Is Ideogram ISO 27001 certified?

Unverified

Ideogram · Image

Not verified. We could not confirm an ISO/IEC 27001 certification for Ideogram.

What we checked

This assessment separates the consumer product from any business plan. It uses the vendor documents linked below; an unverified item is not a pass.

ISO/IEC 27001: Not verified; No public ISO/IEC 27001 certification was confirmed. Request evidence from Ideogram if this is a procurement requirement.
SOC 2: Confirmed; Ideogram also reports a SOC 2 attestation, which can complement but does not replace ISO scope evidence.
Default data training: Opt-out required; The consumer web tier has no stated no-training commitment and user input is used to improve products; there is no documented opt-out for free web users.
Business-tier training: No by default; API and Enterprise inputs are not used to train Ideogram's shared models, with custom training opt-in only.

Practical risk: On the free tier, Ideogram images and prompts are public by default and cannot be deleted, with no stated no-training commitment. Enterprise flips that with SOC 2 controls, a DPA on request, SSO and no shared-model training. No BAA and no verified ISO 27001.

How to make a decision

Check the precise account tier, written contract and intended data before approving Ideogram. A security certification, DPA or setting can apply to only part of a vendor's service. Keep the source links with your supplier review and revisit them when the vendor changes its terms.

More on Ideogram

Is Ideogram HIPAA compliant?Is Ideogram GDPR compliant?Is Ideogram SOC 2 compliant?Does Ideogram train on your data?

See the full Ideogram risk profile, with every data-handling fact and its source, or browse all rated AI tools.