Runway
runwayml.com
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
- No formal subprocessor register disclosed
- Data retention window not stated
See Before you sign, with what to ask for ↓
Scanned Oct 21, 2026 · Public evidence · Point-in-time
Higher scores indicate stronger, independently supported AI assurance, governance, AI systems, models, data, supply chain and third-party assurance evidence. The score and the decision are related but different: a well-scored vendor can still carry conditions.
Before you sign
Why it matters: The vendor names AI-related providers or partially addresses its supply chain, but the public sources scanned do not include a formal, dated subprocessor register.
What to ask for: Request a dated subprocessor register with change-notification terms for the DPA/order form.
Why it matters: The public sources scanned do not give a retention period for customer data or prompts/outputs.
What to ask for: Get retention windows, in days, in writing.
“We honor customer requests for data deletion in accordance with our contractual obligations. Our data retention framework balances operational requirements with data minimization principles.”
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
✓Will they train on your data?Clear
Runway's enterprise marketing states that it does not train on customer data. The statement appears as an Enterprise bullet point, not as an organisation-wide policy statement.
“Scalable and Secure → We don't train on your data → SOC 2 Type 2 → Customizable access & permissions → Full ownership of your outputs → Single Sign On (SSO)”
“Strict controls govern access to our proprietary AI models We maintain policies and processes to prevent misuse and unauthorized access Regular security assessments evaluate our AI infrastructure for emerging vulnerabilities Technical separation between customer content storage and model training systems”
!How long do they keep your data?Ask the vendor
Runway honours deletion requests in accordance with contractual obligations and describes a retention framework balancing operational needs with data minimisation, but publishes no retention period for customer content, prompts or generated outputs.
Requires written confirmation, see Before you sign ↓
“We honor customer requests for data deletion in accordance with our contractual obligations. Our data retention framework balances operational requirements with data minimization principles.”
!Who else can access your data?Ask the vendor
Runway is a generative media platform that generates and edits video from text, image or video inputs using both Runway's proprietary models and third-party models from Google, OpenAI and ByteDance, selectable within one workflow.
Requires written confirmation, see Before you sign ↓
“Generate videos with Runway’s proprietary models and leading third-party models from Google, OpenAI, ByteDance and more. Switch between models to try different looks, motion styles and speeds in one workflow.”
“Runway gives you access to several AI image models instead of limiting you to a single model. Choose from Runway's own Gen-4 Image or third-party models like Nano Banana Pro, Seedream 5.0 Lite, GPT Image 2, Grok Imagine, FLUX.2 Max and more.”
“When you hit your concurrency limit on a model, Model Router can now automatically fall back to the next-best eligible model with capacity instead of queuing your request. Opt in per model router in the dev portal to scale past your per-model concurrency limits without added latency.”
“xAI's Grok Imagine 1.5 is now available in Runway MCP as grok-imagine-1.5, supporting text-to-video and image-to-video from any MCP client. Generate 1-15 second clips with native audio, up to 1080p resolution.”
“MiniMax Hailuo 3.0 is now live on Runway Dev. Generate video from text, image, or video, with support for keyframes plus reference images, videos, and audio.”
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
!Where is your data processed?Ask the vendor
Runway hosts on pre-hardened infrastructure from unnamed major cloud providers across multiple physically separated data centres. No country or region of processing, and no data residency option, is stated.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Runway uses pre-hardened server infrastructure from major cloud providers. We interact with servers predominantly by deploying containers orchestrated with modern container management systems. Infrastructure Redundancy Runway's infrastructure is hosted in multiple, physically separated data centers for redundancy in case of technical fault or natural disaster and for load balancing.”
✓What happens in a security incident?Clear
Runway runs a structured Security Incident Response Program with identification, escalation, containment, customer communication and post-incident review, rehearsed through simulations; affected customers are notified per contractual and regulatory requirements. No fixed notification window is stated.
“Our security team conducts regular incident response simulations to ensure readiness. We notify affected customers of security incidents in accordance with contractual and regulatory requirements, providing transparent updates throughout the resolution process.”
