When you submit content to Stability AI's platform, such as prompts or uploaded images, you grant the company a license to use that content. The exact scope of this license, including whether it covers use for model training, is a key operational question this provision raises.
This analysis describes what Stability AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The license granted over user-submitted content may extend beyond what is necessary to operate the service, and may interact with data subject rights under GDPR if submitted content contains personal data.
Interpretive note: The full text of this provision was not available in the document as provided; the analysis is based on standard patterns for AI platform content license clauses and the document's general subject matter. Exact clause language and scope could not be confirmed.
Users who submit prompts, images, or other content to Stability AI's services grant the company a license over that content. If submitted content includes personal data, users may retain rights under GDPR or CCPA to request deletion or object to processing, but the practical scope of those rights in this context depends on how the license is structured and whether applicable law limits its reach.
How other platforms handle this
By submitting, posting or displaying Content on or through the Services, you give Miro a worldwide, non-exclusive, royalty-free license (with the right to sublicense) to use, copy, reproduce, process, adapt, modify, publish, transmit, display and distribute such Content in any and all media or distr...
By submitting content to any TransUnion website or service, you grant TransUnion a royalty-free, worldwide, perpetual, irrevocable, non-exclusive license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, and display such content in any media.
You consent to our use of Your Content to provide the Service Offerings to you and any End Users. We may disclose Your Content to provide the Service Offerings to you or any End Users or to comply with any request of a governmental or regulatory body (including subpoenas or court orders).
Monitoring
Stability AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
REGULATORY LANDSCAPE: A content license clause that covers user-submitted inputs engages GDPR Articles 5, 6, and 17 regarding lawful basis for processing, purpose limitation, and the right to erasure. The UK ICO and EU data protection authorities are the primary enforcement bodies. Where user inputs constitute personal data, the assertion of a broad license may interact with the requirement to identify a lawful basis for each processing purpose, including any use for model training. GOVERNANCE EXPOSURE: Medium. The primary exposure arises from uncertainty about whether the license extends to AI model training and whether personal data embedded in user submissions is processed in a manner consistent with GDPR obligations. No specific enforcement actions are cited here as the clause text was not fully available for review. JURISDICTION FLAGS: EU and UK users have the most significant exposure given GDPR and UK GDPR data subject rights. California residents may have rights under CCPA regarding the sale or sharing of personal information. The enforceability of a broad content license against EU consumers may be limited by mandatory consumer protection rules. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers and API integrators should assess whether a Data Processing Agreement is required under GDPR Article 28 for any user data submitted through their downstream applications. The license clause may also affect IP ownership of outputs derived from submitted content, which is a due diligence trigger for procurement teams. COMPLIANCE CONSIDERATIONS: Compliance teams should map what categories of data users are likely to submit, assess whether Stability AI's privacy policy identifies an adequate lawful basis for each processing purpose, and determine whether the license clause is compatible with data minimization and purpose limitation obligations. Where the platform is deployed in an enterprise context involving employee data, additional consent or legitimate interest assessments may be required.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The license granted over user-submitted content may extend beyond what is necessary to operate the service, and may interact with data subject rights under GDPR if submitted content contains personal data.
Users who submit prompts, images, or other content to Stability AI's services grant the company a license over that content. If submitted content includes personal data, users may retain rights under GDPR or CCPA to request deletion or object to processing, but the practical scope of those rights in this context depends on how the license is structured and whether …
ConductAtlas has identified this type of provision across 15 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stability AI.