ElevenLabs vs. Synthesia: data protection per plan
ElevenLabs (4 plans) and Synthesia (4 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | ElevenLabs | Synthesia |
|---|---|---|
| Provider based in | Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA | Synthesia Ltd, 20 Triton Street, Regent's Place, 3rd Floor, London NW1 3BF, United Kingdom |
| Plans recorded | 4 | 4 |
| Hosting | mixed: Free, Starter / Creator / Pro, Scale / BusinessEU option: Enterprise | mixed: all 4 plans |
| Training on inputs | opt-out available: Free, Starter / Creator / Pro, Scale / Businessno: Enterprise | no: all 4 plans |
| DPA | yes: all 4 plans | yes: all 4 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: ElevenLabs Scale / Business vs. Synthesia Starter
| Feature | ElevenLabsScale / Business | SynthesiaStarter |
|---|---|---|
| yes | yes | |
| Details: DPA available | yes (public DPA, as of 2026-04-08; for self-serve customers, the Terms constitute the contract) Provider’s DPA | yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan) Provider’s DPA |
| differs by plan | opt-out available | no |
| Details: Training on inputs | Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans. | AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan. |
| mixed | mixed | |
| Details: Data residency | Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'. | Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | DPA section 9.2.2: for self-serve… | Security Practices: deletion of customer… |
| Details: Data retention | DPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans. | Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer. |
| several tiers | several tiers | |
| Details: Price | Monthly billing: Scale USD 299 (3 seats, 1.8M credits), Business USD 990 (10 seats, 6M credits) per month. Annual billing ('Yearly billing' view, '2 months free'): Scale USD 249.17, Business USD 825 per month. 'Prices exclude all taxes, levies and duties.' (pricing page) | Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included. |
| yes | yes | |
| Details: AI features included | yes (team features, more seats and Professional Voice Clones according to the pricing page) | yes (1,250 credits/month according to the pricing page) |
| 10 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- ElevenLabs Scale / Businessyes
- Synthesia Starteryes
- ElevenLabs Scale / Business
yes (public DPA, as of 2026-04-08; for self-serve customers, the Terms constitute the contract)
Provider’s DPASynthesia Starteryes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
Training
- differs by plan
- ElevenLabs Scale / Businessopt-out available
- Synthesia Starterno
- ElevenLabs Scale / Business
Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans.
Synthesia StarterAI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
Hosting
- ElevenLabs Scale / Businessmixed
- Synthesia Startermixed
- ElevenLabs Scale / Business
Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'.
Synthesia StarterSecurity Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
Sub-processors
- ElevenLabs Scale / Businesslist available
- Synthesia Starterlist available
- ElevenLabs Scale / Business
- ElevenLabs affiliates in the UK, Poland, Japan, UAE, India, Ireland, Netherlands, Singapore and Switzerland (Global)
- Google Cloud Platform – cloud infrastructure, storage, LLM services (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Amazon Web Services and MongoDB – cloud infrastructure, storage, database (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Azure – infrastructure and LLM services where India Data Residency is selected (India)
- LLM services: Anthropic (US), OpenAI (US/EU), xAI (US; only after the customer enables the integration), Fireworks AI (Global), Databricks (Global)
- Generation of synthetic media: ByteDance (Indonesia, Malaysia, EU), Creatify (US), Fal (Global), Kling (Singapore), Runway (US), Sync (US)
- Safety and moderation: Cinder (EU), Hive (US), Reality Defender (US; optional integration for ElevenAgents)
- Support and collaboration: Asana, Slack, Zendesk, Pylon, Zapier (each US), Plain (UK)
- Analytics and data integration: PostHog (EU), Sigma (US), Fivetran (US)
- Other: Stripe (US; payments), Twilio (US; SMS 2FA), Trustpilot (EU; reviews), Tailscale (US/EU; networking)
Synthesia Starter- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
Retention
- differs by plan
- ElevenLabs Scale / BusinessDPA section 9.2.2: for self-serve…
- Synthesia StarterSecurity Practices: deletion of customer…
- ElevenLabs Scale / BusinessDPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans.Synthesia StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- ElevenLabs Scale / Businessseveral tiers
- Synthesia Starterseveral tiers
- ElevenLabs Scale / Business
