Adobe Firefly or Midjourney?
Image generation from Creative Cloud against the stylistic pioneer. For commercial use, usage rights and what happens to your inputs count.
Last updated: · 79 listings · 0 verified
Not fully reviewed yet
We read both vendors’ privacy documents – DPA, sub-processors, server location, training, deletion periods, certifications – and compared them below with source and date. Export options and plan prices come from the pricing and help pages we checked; third-party figures are marked as such. What you won’t find here: a rating or a winner – for that, someone has to use both tools.
Do you represent one of these vendors? A review turns this page into the full comparison – here’s how.
 Adobe Firefly Documents reviewed |  Midjourney Documents reviewed | |
|---|---|---|
| Category | Images & Design for Slides | Images & Design for Slides |
| Pricing model | Free plan + paid plans | Paid |
| Into PowerPoint | not applicable | not applicable |
| Into Google Slides | not documented | not documented |
| Builds from a document | not applicable not applicable | not applicable not applicable |
| Starting paid plan | Firefly Standard: USD 9.99 per month, commitment not documented billing commitment for individual plans not stated; tax not mentioned Vendor page ↗ · checked 2026-10-16 | Basic: USD 10 per month, month-to-month Vendor help center ↗ · checked 2026-10-16 |
| Cheapest plan with PowerPoint output | not documented | not documented |
| Vendor headquarters | United States | United States |
| Self-hostable | no | no |
| Server location | Global (multiple regions) | not reviewed |
| Verified on | pending | pending |
Privacy documents compared
What the vendors commit to in their published documents – every answer with evidence. Not a certification and not legal advice; what counts is the contract you sign.
| Question | Adobe Firefly | Midjourney |
|---|---|---|
| Data processing agreement (DPA) available | yes Data Processing Addendum available for download; signed version via dpa.adobe.com for Adobe business customers only. Source · Oct 6, 2026 | no Neither the privacy policy nor the terms of use contain a DPA; no publicly available DPA could be found. Source · Sep 19, 2026 |
| Server location disclosed | yes Creative Cloud for enterprise on AWS in North America, Europe and Japan; storage region depends on organization/country code. Partner models (e.g. Google, Luma, Kling) partly in the USA/Asia. Source · Oct 6, 2026 | no No storage location stated; the policy only says data may be transferred to computers outside the user's own country. Source · Sep 19, 2026 |
| Sub-processors listed publicly | yes Public list with locations and a separate section for AI models (incl. OpenAI, Google, Black Forest Labs), as of September 28, 2026. Source · Oct 6, 2026 | no No public sub-processor list; the policy only mentions service providers and third parties in general terms. Source · Sep 19, 2026 |
| Training on customer data: default and opt-out, by plan | not used – every plan No training on Creative Cloud subscribers’ content; Enterprise inputs and outputs excluded. Source · Oct 6, 2026 | used – no opt-out Data used for training; no opt-out. Stealth Mode (Pro/Mega) only keeps images non-public. Source · Sep 19, 2026 |
| EU representative appointed (Art. 27 GDPR) | no No Art. 27 EU representative needed: Adobe Systems Software Ireland Ltd., Dublin, is the controller for users outside North America and Japan. Source · Oct 6, 2026 | unclear US company; no Art. 27 EU representative is named in the documents. Source · Sep 19, 2026 |
| Standard Contractual Clauses (SCCs) for transfers outside the EU | yes Certified under the EU-US, UK and Swiss-US Data Privacy Framework; additionally SCCs via the Adobe DPA (Adobe Ireland as initial recipient). Source · Oct 6, 2026 | yes The policy cites SCCs approved by the European Commission plus additional safeguards for EEA, Swiss and UK transfers. Source · Sep 19, 2026 |
| Deletion periods documented | yes Generation history kept until manually deleted, inference logs 90 days, feedback 6 months, cache max. 24 h. After contract end, deletion/return per the DPA. Source · Oct 6, 2026 | yes Account and associated data are deleted within 30 days of a deletion request; 7-day withdrawal period. Source · Sep 19, 2026 |
| Independent certification (ISO 27001, SOC 2) | yes Creative Cloud for enterprise: SOC 2 Type 2, ISO 27001, CSA STAR Level 2, FedRAMP Tailored. Firefly-specific scope and BSI C5 not verified. Source · Oct 6, 2026 | unclear No own certifications (ISO 27001, SOC 2, C5) published in the vendor's documents. Source · Sep 19, 2026 |
What else you need to check
Until the review is done, these are the questions that make the difference – the same for both tools.
| Data processing agreement | Available, and from which plan? Usually not on the free plan. |
|---|---|
| Server location | Stated or selectable? A promise is not a setting. |
| Training on your slides and prompts | Excluded by default, opt-out only, or not at all? |
| Export | Editable PPTX or Google Slides, or only PDF and a share link? |
| Pricing in detail | What does the plan you actually need cost – and what happens when you exceed it? |
| Billing | Company invoice with VAT, or credit card only? |
Full checklists: GDPR questions · Buying checklist
This comparison doesn’t replace your own evaluation for your use case. What a rating means is explained in our methodology; what it doesn’t mean, in the disclaimer. Found something wrong? Please report it – we correct it free of charge.