Email to send the vendor9 items to confirm in writing
Hello Runway team, We are assessing Runway as part of our supplier review. Before we proceed, please confirm the following in writing: 1. Please provide your current, dated subprocessor list and explain how you notify customers of changes. 2. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 3. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? 4. Please provide the ISO/IEC 27001 certificate (certification body, scope statement, expiry) and the current SOC 2 Type II report, confirming the system boundary covers the Creative Platform, Runway Dev API and Runway MCP. 5. Confirm, for the specific plan being purchased, whether customer inputs, uploaded media and generated outputs are ever used to train, fine-tune or evaluate Runway's models, and point to the contractual clause that governs this. 6. Can you share the methodology and most recent results of your bias and fairness evaluations, and any model documentation (model cards, safety evaluations) for Gen-4.5, Aleph 2.0 and GWM-1? 7. AWS appears to be involved as a platform provider: confirm whether this dependency exists, and whether it processes customer data. 8. Stripe appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. 9. Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
Key findingsclick a row for the evidence
✓Mature, dated security program with two named attestations and external testingStrong
Runway's security page (last updated August 2026) states SOC 2 Type II (annually recertified) and ISO/IEC 27001 certification, third-party penetration testing of web apps and APIs, a private bug bounty, encryption in transit and at rest, a structured incident response program with customer notification, and logged change control. Reports are available to enterprise customers via the Trust Center.
This is a more complete organisational security disclosure than most generative media vendors publish, and the evidence is recent. Both certifications remain vendor-claimed here: issuer, certificate scope and audit period are not stated, so a buyer should obtain the ISO certificate and SOC 2 report through the Trust Center and confirm scope covers the product in use.
Question for vendor: Please provide the ISO/IEC 27001 certificate (certification body, scope statement, expiry) and the current SOC 2 Type II report, confirming the system boundary covers the Creative Platform, Runway Dev API and Runway MCP.
“Runway maintains SOC 2 Type II certification, validating our security controls through rigorous independent auditing. This certification, developed by the American Institute of CPAs (AICPA), confirms our systems effectively protect customer data. Our annual SOC 2 Type II recertification demonstrates our ongoing commitment to security excellence.”
“Runway is certified to ISO/IEC 27001, the international standard for information security management systems (ISMS). Our certification was issued by an accredited certification body following an independent audit of our security program.”
“Runway partners with specialized security firms to conduct independent assessments of our platform. These engagements include: In-depth application security reviews Penetration testing of our web applications and APIs Architecture security evaluation Code security reviews”
“Our security team conducts regular incident response simulations to ensure readiness. We notify affected customers of security incidents in accordance with contractual and regulatory requirements, providing transparent updates throughout the resolution process.”
“Runway operates a private bug bounty program that enables select security researchers to responsibly disclose potential vulnerabilities in exchange for recognition and rewards.”
“Each proposed change to our production environment (including infrastructure changes) must be approved, and each such change and corresponding approval are logged. Our CI/CD pipeline provisions infrastructure changes in an automated manner after they are approved.”
!No-training commitment is scoped to Enterprise; organisation-wide position is a technical control onlyGap
The only explicit statement that Runway does not train on customer data is a bullet in the 'Built for Enterprise' marketing block. The organisation-wide security page states a 'technical separation between customer content storage and model training systems' and that customer content is never used for testing, but does not say whether content from Free, Standard, Pro, Unlimited or Team plans is excluded from model training. The product's privacy policy and terms were not among the collected documents.
A buyer on a non-Enterprise plan cannot establish from these documents whether uploaded footage, images or prompts may be used to train or improve Runway's models. For a vendor whose core business is training frontier video models, this is the central data-handling question and should be confirmed in writing for the plan actually in use.
Question for vendor: Confirm, for the specific plan being purchased, whether customer inputs, uploaded media and generated outputs are ever used to train, fine-tune or evaluate Runway's models, and point to the contractual clause that governs this.
