Turn this comparison into procurement-ready diligence
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
SIDE-BY-SIDE · 2 OF 3
Two platforms.
Same questions.
Dify
WORKFLOW & AUTOMATION
PROMPT
Dify's privacy policy does not explicitly address ownership of prompts or inputs submitted to AI workflows. The policy covers personal data collection but not IP rights.
OUTPUT
Dify's privacy policy is silent on ownership of AI workflow outputs. No explicit IP assignment or licensing terms for outputs are documented in publicly available policies.
TRAINING
Only aggregated/anonymized statistics collected for service performance. No explicit training on customer data.
COMMERCIAL
Dify offers a cloud and self-hosted (open source) product. Commercial use terms are not clearly specified in the publicly available privacy policy.
400 verified findings across the displayed surfaces.
Gumloop
WORKFLOW & AUTOMATION
PROMPT
Users own all prompts and data pipeline layouts.
OUTPUT
Data outputs generated belong 100% to the user.
TRAINING
Gumloop does NOT train on user prompts, spreadsheets, or pipeline indices. Enterprise accounts deploy via custom endpoints.
COMMERCIAL
Commercial use of data workflows is fully permitted.
361 verified findings across the displayed surfaces.
Empty Comparison Slot
AIRIN SUMMARY
Gumloop has moderate defaults; Dify carries the most permissive license terms of the set.FOR ENTERPRISE: DIFY NOT RECOMMENDED · GUMLOOP ENTERPRISE TIER ACCEPTABLE
↳ Compliance surfaces · side by side
⚡ INTERACTIVE RISK COMPARISON HEATMAP
| RISK SURFACE | DIFY | GUMLOOP |
|---|---|---|
| PPrompt Ownership | ||
| OOutput Ownership | ||
| TModel Training | ||
| CCommercial Use | ||
| DData Privacy | ||
| $Tier Differences |
* Click any cell in the heatmap matrix to scroll directly to its verbatim policy citations below.
📂 Intellectual Property & Model Training
P
SURFACE 01
Prompt Ownership
Dify
MED⚠ CAUTIONHIGH
Dify's privacy policy does not explicitly address ownership of prompts or inputs submitted to AI workflows. The policy covers personal data collection but not IP rights.
“ 5.1 The Service is made available on a limited access basis, and no ownership rights are conveyed to you. Notwithstanding anything to the contrary in these Terms, we and our licensors have and retain all right, title, and interest, including all intellectual property rights, in…”
Gumloop
MEDMED
Users own all prompts and data pipeline layouts.
“ 7. Content ”
O
SURFACE 02
Output Ownership
Dify
MEDHIGH
Dify's privacy policy is silent on ownership of AI workflow outputs. No explicit IP assignment or licensing terms for outputs are documented in publicly available policies.
“ You retain ownership of your Customer Content, including Customer Content from your accounts with Third-Party Services that are transmitted, processed, and/or stored in the Service. By transmitting, processing, and/or storing Customer Content in the Service, you hereby grant Dif…”
Gumloop
HIGHMED
Data outputs generated belong 100% to the user.
“ By posting Content on or through Service, You represent and warrant that: (i) Content is yours (you own it) and/or you have the right to use it and the right to grant us the rights and license as provided in these Terms, and (ii) that the posting of your Content on or throug…”
T
SURFACE 03
Model Training
Dify
MED⚠ CAUTIONHIGH
Only aggregated/anonymized statistics collected for service performance. No explicit training on customer data.
“Operate, maintain and improve our internal operations, systems, Sites, and Products”
The policy does not explicitly address whether user content is used for AI/ML model training. 'Improve Products' could encompass training use, but this is not confirmed or denied.
Gumloop
MED⚠ CAUTIONMED
Gumloop does NOT train on user prompts, spreadsheets, or pipeline indices. Enterprise accounts deploy via custom endpoints.
“ (m) we do not use Google Workspace APIs to develop, improve, or train generalized AI and/or ML models. Data ”
C
SURFACE 04
Commercial Use
Dify
MED⚠ CAUTIONHIGH
Dify offers a cloud and self-hosted (open source) product. Commercial use terms are not clearly specified in the publicly available privacy policy.
“ 2.1.1 LangGenius (and its Affiliates, as applicable) will make the Services available to you, including those described in the applicable Services Terms 2.1.2 You may use your Dify.AI Account and the Service only (i) for lawful purposes; and (ii) in accordance with these Terms…”
Gumloop
MED⚠ CAUTIONMED
Commercial use of data workflows is fully permitted.
“ (iii) The business or commercial purpose for collecting or selling your personal information. ”
📂 Data Privacy & Governance
D
SURFACE 05
Data Privacy
Dify
HIGH⚠ CAUTIONHIGH
—
“We use this information to reshare content created through the use of the Service. The processing is necessary for our legitimate interests (to develop our service and inform our marketing strategy).”
Information from social network interactions can be reshared by LangGenius for marketing strategy purposes under a 'legitimate interests' basis without explicit user consent.
Gumloop
HIGHMED
—
“ we sold it to. If we have not sold your personal information, we will inform you of that fact. ”
$
SURFACE 06
Tier Differences
Dify
MED⚠ CAUTIONHIGH
—
“Dify is free for students and educators.”
No terms or conditions are specified for the student/educator free tier—it is unclear whether it matches the Sandbox tier, has separate restrictions, or requires verification. Users cannot assess their rights or obligations from this statement alone.
Gumloop
MEDMED
—
“ Some parts of Service are billed on a subscription basis (“ Subscription(s) ”). You will be billed in advance on a recurring and periodic basis (“ Billing Cycle ”). Billing cycles are set either on a monthly or annual basis, depending on the type of subscription plan you sel…”