Figma AI vs. Synthesia: data protection per plan
Figma AI (4 plans) and Synthesia (4 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Figma AI | Synthesia |
|---|---|---|
| Provider based in | Figma, Inc., 760 Market St, Floor 10, San Francisco, CA, USA | Synthesia Ltd, 20 Triton Street, Regent's Place, 3rd Floor, London NW1 3BF, United Kingdom |
| Plans recorded | 4 | 4 |
| Hosting | US only: Starter, Professional, OrganizationEU option: Enterprise | mixed: all 4 plans |
| Training on inputs | opt-out available: Starter, Professionalno: Organization, Enterprise | no: all 4 plans |
| DPA | yes: all 4 plans | yes: all 4 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Figma AI Professional vs. Synthesia Starter
| Feature | Figma AIProfessional | SynthesiaStarter |
|---|---|---|
| yes | yes | |
| Details: DPA available | yes (Data Processing Addendum, as of 2026-03-30) Provider’s DPA | yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan) Provider’s DPA |
| differs by plan | opt-out available | no |
| Details: Training on inputs | Help Center: 'By default, content training is turned on for Professional teams.' Admins of a Professional team can switch the option off at any time. | AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan. |
| differs by plan | US only | mixed |
| Details: Data residency | as Starter: AWS USA; EU hosting only for Enterprise customers. | Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | DPA | Security Practices: deletion of customer… |
| Details: Data retention | DPA (as of 2026-03-30) section 5: after the end of provision, deletion or return of all Customer Content at the customer's choice 'within thirty (30) days', unless data protection law requires retention. During the term: files in the trash remain until they are restored or permanently deleted ('Figma will keep files in the trash until you, or another team member with access to those files, restores or permanently deletes them'). AI prompts: 'OpenAI and our other 3rd party model providers store data temporarily, or in some cases not at all' (Building Figma AI); no fixed periods stated. | Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer. |
| differs by plan | 20 USD/mo… (further prices in the details) | several tiers |
| Details: Price | Full Seat USD 20 per month with monthly billing or USD 16 per month with annual billing; Dev Seat USD 15 or 12; Collab Seat USD 5 or 3 (pricing page, monthly/annual toggle; in EUR the same amounts in €; no statement as to whether VAT is included); AI credits beyond that are chargeable (for Professional billed monthly in arrears) | Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included. |
| yes | yes | |
| Details: AI features included | yes (Full Seat: 3,000 AI credits/month; Dev Seat and Collab Seat 500 each; AI surcharge: further credits via AI credits subscription or pay-as-you-go according to AI Terms, Section 6) | yes (1,250 credits/month according to the pricing page) |
| 8 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- Figma AI Professionalyes
- Synthesia Starteryes
- Synthesia Starter
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
Training
- differs by plan
- Figma AI Professionalopt-out available
- Synthesia Starterno
- Figma AI Professional
Help Center: 'By default, content training is turned on for Professional teams.' Admins of a Professional team can switch the option off at any time.
Synthesia StarterAI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
Hosting
- differs by plan
- Figma AI ProfessionalUS only
- Synthesia Startermixed
- Figma AI Professional
as Starter: AWS USA; EU hosting only for Enterprise customers.
Synthesia StarterSecurity Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
Sub-processors
- Figma AI Professionallist available
- Synthesia Starterlist available
- Figma AI Professional
- Amazon Web Services (cloud, USA; for Enterprise the selected hosting location)
- Cloudflare, Snowflake, Datadog, Sentry, Twilio (USA)
- AI (Figma AI): Anthropic, Amazon Web Services, Cerebras, Fireworks.ai, Google (Vertex), Jasper, Microsoft (Azure), OpenAI, Recraft (each 'United States*'; requests may run through global data centres, processing then transient in memory)
- AI (Figma Weave): including BytePlus and Enhancor (EU, Indonesia, Malaysia), Kling AI (Singapore), Lightricks (EU, Israel, UK, USA), Freepik (Belgium, Netherlands, Spain), others in the USA
- Moderation: OpenAI, Amazon Bedrock, Akismet, Hive (USA)
Synthesia Starter- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
Retention
- differs by plan
- Figma AI ProfessionalDPA
- Synthesia StarterSecurity Practices: deletion of customer…
- Figma AI ProfessionalDPA (as of 2026-03-30) section 5: after the end of provision, deletion or return of all Customer Content at the customer's choice 'within thirty (30) days', unless data protection law requires retention. During the term: files in the trash remain until they are restored or permanently deleted ('Figma will keep files in the trash until you, or another team member with access to those files, restores or permanently deletes them'). AI prompts: 'OpenAI and our other 3rd party model providers store data temporarily, or in some cases not at all' (Building Figma AI); no fixed periods stated.Synthesia StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by plan
- Figma AI Professional20 USD/mo… (further prices in the details)