“Scalable and Secure → We don't train on your data → SOC 2 Type 2 → Customizable access & permissions → Full ownership of your outputs → Single Sign On (SSO)”
“Strict controls govern access to our proprietary AI models We maintain policies and processes to prevent misuse and unauthorized access Regular security assessments evaluate our AI infrastructure for emerging vulnerabilities Technical separation between customer content storage and model training systems”
“We strictly isolate production data from testing environments. Customer content is never used for testing new features or changes.”
!Multi-model platform routes to many third-party model developers whose data handling is not disclosedGap
Runway serves models from Google (Veo), OpenAI (GPT Image, Sora), ByteDance (Seedance, Seedream), xAI (Grok Imagine), ElevenLabs, MiniMax, Kling and others alongside its own. The documents do not state whether customer inputs are transmitted to those developers, whether those developers appear on the subprocessor list, or what their retention and training terms are. On Runway Dev, the Model Router (with opt-in capacity fallback) can change which model handles a request, though routing history is recorded and queryable.
Each third-party model may be a separate data recipient with its own training and retention terms. A buyer who selects, or is routed to, a third-party model may have a materially different data exposure than when using Runway's first-party models. The routing-history feature is a genuine positive for auditability on the API side, but it does not substitute for a disclosure of where the data goes.
Question for vendor: For each third-party model available on our plan, state whether inputs and outputs leave Runway's infrastructure, which legal entity receives them, whether they are listed as a subprocessor, and whether that provider may retain or train on the data. Confirm whether third-party models can be disabled at workspace or org level.
“Generate videos with Runway’s proprietary models and leading third-party models from Google, OpenAI, ByteDance and more. Switch between models to try different looks, motion styles and speeds in one workflow.”
“Runway gives you access to several AI image models instead of limiting you to a single model. Choose from Runway's own Gen-4 Image or third-party models like Nano Banana Pro, Seedream 5.0 Lite, GPT Image 2, Grok Imagine, FLUX.2 Max and more.”
“Configure allow/deny lists, cost caps, and optimization preferences for cost, latency, or quality, and Runway Dev will automatically select the best video model for each generation request. Build your integration once and stay on the best model as new ones are released, without manual updates.”
“When you hit your concurrency limit on a model, Model Router can now automatically fall back to the next-best eligible model with capacity instead of queuing your request. Opt in per model router in the dev portal to scale past your per-model concurrency limits without added latency.”
“Every live routed request is now recorded, so you can see which model your Model Router picked and why. View it in the Activity tab of the dev portal or fetch the same records via the public API, and click any row for the full pipeline breakdown.”
“xAI's Grok Imagine 1.5 is now available in Runway MCP as grok-imagine-1.5, supporting text-to-video and image-to-video from any MCP client. Generate 1-15 second clips with native audio, up to 1080p resolution.”
“MiniMax Hailuo 3.0 is now live on Runway Dev. Generate video from text, image, or video, with support for keyframes plus reference images, videos, and audio.”
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
!Retention period, processing location and cloud providers are not publishedGap
Deletion is honoured 'in accordance with our contractual obligations' and retention is described only as a framework balancing operational needs with data minimisation; no retention window for content, prompts, outputs or backups is given. Hosting is described as 'major cloud providers' across multiple data centres with no region, country or residency option named. The subprocessor list that may name the providers was not collected.
Buyers subject to data residency or regulated retention requirements (GDPR, APRA CPS 234, government data) cannot determine from the public material where their media is processed or how long it persists after deletion. These are standard DPA items and should be confirmed before onboarding.
Question for vendor: State the default retention period for uploaded media, prompts, generated outputs and backups after account or project deletion; name the cloud providers and the regions in which customer content is stored and processed; and confirm whether a regional processing option is available.
“We honor customer requests for data deletion in accordance with our contractual obligations. Our data retention framework balances operational requirements with data minimization principles.”
“Runway uses pre-hardened server infrastructure from major cloud providers. We interact with servers predominantly by deploying containers orchestrated with modern container management systems. Infrastructure Redundancy Runway's infrastructure is hosted in multiple, physically separated data centers for redundancy in case of technical fault or natural disaster and for load balancing.”
