Image & design

Adobe Firefly

Provider: Adobe Inc. · Based in: Adobe Inc., USA · Provider website

Plans
4
Sources
11
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 4 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
mixed: all 4 plans
Training on inputs
opt-out available: Firefly Free, Firefly Standard / Pro / Pro Plus / Premiumno: Firefly Pro / Pro Plus / Premium for Teams, Firefly Services / Firefly Enterprise / Creative Cloud for enterprise
DPA
not publicly documented: Firefly Free, Firefly Standard / Pro / Pro Plus / Premium, Firefly Pro / Pro Plus / Premium for Teamsyes: Firefly Services / Firefly Enterprise / Creative Cloud for enterprise
Provider
Adobe Inc. (named as 'Issuer' according to the Content Credentials documentation)
Based in
Adobe Inc., USA; controller for users outside North America and Japan: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland (privacy policy, as of 2025-10-24)

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compare Adobe Firefly

Compare with another tool

Compared plan by plan with other tools in the category Image & design:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
Firefly Free: free of charge
yes

Contract and data use

differs by plan
not publicly documented
differs by plan
opt-out available
Privacy policy: data of active accounts…

Hosting and sharing

mixed
list available

Evidence

differs by plan
7 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

Privacy policy (as of 2025-10-24): 'Adobe complies with the EU-U.S., UK Extension to the EU-U.S., and Swiss-U.S. Data Privacy Framework'; transfers take place via, among other things, 'data transfer agreements'. Page on EU data transfers: for business customers, Adobe relies on standard contractual clauses and adequacy decisions; intra-group SCCs; DPA for business customers with Enterprise Licensing available on request.

Sources:

Certifications (as stated by the provider)

Compliance list, entry 'Adobe Creative Cloud for enterprise' (according to a footnote, Firefly is included): SOC 2 Type 2 and SOC 3 (Security, Availability, Confidentiality), ISO 9001:2015, ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, ISO 22301:2019, FedRAMP Tailored, CSA STAR Level 2. ISO 27701 and ISO 42001 are not listed for Creative Cloud. There is no separate information for individual and team plans.

Sources:

AI Act

Functions: Text-to-image, Generative Fill/Expand, Generate video, Generate speech, Translate Video/Audio, Generative Recolor, Text Effects (Help Center: Generative credits overview, credits FAQ).

Provider’s statement: Content Credentials: the Help Center states that 'Content Credentials that are automatically applied to assets generated with Adobe Firefly' contain the following information: issuer Adobe Inc., date, app used, 'AI tool used', actions ('Created' or 'Other edits'), and, for text-to-image on the Firefly website, an output thumbnail. Adobe describes itself as a 'founding collaborator of the Content Authenticity Initiative'. Statement on the EU AI Act itself in the retrieved pages: not publicly documented. Gen AI approach page (2026-10-14): Adobe mentions 'Content Credentials that indicate content is created with partner models'.

Classification (for review, not legal advice): To be reviewed: customer is typically a deployer (Art. 3 No. 4). Content Credentials are a machine-readability measure of the provider; whether it satisfies Art. 50(2), and whether deployers must disclose deepfakes under Art. 50(4), is to be reviewed. Not legal advice.

Sources:

Current notes 2026

The sub-processor list (as of 2026-09-28) names eleven external model partners for Firefly, including OpenAI, Google, Black Forest Labs, Kuaishou (Kling), BytePlus (Seedance) and Humain (Saudi Arabia). It also states: 'Customer content is not used to train Adobe AI models or partner generative AI models.'

Open points of the review

  • Help Center pages (helpx.adobe.com) returned error 403 on 2026-10-14 and 2026-10-18 (curl with a browser user agent and WebFetch); a check in a browser was not possible on 2026-10-18 (no browser tab available). The information on Content Credentials, the content analysis opt-out and credit pooling comes from the check of 2026-10-07; its geprueftAm is unchanged.
  • Firefly product description (helpx.adobe.com/legal/product-descriptions/adobe-firefly.html): 403, not read; any information on retention and processing location therefore not checked.
  • DPA text itself not read: dpa.adobe.com redirects to the login without signing in with an Adobe ID.
  • Retention period of prompts/outputs specifically for Firefly: neither in the privacy policy nor on the Gen AI approach page; whether the product description (not retrievable) states it is open.

Frequently asked questions

Where does Adobe Firefly store data?

mixed (plans: Firefly Free (personal account), Firefly Standard / Pro / Pro Plus / Premium (individual plans), Firefly Pro / Pro Plus / Premium for Teams (business profile), Firefly Services / Firefly Enterprise / Creative Cloud for enterprise). According to the provider, as of 18 Oct 2026.

Is there a DPA for Adobe Firefly?

not publicly documented in: Firefly Free (personal account), Firefly Standard / Pro / Pro Plus / Premium (individual plans), Firefly Pro / Pro Plus / Premium for Teams (business profile); yes in: Firefly Services / Firefly Enterprise / Creative Cloud for enterprise. Based on our research, as of 18 Oct 2026.

Does Adobe Firefly use inputs for AI training?

opt-out available in: Firefly Free (personal account), Firefly Standard / Pro / Pro Plus / Premium (individual plans); no in: Firefly Pro / Pro Plus / Premium for Teams (business profile), Firefly Services / Firefly Enterprise / Creative Cloud for enterprise. According to the provider, as of 18 Oct 2026.

Where is the provider based?

Adobe Inc., USA; controller for users outside North America and Japan: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland (privacy policy, as of 2025-10-24). According to the provider, as of 18 Oct 2026.

All sources

  1. 01Adobe Firefly FAQDocumentation · retrieved 7 Oct 2026
  2. 02Content analysis FAQ for Creative Cloud and Document CloudDocumentation · retrieved 7 Oct 2026
  3. 03Generative credits FAQDocumentation · retrieved 7 Oct 2026
  4. 04Generative credits FAQ (Teams/Enterprise, Pooling)Documentation · retrieved 7 Oct 2026
  5. 05Content Credentials overview (Firefly)Documentation · retrieved 7 Oct 2026
  6. 06Adobe Privacy Policy (as of 2025-10-24)Privacy notice · retrieved 14 Oct 2026
  7. 07Adobe Firefly plans and pricing (DE) (German)Pricing page · retrieved 18 Oct 2026
  8. 08Adobe Sub-Processors (as of 2026-09-28)Sub-processor list · retrieved 14 Oct 2026
  9. 09Cross-border data transfers (EU)Privacy documentation · retrieved 18 Oct 2026
  10. 10Adobe Compliance ListTrust Center · retrieved 14 Oct 2026
  11. 11Adobe Firefly: Approach to generative AIDocumentation · retrieved 18 Oct 2026

More tools in Image & design with an EU hosting option (in at least one plan)

  • ElevenLabs · Based in: Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA
  • Figma AI · Based in: Figma, Inc., 760 Market St, Floor 10, San Francisco, CA, USA

All tools in Image & design · Tools with an EU hosting option

Further reading

All tools in the category: Image & design. Figures across all tools: Data report.