Writer
writer.com
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
- No clear commitment that your data will not train their models
- Data retention window not stated
See Before you sign, with what to ask for ↓
Scanned Oct 21, 2026 · Public evidence · Point-in-time
Higher scores indicate stronger, independently supported AI assurance, governance, AI systems, models, data, supply chain and third-party assurance evidence. The score and the decision are related but different: a well-scored vendor can still carry conditions.
Before you sign
Why it matters: The public sources scanned do not clearly state that customer prompts, files, and outputs are excluded from training or fine-tuning of first- or third-party models.
What to ask for: Get a no-training clause covering first- and third-party models into the DPA/order form.
“WRITER does not train its models on your data, nor does it train on user inputs or any outputs. You control how your data is used.”
“Engage in analysis and research about use of the Services, improve the Services (but in no event will we use any data you provide to us when you access or use our Services to train our models, including any inputs or outputs) , and develop new services;”
Why it matters: The public sources scanned do not give a retention period for customer data or prompts/outputs.
What to ask for: Get retention windows, in days, in writing.
“WRITER takes a zero data retention approach, storing data for only as long as is needed for you to build with our platform. None of your data is used for training our models. All data, files, and other materials that customers make available to WRITER for using our platform, along with any inputs or generated outputs, are owned by that customer.”
“We don’t use the data you share with us to create, modify, or train our models. You can configure organization-wide data controls, including an automated data deletion schedule.”
“Personal Data will be retained for the period of time necessary for the data importer to provide the Platform to the data exporter under the Agreement and/or in accordance with applicable legal requirements.”
“Except to the extent required otherwise by Data Protection Laws, Writer will, at the choice of Customer and upon Customer’s written request return to Customer and/or delete all Personal Data, unless Data Protection Laws require Writer to retain Personal Data.”
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
!Will they train on your data?Ask the vendor
WRITER states it does not train its models on customer data, user inputs or outputs.
Requires written confirmation, see Before you sign ↓
“WRITER does not train its models on your data, nor does it train on user inputs or any outputs. You control how your data is used.”
“Engage in analysis and research about use of the Services, improve the Services (but in no event will we use any data you provide to us when you access or use our Services to train our models, including any inputs or outputs) , and develop new services;”
!How long do they keep your data?Ask the vendor
WRITER describes a zero-data-retention approach, storing customer data only as long as needed for the customer to build on the platform, and states that customer materials, inputs and generated outputs are owned by the customer.
Requires written confirmation, see Before you sign ↓
“WRITER takes a zero data retention approach, storing data for only as long as is needed for you to build with our platform. None of your data is used for training our models. All data, files, and other materials that customers make available to WRITER for using our platform, along with any inputs or generated outputs, are owned by that customer.”
“We don’t use the data you share with us to create, modify, or train our models. You can configure organization-wide data controls, including an automated data deletion schedule.”
“Personal Data will be retained for the period of time necessary for the data importer to provide the Platform to the data exporter under the Agreement and/or in accordance with applicable legal requirements.”
“Except to the extent required otherwise by Data Protection Laws, Writer will, at the choice of Customer and upon Customer’s written request return to Customer and/or delete all Personal Data, unless Data Protection Laws require Writer to retain Personal Data.”
!Who else can access your data?Ask the vendor
The subprocessor list names OpenRouter, Baseten and Parasail under the generic purpose 'Infrastructure'. These are known model-inference and model-routing services, which suggests that some requests may be served by, or routed to, hosted models outside WRITER's own Palmyra stack; the list does not say which models or model providers sit behind them.
Confirm in writing: Ask the vendor to state this in writing before signing.
“OpenRouter Infrastructure United States”
“We may use De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, partners, and sponsors.”
“(i) not retain, use, or disclose Personal Data outside of the direct business relationship between Customer and Writer, or for any purpose (including any commercial purpose) not set forth in this DPA or the Agreement; (ii) not “sell” or “share” any Personal Data, or use Personal Data for purposes of “targeted advertising,” as such terms are defined in Data Protection Laws;”
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from Writer and processes personal data on behalf of our customers. Below is a list of Writer’s subprocessors:”
!Where is your data processed?Ask the vendor
The DPA authorises Writer and its subprocessors to make international transfers of personal data, relying first on the EU-U.S./UK/Swiss Data Privacy Frameworks and then on the EU SCCs and UK Addendum; subprocessors are located mainly in the United States with some EU options.