“User account information (email addresses, names, team memberships) Authentication tokens (we don't store passwords directly) Customer content (uploaded media, generated output, project configurations) System logs for auditing user activity and troubleshooting”
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
✓Disciplined change management, provenance signals and a current public changelogStrong
Runway describes approved and logged production changes, pull-request review with multiple reviewers for security-sensitive code, advance customer communication of major updates, and publishes a dated changelog current to October 2026 that tags each release by plan tier. Outputs from its own models carry C2PA content credentials, custom voice creation requires explicit consent, and it states regular bias and fairness evaluations. All ten assessment domains have at least some disclosure; none was judged not_applicable, because Runway sits in the request path for every product it offers.
The change cadence is high (new third-party models added most weeks), so the combination of advance notice and a public changelog gives a buyer a practical way to track when the model set or data flows behind their workflows change. The AI-specific safety and evaluation statements are present but unsubstantiated: no methodology, results or model cards are published, so testing_and_evaluation is only partially evidenced.
Question for vendor: Can you share the methodology and most recent results of your bias and fairness evaluations, and any model documentation (model cards, safety evaluations) for Gen-4.5, Aleph 2.0 and GWM-1?
“Each proposed change to our production environment (including infrastructure changes) must be approved, and each such change and corresponding approval are logged. Our CI/CD pipeline provisions infrastructure changes in an automated manner after they are approved.”
“Major product updates are communicated to customers before deployment. Security patches may be applied automatically to protect system integrity.”
“New updates and improvements to Runway. Latest updates Oct 15, 2026 Paid Plans Mirelo SFX 2.0 Mirelo SFX 2.0 is now available in Runway MCP.”
“Images made on the Free plan carry a small Runway watermark. Outputs from Runway’s own models also carry C2PA content credentials on every plan.”
“Voice Verification Creating a Custom Voice will now require explicit user consent.”
“We conduct regular bias and fairness evaluations of our AI models”
?Technical dependency observed: AWSObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on AWS as a platform provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — AWS appears to be involved as a platform provider: confirm whether this dependency exists, and whether it processes customer data.
“Runway gives you access to several AI image models instead of limiting you to a single model. Choose from Runway's own Gen-4 Image or third-party models like Nano Banana Pro, Seedream 5.0 Lite, GPT Image 2, Grok Imagine, FLUX.2 Max and more.”
“Configure allow/deny lists, cost caps, and optimization preferences for cost, latency, or quality, and Runway Dev will automatically select the best video model for each generation request. Build your integration once and stay on the best model as new ones are released, without manual updates.”
“When you hit your concurrency limit on a model, Model Router can now automatically fall back to the next-best eligible model with capacity instead of queuing your request. Opt in per model router in the dev portal to scale past your per-model concurrency limits without added latency.”
“Every live routed request is now recorded, so you can see which model your Model Router picked and why. View it in the Activity tab of the dev portal or fetch the same records via the public API, and click any row for the full pipeline breakdown.”
“xAI's Grok Imagine 1.5 is now available in Runway MCP as grok-imagine-1.5, supporting text-to-video and image-to-video from any MCP client. Generate 1-15 second clips with native audio, up to 1080p resolution.”
“MiniMax Hailuo 3.0 is now live on Runway Dev. Generate video from text, image, or video, with support for keyframes plus reference images, videos, and audio.”
“Gen-3 Alpha is the first of an upcoming series of models trained by Runway on a new infrastructure built for large-scale multimodal training. It is a major improvement in fidelity, consistency, and motion over Gen-2, and a step towards building General World Models .”
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
“Each potential vendor undergoes security risk analysis before integration into our supply chain. We establish formal contracts with all providers that include specific requirements for data protection, confidentiality, and service performance. Our agreements include provisions for security audits and compliance with applicable regulations.”
?Technical dependency observed: StripeObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Stripe as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Stripe appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Runway gives you access to several AI image models instead of limiting you to a single model. Choose from Runway's own Gen-4 Image or third-party models like Nano Banana Pro, Seedream 5.0 Lite, GPT Image 2, Grok Imagine, FLUX.2 Max and more.”