- Synthesia Starterseveral tiers
- Figma AI Professional
Full Seat USD 20 per month with monthly billing or USD 16 per month with annual billing; Dev Seat USD 15 or 12; Collab Seat USD 5 or 3 (pricing page, monthly/annual toggle; in EUR the same amounts in €; no statement as to whether VAT is included); AI credits beyond that are chargeable (for Professional billed monthly in arrears)
Synthesia StarterPricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Figma AI Professionalyes
- Synthesia Starteryes
- Figma AI Professional
yes (Full Seat: 3,000 AI credits/month; Dev Seat and Collab Seat 500 each; AI surcharge: further credits via AI credits subscription or pay-as-you-go according to AI Terms, Section 6)
Synthesia Starteryes (1,250 credits/month according to the pricing page)
Evidence
- Figma AI Professional8 sources
- Synthesia Starter8 sources
- Figma AI Professional
- PricingPricing page, retrieved 18 Oct 2026
- Figma AI Terms (Effective 2026-06-24)Terms and conditions, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-03-30)DPA, retrieved 18 Oct 2026
- Sub-processors (as of 2026-09-22)Sub-processor list, retrieved 14 Oct 2026
- Manage AI settings and content trainingHelp page, retrieved 18 Oct 2026
- Delete and restore files (Help Center)Documentation, retrieved 18 Oct 2026
- AI credit updates FAQ; Manage AI credits (Help Center)Documentation, retrieved 18 Oct 2026
- Building Figma AIDocumentation, retrieved 18 Oct 2026
Synthesia Starter- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
| Feature | Figma AI | Synthesia |
|---|---|---|
| yesall 4 plans | yesall 4 plans | |
| Details: DPA available |
|
|
| differs by tool |
| noall 4 plans |
| Details: Training on inputs |
|
|
| differs by tool |
| mixedall 4 plans |
| Details: Data residency |
|
|
| list availableall 4 plans | list availableall 4 plans | |
| Details: List published |
|
|
| differs by tool | DPAall 4 plans | Security Practices: deletion of customer…all 4 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 4 plans | yesall 4 plans | |
| Details: AI features included |
|
|
| 10 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- Figma AIyesall 4 plans
- Synthesiayesall 4 plans
- Figma AI
- Starter (free of charge)
yes (Data Processing Addendum, as of 2026-03-30; forms part of customer contracts; applicability to Starter not separately stated)
Provider’s DPA - Professional
yes (Data Processing Addendum, as of 2026-03-30)
Provider’s DPA - Organization
yes (Data Processing Addendum, as of 2026-03-30)
Provider’s DPA - Enterprise
yes (Data Processing Addendum, as of 2026-03-30)
Provider’s DPA
Synthesia- Basic (free of charge)
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Starter
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Pro
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Enterprise
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
- Starter (free of charge)
Training
- differs by tool
- Figma AI
- opt-out availableStarter (free of charge), Professional
- noOrganization, Enterprise
- Synthesianoall 4 plans
- Figma AI
- Starter (free of charge)
Help Center: 'By default, content training is turned on for Starter teams.' Admins can switch off 'Content training'; content and changes added afterwards are no longer used for training. 'Building Figma AI' page: 'For Starter and Professional, content training is set to ‘on’ by default — admins can opt out'. AI Terms (as of 2026-06-24): training on Customer Content only if 'Content Training' is enabled.
- Professional
Help Center: 'By default, content training is turned on for Professional teams.' Admins of a Professional team can switch the option off at any time.
- Organization
Help Center: 'By default, content training is turned off on Organization and Enterprise plans.' and: 'Content training is currently disabled for Organization and Enterprise plans and can't be toggled on.'
- Enterprise
Help Center: Content Training is off by default for Organization and Enterprise and currently disabled (cannot be switched on).
Synthesia- Basic (free of charge)
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Starter
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Pro
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Enterprise
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Starter (free of charge)
Hosting
- differs by tool
- Figma AI
- US onlyStarter (free of charge), Professional, Organization
- EU optionEnterprise
- Synthesiamixedall 4 plans
- Figma AI
- Starter (free of charge)
Sub-processors: AWS 'United States (or, for Enterprise plans, the hosting location selected)'. EU hosting only for Enterprise (Figma blog).
- Professional
as Starter: AWS USA; EU hosting only for Enterprise customers.
- Organization
as Starter: AWS USA; according to the blog, EU hosting only for Enterprise customers.
- Enterprise
Help Center 'Enable localized file hosting': data residency only on the Enterprise plan, regions including the EU (AWS eu-central-1, recovery eu-west-1), Australia, India, Brazil; file content is stored locally (including shapes, text, components, images, videos, AI output in files), but not comments, file names, plugins, preview thumbnails, 'AI chats', metadata, logs or user profiles; new file edits may be stored temporarily 'in the US for up to 30 days'; only 'data at-rest, not data in-transit'. Sub-processors: AWS 'for Enterprise plans, the hosting location selected'.