Confirm in writing: Ask the vendor to state this in writing before signing.
“In the event a transfer of Personal Data is covered by more than one Transfer Mechanism, the transfer will be subject to a single Transfer Mechanism, in accordance with the following order of precedence: (i) the Data Privacy Frameworks; (ii) to the extent that the Data Privacy Frameworks do not apply to a given transfer or are invalidated, the EU SCCs and/or UK Addendum as set forth in Sections 7(d)-(f), as applicable;”
“Managed, multi-cloud options, including dedicated private cloud deployment.”
“We have certified to the Department of Commerce that we adhere to the DPF Principles and Supplemental Principles with respect to personal data transferred to us in reliance on the DPF. WRITER is subject to the investigatory and enforcement powers of the Federal Trade Commission in the case of any failure to comply with the DPF.”
!What happens in a security incident?Ask the vendor
Writer commits to notify customers of a confirmed Security Incident without undue delay or within the period required by data protection law, including nature, likely consequences and mitigation measures, with periodic updates; no fixed hour-based window is given.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Writer will notify Customer of any Security Incident without undue delay or within the time period required under Data Protection Laws.”
“Writer maintains a documented security incident response plan that enables Writer to respond to, investigate, contain, mitigate, and provide notification of Security Incidents consistent with its obligations under Data Protection Laws and this DPA. Writer tests and reviews its security incident response plan on an annual basis.”
Email to send the vendor11 items to confirm in writing
Hello Writer team, We are assessing Writer as part of our supplier review. Before we proceed, please confirm the following in writing: 1. Do you use our data (inputs, outputs or uploaded files) to train or improve your models? Please confirm in writing, including any opt-out and whether it applies to every plan. 2. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 3. Please provide your current, dated subprocessor list and explain how you notify customers of changes. 4. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? 5. What is your commitment to notify customers of a security incident affecting our data, including the timeframe? 6. Which models and model providers can serve requests on the platform, under what circumstances are requests routed to OpenRouter, Baseten or Parasail, and do any third-party model providers receive customer prompts or outputs? 7. Please provide the ISO/IEC 42001, 27001 and 27701 certificates with scope statements and certification body, the current SOC 2 Type II report, and clarify what is meant by 'HIPAA Type 1' and the PCI DSS attestation level and scope. 8. Can WRITER provide model cards and evaluation/red-teaming results for the Palmyra models in production use, and its EU AI Act role and risk classification for the platform? 9. Atlassian appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. 10. Stripe appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. 11. Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
Key findingsclick a row for the evidence
✓Consistent no-training and limited-retention position across marketing, privacy and contractStrong
The trust page, the consumer-facing privacy policy and the DPA all say the same thing: customer inputs and outputs are not used to train WRITER models, data is kept only as long as needed to provide the platform, customers can set an automated deletion schedule, and the DPA adds purpose limitation, no sale/share, and return-or-delete on request. The position is backed by a stated ISO/IEC 42001 AI management certification, a named CISO, a risk-based AI-governance program and annual third-party penetration testing.
A no-training commitment that appears in the contract (not only on a marketing page) is enforceable, and consistency across three document types reduces the chance that an enterprise buyer is reading a position that only applies to one tier.
“WRITER does not train its models on your data, nor does it train on user inputs or any outputs. You control how your data is used.”
“WRITER takes a zero data retention approach, storing data for only as long as is needed for you to build with our platform. None of your data is used for training our models. All data, files, and other materials that customers make available to WRITER for using our platform, along with any inputs or generated outputs, are owned by that customer.”
“We don’t use the data you share with us to create, modify, or train our models. You can configure organization-wide data controls, including an automated data deletion schedule.”
“Engage in analysis and research about use of the Services, improve the Services (but in no event will we use any data you provide to us when you access or use our Services to train our models, including any inputs or outputs) , and develop new services;”
“(i) not retain, use, or disclose Personal Data outside of the direct business relationship between Customer and Writer, or for any purpose (including any commercial purpose) not set forth in this DPA or the Agreement; (ii) not “sell” or “share” any Personal Data, or use Personal Data for purposes of “targeted advertising,” as such terms are defined in Data Protection Laws;”
“Except to the extent required otherwise by Data Protection Laws, Writer will, at the choice of Customer and upon Customer’s written request return to Customer and/or delete all Personal Data, unless Data Protection Laws require Writer to retain Personal Data.”