“Configure allow/deny lists, cost caps, and optimization preferences for cost, latency, or quality, and Runway Dev will automatically select the best video model for each generation request. Build your integration once and stay on the best model as new ones are released, without manual updates.”
“When you hit your concurrency limit on a model, Model Router can now automatically fall back to the next-best eligible model with capacity instead of queuing your request. Opt in per model router in the dev portal to scale past your per-model concurrency limits without added latency.”
“Every live routed request is now recorded, so you can see which model your Model Router picked and why. View it in the Activity tab of the dev portal or fetch the same records via the public API, and click any row for the full pipeline breakdown.”
“xAI's Grok Imagine 1.5 is now available in Runway MCP as grok-imagine-1.5, supporting text-to-video and image-to-video from any MCP client. Generate 1-15 second clips with native audio, up to 1080p resolution.”
“MiniMax Hailuo 3.0 is now live on Runway Dev. Generate video from text, image, or video, with support for keyframes plus reference images, videos, and audio.”
“Gen-3 Alpha is the first of an upcoming series of models trained by Runway on a new infrastructure built for large-scale multimodal training. It is a major improvement in fidelity, consistency, and motion over Gen-2, and a step towards building General World Models .”
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
“Each potential vendor undergoes security risk analysis before integration into our supply chain. We establish formal contracts with all providers that include specific requirements for data protection, confidentiality, and service performance. Our agreements include provisions for security audits and compliance with applicable regulations.”
?Technical dependency observed: MicrosoftObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Microsoft as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Runway gives you access to several AI image models instead of limiting you to a single model. Choose from Runway's own Gen-4 Image or third-party models like Nano Banana Pro, Seedream 5.0 Lite, GPT Image 2, Grok Imagine, FLUX.2 Max and more.”
“Configure allow/deny lists, cost caps, and optimization preferences for cost, latency, or quality, and Runway Dev will automatically select the best video model for each generation request. Build your integration once and stay on the best model as new ones are released, without manual updates.”
“When you hit your concurrency limit on a model, Model Router can now automatically fall back to the next-best eligible model with capacity instead of queuing your request. Opt in per model router in the dev portal to scale past your per-model concurrency limits without added latency.”
“Every live routed request is now recorded, so you can see which model your Model Router picked and why. View it in the Activity tab of the dev portal or fetch the same records via the public API, and click any row for the full pipeline breakdown.”
“xAI's Grok Imagine 1.5 is now available in Runway MCP as grok-imagine-1.5, supporting text-to-video and image-to-video from any MCP client. Generate 1-15 second clips with native audio, up to 1080p resolution.”
“MiniMax Hailuo 3.0 is now live on Runway Dev. Generate video from text, image, or video, with support for keyframes plus reference images, videos, and audio.”
“Gen-3 Alpha is the first of an upcoming series of models trained by Runway on a new infrastructure built for large-scale multimodal training. It is a major improvement in fidelity, consistency, and motion over Gen-2, and a step towards building General World Models .”
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
“Each potential vendor undergoes security risk analysis before integration into our supply chain. We establish formal contracts with all providers that include specific requirements for data protection, confidentiality, and service performance. Our agreements include provisions for security audits and compliance with applicable regulations.”
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the score60
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“Runway employs a dedicated security team that oversees our comprehensive security program. A cross-functional security committee, including senior leadership, drives implementation and continuous improvement of our security initiatives.”
“Built-in safety mechanisms within our AI systems help prevent generation of harmful content We conduct regular bias and fairness evaluations of our AI models Combination of automated systems and internal human review to detect and block harmful content in user inputs and outputs”
“Images made on the Free plan carry a small Runway watermark. Outputs from Runway’s own models also carry C2PA content credentials on every plan.”
“Voice Verification Creating a Custom Voice will now require explicit user consent.”
Governance & accountability: vendor-evidenced, not yet independently corroborated.
AI system10% of the score53
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“Generate videos with Runway’s proprietary models and leading third-party models from Google, OpenAI, ByteDance and more. Switch between models to try different looks, motion styles and speeds in one workflow.”
