ElevenLabs
ElevenLabs (Free / Starter / Creator / Pro / Scale / Business / Enterprise)
Provider: Eleven Labs Inc. · Based in: Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA · Provider website
- Plans
- 4
- Sources
- 11
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 5 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- mixed: Free, Starter / Creator / Pro, Scale / BusinessEU option: Enterprise
- Training on inputs
- opt-out available: Free, Starter / Creator / Pro, Scale / Businessno: Enterprise
- DPA
- yes: all 4 plans
- Provider
- Eleven Labs Inc.
- Based in
- Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA (Data Protection Office address according to the Privacy Policy; also the contracting party under the EEA/UK/CH Terms); controller for users in the EEA, UK and Switzerland according to the Privacy Policy: ElevenLabs Poland sp. z o.o., Lipska 27/22, 03-908 Warsaw, Poland (q2, q4, q6)
Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare ElevenLabs
Compare with another toolCompared plan by plan with other tools in the category Image & design:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | FreeCompare ElevenLabs Free with another tool | Starter / Creator / ProCompare ElevenLabs Starter / Creator / Pro with another tool | Scale / BusinessCompare ElevenLabs Scale / Business with another tool | EnterpriseCompare ElevenLabs Enterprise with another tool |
|---|---|---|---|---|
| differs by plan | 0 USD | several tiers | several tiers | custom |
| Details: Price | USD 0 (10,000 credits/month, pricing page) | Monthly billing: Starter USD 6, 30,000 credits (the promotion 'First month 83% off' ran until 18 Oct according to the page and is no longer shown on 2026-10-19); Creator USD 22 ('First month 50% off' = USD 11), 121,000 credits; Pro USD 99, 600,000 credits. Annual billing ('Yearly billing' view, '2 months free'): Starter USD 5, Creator USD 18.33, Pro USD 82.50 per month. 'Prices exclude all taxes, levies and duties.' (pricing page) | Monthly billing: Scale USD 299 (3 seats, 1.8M credits), Business USD 990 (10 seats, 6M credits) per month. Annual billing ('Yearly billing' view, '2 months free'): Scale USD 249.17, Business USD 825 per month. 'Prices exclude all taxes, levies and duties.' (pricing page) | Custom (pricing page: 'Custom pricing', contact sales) |
| yes | yes | yes | yes | |
| Details: AI features included | yes (Text-to-Speech, Speech-to-Text, Sound Effects, Voice Design, Music; 10,000 credits/month; Commercial License and Voice Cloning not included according to the pricing page) | yes (as Free, plus Commercial License; Instant Voice Cloning from Starter, Professional Voice Cloning from Creator according to the pricing page) | yes (team features, more seats and Professional Voice Clones according to the pricing page) | yes |
| yes | yes | yes | yes | |
| Details: DPA | yes (public DPA, as of 2026-04-08; applies to 'Self-Serve Services' = all non-Enterprise services; Free accounts are not expressly mentioned) Provider’s DPA | yes (public DPA, as of 2026-04-08; for self-serve customers, the Terms constitute the contract) Provider’s DPA | yes (public DPA, as of 2026-04-08; for self-serve customers, the Terms constitute the contract) Provider’s DPA | yes (DPA; pricing page names 'Custom terms & assurance around DPA/SLAs') Provider’s DPA |
| differs by plan | opt-out available | opt-out available | opt-out available | no |
| Details: Training on inputs | Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans. | Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans. | Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans. | Help Center ('Is my data used to improve ElevenLabs’ AI models?'): 'By default, we don’t train on any data from our Enterprise customers, other than as may be necessary to provide services to such Enterprise customers.' ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content, whether or not Zero Retention Mode is enabled'. Enterprise contract texts are not public. |