Monthly billing: Scale USD 299 (3 seats, 1.8M credits), Business USD 990 (10 seats, 6M credits) per month. Annual billing ('Yearly billing' view, '2 months free'): Scale USD 249.17, Business USD 825 per month. 'Prices exclude all taxes, levies and duties.' (pricing page)
Synthesia StarterPricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- ElevenLabs Scale / Businessyes
- Synthesia Starteryes
- ElevenLabs Scale / Business
yes (team features, more seats and Professional Voice Clones according to the pricing page)
Synthesia Starteryes (1,250 credits/month according to the pricing page)
Evidence
- ElevenLabs Scale / Business10 sources
- Synthesia Starter8 sources
- ElevenLabs Scale / Business
- Pricing (rendered in browser, monthly/yearly billing)Pricing page, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-09)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-04-08)DPA, retrieved 18 Oct 2026
- Terms of Use (non-EEA version, as of 2026-10-09)Terms and conditions, retrieved 14 Oct 2026
- Data residency (documentation)Documentation, retrieved 18 Oct 2026
- Terms of Service for EEA, UK and Switzerland (as of 2026-10-09)Terms and conditions, retrieved 18 Oct 2026
- ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access)Trust Center, retrieved 18 Oct 2026
- Trust Center: Subprocessors (32 entries with location)Sub-processor list, retrieved 18 Oct 2026
- Help Center: Is my data used to improve ElevenLabs’ AI models?Help Center, retrieved 18 Oct 2026
- Docs: Zero Retention Mode (Enterprise)Documentation, retrieved 18 Oct 2026
Synthesia Starter- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
| Feature | ElevenLabs | Synthesia |
|---|---|---|
| yesall 4 plans | yesall 4 plans | |
| Details: DPA available |
|
|
| differs by tool |
| noall 4 plans |
| Details: Training on inputs |
|
|
| differs by tool |
| mixedall 4 plans |
| Details: Data residency |
|
|
| list availableall 4 plans | list availableall 4 plans | |
| Details: List published |
|
|
| differs by tool |
| Security Practices: deletion of customer…all 4 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 4 plans | yesall 4 plans | |
| Details: AI features included |
|
|
| 10 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- ElevenLabsyesall 4 plans
- Synthesiayesall 4 plans
- ElevenLabs
- Free
yes (public DPA, as of 2026-04-08; applies to 'Self-Serve Services' = all non-Enterprise services; Free accounts are not expressly mentioned)
Provider’s DPA - Starter / Creator / Pro
yes (public DPA, as of 2026-04-08; for self-serve customers, the Terms constitute the contract)
Provider’s DPA - Scale / Business
yes (public DPA, as of 2026-04-08; for self-serve customers, the Terms constitute the contract)
Provider’s DPA - Enterprise
yes (DPA; pricing page names 'Custom terms & assurance around DPA/SLAs')
Provider’s DPA
Synthesia- Basic (free of charge)
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Starter
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Pro
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Enterprise
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
- Free
Training
- differs by tool
- ElevenLabs
- opt-out availableFree, Starter / Creator / Pro, Scale / Business
- noEnterprise
- Synthesianoall 4 plans
- ElevenLabs
- Free
Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans.
- Starter / Creator / Pro
Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans.
- Scale / Business
Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans.
- Enterprise
Help Center ('Is my data used to improve ElevenLabs’ AI models?'): 'By default, we don’t train on any data from our Enterprise customers, other than as may be necessary to provide services to such Enterprise customers.' ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content, whether or not Zero Retention Mode is enabled'. Enterprise contract texts are not public.
Synthesia- Basic (free of charge)
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Starter
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Pro
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Enterprise
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Free
Hosting
- differs by tool
- ElevenLabs
- mixedFree, Starter / Creator / Pro, Scale / Business
- EU optionEnterprise
- Synthesiamixedall 4 plans
- ElevenLabs
- Free
Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'.
- Starter / Creator / Pro
Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'.
- Scale / Business
Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'.
- Enterprise
Data residency documentation: Enterprise feature via isolated environments (EU: eu.residency.elevenlabs.io); storage at the selected location, processing may also take place outside it; according to the documentation, processing can be restricted to the EU using 'Zero Retention Mode' and the API (optional integrations such as Custom LLMs may process outside). Trust Center (Subprocessors): selection of the hosting location 'subject to availability and ElevenLabs’ discretion'.
