// Trust & Security Report
Lexica (San Francisco-based startup)
AI image generation and search platform. Core product: Lexica.art - a search engine for AI-generated images and Aperture, a proprietary image generation tool using Stable Diffusion models.
Certifications held
0
Maturity
Startup
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 5 unconfirmed / not-held certifications
source: lexica.artNo public evidence found on lexica.art domain or in web search results
source: lexica.artNo public evidence found on lexica.art domain or in web search results
source: lexica.artNo public evidence found on lexica.art domain or in web search results
source: lexica.artNo public evidence on the lexica.art domain. The lexica.art Terms page does not mention GDPR or data protection compliance, and no privacy policy is published on the vendor domain. GDPR/privacy language appearing in web search results traces to unrelated same-name companies (lexica.co.uk, lexicacorp.com, lexica-english.com), not this vendor.
source: lexica.artNo public evidence found; not applicable to consumer image generation platform
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
Unknown; US-based company (San Francisco) but specific data residency not publicly stated
Unclear whether Lexica uses user-generated prompts or images for model training. Terms and license pages do not explicitly address this. Pro/Max plans offer commercial usage rights, but no statement on whether images are used for future model training.
// Security controls
Encryption in transit
Implemented; third-party encryption software used
Access control
Implemented
Regular security audits
Claimed as part of security program
// Products & data scope
data: All generated images are public and searchable; visible to other users
Personal use only; generated images appear in Lexica search and other users can use them commercially or personally
data: All generated images are public and searchable
Individual creators get commercial usage rights for their own generated images; images still appear in search
data: All generated images are public and searchable
Teams of 2-5 people get commercial rights; images still searchable and usable by others
data: All generated images remain private
Private image generation; images remain private even if subscription is later downgraded or cancelled; includes commercial usage rights
// What to watch
- No formal security certifications (SOC 2, ISO 27001, HIPAA) found despite being a data processing platform
- No dedicated privacy policy page found on lexica.art domain; only references to Terms and License
- Data residency and processing location not publicly documented
- Unclear whether user prompts or generated images are used for future model training; this is material for AI compliance but not addressed in public documentation
- Startup-stage company with only 2 employees as of March 2026; limited compliance/security infrastructure expected but not documented
- Default public image sharing (Free/Pro/Starter plans) is concerning for privacy-conscious use cases without explicit user consent mechanism
- No Data Processing Agreement (DPA) or Business Associate Agreement (BAA) publicly available
// At a glance
Pricing model
Freemium with tiered subscription (Free, Starter, Pro, Max)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Lexica (San Francisco-based startup)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
lexica.art