Synthesia- Basic (free of charge)
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Starter
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Pro
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Enterprise
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Starter (free of charge)
Sub-processors
- Figma AIlist availableall 4 plans
- Synthesialist availableall 4 plans
- Figma AI
- Starter (free of charge)
- Amazon Web Services (cloud, USA; for Enterprise the selected hosting location)
- Cloudflare, Snowflake, Datadog, Sentry, Twilio (USA)
- AI (Figma AI): Anthropic, Amazon Web Services, Cerebras, Fireworks.ai, Google (Vertex), Jasper, Microsoft (Azure), OpenAI, Recraft (each 'United States*'; requests may run through global data centres, processing then transient in memory)
- AI (Figma Weave): including BytePlus and Enhancor (EU, Indonesia, Malaysia), Kling AI (Singapore), Lightricks (EU, Israel, UK, USA), Freepik (Belgium, Netherlands, Spain), others in the USA
- Moderation: OpenAI, Amazon Bedrock, Akismet, Hive (USA)
- Professional
- Amazon Web Services (cloud, USA; for Enterprise the selected hosting location)
- Cloudflare, Snowflake, Datadog, Sentry, Twilio (USA)
- AI (Figma AI): Anthropic, Amazon Web Services, Cerebras, Fireworks.ai, Google (Vertex), Jasper, Microsoft (Azure), OpenAI, Recraft (each 'United States*'; requests may run through global data centres, processing then transient in memory)
- AI (Figma Weave): including BytePlus and Enhancor (EU, Indonesia, Malaysia), Kling AI (Singapore), Lightricks (EU, Israel, UK, USA), Freepik (Belgium, Netherlands, Spain), others in the USA
- Moderation: OpenAI, Amazon Bedrock, Akismet, Hive (USA)
- Organization
- Amazon Web Services (cloud, USA; for Enterprise the selected hosting location)
- Cloudflare, Snowflake, Datadog, Sentry, Twilio (USA)
- AI (Figma AI): Anthropic, Amazon Web Services, Cerebras, Fireworks.ai, Google (Vertex), Jasper, Microsoft (Azure), OpenAI, Recraft (each 'United States*'; requests may run through global data centres, processing then transient in memory)
- AI (Figma Weave): including BytePlus and Enhancor (EU, Indonesia, Malaysia), Kling AI (Singapore), Lightricks (EU, Israel, UK, USA), Freepik (Belgium, Netherlands, Spain), others in the USA
- Moderation: OpenAI, Amazon Bedrock, Akismet, Hive (USA)
- Enterprise
- Amazon Web Services (cloud, USA; for Enterprise the selected hosting location)
- Cloudflare, Snowflake, Datadog, Sentry, Twilio (USA)
- AI (Figma AI): Anthropic, Amazon Web Services, Cerebras, Fireworks.ai, Google (Vertex), Jasper, Microsoft (Azure), OpenAI, Recraft (each 'United States*'; requests may run through global data centres, processing then transient in memory)
- AI (Figma Weave): including BytePlus and Enhancor (EU, Indonesia, Malaysia), Kling AI (Singapore), Lightricks (EU, Israel, UK, USA), Freepik (Belgium, Netherlands, Spain), others in the USA
- Moderation: OpenAI, Amazon Bedrock, Akismet, Hive (USA)
Synthesia- Basic (free of charge)
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Starter
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Pro
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Enterprise
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Starter (free of charge)
Retention
- differs by tool
- Figma AIDPAall 4 plans
- SynthesiaSecurity Practices: deletion of customer…all 4 plans
- Figma AI
- Starter (free of charge)DPA (as of 2026-03-30) section 5: after the end of provision, deletion or return of all Customer Content at the customer's choice 'within thirty (30) days', unless data protection law requires retention. During the term: files in the trash remain until they are restored or permanently deleted ('Figma will keep files in the trash until you, or another team member with access to those files, restores or permanently deletes them'). AI prompts: 'OpenAI and our other 3rd party model providers store data temporarily, or in some cases not at all' (Building Figma AI); no fixed periods stated.
- ProfessionalDPA (as of 2026-03-30) section 5: after the end of provision, deletion or return of all Customer Content at the customer's choice 'within thirty (30) days', unless data protection law requires retention. During the term: files in the trash remain until they are restored or permanently deleted ('Figma will keep files in the trash until you, or another team member with access to those files, restores or permanently deletes them'). AI prompts: 'OpenAI and our other 3rd party model providers store data temporarily, or in some cases not at all' (Building Figma AI); no fixed periods stated.
- OrganizationDPA (as of 2026-03-30) section 5: after the end of provision, deletion or return of all Customer Content at the customer's choice 'within thirty (30) days', unless data protection law requires retention. During the term: files in the trash remain until they are restored or permanently deleted ('Figma will keep files in the trash until you, or another team member with access to those files, restores or permanently deletes them'). AI prompts: 'OpenAI and our other 3rd party model providers store data temporarily, or in some cases not at all' (Building Figma AI); no fixed periods stated.
- EnterpriseDPA (as of 2026-03-30) section 5: after the end of provision, deletion or return of all Customer Content at the customer's choice 'within thirty (30) days', unless data protection law requires retention. During the term: files in the trash remain until they are restored or permanently deleted ('Figma will keep files in the trash until you, or another team member with access to those files, restores or permanently deletes them'). AI prompts: 'OpenAI and our other 3rd party model providers store data temporarily, or in some cases not at all' (Building Figma AI); no fixed periods stated.
Synthesia- Basic (free of charge)Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- ProSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- EnterpriseSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by tool
- Figma AI
- 0 USDStarter (free of charge)
- 20 USD/mo… (further prices in the details)Professional
- several tiersOrganization, Enterprise
- Synthesia
- 0 EUR/moBasic (free of charge)
- several tiersStarter
- 79 EUR/mo… (further prices in the details)Pro
- customEnterprise
- Figma AI
- Starter (free of charge)
0 USD (pricing page 'Starter Free'); AI credits: 150/day up to 500/month
- Professional
Full Seat USD 20 per month with monthly billing or USD 16 per month with annual billing; Dev Seat USD 15 or 12; Collab Seat USD 5 or 3 (pricing page, monthly/annual toggle; in EUR the same amounts in €; no statement as to whether VAT is included); AI credits beyond that are chargeable (for Professional billed monthly in arrears)
- Organization
Full Seat 55 USD/month, Dev Seat 25 USD, Collab Seat 5 USD (pricing page, annual billing); AI credits beyond that are chargeable (billed quarterly in arrears)
- Enterprise
Full Seat 90 USD/month, Dev Seat 35 USD, Collab Seat 5 USD (pricing page, annual billing, 'Contact sales'); AI credits beyond that are chargeable
Synthesia- Basic (free of charge)
EUR 0 or USD 0 per month (pricing page; no indication whether VAT is included)
- Starter
Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Pro
Pricing page in browser (retrieved from Germany, EUR): EUR 79 per month with monthly billing (6,000 credits/month); EUR 49 per month with annual billing (72,000 credits/year); higher credit tiers up to EUR 600/month (monthly) or EUR 372/month (annual). Server-side version in USD: USD 89 or USD 64 per month, tiers up to USD 676/month. No indication whether VAT is included.
- Enterprise
Custom (pricing page: 'Custom', 'tailored pricing'; FAQ: 'Enterprise pricing is custom')
- Starter (free of charge)
- Figma AIyesall 4 plans
- Synthesiayesall 4 plans
- Figma AI
- Starter (free of charge)
yes (150 AI credits per day, up to 500 per month according to the pricing page)
- Professional
yes (Full Seat: 3,000 AI credits/month; Dev Seat and Collab Seat 500 each; AI surcharge: further credits via AI credits subscription or pay-as-you-go according to AI Terms, Section 6)
- Organization
yes (Full Seat: 3,500 AI credits/month; Dev Seat and Collab Seat 500 each; AI surcharge as Professional via credits subscription/PAYG)
- Enterprise
yes (Full Seat: 4,250 AI credits/month; Dev Seat and Collab Seat 500 each)
Synthesia- Basic (free of charge)
yes (500 credits/month, videos with watermark according to the pricing page)
- Starter
yes (1,250 credits/month according to the pricing page)
- Pro
yes (6,000 credits/month according to the pricing page)
- Enterprise
yes
- Starter (free of charge)
Evidence
- Figma AI10 sources
- Synthesia8 sources
- Figma AI
- PricingPricing page, retrieved 18 Oct 2026
- Figma AI Terms (Effective 2026-06-24)Terms and conditions, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-03-30)DPA, retrieved 18 Oct 2026
- Sub-processors (as of 2026-09-22)Sub-processor list, retrieved 14 Oct 2026
- Manage AI settings and content trainingHelp page, retrieved 18 Oct 2026
- EU hosting for Figma and FigJam filesProvider blog, retrieved 14 Oct 2026
- Delete and restore files (Help Center)Documentation, retrieved 18 Oct 2026
- AI credit updates FAQ; Manage AI credits (Help Center)Documentation, retrieved 18 Oct 2026
- Building Figma AIDocumentation, retrieved 18 Oct 2026
- Enable localized file hosting (Help Center)Documentation, retrieved 18 Oct 2026
Synthesia- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Figma AI compared with
Synthesia compared with
Individual pages: Figma AI, Synthesia. All tools in the category: Image & design.