Adobe Express – AI Trust & Transparency Profile
Adobe Express is an AI-powered design platform for creating graphics, videos, presentations, and social media content using customizable templates and Adobe Firefly.
Disclosure
Transparency Score
85%
11/13 points, 0 reviewed
1 approved N/A excluded · Published information only
Measures disclosure completeness across applicable fields. Not applicable items are excluded. This score is not a certification of quality, security, or regulatory compliance.
About this information
Information in this section may be inaccurate, incomplete or out of date. Errors can arise from automated website extraction, vendor submissions or human review. AISetApp does not guarantee its accuracy or completeness. “Reviewed” means a published statement was checked against the cited evidence; it does not confirm the underlying practice, certify compliance or endorse the vendor.
Check the original sources and confirm important information directly with the vendor before relying on it. Found an error? Request a correction
Legal entity & jurisdiction
Self-declaredDisclosed — specify
Adobe Inc. Laws of the State of California / Adobe Systems Software Ireland Limite. laws of Ireland / Adobe KK. Laws of Japan / Adobe Systems Pty Ltd
Source, evidence & review details
- Source:
- https://www.adobe.com/privacy/policy.html
- Supporting evidence:
- If you reside in North America (inclusive of the United States, Canada, Mexico, United States territories and possessions, and United States military bases, wherever located), your relationship is with Adobe Inc., a United States company, and the Terms are governed by, and construed and interpreted in accordance with, the laws of the State of California, U.S.A., unless preempted by U.S. federal law, without regard to conflict of law rules. If you reside outside of North America or Japan, your relationship is with Adobe Systems Software Ireland Limited, and the Terms are governed by, and construed and interpreted in accordance with, the laws of Ireland, unless preempted by local law. If you reside in Japan, your relationship is with Adobe KK, a Japanese company, and the Terms are governed by, and construed and interpreted in accordance with, the laws of Japan, without regard to conflict of law rules. For customers in Australia, Adobe Systems Software Ireland Limited is acting as an authorized agent of Adobe Systems Pty Ltd. and is entering into this contract in its capacity as agent for Adobe Systems Pty Ltd.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
DPA availability
Self-declaredAvailable publicly
Source, evidence & review details
- Source:
- https://www.adobe.com/content/dam/cc/en/legal/terms/enterprise/pdfs/DPA-WW.pdf
- Supporting evidence:
- This Data Processing Addendum (“DPA“) supplements the General Terms, Sales Order, or other written or electronic terms agreement between Adobe and Customer (“Agreement”). This DPA applies to the Processing of Personal Data by Adobe on behalf of the Customer in connection with the Cloud Services.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Article 50 disclosure notice
Self-declaredPresent
Source, evidence & review details
- Source:
- https://www.adobe.com/cc-shared/assets/pdf/legal/servicetou/adobe-generative-ai-product-specific-terms-en-us-20260423.pdf
- Supporting evidence:
- In addition, you must not remove or alter any watermarks or Content Authenticity Initiative metadata (e.g., Content Credentials) that may be generated with the Output, or otherwise attempt to mislead others about the origin of the Output.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Data residency
Self-declaredMultiple regions
Source, evidence & review details
- Source:
- https://www.adobe.com/legal/terms-linkfree.html
- Supporting evidence:
- We process and store information in the U.S. and other countries. By using our Services and Software, you authorize Adobe to transfer your personal information across national borders and to other countries where Adobe and its partners operate.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Customer data used for training
Self-declaredNo
Source, evidence & review details
- Source:
- https://www.adobe.com/cc-shared/fragments/legal/terms-existing
- Supporting evidence:
- We will not use these rights to train generative AI models on your Content and will not use the sublicense rights to have anyone else train generative AI models on your Content, except at your specific request (like you asking us to train a custom model on your Content).
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Retention period
Self-declaredDisclosed — specify
30 Days After the end of your license term
Source, evidence & review details
- Source:
- https://www.adobe.com/legal/terms-linkfree.html
- Supporting evidence:
- At the end of this 30-day transition period, we reserve the right to delete your Content. You should download any Content that you have stored in the Services before your license ends.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Subprocessor list published
Self-declaredYes
Source, evidence & review details
- Source:
- https://www.adobe.com/privacy/sub-processors.html
- Supporting evidence:
- To help deliver products and services, Adobe Inc. and Adobe Systems Software Ireland Limited (“Adobe”) may use sub-processors. These are the third party entities that support delivery of functions that Adobe has outsourced, as well as other Adobe companies that assist with providing our customers with products and services.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Breach notification timeframe
Self-declaredDisclosed — specify
without undue delay
Source, evidence & review details
- Source:
- https://www.adobe.com/content/dam/cc/en/legal/terms/enterprise/pdfs/DPA-WW.pdf
- Supporting evidence:
- If Adobe becomes aware of a Personal Data Breach, Adobe will notify Customer without undue delay per the notice provision in the Agreement. A
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Base models used
No disclosure recordedSource, evidence & review details
- Source:
- https://www.adobe.com/cc-shared/assets/pdf/legal/servicetou/adobe-generative-ai-product-specific-terms-en-us-20260423.pdf
- Supporting evidence:
- Nothing discosed about which provider powers the Express AI assistant.
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Human oversight capability
Self-declaredReview available
Source, evidence & review details
- Source:
- https://www.adobe.com/cc-shared/assets/pdf/legal/servicetou/adobe-generative-ai-product-specific-terms-en-us-20260423.pdf
- Supporting evidence:
- Users are solely responsible for creating and using Output and ensuring it complies with the Terms (Gen AI Product Specific Terms §3.1)
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Annex III high-risk declaration
Not applicable · approvedNot High risk
Source, evidence & review details
- Source:
- No source recorded
- Supporting evidence:
- No evidence recorded
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
- N/A approval:
- Admin · 13 Nov 2026, 10:12 · Casablanca time
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
ISO/IEC 27001
Self-declaredCertified
Source, evidence & review details
- Source:
- https://www.adobe.com/trust/compliance/compliance-list.html
- Supporting evidence:
- ISO 27001:2022
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
ISO/IEC 42001
Self-declaredNot certified
Source, evidence & review details
- Source:
- https://www.adobe.com/trust/compliance/compliance-list.html
- Supporting evidence:
- Not Certified
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
SOC 2
Self-declaredType II
Source, evidence & review details
- Source:
- https://www.adobe.com/trust/compliance/compliance-list.html
- Supporting evidence:
- SOC 2–Type 2
- Last edited:
- Statement reviewer:
- No current review
- Last reviewed:
- Not recorded
Review scope: checking a published statement against its source. No confirmation of the underlying practice.
Correction requests will open here soon. Until then, please contact us. Contact us