Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Use of specific third-party models on Replicate (Flux, Ideogram, Stability AI) is subject to additional restrictions flowing down from the model providers, including prohibitions on use for surveillance, biometric processing, military purposes, and development of competing products. Redistribution or fine-tuning of Stability AI models requires a direct license from Stability AI. These restrictions apply to customers and must be flowed down to their own users where applicable.
This analysis describes what Replicate's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These provisions impose use-case specific restrictions that go beyond Replicate's own acceptable use policy, including prohibitions on competitive product development using model outputs, surveillance applications, and biometric processing. Non-compliance by authorized users constitutes a breach by the customer under the agreement and triggers indemnification obligations.
Under these clauses, customers using Flux, Ideogram, or Stability AI models through Replicate are subject to additional provider-specific restrictions that prohibit, among other things, using model outputs to build competing services, processing biometric data, conducting surveillance activities, and redistributing model weights without a direct license from Stability AI. These restrictions must be incorporated into customers' own downstream product terms where applicable.
Cross-platform context
See how other platforms handle Third-Party Model Additional Terms (Flux, Ideogram, Stability AI) and similar clauses.
Compare across platforms →Monitoring
Replicate has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You agree to fully comply with Third-Party Terms applicable to your use of the Services, including all Additional Terms and licenses associated with the Models that you choose to use through the Services. With respect to the FluxDev Model or any similar Flux Models, you shall not: use, modify, copy, reproduce, create Derivatives of, or distribute any technology owned by Black Forest Labs for (a) any military purposes, (b) purposes of surveillance, including any research or development relating to surveillance, (c) biometric processing... use or access the Black Forest Lab's models or Outputs to create, train or improve (direct or indirectly) a similar or competing product or service. You shall not: use User Input or User Output to develop any product, service, or technology that competes with Ideogram and Ideogram AI Model or Ideogram API. If you choose to use Stability model through Replicate for which you may download the code or weights and you then redistribute, download, rehost, or in any other manner create copies of the Stability AI Materials or Derivative Works, you agree that you are required to engage with Stability directly to obtain a license directly from Stability AI before such redistribution.Excerpt from Replicate's Acceptable Use Policy
1. REGULATORY LANDSCAPE: The prohibition on biometric processing using Flux models engages the Illinois Biometric Information Privacy Act (BIPA), GDPR Article 9 (special categories of personal data), and other biometric data regulations applicable in various jurisdictions. Export control regulations (EAR, ITAR) are implicated by the prohibition on military and weapons-related use. The prohibition on surveillance applications engages EU AI Act provisions on prohibited AI practices, including remote biometric identification and social scoring systems. 2. GOVERNANCE EXPOSURE: High for organizations in competitive AI development, surveillance technology, or any application involving biometric data. The competitive product development prohibition (Flux and Ideogram) may be interpreted broadly and could affect organizations developing AI image generation or editing products. The Stability AI redistribution requirement for downloaded model weights creates a compliance checkpoint that must be operationalized before any fine-tuned Stability model is distributed. 3. JURISDICTION FLAGS: EU organizations operating under the AI Act should evaluate whether their use cases fall within prohibited or high-risk categories addressed by the third-party restrictions. Illinois BIPA applies to biometric data processing for Illinois residents regardless of where the organization is located. California, Texas, and Washington state biometric privacy laws may also be relevant. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations building commercial AI products on Replicate should review all applicable third-party model terms before product launch to ensure that their use case is not prohibited. The flow-down requirement (requiring customers to impose these restrictions on their own users) creates a due diligence and contract management obligation for platform developers. Failure to obtain a direct Stability AI license before redistributing fine-tuned models creates direct contractual breach exposure. 5. COMPLIANCE CONSIDERATIONS: Legal teams should establish a model-by-model compliance review process for any Replicate-hosted model used in commercial products, with particular attention to competitive product restrictions, biometric use prohibitions, and redistribution requirements. The requirement to flow down restrictions to downstream users should be operationalized in product terms of service and developer agreements.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These provisions impose use-case specific restrictions that go beyond Replicate's own acceptable use policy, including prohibitions on competitive product development using model outputs, surveillance applications, and biometric processing. Non-compliance by authorized users constitutes a breach by the customer under the agreement and triggers indemnification obligations.
Under these clauses, customers using Flux, Ideogram, or Stability AI models through Replicate are subject to additional provider-specific restrictions that prohibit, among other things, using model outputs to build competing services, processing biometric data, conducting surveillance activities, and redistributing model weights without a direct license from Stability AI. These restrictions must be incorporated into customers' own downstream product terms where …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Replicate.