“August 21, 2025 – San Francisco, CA – WRITER , the leading agentic AI platform for the enterprise, today announced the appointment of Eric Freeman as its first Chief Information Security Officer (CISO).”
“Writer maintains a risk-based information security and AI-governance program that includes policies and procedures defining security, privacy, and AI governance responsibilities, a risk management process to identify, assess, and remediate risk, a review of risk and control effectiveness on at least an annual basis, and internal and third-party audits and independent certifications to help assess program performance. Writer has a dedicated security team in place responsible for implementing, monitoring, and enforcing this program.”
“Writer also engages independent third parties to conduct penetration testing on an annual basis.”
“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for security, privacy, and responsible AI management.”
!Inference and model-routing subprocessors sit behind a 'Palmyra-only' narrativeGap
WRITER positions the platform around its own Palmyra LLMs, yet the October 2026 subprocessor list names OpenRouter, Baseten and Parasail under the generic purpose 'Infrastructure'. These are model-hosting and model-routing services, which implies that at least some requests may be served by, or routed to, third-party hosted models. The list does not say which models or upstream model providers sit behind these entries, or whether prompts reach them.
If customer prompts are routed through OpenRouter to third-party model providers, the data recipients, retention and training commitments of those providers become part of the buyer's exposure, and the ISO 42001 scope may not cover them. This is an inference from the vendor names, not a disclosed fact, so it should be confirmed in writing.
Question for vendor: Which models and model providers can serve requests on the platform, under what circumstances are requests routed to OpenRouter, Baseten or Parasail, and do any third-party model providers receive customer prompts or outputs?
“OpenRouter Infrastructure United States”
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from Writer and processes personal data on behalf of our customers. Below is a list of Writer’s subprocessors:”
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
!Certifications are vendor-claimed and two are mislabelledGap
SOC 2 Type II, ISO/IEC 27001:2022, 27701:2019 and 42001:2023 are asserted on the trust page and in the DPA security exhibit, with a trust center and a SOC 2 report available on request, but no certificate, auditor, scope statement or validity date appears in the collected documents. The trust page also claims 'certifications for HIPAA Type 1 and PCI compliance': HIPAA has no certifying body, and the PCI DSS level, scope and assessor are not stated.
ISO 42001 is the most assurance-relevant claim for an AI platform and its scope (which products, which sites, which model development activities) determines what it actually covers. Mislabelled compliance claims on the same page lower confidence in the precision of the others until the certificates are sighted.
Question for vendor: Please provide the ISO/IEC 42001, 27001 and 27701 certificates with scope statements and certification body, the current SOC 2 Type II report, and clarify what is meant by 'HIPAA Type 1' and the PCI DSS attestation level and scope.
“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for security, privacy, and responsible AI management.”
“Writer engages qualified external auditors to perform annual assessments of its information security program against the SOC 2 AICPA Trust Services Criteria for Security, Availability, and Confidentiality with HIPAA/HITECH requirements along with ISO 27001:2022, ISO 27701:2019, and ISO 42001:2023 standards.”
“We also maintain certifications for HIPAA Type 1 and PCI compliance and adhere to our obligations under global privacy laws.”
!'Zero data retention' marketing versus criteria-based contractual retention and open-ended incident noticeGap
The trust page describes a 'zero data retention approach', while the DPA's binding retention term is criteria-based ('the period of time necessary... to provide the Platform... and/or in accordance with applicable legal requirements') with no fixed window; deletion relies on the customer configuring a schedule or making a written request. The incident clause commits to notice 'without undue delay' but sets no hour-based target. The consumer privacy policy separately reserves broad use and onward disclosure of de-identified data, which is scoped to individual accounts and not to enterprise DPA customers.
Buyers relying on 'zero retention' should understand that the contractual position is the ordinary necessity standard, and that the default retention period, the behaviour of the deletion schedule, and the notification timeline are things to pin down in the order form rather than assume.
Question for vendor: What is the default retention period for prompts, outputs and uploaded files when no deletion schedule is configured, what is the maximum notification time for a confirmed Security Incident, and does the de-identified data clause in the privacy policy apply to any data from enterprise accounts?
“WRITER takes a zero data retention approach, storing data for only as long as is needed for you to build with our platform. None of your data is used for training our models. All data, files, and other materials that customers make available to WRITER for using our platform, along with any inputs or generated outputs, are owned by that customer.”
