Use · Runware

Is it good enough?

Ownership levelPartialnone·limited·partial·substantial·fullAnalytical input D ยท 45.6/100

This page is a projection of the one entry record, the Doesn't fail you factor that Use covers. The full verdict is set by all four factors together, floor-weighted so the weakest caps the whole.

Which domain expands which factor
  • AssessUse & modify + Transparency
  • ImplementData control + Doesn't fail you
  • UseDoesn't fail you
  • SupportTransparency

Models served

Runware aggregates a large open-weight catalogue from Hugging Face across image, video, audio and language (reported on the order of 400K model variants), served through one unified API. It includes the FLUX / Stable Diffusion image family, where fast, low-cost generation is an original strength, alongside open language and multimodal checkpoints. The stated aim is to make the broad Hugging Face open-model catalogue addressable behind a single schema.

Inference features

The Sonic Inference Engine is a custom hardware and software stack built for fast, low-cost inference across the catalogue, with image and video generation as a standout capability. Per-model higher-level behaviours (tool or function calling, structured JSON output, streaming) follow each served model's own capabilities and were not individually verified on Runware's endpoints this session, so treat per-feature support as "inherited from the model, confirm per model."

How this scores

The ownership factor this domain covers, drawn from the one entry record.

3

Doesn't fail youDoes it stay up and stay secure?

Moderate

A USD 50M Series A and advertised enterprise custom SLAs indicate scale, but there is no public uptime SLA, status page or independent attestation, so reliability is asserted, not observable.

How this scores (AOI sub-dimensions)
Reliability2/5whether it stays up, with an SLA and status historyA USD 50M Series A (December 2025) and advertised enterprise custom SLAs indicate production scale, but no public uptime SLA or status page was found, so availability is asserted rather than independently observable.
Security3/5the controls protecting your traffic and dataThe Trust page carries SOC 2 / ISO 27001 badges and a vulnerability-disclosure channel, and models run on Runware-operated hardware.
Compliance1/5which independent certifications and attestations it holdsSOC 2 and ISO 27001 appear as badges only, with no readable report, and no public DPA was located (both URLs 404).
What this means for adoptionYou partly own workloads here, and the split is sharp. The models are open weights, so use, modification and exit stay fully in your hands, and self-hosting the same checkpoints avoids the hosted data terms entirely. But on a hosted basis the binding documents, now read, are weak: the Terms grant Runware a worldwide, perpetual, transferable licence over your inputs and outputs and reference storing training data, the Privacy Policy sets generic retention with no auto-purge and no no-training commitment, and no DPA or readable attestation was reachable. That is the opposite of the marketed 'your data stays yours, never trained on'. Use Runware as a fast, low-cost open-model gateway for non-sensitive work, but self-host the same open checkpoints, or get a negotiated DPA that overrides the standard licence, before putting proprietary or regulated data through it.

Sources

The same evidence records as the entry sheet. Read means the text was verified; unverified means it is known to exist but not yet read.

Terms of serviceread2026-07-26
Runware Terms of Service (Runware Ltd, UK; read 2026-07-26): the customer owns the Generations (outputs) but grants Runware a worldwide, perpetual, transferable licence over inputs and outputs; the Terms reference "storing training data and models per our pricing schedule"; UK governing law and London arbitration; termination at Runware's sole discretion; data deleted on request.
Privacy Policyread2026-07-26
Runware Privacy Policy (Runware Ltd, UK; read 2026-07-26): generic retention ("as long as necessary" / account life) with no auto-purge or opt-in-storage clause; training use not addressed; sub-processors named are only Stripe and Google Analytics; GDPR/UK GDPR referenced without naming SCCs or the EU-US Data Privacy Framework.
Securityunverified2026-07-26
Runware Trust page (read 2026-07-26, partial): "Data residency EU & US" badge with no contractual region-pinning document located; SOC 2 and ISO 27001 shown as badges only with no readable certificate or report; a separate security-disclosure page for vulnerability reporting.
Vendor announcementread2026-07-26
Runware pricing page (read 2026-07-26): pay-as-you-go usage-based pricing with representative rates; enterprise plans add dedicated capacity and custom terms.
Vendor announcementunverified2026-07-26
Runware website ("One API for all AI"): a unified API over a large catalogue of open-weight Hugging Face models run on Runware's own Sonic Inference Engine; low usage-based pricing; markets a US HQ and states data belongs to the customer (marketing framing not supported by the binding Terms/Privacy read this session).
Third-party analysisread2026-07-26
Independent press (SiliconANGLE and others, Dec 2025): Runware raised a USD 50M Series A (Speedinvest and others) to build "one API for all AI"; markets a San Francisco HQ with operations in London and 10+ countries (the binding legal entity is Runware Ltd, UK); inference pods in the US and central Europe; aims to make the broad Hugging Face open-model catalogue addressable behind one schema.