Synthesia- Basic (free of charge)
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Starter
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Pro
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Enterprise
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Free
Sub-processors
- ElevenLabslist availableall 4 plans
- Synthesialist availableall 4 plans
- ElevenLabs
- Free
- ElevenLabs affiliates in the UK, Poland, Japan, UAE, India, Ireland, Netherlands, Singapore and Switzerland (Global)
- Google Cloud Platform – cloud infrastructure, storage, LLM services (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Amazon Web Services and MongoDB – cloud infrastructure, storage, database (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Azure – infrastructure and LLM services where India Data Residency is selected (India)
- LLM services: Anthropic (US), OpenAI (US/EU), xAI (US; only after the customer enables the integration), Fireworks AI (Global), Databricks (Global)
- Generation of synthetic media: ByteDance (Indonesia, Malaysia, EU), Creatify (US), Fal (Global), Kling (Singapore), Runway (US), Sync (US)
- Safety and moderation: Cinder (EU), Hive (US), Reality Defender (US; optional integration for ElevenAgents)
- Support and collaboration: Asana, Slack, Zendesk, Pylon, Zapier (each US), Plain (UK)
- Analytics and data integration: PostHog (EU), Sigma (US), Fivetran (US)
- Other: Stripe (US; payments), Twilio (US; SMS 2FA), Trustpilot (EU; reviews), Tailscale (US/EU; networking)
- Starter / Creator / Pro
- ElevenLabs affiliates in the UK, Poland, Japan, UAE, India, Ireland, Netherlands, Singapore and Switzerland (Global)
- Google Cloud Platform – cloud infrastructure, storage, LLM services (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Amazon Web Services and MongoDB – cloud infrastructure, storage, database (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Azure – infrastructure and LLM services where India Data Residency is selected (India)
- LLM services: Anthropic (US), OpenAI (US/EU), xAI (US; only after the customer enables the integration), Fireworks AI (Global), Databricks (Global)
- Generation of synthetic media: ByteDance (Indonesia, Malaysia, EU), Creatify (US), Fal (Global), Kling (Singapore), Runway (US), Sync (US)
- Safety and moderation: Cinder (EU), Hive (US), Reality Defender (US; optional integration for ElevenAgents)
- Support and collaboration: Asana, Slack, Zendesk, Pylon, Zapier (each US), Plain (UK)
- Analytics and data integration: PostHog (EU), Sigma (US), Fivetran (US)
- Other: Stripe (US; payments), Twilio (US; SMS 2FA), Trustpilot (EU; reviews), Tailscale (US/EU; networking)
- Scale / Business
- ElevenLabs affiliates in the UK, Poland, Japan, UAE, India, Ireland, Netherlands, Singapore and Switzerland (Global)
- Google Cloud Platform – cloud infrastructure, storage, LLM services (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Amazon Web Services and MongoDB – cloud infrastructure, storage, database (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Azure – infrastructure and LLM services where India Data Residency is selected (India)
- LLM services: Anthropic (US), OpenAI (US/EU), xAI (US; only after the customer enables the integration), Fireworks AI (Global), Databricks (Global)
- Generation of synthetic media: ByteDance (Indonesia, Malaysia, EU), Creatify (US), Fal (Global), Kling (Singapore), Runway (US), Sync (US)
- Safety and moderation: Cinder (EU), Hive (US), Reality Defender (US; optional integration for ElevenAgents)
- Support and collaboration: Asana, Slack, Zendesk, Pylon, Zapier (each US), Plain (UK)
- Analytics and data integration: PostHog (EU), Sigma (US), Fivetran (US)
- Other: Stripe (US; payments), Twilio (US; SMS 2FA), Trustpilot (EU; reviews), Tailscale (US/EU; networking)
- Enterprise
- ElevenLabs affiliates in the UK, Poland, Japan, UAE, India, Ireland, Netherlands, Singapore and Switzerland (Global)
- Google Cloud Platform – cloud infrastructure, storage, LLM services (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Amazon Web Services and MongoDB – cloud infrastructure, storage, database (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Azure – infrastructure and LLM services where India Data Residency is selected (India)
- LLM services: Anthropic (US), OpenAI (US/EU), xAI (US; only after the customer enables the integration), Fireworks AI (Global), Databricks (Global)
- Generation of synthetic media: ByteDance (Indonesia, Malaysia, EU), Creatify (US), Fal (Global), Kling (Singapore), Runway (US), Sync (US)
- Safety and moderation: Cinder (EU), Hive (US), Reality Defender (US; optional integration for ElevenAgents)
- Support and collaboration: Asana, Slack, Zendesk, Pylon, Zapier (each US), Plain (UK)
- Analytics and data integration: PostHog (EU), Sigma (US), Fivetran (US)
- Other: Stripe (US; payments), Twilio (US; SMS 2FA), Trustpilot (EU; reviews), Tailscale (US/EU; networking)
Synthesia- Basic (free of charge)
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Starter
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Pro
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Enterprise
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Free
Retention
- differs by tool
- ElevenLabs
- DPA section 9.2.2: for self-serve…Free, Starter / Creator / Pro, Scale / Business
- DPA section 9.2.1: deletion of customer…Enterprise
- SynthesiaSecurity Practices: deletion of customer…all 4 plans
- ElevenLabs
- FreeDPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans.
