Adobe Express – AI Trust & Transparency Profile

Adobe Express is an AI-powered design platform for creating graphics, videos, presentations, and social media content using customizable templates and Adobe Firefly.

Pricing: 9.99 Design & Development

Disclosure

Transparency Score

85%

11/13 points, 0 reviewed

1 approved N/A excluded · Published information only

Measures disclosure completeness across applicable fields. Not applicable items are excluded. This score is not a certification of quality, security, or regulatory compliance.

About this information

Information in this section may be inaccurate, incomplete or out of date. Errors can arise from automated website extraction, vendor submissions or human review. AISetApp does not guarantee its accuracy or completeness. “Reviewed” means a published statement was checked against the cited evidence; it does not confirm the underlying practice, certify compliance or endorse the vendor.

Check the original sources and confirm important information directly with the vendor before relying on it. Found an error? Request a correction

Legal entity & jurisdiction

Self-declared

Disclosed — specify

Adobe Inc. Laws of the State of California / Adobe Systems Software Ireland Limite. laws of Ireland / Adobe KK. Laws of Japan / Adobe Systems Pty Ltd

Source, evidence & review details
Source:
https://www.adobe.com/privacy/policy.html
Supporting evidence:
If you reside in North America (inclusive of the United States, Canada, Mexico, United States territories and possessions, and United States military bases, wherever located), your relationship is with Adobe Inc., a United States company, and the Terms are governed by, and construed and interpreted in accordance with, the laws of the State of California, U.S.A., unless preempted by U.S. federal law, without regard to conflict of law rules. If you reside outside of North America or Japan, your relationship is with Adobe Systems Software Ireland Limited, and the Terms are governed by, and construed and interpreted in accordance with, the laws of Ireland, unless preempted by local law. If you reside in Japan, your relationship is with Adobe KK, a Japanese company, and the Terms are governed by, and construed and interpreted in accordance with, the laws of Japan, without regard to conflict of law rules. For customers in Australia, Adobe Systems Software Ireland Limited is acting as an authorized agent of Adobe Systems Pty Ltd. and is entering into this contract in its capacity as agent for Adobe Systems Pty Ltd.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

DPA availability

Self-declared

Available publicly

Source, evidence & review details
Source:
https://www.adobe.com/content/dam/cc/en/legal/terms/enterprise/pdfs/DPA-WW.pdf
Supporting evidence:
This Data Processing Addendum (“DPA“) supplements the General Terms, Sales Order, or other written or electronic terms agreement between Adobe and Customer (“Agreement”). This DPA applies to the Processing of Personal Data by Adobe on behalf of the Customer in connection with the Cloud Services.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Article 50 disclosure notice

Self-declared

Present

Source, evidence & review details
Source:
https://www.adobe.com/cc-shared/assets/pdf/legal/servicetou/adobe-generative-ai-product-specific-terms-en-us-20260423.pdf
Supporting evidence:
In addition, you must not remove or alter any watermarks or Content Authenticity Initiative metadata (e.g., Content Credentials) that may be generated with the Output, or otherwise attempt to mislead others about the origin of the Output.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Data residency

Self-declared

Multiple regions

Source, evidence & review details
Source:
https://www.adobe.com/legal/terms-linkfree.html
Supporting evidence:
We process and store information in the U.S. and other countries. By using our Services and Software, you authorize Adobe to transfer your personal information across national borders and to other countries where Adobe and its partners operate.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Customer data used for training

Self-declared

No

Source, evidence & review details
Source:
https://www.adobe.com/cc-shared/fragments/legal/terms-existing
Supporting evidence:
We will not use these rights to train generative AI models on your Content and will not use the sublicense rights to have anyone else train generative AI models on your Content, except at your specific request (like you asking us to train a custom model on your Content).
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Retention period

Self-declared

Disclosed — specify

30 Days After the end of your license term

Source, evidence & review details
Source:
https://www.adobe.com/legal/terms-linkfree.html
Supporting evidence:
At the end of this 30-day transition period, we reserve the right to delete your Content. You should download any Content that you have stored in the Services before your license ends.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Subprocessor list published

Self-declared

Yes

Source, evidence & review details
Source:
https://www.adobe.com/privacy/sub-processors.html
Supporting evidence:
To help deliver products and services, Adobe Inc. and Adobe Systems Software Ireland Limited (“Adobe”) may use sub-processors. These are the third party entities that support delivery of functions that Adobe has outsourced, as well as other Adobe companies that assist with providing our customers with products and services.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Breach notification timeframe

Self-declared

Disclosed — specify

without undue delay

Source, evidence & review details
Source:
https://www.adobe.com/content/dam/cc/en/legal/terms/enterprise/pdfs/DPA-WW.pdf
Supporting evidence:
If Adobe becomes aware of a Personal Data Breach, Adobe will notify Customer without undue delay per the notice provision in the Agreement. A
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Base models used

No disclosure recorded
Source, evidence & review details
Source:
https://www.adobe.com/cc-shared/assets/pdf/legal/servicetou/adobe-generative-ai-product-specific-terms-en-us-20260423.pdf
Supporting evidence:
Nothing discosed about which provider powers the Express AI assistant.
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Human oversight capability

Self-declared

Review available

Source, evidence & review details
Source:
https://www.adobe.com/cc-shared/assets/pdf/legal/servicetou/adobe-generative-ai-product-specific-terms-en-us-20260423.pdf
Supporting evidence:
Users are solely responsible for creating and using Output and ensuring it complies with the Terms (Gen AI Product Specific Terms §3.1)
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Annex III high-risk declaration

Not applicable · approved

Not High risk

Source, evidence & review details
Source:
No source recorded
Supporting evidence:
No evidence recorded
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded
N/A approval:
Admin · 13 Nov 2026, 10:12 · Casablanca time

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

ISO/IEC 27001

Self-declared

Certified

Source, evidence & review details
Source:
https://www.adobe.com/trust/compliance/compliance-list.html
Supporting evidence:
ISO 27001:2022
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

ISO/IEC 42001

Self-declared

Not certified

Source, evidence & review details
Source:
https://www.adobe.com/trust/compliance/compliance-list.html
Supporting evidence:
Not Certified
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

SOC 2

Self-declared

Type II

Source, evidence & review details
Source:
https://www.adobe.com/trust/compliance/compliance-list.html
Supporting evidence:
SOC 2–Type 2
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Correction requests will open here soon. Until then, please contact us. Contact us