Adobe Firefly Enterprise — privacy & data policy

Provider: Adobe. PromptPrivacy score: 53/100. Last verified November 01, 2026.

What happens to your data?

Adobe collects account details, system activity, and cloud-stored content to provide and maintain its services. Cloud content is subject to automated scanning and occasional human review for safety, legal compliance, and abuse prevention. Adobe also shares user information with corporate affiliates, marketing and advertising partners, and service vendors, while operating as a data processor when serving enterprise accounts.

Does it train on your data?

Not specified. The provided privacy policy does not state whether user content, prompts, or generated outputs are used to train AI models for Adobe Firefly Enterprise.

Can you opt out?

Not specified. The provided policy does not discuss AI model training or provide an opt-out mechanism for it.

Data retention

Adobe retains most personal data for as long as a user maintains an active account. Certain collected information is deleted when there is no longer a business reason to keep it, while records related to contracts and business transactions are retained for ten years following the last interaction.

Encryption & security

Adobe implements administrative, technical, and physical controls where deemed appropriate, including general encryption and two-step verification. The policy does not specify exact encryption standards (e.g., AES-256, TLS 1.3) or industry security certifications.

Is it safe for work?

Conditionally safe for work. The policy establishes that Adobe acts as a data processor following enterprise customer instructions, but this generic text does not articulate specific enterprise AI training exclusions or compliance certifications. Organizations should execute dedicated enterprise contracts with explicit data protection addenda governing Firefly Enterprise use.

Source policy: https://www.adobe.com/privacy/policy.html