“Personal Data will be retained for the period of time necessary for the data importer to provide the Platform to the data exporter under the Agreement and/or in accordance with applicable legal requirements.”
“Except to the extent required otherwise by Data Protection Laws, Writer will, at the choice of Customer and upon Customer’s written request return to Customer and/or delete all Personal Data, unless Data Protection Laws require Writer to retain Personal Data.”
“Writer will notify Customer of any Security Incident without undue delay or within the time period required under Data Protection Laws.”
“We may use De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, partners, and sponsors.”
!No public model documentation or evaluation results in the collected materialGap
Beyond a pointer to Stanford HELM rankings for Palmyra and a description of an in-house toxicity classifier, the collected documents contain no model card, system card, evaluation results, red-teaming summary or EU AI Act risk classification; bias and toxicity methodology documentation is offered only on customer request, and the EU AI Act statement is a commitment to comply while obligations are still being evaluated. ai_system_description, model_provider_transparency and testing_and_evaluation are therefore assessed as partial rather than covered; none of the ten domains is not_applicable because WRITER hosts the models and sits in the request path.
ISO 42001 certification does not substitute for published model documentation; a buyer deploying agents on regulated workflows needs the evaluation evidence and AI Act positioning to complete its own impact assessment.
Question for vendor: Can WRITER provide model cards and evaluation/red-teaming results for the Palmyra models in production use, and its EU AI Act role and risk classification for the platform?
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
“Our models are trained on a mix of publicly available data from the Internet and data licensed from third parties, each of which could include personal information. As a result, we take measures to safeguard individual privacy rights, including by obscuring, anonymizing, or removing personal identifiers during the training process.”
“We are committed to complying with the EU AI Act as we continue to evaluate our obligations under it and are similarly committed to complying with our obligations under current laws and regulations, in particular those that apply to AI systems and the development of those systems.”
“WRITER takes measures to reduce and protect against bias, including: data cleaning and preprocessing, oversight and annotation guidelines, model auditing, fine-tuning from human feedback, and a user feedback loop. We also offer a variety of filters that can be used to remove sensitive data. We will provide documentation about the mechanisms of our toxic content filters and bias mitigation methodologies upon customer request.”
?Technical dependency observed: AtlassianObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Atlassian as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Atlassian appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
“Our models are trained on a mix of publicly available data from the Internet and data licensed from third parties, each of which could include personal information. As a result, we take measures to safeguard individual privacy rights, including by obscuring, anonymizing, or removing personal identifiers during the training process.”
“OpenRouter Infrastructure United States”
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from Writer and processes personal data on behalf of our customers. Below is a list of Writer’s subprocessors:”
?Technical dependency observed: StripeObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Stripe as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Stripe appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
“Our models are trained on a mix of publicly available data from the Internet and data licensed from third parties, each of which could include personal information. As a result, we take measures to safeguard individual privacy rights, including by obscuring, anonymizing, or removing personal identifiers during the training process.”
“OpenRouter Infrastructure United States”
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from Writer and processes personal data on behalf of our customers. Below is a list of Writer’s subprocessors:”
?Technical dependency observed: MicrosoftObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Microsoft as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
“Our models are trained on a mix of publicly available data from the Internet and data licensed from third parties, each of which could include personal information. As a result, we take measures to safeguard individual privacy rights, including by obscuring, anonymizing, or removing personal identifiers during the training process.”
“OpenRouter Infrastructure United States”
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from Writer and processes personal data on behalf of our customers. Below is a list of Writer’s subprocessors:”
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the score65
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“August 21, 2025 – San Francisco, CA – WRITER , the leading agentic AI platform for the enterprise, today announced the appointment of Eric Freeman as its first Chief Information Security Officer (CISO).”
“Writer maintains a risk-based information security and AI-governance program that includes policies and procedures defining security, privacy, and AI governance responsibilities, a risk management process to identify, assess, and remediate risk, a review of risk and control effectiveness on at least an annual basis, and internal and third-party audits and independent certifications to help assess program performance. Writer has a dedicated security team in place responsible for implementing, monitoring, and enforcing this program.”
“We are committed to complying with the EU AI Act as we continue to evaluate our obligations under it and are similarly committed to complying with our obligations under current laws and regulations, in particular those that apply to AI systems and the development of those systems.”
