Image & design

Descript

Descript (AI video and audio editing)

Provider: Descript, Inc. · Based in: Descript, Inc., 385 Grove St., San Francisco, CA 94102, USA · Provider website

Plans
4
Sources
8
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 3 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
US only: all 4 plans
Training on inputs
opt-out available: all 4 plans
DPA
not publicly documented: all 4 plans
Provider
Descript, Inc.
Based in
Descript, Inc., 385 Grove St., San Francisco, CA 94102, USA (privacy policy, section 'Contact Us'; 'based in the United States') (q2)

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compared plan by plan with other tools in the category Image & design:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
0 USD
yes

Contract and data use

not publicly documented
opt-out available
differs by plan
Trust Center

Hosting and sharing

US only
list available

Evidence

differs by plan
7 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

Privacy policy (as of 2025-04-14): Descript is based in the USA and processes and stores information there; service providers may store or access information in other countries; Descript will 'take steps to ensure that your personal data receives an adequate level of protection', without naming a mechanism. A section for users in the EEA is included. DPF list: no entry found for Descript (search on 2026-10-18). Standard contractual clauses: not publicly documented (DPA only on access request in the Trust Center).

Sources:

Certifications (as stated by the provider)

Security page: SOC 2 Type II by a certified public accounting firm; alignment with GDPR, CCPA and Privacy by Design. Trust Center (descript.securitypal.com, as of 2026-08-21): under 'Certifications' SOC 2 Type 2, GDPR and CCPA; SOC 2 report, pen test, DPA, sub-processor list, DPIA, AI Questionnaire and CAIQ Lite only on access request. An ISO 27001 certification is mentioned neither on the security page nor in the Trust Center.

Sources:

AI Act

Functions: Underlord (AI assistant), AI speakers/voice cloning, AI avatars, video/image generation, Studio Sound, Eye Contact, Green Screen, translation, Clips, API and MCP (pricing page).

Provider’s statement: Terms: generative tools may contain errors ('inaccurate, unreliable, inappropriate, infringing'); users are responsible for review. A statement on the EU AI Act is not publicly documented.

Classification (for review, not legal advice): To be reviewed: customer typically a deployer (Art. 3(4) AI Act). Synthetic voices, avatars and videos touch on labelling obligations under Art. 50; whether and how they apply depends on the use and is to be reviewed. Voice clones: consent of the person speaking according to the Terms (speaker confirmation). Not legal advice.

Sources:

Current notes 2026

Privacy policy last updated 2025-04-14, Terms 2025-02-25 (older than for most competitors). The sub-processor list names many AI and service providers with data region US; Anthropic is listed there as an engineering service. Trust Center at SecurityPal with control descriptions (including deletion of project data within 30 days).

Open points of the review

  • Customer DPA only available in the Trust Center on access request; content and applicability to self-service plans not reviewed.
  • Transfer basis not named: no DPF entry found, standard contractual clauses not publicly documented.
  • No statement on the EU AI Act found in the privacy policy, Terms, security page or Trust Center.

Frequently asked questions

Where does Descript store data?

US only (plans: Free, Hobbyist / Creator, Business, Enterprise). According to the provider, as of 18 Oct 2026.

Is there a DPA for Descript?

not publicly documented in: Free, Hobbyist / Creator, Business, Enterprise. Based on our research, as of 18 Oct 2026.

Does Descript use inputs for AI training?

opt-out available in: Free, Hobbyist / Creator, Business, Enterprise. According to the provider, as of 18 Oct 2026.

Where is the provider based?

Descript, Inc., 385 Grove St., San Francisco, CA 94102, USA (privacy policy, section 'Contact Us'; 'based in the United States'). According to the provider, as of 18 Oct 2026.

All sources

  1. 01PricingPricing page · retrieved 18 Oct 2026
  2. 02Privacy Policy (as of 2025-04-14)Privacy notice · retrieved 18 Oct 2026
  3. 03Terms of Service (as of 2025-02-25)Terms and conditions · retrieved 18 Oct 2026
  4. 04SecurityTrust Center · retrieved 18 Oct 2026
  5. 05Data SubprocessorsSub-processor list · retrieved 14 Oct 2026
  6. 06Descript Trust Center (SecurityPal, as of 2026-08-21)Trust Center · retrieved 18 Oct 2026
  7. 07Account data and privacy (Help Center)Help Center · retrieved 18 Oct 2026
  8. 08Data Privacy Framework List (search for Descript)Documentation · retrieved 18 Oct 2026

More tools in Image & design with an EU hosting option (in at least one plan)

  • ElevenLabs · Based in: Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA
  • Figma AI · Based in: Figma, Inc., 760 Market St, Floor 10, San Francisco, CA, USA

All tools in Image & design · Tools with an EU hosting option

Further reading

All tools in the category: Image & design. Figures across all tools: Data report.