Graded F on resilience. In Vannus's assessment it has not disclosed which model it runs — a thin layer over someone else's foundation model.
Maker of the FLUX family of image and multimodal generation and editing models, offered both as a hosted API and as downloadable open weights for self-hosting under non-commercial or paid commercial licences. DUAL-ENTITY STRUCTURE, both vendor-published: the German imprint names 'BFL GmbH', Ingeborg-Krummer-Schroth-Straße 18, 79106 Freiburg im Breisgau, Germany (Amtsgericht München, HRB 291820), w
Not disclosed. Black Forest Labs (FLUX) does not publish which model it runs, so this criterion is excluded and the grade rests on what we could verify. We say so rather than guess.
This is a separate question from the grade above. The grade measures resilience — whether the tool endures and whether you could leave it. This measures who can compel your data. A tool can score modestly on one and strongly on the other, and many do.
The vendor's published or catalog-recorded posture — the concrete facts this grade is built from. A full audit verifies each against the vendor's current documentation.
Vannus grades Black Forest Labs (FLUX) against nine dimensions of trust — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →