quoted a content-license clause ('non-exclusive, worldwide, royalty-free license to use, store, and display your content for the purpose of providing and improving our services') from the same-name domain imgcreatorai.io, but that site identifies only as 'ImgCreator AI' with no stated ZMO.AI affiliation, so it cannot be attributed to this vendor and has been removed.

    // Security controls

    Encryption in Transit

    Not verified on the vendor's own domain (imgcreator.ai is under construction). Prior 'reasonable measures' wording came from the unaffiliated same-name domain imgcreatorai.io and has been removed.

    imgcreator.ai

    Data Storage Security

    Not verified on the vendor's own domain. Prior description was sourced from the unaffiliated same-name domain imgcreatorai.io and cannot be attributed to this vendor.

    imgcreator.ai

    Third-Party Data Sharing

    Not verified on the vendor's own domain. Prior no-sale statement was sourced from the unaffiliated same-name domain imgcreatorai.io and cannot be attributed to this vendor.

    imgcreator.ai

    Breach Notification

    No breach notification policy publicly stated

    imgcreator.ai

    Incident Response

    No public incident response procedures documented

    imgcreator.ai

    Penetration Testing / Audits

    No public evidence of regular security audits or penetration testing

    imgcreator.ai

    // Products & data scope

    ImgCreator.AIAI Image Generation & Editing

    data: User-provided prompts, generated images, account credentials, usage analytics, payment information (if paid plan)

    Text-to-image generation, image-to-image transformation, inpainting/erase tool. Free tier with 30 monthly generations; paid tiers available. Users retain ownership of generated images. No signup required for basic use. Part of ZMO AI ecosystem with shared accounts.

    ImgCreator by ZMO EcosystemAI Content Platform

    data: Shared account system across ImgCreator and CreatiAI (video tool); unified content policies

    ImgCreator operates within broader ZMO platform. CreatiAI handles video/influencer avatar generation. Single user account used across both products.

    // What to watch

    • IDENTITY / DOMAIN CONFLATION (critical): The directory lists this tool as ImgCreator by ZMO.AI, whose actual product is served from imgcreator.zmo.ai (parent site zmo.ai). The vendor's standalone domain imgcreator.ai is under construction. A prior draft gathered its privacy policy, terms, content-license quote, and 'Sacramento / ImgCreator Limited (California)' details from imgcreatorai.io, a separate same-name domain that identifies only as 'ImgCreator AI' with no stated ZMO.AI affiliation. Those facts have been stripped because they cannot be attributed to this vendor. The correct vendor's own policy/terms could not be verified.
    • AI training posture could not be verified on the vendor's own domain. The 'for improving our services' license language cited in an earlier draft came from the unaffiliated same-name domain imgcreatorai.io, not from ZMO.AI, and has been removed. No opt-out mechanism was located on the vendor's own domain.
    • No trust center, security page, or formal compliance documentation on vendor domain. Only basic privacy policy and terms of service available.
    • No SOC 2, ISO 27001, or equivalent enterprise security certifications found. Consistent with startup/growth-stage product but limits enterprise adoption.
    • Data residency: no documented control over where user data is processed or stored. US company with no explicit GDPR DPA or EU data handling commitments.
    • Breach notification and incident response procedures not publicly documented.
    • Third-party integrations / sub-processors: privacy policy mentions 'service providers' without transparent list.
    • Website status (under construction) raises questions about company focus and maintenance cadence.
    • No verified legal entity for the vendor could be located. 'ImgCreator Limited' and a Sacramento/California headquarters named in an earlier draft are unsupported by any located source (they did not appear on imgcreatorai.io either) and have been removed as likely fabricated or borrowed from an unrelated entity.

    // At a glance

    Pricing model

    Freemium: 30 free monthly image generations; paid plans available; commercial usage rights included

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on ZMO.AI's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    imgcreator.ai

    > Browse all vendor trust reports