| differs by plan | DPA section 9.2.2: for self-serve… | DPA section 9.2.2: for self-serve… | DPA section 9.2.2: for self-serve… | DPA section 9.2.1: deletion of customer… |
| Details: Data retention | DPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans. | DPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans. | DPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans. | DPA section 9.2.1: deletion of customer content within 30 days of expiry/termination of the contract unless the customer consents to longer retention. According to the documentation, Zero Retention Mode for selected Enterprise customers: via the API parameter enable_logging=false (not for the web UI), for agents also per agent; ElevenLabs may restrict access at its discretion. |
| differs by plan | mixed | mixed | mixed | EU option |
| Details: Hosting | Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'. | Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'. | Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'. | Data residency documentation: Enterprise feature via isolated environments (EU: eu.residency.elevenlabs.io); storage at the selected location, processing may also take place outside it; according to the documentation, processing can be restricted to the EU using 'Zero Retention Mode' and the API (optional integrations such as Custom LLMs may process outside). Trust Center (Subprocessors): selection of the hosting location 'subject to availability and ElevenLabs’ discretion'. |
| list available | list available | list available | list available | |
| Details: Sub-processors |
|
|
|
|
| 10 sources | 10 sources | 10 sources | 10 sources | |
| Details: Sources with retrieval date |
|
|
|
|
Compare ElevenLabs Free with another tool
Price and scope
- differs by plan
- 0 USD
USD 0 (10,000 credits/month, pricing page)
- yes
yes (Text-to-Speech, Speech-to-Text, Sound Effects, Voice Design, Music; 10,000 credits/month; Commercial License and Voice Cloning not included according to the pricing page)
Contract and data use
- yes
yes (public DPA, as of 2026-04-08; applies to 'Self-Serve Services' = all non-Enterprise services; Free accounts are not expressly mentioned)
Provider’s DPA- differs by plan
- opt-out available
Privacy Policy (as of 2026-10-09): ElevenLabs processes inputs and outputs as well as usage data to research, develop, train and improve AI models (legitimate interest or consent where required); opt-out at any time in the account under 'Terms and Privacy' > 'Data use', effective only for data from the opt-out onwards. Terms (EEA version and non-EEA version, each as of 2026-10-09) section 4(i): same opt-out option for content. Trust Center (Subprocessors): for Google Cloud and Anthropic, 'LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer'. ZRM documentation: agreements with all third-party LLM providers 'expressly prohibit such providers from training their models on customer content'. Documentation does not differentiate between the self-serve plans.
- differs by plan
- DPA section 9.2.2: for self-serve…
- DPA section 9.2.2: for self-serve services, ElevenLabs may delete content after 180 days of inactivity (right, not obligation). Privacy Policy (as of 2026-10-09): voice-generated data at most 3 years after the last interaction, unless otherwise required by law; deletion of personal data on request. According to the documentation, 'Zero Retention Mode' is available only to selected Enterprise customers ('Enterprise customers can use Zero Retention Mode'); not documented for self-serve plans.
Hosting and sharing
- differs by plan
- mixed
Data residency documentation: 'As a standard, ElevenLabs' customer data is hosted/stored in the U.S.'; additional storage locations (EU, India, Singapore) only as isolated environments for Enterprise customers ('Data residency is an Enterprise feature'). Trust Center (Subprocessors): for non-Enterprise customers, data at Google Cloud, AWS and MongoDB may be processed 'in the US, EU, or Singapore for latency and service performance purposes'.
