AI Vendor Directory · Image, video & audio generation
Does Descript train on your data?
No — does not train on your data by default. Vendor-stated default: no. Security page: "If you choose to share your transcription information with Descript, we use it to help improve the quality of our service. This option is disabled by default." Help center adds: "Current AI models in production use no Descript user data" and R&D models use only opted-in users' data; Descript states subprocessors (e.g., OpenAI) are contractually barred from training on customer data. Applies account-wide (no separate business-tier default). Voice cloning requires verbal consent from the voice owner.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Descript?
Audio/video editing suite with transcription, AI voices (Overdub-style cloning), and AI edit features; uses Rev, OpenAI, and others as subprocessors. SMBs use it for podcasts, demos, and video content.
Key facts
- Vendor: Descript, Inc. — https://www.descript.com
- Trains on customer data by default: no
- Source for the training answer: https://www.descript.com/security
- Last verified: 2026-07-29
What certifications does Descript hold?
- SOC 2 Type II
- GDPR (self-attested)
- CCPA (self-attested)
Security, DPA, and subprocessor links
- Security / trust page: https://www.descript.com/security
- Subprocessor list: https://www.descript.com/security
What is your EU AI Act role when you build on Descript?
Customers are deployers; Article 50 disclosure duties can apply when publishing cloned-voice or AI-altered audio/video of real people. Internal-only editing use is low transparency-risk.
What to record in your AI registry
- Provider: Descript, Inc.
- Model type: third party api
- Data typically flowing to the vendor: meeting/podcast recordings and transcripts, voice recordings for cloning (consent-gated), video content
Sources
- https://www.descript.com/security
- https://www.descript.com/ethics
- https://help.descript.com/hc/en-us/articles/10255866490125-Account-data-and-privacy
- https://descript.securitypal.com/
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Descript train AI models on your data?
No — does not train on your data by default. Vendor-stated default: no. Security page: "If you choose to share your transcription information with Descript, we use it to help improve the quality of our service. This option is disabled by default." Help center adds: "Current AI models in production use no Descript user data" and R&D models use only opted-in users' data; Descript states subprocessors (e.g., OpenAI) are contractually barred from training on customer data. Applies account-wide (no separate business-tier default). Voice cloning requires verbal consent from the voice owner.
What certifications does Descript hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II; GDPR (self-attested); CCPA (self-attested).
What is your EU AI Act role when you build on Descript?
Customers are deployers; Article 50 disclosure duties can apply when publishing cloned-voice or AI-altered audio/video of real people. Internal-only editing use is low transparency-risk.