“Work with an AI creative partner to develop and produce a finished video. Describe the video you need, refine the direction together and generate it all in one conversation.”
“GWM-1: our state-of-the-art General World Model, built to simulate reality in real time. Interactive, controllable and general-purpose. GWM-1 comes in three variants: GWM Worlds for explorable environments, GWM Avatars for conversational characters, and GWM Robotics for robotic manipulation.”
“User account information (email addresses, names, team memberships) Authentication tokens (we don't store passwords directly) Customer content (uploaded media, generated output, project configurations) System logs for auditing user activity and troubleshooting”
How AI features are evaluated before and after release, evals, red-teaming, monitoring.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
“We conduct regular bias and fairness evaluations of our AI models”
“Static code analysis tools scan for potential vulnerabilities Dependency scanning identifies vulnerable third-party components Container scanning checks for security issues in deployment images Regular automated security testing throughout our development pipeline”
How changes to models and AI features are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“Each proposed change to our production environment (including infrastructure changes) must be approved, and each such change and corresponding approval are logged. Our CI/CD pipeline provisions infrastructure changes in an automated manner after they are approved.”
“Major product updates are communicated to customers before deployment. Security patches may be applied automatically to protect system integrity.”
“New updates and improvements to Runway. Latest updates Oct 15, 2026 Paid Plans Mirelo SFX 2.0 Mirelo SFX 2.0 is now available in Runway MCP.”
AI system description: vendor-evidenced, not yet independently corroborated.
Change management: vendor-evidenced, not yet independently corroborated.
Model10% of the score60
Which model providers and versions process customer data, and how changes to them are disclosed.
Assessed against NIST GenAI · ISO 42001
“Runway gives you access to several AI image models instead of limiting you to a single model. Choose from Runway's own Gen-4 Image or third-party models like Nano Banana Pro, Seedream 5.0 Lite, GPT Image 2, Grok Imagine, FLUX.2 Max and more.”
“Configure allow/deny lists, cost caps, and optimization preferences for cost, latency, or quality, and Runway Dev will automatically select the best video model for each generation request. Build your integration once and stay on the best model as new ones are released, without manual updates.”
“When you hit your concurrency limit on a model, Model Router can now automatically fall back to the next-best eligible model with capacity instead of queuing your request. Opt in per model router in the dev portal to scale past your per-model concurrency limits without added latency.”
“Every live routed request is now recorded, so you can see which model your Model Router picked and why. View it in the Activity tab of the dev portal or fetch the same records via the public API, and click any row for the full pipeline breakdown.”
“xAI's Grok Imagine 1.5 is now available in Runway MCP as grok-imagine-1.5, supporting text-to-video and image-to-video from any MCP client. Generate 1-15 second clips with native audio, up to 1080p resolution.”
“MiniMax Hailuo 3.0 is now live on Runway Dev. Generate video from text, image, or video, with support for keyframes plus reference images, videos, and audio.”
“Gen-3 Alpha is the first of an upcoming series of models trained by Runway on a new infrastructure built for large-scale multimodal training. It is a major improvement in fidelity, consistency, and motion over Gen-2, and a step towards building General World Models .”
Model provider transparency: vendor-evidenced, not yet independently corroborated.
Agent10% of the score0
No independently corroborated agent-specific assurance (AIUC-class or equivalent).
Customer data15% of the score40
Whether customer data trains models, how long it is retained, where it is processed, and how it is protected.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“Scalable and Secure → We don't train on your data → SOC 2 Type 2 → Customizable access & permissions → Full ownership of your outputs → Single Sign On (SSO)”
“Strict controls govern access to our proprietary AI models We maintain policies and processes to prevent misuse and unauthorized access Regular security assessments evaluate our AI infrastructure for emerging vulnerabilities Technical separation between customer content storage and model training systems”
“We strictly isolate production data from testing environments. Customer content is never used for testing new features or changes.”
“We honor customer requests for data deletion in accordance with our contractual obligations. Our data retention framework balances operational requirements with data minimization principles.”