- list available
- ElevenLabs affiliates in the UK, Poland, Japan, UAE, India, Ireland, Netherlands, Singapore and Switzerland (Global)
- Google Cloud Platform – cloud infrastructure, storage, LLM services (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Amazon Web Services and MongoDB – cloud infrastructure, storage, database (Enterprise: US or selected hosting location; non-Enterprise: US, EU or Singapore)
- Azure – infrastructure and LLM services where India Data Residency is selected (India)
- LLM services: Anthropic (US), OpenAI (US/EU), xAI (US; only after the customer enables the integration), Fireworks AI (Global), Databricks (Global)
- Generation of synthetic media: ByteDance (Indonesia, Malaysia, EU), Creatify (US), Fal (Global), Kling (Singapore), Runway (US), Sync (US)
- Safety and moderation: Cinder (EU), Hive (US), Reality Defender (US; optional integration for ElevenAgents)
- Support and collaboration: Asana, Slack, Zendesk, Pylon, Zapier (each US), Plain (UK)
- Analytics and data integration: PostHog (EU), Sigma (US), Fivetran (US)
- Other: Stripe (US; payments), Twilio (US; SMS 2FA), Trustpilot (EU; reviews), Tailscale (US/EU; networking)
Evidence
- 10 sources
- Pricing (rendered in browser, monthly/yearly billing)Pricing page, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-09)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-04-08)DPA, retrieved 18 Oct 2026
- Terms of Use (non-EEA version, as of 2026-10-09)Terms and conditions, retrieved 14 Oct 2026
- Data residency (documentation)Documentation, retrieved 18 Oct 2026
- Terms of Service for EEA, UK and Switzerland (as of 2026-10-09)Terms and conditions, retrieved 18 Oct 2026
- ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access)Trust Center, retrieved 18 Oct 2026
- Trust Center: Subprocessors (32 entries with location)Sub-processor list, retrieved 18 Oct 2026
- Help Center: Is my data used to improve ElevenLabs’ AI models?Help Center, retrieved 18 Oct 2026
- Docs: Zero Retention Mode (Enterprise)Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy Policy (as of 2026-10-09): ElevenLabs relies on the EU-US and Swiss-US Data Privacy Framework and the UK Extension; according to the Policy, the certification applies only to the US company. Data Privacy Framework List: 'ElevenLabs' (New York, NY) with EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework and UK Extension each 'Active' for HR and non-HR data (retrieved 2026-10-18). Other bases: EU SCCs, UK IDTA/Addendum, Brazil SCCs; Transfer Impact Assessments carried out according to the Policy. DPA section 11: transfers on the basis of adequacy decisions (incl. DPF) and EU SCCs, UK Addendum, Brazil SCCs. Trust Center: sub-processors located in, among others, the USA, Singapore, India, Indonesia and Malaysia; data of non-Enterprise customers may be processed in the USA, EU or Singapore.
- Privacy Policy (as of 2026-10-09) (Privacy notice), retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-04-08) (DPA), retrieved 18 Oct 2026
- ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access) (Trust Center), retrieved 18 Oct 2026
- Trust Center: Subprocessors (32 entries with location) (Sub-processor list), retrieved 18 Oct 2026
- Data Privacy Framework List (entry ElevenLabs, New York) (Register), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Trust Center: ISO/IEC 27001:2022 including ISO/IEC 27017 and 27018 (certificate IS-IA-2025-08-19-01, Insight Assurance, initial issue 2025-08-19, valid until 2028-08-18; scope ISMS, PIMS and AIMS of the ElevenLabs Production Platform); ISO/IEC 27701 and ISO/IEC 42001 certificates viewable (certification according to the Trust Center update of 2026-02-10). SOC 3 report by Insight Assurance (dated 2026-09-29) for the period 2025-07-01 to 2026-06-30 (Security, Availability, Processing Integrity, Confidentiality, Privacy) publicly available; SOC 2 Type 2 + HIPAA Report 2026 only via Request access. Other entries listed in the Trust Center include PCI DSS 4.0.1 Level 1, CSA STAR L1, Cyber Essentials Plus, NHS DSPT, TX-RAMP Level 2; HIPAA BAAs for qualifying healthcare enterprises (also pricing page, Enterprise).
- Pricing (rendered in browser, monthly/yearly billing) (Pricing page), retrieved 18 Oct 2026
- Data residency (documentation) (Documentation), retrieved 18 Oct 2026
- ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access) (Trust Center), retrieved 18 Oct 2026
AI Act
Functions: Text-to-speech, speech-to-text, Sound Effects, Voice Design, Voice Cloning (Instant/Professional), Dubbing, Music, Image & Video, Conversational Agents (pricing page, documentation).
Provider’s statement: The Trust Center lists 'EU AI ACT' among its compliance entries, without explanation, statement of role or document. No mention of the EU AI Act in the DPA, Privacy Policy, Terms (EEA and non-EEA versions) or data residency documentation. The Trust Center provides model cards and a 'Training Data Transparency Disclosure' (effective 2026-01-01, referring to California AB 2013). Terms section 4(k): output is AI-generated and must be checked before use.
Classification (for review, not legal advice): To be reviewed: customer typically a deployer (Art. 3(4) AI Act). Synthetic speech and voice clones touch on labelling obligations under Art. 50; use and consents for cloned voices are to be reviewed. According to the Privacy Policy, biometric verification data is collected. Not legal advice.
