// Trust & Security Report
Roblox GUI Maker (operating legal entity not publicly disclosed on the site)
Single AI-powered web tool that generates Roblox Studio GUI mockup images and a structured component plan from a text prompt (shops, HUDs, inventory, admin panels, reward popups, obby UI, mobile layouts); offered as Free / Creator ($12/mo) / Studio ($39/mo) credit-based tiers. Explicitly an unofficial third-party tool: 'Not affiliated with or endorsed by Roblox Corporation.'
Certifications held
0
Maturity
Startup
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 9 unconfirmed / not-held certifications
source: robloxguimaker.devNo public evidence. The captured homepage (the only page the vendor's own site allowed automated access to) contains no mention of SOC 2, and no independent source or trust center could be found.
source: robloxguimaker.devNo public evidence. No mention of ISO 27001 on the homepage or in any independently discoverable vendor material.
source: robloxguimaker.devNo explicit GDPR compliance statement could be confirmed. A 'Privacy Policy' link exists in the site footer, but the page returned HTTP 403 to automated fetch attempts (tried /privacy, /privacy-policy, /legal/privacy) so its contents could not be verified.
source: robloxguimaker.devNo public evidence, and not applicable to this product's function (Roblox GUI mockup generation does not involve health data).
source: robloxguimaker.devThe site states 'Secure checkout by Stripe' — payment card handling is delegated to Stripe (Stripe holds PCI DSS Level 1 certification as a processor), but this is the payment processor's certification, not the vendor's own. No vendor-held PCI DSS evidence found.
source: robloxguimaker.devNo public evidence found on the vendor's site or via search.
source: robloxguimaker.devNo public evidence. No AI-governance certification claims found anywhere in captured content.
source: robloxguimaker.devNo public evidence found on the vendor's site or via search.
source: robloxguimaker.devNo public evidence; not applicable to a small consumer-facing creator tool with no government-market positioning.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
unknown / not publicly disclosed
Unknown. The product generates images by calling what the homepage describes only as 'a paid model' (the underlying AI/image-generation provider is not named). Whether user prompts or generated outputs are used for model training, and whether an opt-out exists, could not be confirmed: the site's Privacy Policy and Terms of Service pages exist (linked in the footer: 'Privacy Policy', 'Terms of Service', 'Refund & Cancellation') but returned HTTP 403 to every automated fetch attempt, so their text could not be read for this assessment.
// Security controls
Payment processing
Checkout is handled by Stripe ('Secure checkout by Stripe'; 'Credits added after checkout'). No evidence the vendor stores raw card data itself.
robloxguimaker.devEncryption in transit
Not explicitly stated on the vendor's public marketing page. Site is served over HTTPS at robloxguimaker.dev, but no explicit vendor statement about encryption in transit/at rest was found.
robloxguimaker.devData retention / storage
No public evidence. Privacy Policy page exists per footer link but could not be retrieved (403 to automated fetch).
robloxguimaker.devThird-party AI model dependency
'Real AI generation is gated by sign-in, credits, and plan controls before it can call a paid model.' The underlying AI/image-generation provider is not named on the page, so its own compliance posture cannot be assessed here.
robloxguimaker.devAccess controls
Public/anonymous mode uses 'safe preview generation'; full generation requires sign-in and paid credits. No further detail (e.g., MFA, SSO) is published.
robloxguimaker.dev// Products & data scope
data: User text prompts describing desired UI screens, account/auth info, and payment/billing details processed via Stripe. No evidence the product handles sensitive personal data (health, financial account numbers, government IDs) beyond standard account and billing info.
Free: 10 credits (~2 full generations), no card required. Creator ($12/mo): 150 credits/30 generations/mo, unlimited project saves, email support. Studio ($39/mo): 500 credits/100 generations/mo, priority speed, bulk export, team use, priority support. Single product surface across tiers; no separate enterprise, self-hosted, or API-only offering found.
// What to watch
- No trust center and no certification claims of any kind found anywhere in the available content; this is consistent with a small, likely solo-developer/indie tool rather than an over-claim, but it also means AI-training posture, data residency, DPA availability, and retention could not be confirmed either way.
- Underlying AI/image-generation model provider is not disclosed by name ('a paid model'), so that subprocessor's own security/compliance posture is unknown and out of scope of any vendor-held certification.
- A different, similarly named site (robloxguimaker.com) exists and surfaced in search results; this assessment covers ONLY robloxguimaker.dev per the evidence file's url field — do not merge or conflate certs/coverage between the two domains.
- No legal entity name (Inc./LLC) is disclosed on the site; only the brand name 'Roblox GUI Maker' and a support email (support@robloxguimaker.dev) were found, so the vendor field above is a best-effort description, not a confirmed legal name.
// At a glance
Pricing model
Freemium, credit-based subscription: Free (10 credits) / Creator $12/mo (150 credits) / Studio $39/mo (500 credits); billed via Stripe, cancel anytime.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Roblox GUI Maker (operating legal entity not publicly disclosed on the site)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-09. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
robloxguimaker.dev