“Transit Encryption : All data transmitted to and from our platforms uses TLS 1.2+ with strong cipher suites. Storage Encryption : Data at rest is secured with AES-256 encryption. Encryption keys are themselves protected in secure key management systems with regular rotation schedules.”
“Runway uses pre-hardened server infrastructure from major cloud providers. We interact with servers predominantly by deploying containers orchestrated with modern container management systems. Infrastructure Redundancy Runway's infrastructure is hosted in multiple, physically separated data centers for redundancy in case of technical fault or natural disaster and for load balancing.”
“User account information (email addresses, names, team memberships) Authentication tokens (we don't store passwords directly) Customer content (uploaded media, generated output, project configurations) System logs for auditing user activity and troubleshooting”
AI supply chain10% of the score40
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data. This list is available at runway.com/subprocessors .”
“Each potential vendor undergoes security risk analysis before integration into our supply chain. We establish formal contracts with all providers that include specific requirements for data protection, confidentiality, and service performance. Our agreements include provisions for security audits and compliance with applicable regulations.”
“Runway uses pre-hardened server infrastructure from major cloud providers. We interact with servers predominantly by deploying containers orchestrated with modern container management systems. Infrastructure Redundancy Runway's infrastructure is hosted in multiple, physically separated data centers for redundancy in case of technical fault or natural disaster and for load balancing.”
Security foundation10% of the score70
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
“Our security team conducts regular incident response simulations to ensure readiness. We notify affected customers of security incidents in accordance with contractual and regulatory requirements, providing transparent updates throughout the resolution process.”
“Runway operates a private bug bounty program that enables select security researchers to responsibly disclose potential vulnerabilities in exchange for recognition and rewards.”
“Static code analysis tools scan for potential vulnerabilities Dependency scanning identifies vulnerable third-party components Container scanning checks for security issues in deployment images Regular automated security testing throughout our development pipeline”
Vulnerability & incident handling: vendor-evidenced, not yet independently corroborated.
Independent assurance evidence10% of the score38
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
“Runway maintains SOC 2 Type II certification, validating our security controls through rigorous independent auditing. This certification, developed by the American Institute of CPAs (AICPA), confirms our systems effectively protect customer data. Our annual SOC 2 Type II recertification demonstrates our ongoing commitment to security excellence.”
“Runway is certified to ISO/IEC 27001, the international standard for information security management systems (ISMS). Our certification was issued by an accredited certification body following an independent audit of our security program.”
“Runway partners with specialized security firms to conduct independent assessments of our platform. These engagements include: In-depth application security reviews Penetration testing of our web applications and APIs Architecture security evaluation Code security reviews”
Independent assurance: vendor-evidenced, not yet independently corroborated.
None of the corroborated certifications is AI-specific (ISO/IEC 42001 or AIUC-class) — this assurance is security and data-transfer attestation, not AI-management-system assurance.
Legal & contractual10% of the score40
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“Can I use the output commercially? Yes. What you create in Runway is yours — you own your work on every plan, including the Free plan.”
“Enterprise customers can request a summary of these test results as well as Runway's independent third-party audit reports through Runway's trust portal . Unauthorized security scanning is not permitted.”
“We honor customer requests for data deletion in accordance with our contractual obligations. Our data retention framework balances operational requirements with data minimization principles.”
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 50 → up to 72 with every identified gap resolved.
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesAssurance evidence: certifications 3, registry checks and verification ladders, click to view
Stated as annually recertified and available to enterprise customers via sales or the Trust Center. Audit firm, report period and system scope not stated in the collected documents.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Stated as issued by an accredited certification body after independent audit; certificate available via the Trust Center. Certification body, certificate number, ISMS scope statement and validity dates are not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Not claimed in any public source scanned. This is the AI-management-system certification — in its absence, the vendor’s AI governance rests on its general security and privacy certifications.
Sources 12, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
Want to go further?
This scan assesses Runway at an organisational level. Assurance can vary significantly between products, models and agents, enter the product you’re evaluating to run a deeper AI System Assurance Scan.
Scan a specific product →This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.