- Privacy Policy (as of 2026-10-09) (Privacy notice), retrieved 18 Oct 2026
- Data residency (documentation) (Documentation), retrieved 18 Oct 2026
- Terms of Service for EEA, UK and Switzerland (as of 2026-10-09) (Terms and conditions), retrieved 18 Oct 2026
- ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access) (Trust Center), retrieved 18 Oct 2026
Current notes 2026
DPA as of 2026-04-08, Privacy Policy and Terms as of 2026-10-09; a separate version of the Terms applies to users from the EEA, UK and Switzerland (contracting party still Eleven Labs Inc.); according to the Privacy Policy, the controller is ElevenLabs Poland sp. z o.o. Storage in the USA by default; EU storage and Zero Retention Mode only as Enterprise features. Use for training is opt-out, not opt-in, on self-serve plans; according to the Help Center, Enterprise data is not used for training by default. The pricing page shows time-limited introductory discounts.
Open points of the review
- Transfer basis per sub-processor not stated in the list; some locations given only as 'Global'.
- SOC 2 Type 2 report 2026, Statements of Applicability, GDPR Compliance Report and penetration test reports only via Request access in the Trust Center.
- AI Act statement only as the entry 'EU AI ACT' in the Trust Center compliance list, without explanation, statement of role or document.
- Meaning of the Trust Center note that LLM services (Google Cloud, Anthropic) may be used 'for research, development, training', alongside the training prohibition for third-party LLM providers stated in the ZRM documentation, not explained.
- Enterprise price and individual Enterprise contract terms (deviations in the DPA, 'Custom terms') not public.
Frequently asked questions
Where does ElevenLabs store data?
mixed (plans: Free, Starter / Creator / Pro, Scale / Business); EU hosting selectable (plans: Enterprise). According to the provider, as of 18 Oct 2026.
Is there a DPA for ElevenLabs?
yes in: Free, Starter / Creator / Pro, Scale / Business, Enterprise. According to the provider, as of 18 Oct 2026.
Does ElevenLabs use inputs for AI training?
opt-out available in: Free, Starter / Creator / Pro, Scale / Business; no in: Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA (Data Protection Office address according to the Privacy Policy; also the contracting party under the EEA/UK/CH Terms); controller for users in the EEA, UK and Switzerland according to the Privacy Policy: ElevenLabs Poland sp. z o.o., Lipska 27/22, 03-908 Warsaw, Poland. According to the provider, as of 18 Oct 2026.
All sources
- 01Pricing (rendered in browser, monthly/yearly billing)Pricing page · retrieved 18 Oct 2026
- 02Privacy Policy (as of 2026-10-09)Privacy notice · retrieved 18 Oct 2026
- 03Data Processing Addendum (as of 2026-04-08)DPA · retrieved 18 Oct 2026
- 04Terms of Use (non-EEA version, as of 2026-10-09)Terms and conditions · retrieved 14 Oct 2026
- 05Data residency (documentation)Documentation · retrieved 18 Oct 2026
- 06Terms of Service for EEA, UK and Switzerland (as of 2026-10-09)Terms and conditions · retrieved 18 Oct 2026
- 07ElevenLabs Trust Center (Vanta; ISO certificates and SOC 3 report viewable, SOC 2 via Request access)Trust Center · retrieved 18 Oct 2026
- 08Trust Center: Subprocessors (32 entries with location)Sub-processor list · retrieved 18 Oct 2026
- 09Help Center: Is my data used to improve ElevenLabs’ AI models?Help Center · retrieved 18 Oct 2026
- 10Docs: Zero Retention Mode (Enterprise)Documentation · retrieved 18 Oct 2026
- 11Data Privacy Framework List (entry ElevenLabs, New York)Register · retrieved 18 Oct 2026
More tools in Image & design with an EU hosting option (in at least one plan)
- Figma AI · Based in: Figma, Inc., 760 Market St, Floor 10, San Francisco, CA, USA
All tools in Image & design · Tools with an EU hosting option
Further reading
All tools in the category: Image & design. ElevenLabs has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.