Image & design

Runway

Runway (AI video and image)

Provider: Runway AI, Inc. · Based in: Runway AI, Inc., USA · Provider website

Plans
4
Sources
12
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 3 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
not publicly documented: all 4 plans
Training on inputs
yes: Free, Standard / Pro / Max, Teamno: Enterprise
DPA
no: Free, Standard / Pro / Max, Teamyes: Enterprise
Provider
Runway AI, Inc.
Based in
Runway AI, Inc., USA (privacy policy: 'headquartered in the United States'; DPA, Annex I: 18 West 18th Street, 11th Floor, New York, NY 10011, USA; the Terms state 800 North State Street Suite 304, Dover, DE 19901 as the address for notices; law of the State of New York, place of jurisdiction New York County) (q2, q3, q7)

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compared plan by plan with other tools in the category Image & design:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
0 USD
yes

Contract and data use

differs by plan
no
differs by plan
yes
differs by plan
Terms of Use: retention of inputs and…

Hosting and sharing

not publicly documented
list available

Evidence

differs by plan
5 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

DPA (August 2026, section 8): for transfers from the EEA, the EU standard contractual clauses (Decision (EU) 2021/914) apply, Module Two (customer as controller) or Module Three (customer as processor), Clause 9 Option 2, Irish law and courts of Ireland, competent supervisory authority where possible the Irish Data Protection Commission; for the UK the International Data Transfer Addendum, for Switzerland adjustments to the FADP. Data importer: Runway AI, Inc., New York. The DPA applies only to Enterprise customers. Privacy policy: Runway is headquartered in the USA; transfer to the USA and other countries 'with privacy laws not as comprehensive'. Sub-processor list: locations USA, UK, Spain, Germany, Canada, Singapore (q5). EU-US Data Privacy Framework: Runway not found in the DPF list (search on 2026-10-18).

Sources:

Certifications (as stated by the provider)

Trust Center (trust.runwayml.com): listed are SOC 2 Type II (report 'SOC 2 Type II 2025 Runway AI, Inc. Report') and ISO 27001:2022 (official certificate as PDF), plus a 2025 penetration test summary and a CAIQ (2026); all documents only after an access request. Help Center: Enterprise customers can request the SOC 2 report and ISO 27001 certificate via the Trust Center. Data Security page: SOC 2 Type II renewed annually; GDPR, CCPA/CPRA and NIST are named as alignment ('aligns with'), not as certificates. The report and certificate themselves were not reviewed.

Sources:

AI Act

Functions: Generative video and image models (Gen-4.5, Gen-4 Image, Aleph 2.0), access to third-party models, music, voice and sound generation, voice clones, 'agentic creative collaborator', Runway MCP, Brand Kits (pricing page).

Provider’s statement: not publicly documented(no mention of the EU AI Act found on the retrieved pages). Data Security page: 'Enterprise customers can utilize content provenance features for asset verification'.

Classification (for review, not legal advice): For review: customer typically a deployer (Art. 3(4) AI Act). Synthetic video, image and audio content touches on labelling obligations under Art. 50; whether and how they apply depends on the use and is to be reviewed. Voice clones and facial data: clarify consents. Not legal advice.

Sources:

Current notes 2026

Terms of Use last updated 2026-09-15, Enterprise Services Terms 2026-06-01, privacy policy 2026-05-11, DPA 'August 2026'. The Free-to-Team Terms permit model training on inputs and outputs; the Enterprise Terms exclude it. Team plan for 2 to 9 people with a shared credit pool. The sub-processor list names around 30 service providers, predominantly AI model and compute providers in the USA, alongside the UK, Spain, Germany, Canada and Singapore.

Open points of the review

  • Storage location/region and EU option not documented (the Data Security page only mentions multiple, physically separated data centres of major cloud providers).
  • SOC 2 report, ISO 27001 certificate, CAIQ, 'Responsible AI Commitments' and 'Runway Customers FAQ (2026)' only available in the Trust Center after an access request; not reviewed.
  • No statement on the EU AI Act found in the Terms of Use, Enterprise Services Terms, privacy policy, Data Security page or Safety page.

Frequently asked questions

Where does Runway store data?

not publicly documented (plans: Free, Standard / Pro / Max, Team, Enterprise). Based on our research, as of 18 Oct 2026.

Is there a DPA for Runway?

no in: Free, Standard / Pro / Max, Team; yes in: Enterprise. According to the provider, as of 18 Oct 2026.

Does Runway use inputs for AI training?

yes in: Free, Standard / Pro / Max, Team; no in: Enterprise. According to the provider, as of 18 Oct 2026.

Where is the provider based?

Runway AI, Inc., USA (privacy policy: 'headquartered in the United States'; DPA, Annex I: 18 West 18th Street, 11th Floor, New York, NY 10011, USA; the Terms state 800 North State Street Suite 304, Dover, DE 19901 as the address for notices; law of the State of New York, place of jurisdiction New York County). According to the provider, as of 18 Oct 2026.

All sources

  1. 01PricingPricing page · retrieved 18 Oct 2026
  2. 02Terms of Use (as of 2026-09-15)Terms and conditions · retrieved 18 Oct 2026
  3. 03Privacy Policy (as of 2026-05-11)Privacy notice · retrieved 18 Oct 2026
  4. 04Enterprise Services Terms (as of 2026-06-01)Terms and conditions · retrieved 18 Oct 2026
  5. 05Subprocessors for Runway AI, Inc.Sub-processor list · retrieved 14 Oct 2026
  6. 06Data SecurityTrust Center · retrieved 18 Oct 2026
  7. 07Runway DPA for Customers (August 2026)DPA · retrieved 18 Oct 2026
  8. 08When to choose an Enterprise subscriptionHelp Center · retrieved 18 Oct 2026
  9. 09Runway for TeamsPricing page · retrieved 18 Oct 2026
  10. 10Enterprise FAQ: Third-party Models in Runway (as of 2026-04-29)Help Center · retrieved 18 Oct 2026
  11. 11Data Privacy Framework List (search for Runway)Documentation · retrieved 18 Oct 2026
  12. 12Runway Trust CenterTrust Center · retrieved 18 Oct 2026

More tools in Image & design with an EU hosting option (in at least one plan)

  • ElevenLabs · Based in: Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA
  • Figma AI · Based in: Figma, Inc., 760 Market St, Floor 10, San Francisco, CA, USA

All tools in Image & design · Tools with an EU hosting option

Further reading

All tools in the category: Image & design. Figures across all tools: Data report.