Tome AI Vendor Risk Profile
AI-powered presentation and storytelling platform that generates slide decks, documents, and web pages from prompts. Uses GPT models for content generation and layout design.
Risk overview
Risk score: 54/100
Risk tier: Elevated
Safety rating: 46/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: Apr 19, 2026 Aging
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 72/100 |
| IP Exposure | 40/100 |
| Jurisdiction | 13/100 |
| Security | 68/100 |
| Regulatory Compliance | 60/100 |
| Transparency | 80/100 |
| Business Stability | 55/100 |
| Dependency Chain | 44/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Acceptable
Tome is an AI presentation builder that pivoted toward sales-focused micro-sites and account-based AI content. The product has evolved meaningfully over the last 18 months, which creates some roadmap uncertainty. Compliance documentation is reasonable but competitive with Beautiful.ai rather than with Microsoft or Google.
Bottom line: Interesting early-stage presentation tool; not yet the right fit for enterprise-wide standardization.
Strengths
- AI-first design generates useful starting drafts faster than traditional tools
- SOC 2 Type II with GDPR alignment
- Clear user-ownership language on generated content
Concerns
- Product has pivoted significantly since launch, adding roadmap uncertainty
- Compliance stack less comprehensive than Microsoft or Google presentation tooling
- Category is rapidly consolidating; vendor longevity worth monitoring
Best for
- Sales and BD teams building account-specific pitch collateral
- Startups needing polished investor and customer decks quickly
- Marketing teams experimenting with interactive content formats beyond slide decks
Avoid if
- You need a multi-year stable presentation platform for enterprise-wide rollout
- Your compliance team requires FedRAMP or HIPAA BAA certification
- You need PowerPoint-native round-tripping for executive workflows
Citations
- Data Handling — Trains On User Data
Tome does not use Customer Content to train third-party foundation models. AI features generate outputs only in response to user prompts.
- Governance — Privacy Policy Url
Tome Privacy Policy describes collection and processing of personal data.
- Governance — Tos Url
Tome Terms of Service govern use of the platform.
- Ip Profiles — User Owns Outputs
You retain all ownership rights in your Tome documents and any AI-generated content created within them.
- Jurisdiction Profiles — Incorporation Country
Magical Tome, Inc. is a Delaware corporation headquartered in San Francisco, California.
- Security Compliance — Gdpr Compliant
Tome complies with GDPR and provides a DPA for customers with European data subjects.
- Security Compliance — Soc2 Type2
Tome maintains SOC 2 Type II compliance covering security and confidentiality controls.