Is Leonardo AI safe for work?
Low risk · 22Leonardo.Ai (Canva) · Image · facts (medium-confidence)
Leonardo AI is low-risk for default at-work use (22/100): it trains on your data unless you opt out, and holds SOC 2 Type II.
22
Low risk
Watch out: Free Leonardo content is public by default and used to improve the service; only paid members can switch on Private Mode. There is a DPA and a SOC 2 commitment, but no verified ISO 27001, no BAA and no enterprise SSO. Fine for creative work, not for regulated data.
Data and compliance facts
- Trains on consumer-tier data
- Opt-out
- Trains on business-tier data
- No
- Training opt-out available
- Yes
- SOC 2 Type II
- Yes
- ISO 27001
- Unverified
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- Yes
- HIPAA BAA
- Unverified
- EU data residency
- Unverified
- SSO / SAML
- Unverified
- Data retention
- Retention governed by Leonardo's Data Retention Policy; customer personal data destroyed on termination, with deletion-on-request automated within 30 days.
- Safer tier
- Paid tier with Private Mode enabled (no training use, not publicly visible). Free-tier content is public by default with no way to make it private.
Why it scores 22 out of 100
- +22Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.