ModelCharter

Is Framer AI safe for work?

Medium risk · 32

Framer · Design · facts (high-confidence)

Framer AI is medium-risk for default at-work use (32/100): it trains on your data unless you opt out, and holds SOC 2 Type II.

Watch out: Framer holds SOC 2 and ISO 27001, but only Enterprise excludes your site content from AI training; other plans grant a training license by default with no self-serve opt-out. Hosting is US only and Framer states it is not for PHI.

Data and compliance facts

Trains on consumer-tier data
Opt-out
Trains on business-tier data
No
Training opt-out available
Yes
SOC 2 Type II
Yes
ISO 27001
Yes
ISO 42001 (AI management)
Unverified
GDPR Data Processing Addendum
Yes
HIPAA BAA
No
EU data residency
No
SSO / SAML
Yes
Safer tier
Enterprise (excluded from AI training, SOC 2 and ISO 27001 report access, SSO and SCIM, workspace AI-disable)

Why it scores 32 out of 100

  • +14Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.
  • +10HIPAA BAA. A Business Associate Agreement, required for protected health information.
  • +8EU data residency. Whether data can be kept in the EU.