Turn this comparison into procurement-ready diligence
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
SIDE-BY-SIDE · 2 OF 3
Two platforms.
Same questions.
Dify
WORKFLOW & AUTOMATION
PROMPT
Dify's privacy policy does not explicitly address ownership of prompts or inputs submitted to AI workflows. The policy covers personal data collection but not IP rights.
OUTPUT
Dify's privacy policy is silent on ownership of AI workflow outputs. No explicit IP assignment or licensing terms for outputs are documented in publicly available policies.
TRAINING
Only aggregated/anonymized statistics collected for service performance. No explicit training on customer data.
COMMERCIAL
Dify offers a cloud and self-hosted (open source) product. Commercial use terms are not clearly specified in the publicly available privacy policy.
400 verified findings across the displayed surfaces.
Spellbook
ENTERPRISE SEARCH / PRODUCTIVITY
PROMPT
Law firm customers own all contract documents and legal inputs. Spellbook (Rally Legal) processes documents for AI contract review and drafting.
OUTPUT
Customers own all AI-generated contract language, suggestions, and redlines. Spellbook does not assert IP over outputs.
TRAINING
Unknown — cached spellbook-ai_tos.txt contains policy text in a single HTML line (line 362) exceeding the 25,000-token Read tool limit. Core IP and data use sections (1–12) are inaccessible. Sections 13.7–13.13 (dispute resolution, governing law: New York) were readable. Privacy file has same structure issue.
COMMERCIAL
Commercial use is fully permitted for legal practice and enterprise contract management.
177 verified findings across the displayed surfaces.
Empty Comparison Slot
AIRIN SUMMARY
Dify carries highly permissive license terms; Spellbook carries highly permissive license terms.FOR ENTERPRISE: DIFY NOT RECOMMENDED · SPELLBOOK NOT RECOMMENDED
↳ Compliance surfaces · side by side
⚡ INTERACTIVE RISK COMPARISON HEATMAP
| RISK SURFACE | DIFY | SPELLBOOK |
|---|---|---|
| PPrompt Ownership | ||
| OOutput Ownership | ||
| TModel Training | ||
| CCommercial Use | ||
| DData Privacy | ||
| $Tier Differences |
* Click any cell in the heatmap matrix to scroll directly to its verbatim policy citations below.
📂 Intellectual Property & Model Training
P
SURFACE 01
Prompt Ownership
Dify
MED⚠ CAUTIONHIGH
Dify's privacy policy does not explicitly address ownership of prompts or inputs submitted to AI workflows. The policy covers personal data collection but not IP rights.
“ 5.1 The Service is made available on a limited access basis, and no ownership rights are conveyed to you. Notwithstanding anything to the contrary in these Terms, we and our licensors have and retain all right, title, and interest, including all intellectual property rights, in…”
Spellbook
MED⚠ CAUTIONHIGH
Law firm customers own all contract documents and legal inputs. Spellbook (Rally Legal) processes documents for AI contract review and drafting.
“ (b) This Agreement does not grant Customer any intellectual property license or rights in or to the Spellbook AI Platform or any of its components, except to the limited extent that such rights are necessary for Customer's use of the Spellbook AI Platform as specifically au…”
O
SURFACE 02
Output Ownership
Dify
MEDHIGH
Dify's privacy policy is silent on ownership of AI workflow outputs. No explicit IP assignment or licensing terms for outputs are documented in publicly available policies.
“ You retain ownership of your Customer Content, including Customer Content from your accounts with Third-Party Services that are transmitted, processed, and/or stored in the Service. By transmitting, processing, and/or storing Customer Content in the Service, you hereby grant Dif…”
Spellbook
MEDHIGH
Customers own all AI-generated contract language, suggestions, and redlines. Spellbook does not assert IP over outputs.
“ 6.2. Feedback. ”
T
SURFACE 03
Model Training
Dify
MED⚠ CAUTIONHIGH
Only aggregated/anonymized statistics collected for service performance. No explicit training on customer data.
“Operate, maintain and improve our internal operations, systems, Sites, and Products”
The policy does not explicitly address whether user content is used for AI/ML model training. 'Improve Products' could encompass training use, but this is not confirmed or denied.
Spellbook
MED⚠ CAUTIONHIGH
Unknown — cached spellbook-ai_tos.txt contains policy text in a single HTML line (line 362) exceeding the 25,000-token Read tool limit. Core IP and data use sections (1–12) are inaccessible. Sections 13.7–13.13 (dispute resolution, governing law: New York) were readable. Privacy file has same structure issue.
“ (iv) No Third Party LLM Model Training. Customer Data transmitted to Third Party LLMs via the Spellbook AI Platform will not be used to train, improve, or develop the AI models of those Third Party LLMs. Accordingly, Spellbook will ensure that all Third Party LLMs are prohibited…”
C
SURFACE 04
Commercial Use
Dify
MED⚠ CAUTIONHIGH
Dify offers a cloud and self-hosted (open source) product. Commercial use terms are not clearly specified in the publicly available privacy policy.
“ 2.1.1 LangGenius (and its Affiliates, as applicable) will make the Services available to you, including those described in the applicable Services Terms 2.1.2 You may use your Dify.AI Account and the Service only (i) for lawful purposes; and (ii) in accordance with these Terms…”
Spellbook
MED⚠ CAUTIONHIGH
Commercial use is fully permitted for legal practice and enterprise contract management.
“ (i) reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code or underlying algorithms of the Spellbook AI Platform;”
📂 Data Privacy & Governance
D
SURFACE 05
Data Privacy
Dify
HIGH⚠ CAUTIONHIGH
—
“We use this information to reshare content created through the use of the Service. The processing is necessary for our legitimate interests (to develop our service and inform our marketing strategy).”
Information from social network interactions can be reshared by LangGenius for marketing strategy purposes under a 'legitimate interests' basis without explicit user consent.
Spellbook
MED⚠ CAUTIONHIGH
—
“ (a) Spellbook collects and uses categories of Personal Data from the Customer and its Users that are required to administer Customer's Spellbook account, including payment records and credit cards. Otherwise, Spellbook only collects and uses Personal Data as necessary to pr…”
$
SURFACE 06
Tier Differences
Dify
MED⚠ CAUTIONHIGH
—
“Dify is free for students and educators.”
No terms or conditions are specified for the student/educator free tier—it is unclear whether it matches the Sandbox tier, has separate restrictions, or requires verification. Users cannot assess their rights or obligations from this statement alone.
Spellbook
MED⚠ CAUTIONHIGH
—
“ (b) Spellbook reserves the right to discontinue or modify its provision of any Beta Features to the Customer at any time, with or without notice;”