- Starter / Creator / ProDPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans.
- Scale / BusinessDPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans.
- EnterpriseDPA section 9.2.1: deletion of customer content within 30 days of expiry/termination of the contract unless the customer consents to longer retention. According to the documentation, Zero Retention Mode for selected Enterprise customers: via the API parameter enable_logging=false (not for the web UI), for agents also per agent; ElevenLabs may restrict access at its discretion.
Synthesia- Basic (free of charge)Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- ProSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- EnterpriseSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by tool
- ElevenLabs
- 0 USDFree
- several tiersStarter / Creator / Pro, Scale / Business
- customEnterprise
- Synthesia
- 0 EUR/moBasic (free of charge)
- several tiersStarter
- 79 EUR/mo… (further prices in the details)Pro
- customEnterprise
- ElevenLabs
- Free
USD 0 (10,000 credits/month, pricing page)
- Starter / Creator / Pro
Monthly billing: Starter USD 6, 30,000 credits (the promotion 'First month 83% off' ran until 18 Oct according to the page and is no longer shown on 2026-10-19); Creator USD 22 ('First month 50% off' = USD 11), 121,000 credits; Pro USD 99, 600,000 credits. Annual billing ('Yearly billing' view, '2 months free'): Starter USD 5, Creator USD 18.33, Pro USD 82.50 per month. 'Prices exclude all taxes, levies and duties.' (pricing page)
- Scale / Business
Monthly billing: Scale USD 299 (3 seats, 1.8M credits), Business USD 990 (10 seats, 6M credits) per month. Annual billing ('Yearly billing' view, '2 months free'): Scale USD 249.17, Business USD 825 per month. 'Prices exclude all taxes, levies and duties.' (pricing page)
- Enterprise
Custom (pricing page: 'Custom pricing', contact sales)
Synthesia- Basic (free of charge)
EUR 0 or USD 0 per month (pricing page; no indication whether VAT is included)
- Starter
Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Pro
Pricing page in browser (retrieved from Germany, EUR): EUR 79 per month with monthly billing (6,000 credits/month); EUR 49 per month with annual billing (72,000 credits/year); higher credit tiers up to EUR 600/month (monthly) or EUR 372/month (annual). Server-side version in USD: USD 89 or USD 64 per month, tiers up to USD 676/month. No indication whether VAT is included.
- Enterprise
Custom (pricing page: 'Custom', 'tailored pricing'; FAQ: 'Enterprise pricing is custom')
- Free
- ElevenLabsyesall 4 plans
- Synthesiayesall 4 plans
- ElevenLabs
- Free
yes (Text-to-Speech, Speech-to-Text, Sound Effects, Voice Design, Music; 10,000 credits/month; Commercial License and Voice Cloning not included according to the pricing page)
- Starter / Creator / Pro
yes (as Free, plus Commercial License; Instant Voice Cloning from Starter, Professional Voice Cloning from Creator according to the pricing page)
- Scale / Business
yes (team features, more seats and Professional Voice Clones according to the pricing page)
- Enterprise
yes
Synthesia- Basic (free of charge)
yes (500 credits/month, videos with watermark according to the pricing page)
- Starter
yes (1,250 credits/month according to the pricing page)
- Pro
yes (6,000 credits/month according to the pricing page)
- Enterprise
yes
- Free
Evidence
- ElevenLabs10 sources
- Synthesia8 sources
- ElevenLabs
- Pricing (rendered in browser, monthly/yearly billing)Pricing page, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-09)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-04-08)DPA, retrieved 18 Oct 2026
- Terms of Use (non-EEA version, as of 2026-10-09)Terms and conditions, retrieved 14 Oct 2026
- Data residency (documentation)Documentation, retrieved 18 Oct 2026
- Terms of Service for EEA, UK and Switzerland (as of 2026-10-09)Terms and conditions, retrieved 18 Oct 2026
- ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access)Trust Center, retrieved 18 Oct 2026
- Trust Center: Subprocessors (32 entries with location)Sub-processor list, retrieved 18 Oct 2026
- Help Center: Is my data used to improve ElevenLabs’ AI models?Help Center, retrieved 18 Oct 2026
- Docs: Zero Retention Mode (Enterprise)Documentation, retrieved 18 Oct 2026
Synthesia- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
ElevenLabs compared with
Synthesia compared with
Individual pages: ElevenLabs, Synthesia. All tools in the category: Image & design.