Governance & accountability: vendor-evidenced, not yet independently corroborated.
AI system15% of the score40
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“With WRITER’s end-to-end platform, teams can build, activate, and supervise AI agents that are grounded in their company’s data and fueled by WRITER’s enterprise-grade LLMs.”
“Agent requests to connected systems pass through a governed execution layer that validates identity, checks permissions, and records activity.”
How AI features are evaluated before and after release, evals, red-teaming, monitoring.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
“WRITER takes measures to reduce and protect against bias, including: data cleaning and preprocessing, oversight and annotation guidelines, model auditing, fine-tuning from human feedback, and a user feedback loop. We also offer a variety of filters that can be used to remove sensitive data. We will provide documentation about the mechanisms of our toxic content filters and bias mitigation methodologies upon customer request.”
“Writer also engages independent third parties to conduct penetration testing on an annual basis.”
How changes to models and AI features are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“Customer has fourteen (14) calendar days from such notice to make an objection on reasonable grounds relating to the protection of the Personal Data by notifying Writer at [email protected] . In the event Customer objects to a new Subprocessor, Writer will use commercially reasonable efforts to make available to Customer a change in the Platform or Customer’s configuration or use of the Platform to avoid processing of Customer Personal Data by the objected-to new Subprocessor.”
“Writer may update these measures from time to time, provided that any such update does not diminish the overall security of the Platform.”
Model10% of the score40
Which model providers and versions process customer data, and how changes to them are disclosed.
Assessed against NIST GenAI · ISO 42001
“Our models offer accuracy and quality through third-party testing and benchmarking. Read how Palmyra, the WRITER family of LLMs, ranks on Stanford HELM benchmarking .”
“Our models are trained on a mix of publicly available data from the Internet and data licensed from third parties, each of which could include personal information. As a result, we take measures to safeguard individual privacy rights, including by obscuring, anonymizing, or removing personal identifiers during the training process.”
“OpenRouter Infrastructure United States”
Customer data15% of the score82
Whether customer data trains models, how long it is retained, where it is processed, and how it is protected.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“WRITER does not train its models on your data, nor does it train on user inputs or any outputs. You control how your data is used.”
“WRITER takes a zero data retention approach, storing data for only as long as is needed for you to build with our platform. None of your data is used for training our models. All data, files, and other materials that customers make available to WRITER for using our platform, along with any inputs or generated outputs, are owned by that customer.”
“We don’t use the data you share with us to create, modify, or train our models. You can configure organization-wide data controls, including an automated data deletion schedule.”
“Engage in analysis and research about use of the Services, improve the Services (but in no event will we use any data you provide to us when you access or use our Services to train our models, including any inputs or outputs) , and develop new services;”
“We may use De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, partners, and sponsors.”
“(i) not retain, use, or disclose Personal Data outside of the direct business relationship between Customer and Writer, or for any purpose (including any commercial purpose) not set forth in this DPA or the Agreement; (ii) not “sell” or “share” any Personal Data, or use Personal Data for purposes of “targeted advertising,” as such terms are defined in Data Protection Laws;”
“Personal Data will be retained for the period of time necessary for the data importer to provide the Platform to the data exporter under the Agreement and/or in accordance with applicable legal requirements.”
“Except to the extent required otherwise by Data Protection Laws, Writer will, at the choice of Customer and upon Customer’s written request return to Customer and/or delete all Personal Data, unless Data Protection Laws require Writer to retain Personal Data.”
“In the event a transfer of Personal Data is covered by more than one Transfer Mechanism, the transfer will be subject to a single Transfer Mechanism, in accordance with the following order of precedence: (i) the Data Privacy Frameworks; (ii) to the extent that the Data Privacy Frameworks do not apply to a given transfer or are invalidated, the EU SCCs and/or UK Addendum as set forth in Sections 7(d)-(f), as applicable;”
“Managed, multi-cloud options, including dedicated private cloud deployment.”
“For a WRITER account with multiple teams, inputs and data from one team aren’t used or accessible by another team, even within the same org.”
Customer data treatment: the certifications above are independently corroborated, but they cover the management system — these specific disclosures are the vendor's own statements, not yet independently verified.
