Turn this comparison into procurement-ready diligence
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
SIDE-BY-SIDE · 2 OF 3
Two platforms.
Same questions.
Dify
WORKFLOW & AUTOMATION
PROMPT
Dify's privacy policy does not explicitly address ownership of prompts or inputs submitted to AI workflows. The policy covers personal data collection but not IP rights.
OUTPUT
Dify's privacy policy is silent on ownership of AI workflow outputs. No explicit IP assignment or licensing terms for outputs are documented in publicly available policies.
TRAINING
Only aggregated/anonymized statistics collected for service performance. No explicit training on customer data.
COMMERCIAL
Dify offers a cloud and self-hosted (open source) product. Commercial use terms are not clearly specified in the publicly available privacy policy.
215 verified findings across the displayed surfaces.
Napkin AI
WORKFLOW & AUTOMATION
PROMPT
Under review.
OUTPUT
Under review.
TRAINING
Under review.
COMMERCIAL
Under review.
130 verified findings across the displayed surfaces.
Empty Comparison Slot
AIRIN SUMMARY
Napkin AI has moderate defaults; Dify carries the most permissive license terms of the set.FOR ENTERPRISE: DIFY NOT RECOMMENDED · NAPKIN AI ENTERPRISE TIER ACCEPTABLE
↳ Compliance surfaces · side by side
⚡ INTERACTIVE RISK COMPARISON HEATMAP
| RISK SURFACE | DIFY | NAPKIN AI |
|---|---|---|
| PPrompt Ownership | ||
| OOutput Ownership | ||
| TModel Training | ||
| CCommercial Use | ||
| DData Privacy | ||
| $Tier Differences |
* Click any cell in the heatmap matrix to scroll directly to its verbatim policy citations below.
📂 Intellectual Property & Model Training
P
SURFACE 01
Prompt Ownership
Dify
MEDHIGH
Dify's privacy policy does not explicitly address ownership of prompts or inputs submitted to AI workflows. The policy covers personal data collection but not IP rights.
“ You retain ownership of your Customer Content, including Customer Content from your accounts with Third-Party Services that are transmitted, processed, and/or stored in the Service. By transmitting, processing, and/or storing Customer Content in the Service, you hereby grant Dif…”
Napkin AI
LOWMED
Under review.
“ User-generated content , such as input text, visuals, generated text, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata.”
O
SURFACE 02
Output Ownership
Dify
HIGH
Dify's privacy policy is silent on ownership of AI workflow outputs. No explicit IP assignment or licensing terms for outputs are documented in publicly available policies.
No citation available
Napkin AI
MED
Under review.
No citation available
T
SURFACE 03
Model Training
Dify
MEDHIGH
Only aggregated/anonymized statistics collected for service performance. No explicit training on customer data.
“ If you use a service where you select your own AI model provider and supply your own API key, your AI interaction data is transmitted directly to your chosen provider for processing. Whether such data is used for model training depends on the agreement between you and that provi…”
Napkin AI
MED⚠ CAUTIONMED
Under review.
“ Account data (name, email, job title, company); Content data (diagrams, visuals, documents created or uploaded by users); Usage data (feature interactions, session identifiers) – processed in identifiable form solely for service delivery; only de-identified and aggregated deriva…”
C
SURFACE 04
Commercial Use
Dify
HIGH
Dify offers a cloud and self-hosted (open source) product. Commercial use terms are not clearly specified in the publicly available privacy policy.
No citation available
Napkin AI
MED
Under review.
No citation available
📂 Data Privacy & Governance
D
SURFACE 05
Data Privacy
Dify
MED⚠ CAUTIONHIGH
—
“ For on-premise deployments, we do not collect the above information through the product itself, but may receive basic connection and version data through license verification and product update services. When you visit our websites, documentation, or support channels, this secti…”
Napkin AI
MEDMED
—
“ 2.4 This DPA shall remain in effect for the duration of the Agreement and shall terminate automatically upon expiry or termination of the Agreement, subject to the survival provisions set out in Section 11.”
$
SURFACE 06
Tier Differences
Dify
LOWHIGH
—
“ 11. “Fees” mean the fees applicable to your use of the Service in accordance with the applicable package as included in our pricing notice included in the Service or on Dify’s website or, if applicable, as set forth in a Dify order form.”
Napkin AI
MED
—
No citation available