AI supply chain10% of the score75
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from Writer and processes personal data on behalf of our customers. Below is a list of Writer’s subprocessors:”
“OpenRouter Infrastructure United States”
“Customer has fourteen (14) calendar days from such notice to make an objection on reasonable grounds relating to the protection of the Personal Data by notifying Writer at [email protected] . In the event Customer objects to a new Subprocessor, Writer will use commercially reasonable efforts to make available to Customer a change in the Platform or Customer’s configuration or use of the Platform to avoid processing of Customer Personal Data by the objected-to new Subprocessor.”
Security foundation15% of the score74
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
“Writer will notify Customer of any Security Incident without undue delay or within the time period required under Data Protection Laws.”
“Writer maintains a documented security incident response plan that enables Writer to respond to, investigate, contain, mitigate, and provide notification of Security Incidents consistent with its obligations under Data Protection Laws and this DPA. Writer tests and reviews its security incident response plan on an annual basis.”
“Our platform prevents the rendering of any images or clickable links in output and cannot call out to any URL in the output.”
Capped at 74: the evidence here is the vendor’s own account, with nothing independently corroborating it.
Vulnerability & incident handling: vendor-evidenced, not yet independently corroborated.
Independent assurance evidence10% of the score55
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
“We undergo annual SOC 2 Type II evaluations and hold ISO/IEC 27001, 27701, and 42001 certifications, confirming our implemented controls for security, privacy, and responsible AI management.”
“Writer engages qualified external auditors to perform annual assessments of its information security program against the SOC 2 AICPA Trust Services Criteria for Security, Availability, and Confidentiality with HIPAA/HITECH requirements along with ISO 27001:2022, ISO 27701:2019, and ISO 42001:2023 standards.”
“We also maintain certifications for HIPAA Type 1 and PCI compliance and adhere to our obligations under global privacy laws.”
“We have certified to the Department of Commerce that we adhere to the DPF Principles and Supplemental Principles with respect to personal data transferred to us in reliance on the DPF. WRITER is subject to the investigatory and enforcement powers of the Federal Trade Commission in the case of any failure to comply with the DPF.”
Read from the registry record above, cited, not reproduced.
None of the corroborated certifications is AI-specific (ISO/IEC 42001 or AIUC-class) — this assurance is security and data-transfer attestation, not AI-management-system assurance.
Legal & contractual10% of the score60
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“This Data Processing Agreement (“ DPA ”) is entered into by Writer, Inc. (“ Writer ”) and the Writer customer identified in the Agreement (“ Customer ”) (each a “ Party ”; collectively the “ Parties ”) and is incorporated by reference into the applicable subscription agreement governing Customer’s use of Writer’s Platform (the “Agreement”) between the Parties and takes precedence over the Agreement to the extent of any conflict.”
“Customer may request an Audit upon fourteen (14) days’ prior written notice to Writer, no more than once annually, except, in the event of a Security Incident occurring on Writer’s systems, in which case Customer may request an Audit within a reasonable period of time following such Security Incident.”
“Introduce human oversight. Without limiting your general obligation to comply with your legal obligations, you must ensure that your use of the Services for a High Risk Use is designed and developed in such a way as to ensure that it is properly overseen by natural persons in order to prevent and minimize the risks to individuals that may result from such High Risk Use.”
Legal & contractual transparency: vendor-evidenced, not yet independently corroborated.
Not graded: Agent, not applicable to this scan.
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 62 → up to 82 with every identified gap resolved.
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesAssurance evidence: certifications 8, registry checks and verification ladders, click to view
Trust Services Criteria for Security, Availability and Confidentiality, annual examination; report available on request via security contact. Auditor and period not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Certification body, certificate scope and validity not stated in the collected documents.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Certification body, certificate scope and validity not stated in the collected documents.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Described as covering responsible AI management; whether the scope includes Palmyra model development and third-party inference routing is not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Trust page says 'certifications for HIPAA Type 1'; HIPAA has no certifying body. The DPA describes SOC 2 assessed 'with HIPAA/HITECH requirements', which is a more precise framing.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Trust page claims 'PCI compliance'; level, scope and assessor not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Self-certification to the U.S. Department of Commerce; listed as checkable on dataprivacyframework.gov but not verified here.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Checked against Data Privacy Framework (dataprivacyframework.gov), Oct 21, 2026: Verified on the registry
Sources 13, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
Want to go further?
This scan assesses Writer at an organisational level. Assurance can vary significantly between products, models and agents, enter the product you’re evaluating to run a deeper AI System Assurance Scan.
Scan a specific product →This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.