ElevenLabs
elevenlabs.io
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
- Direct-use inputs and outputs train ElevenLabs models by default; the DPA is silent on training
- No formal subprocessor register disclosed
- No clear commitment that your data will not train their models
+1 more
See Before you sign, with what to ask for ↓
Scanned Oct 21, 2026 · Public evidence · Point-in-time
Higher scores indicate stronger, independently supported AI assurance, governance, AI systems, models, data, supply chain and third-party assurance evidence. The score and the decision are related but different: a well-scored vendor can still carry conditions.
Before you sign
Why it matters: The Privacy Policy (9 October 2026) states ElevenLabs uses personal information, including Inputs & Outputs, to research, build, train and improve its AI models, with only a prospective opt-out in account settings. The Policy expressly excludes processing done for business customers, which is governed by the customer contract instead — but the DPA limits processing to documented instructions without saying whether model training is excluded. Anyone using the API or apps on a self-serve account is inside the Privacy Policy's training scope.
What to ask for: Confirm in writing whether Customer Content processed under the DPA/enterprise agreement is excluded from model training and evaluation, whether the 'Data use' opt-out applies to API traffic on self-serve accounts, and what happens to data already used for training before an opt-out.
“Research and develop our AI models: We use your personal information to research, build, train and improve our AI models. This includes our models learning patterns in speech and audio. For more information about our training practices, and controls we offer you, see here . Inputs & Outputs”
“Opt out of training: You can opt out of our use of your personal information at any time by navigating to the 'Data use' menu in the 'Terms and Privacy' section of your ElevenLabs account. The opt-out only applies to and affects use of your personal information for training after you opt-out.”
“This Policy does not cover personal information we collect when you use ElevenLabs services through one of our business customers (for example, if you use an ElevenLabs service through your employer or our technology powers voice functionality on a service offered by another company).”
“ElevenLabs shall not Process Customer Personal Data other than: (i) on Customer’s relevant documented instructions, which, for avoidance of doubt, are set forth in the Agreement (including this DPA); or (ii) as expressly permitted by Applicable Data Protection Laws.”
Why it matters: The vendor names AI-related providers or partially addresses its supply chain, but the public sources scanned do not include a formal, dated subprocessor register.
What to ask for: Request a dated subprocessor register with change-notification terms for the DPA/order form.
Why it matters: The public sources scanned do not clearly state that customer prompts, files, and outputs are excluded from training or fine-tuning of first- or third-party models.
What to ask for: Get a no-training clause covering first- and third-party models into the DPA/order form.
“Research and develop our AI models: We use your personal information to research, build, train and improve our AI models. This includes our models learning patterns in speech and audio. For more information about our training practices, and controls we offer you, see here . Inputs & Outputs”
“Opt out of training: You can opt out of our use of your personal information at any time by navigating to the 'Data use' menu in the 'Terms and Privacy' section of your ElevenLabs account. The opt-out only applies to and affects use of your personal information for training after you opt-out.”
Why it matters: The public sources scanned do not give a retention period for customer data or prompts/outputs.
What to ask for: Get retention windows, in days, in writing.
“For Customers licensing ElevenLabs’ enterprise-level Services, Customer Content will be deleted from the Services within thirty (30) days of the expiration or termination of the Agreement, unless Customer consents to retention beyond such period;”
“For Customers licensing ElevenLabs’ non-enterprise Services (“ Self-Serve Services ”), ElevenLabs reserves the right, but has no obligation to, delete Customer Content from such Self-Serve Services after a period of inactivity of one-hundred and eighty (180) days.”
“Contained in ElevenLabs’ backup systems pursuant to an automatic archival process, provided such information is purged in accordance with ElevenLabs’ standard retention policies in respect thereof.”
“We won't keep data we generate about your voice for longer than 3 years after your last interaction with us, unless the law requires or allows otherwise.”
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
!Will they train on your data?Ask the vendor
For users of the Services directly (via elevenlabs.io, the mobile apps or the APIs), the Privacy Policy states ElevenLabs uses personal information — including Inputs & Outputs — to research, build, train and improve its AI models, on a legitimate-interests basis (or consent where required).
Requires written confirmation, see Before you sign ↓
“Research and develop our AI models: We use your personal information to research, build, train and improve our AI models. This includes our models learning patterns in speech and audio. For more information about our training practices, and controls we offer you, see here . Inputs & Outputs”
“Opt out of training: You can opt out of our use of your personal information at any time by navigating to the 'Data use' menu in the 'Terms and Privacy' section of your ElevenLabs account. The opt-out only applies to and affects use of your personal information for training after you opt-out.”
!How long do they keep your data?Ask the vendor
For non-enterprise (Self-Serve) Services ElevenLabs reserves a right, but accepts no obligation, to delete Customer Content after 180 days of inactivity — there is no committed deletion window for self-serve customers.
Requires written confirmation, see Before you sign ↓
“For Customers licensing ElevenLabs’ enterprise-level Services, Customer Content will be deleted from the Services within thirty (30) days of the expiration or termination of the Agreement, unless Customer consents to retention beyond such period;”
“For Customers licensing ElevenLabs’ non-enterprise Services (“ Self-Serve Services ”), ElevenLabs reserves the right, but has no obligation to, delete Customer Content from such Self-Serve Services after a period of inactivity of one-hundred and eighty (180) days.”
“Contained in ElevenLabs’ backup systems pursuant to an automatic archival process, provided such information is purged in accordance with ElevenLabs’ standard retention policies in respect thereof.”
“We won't keep data we generate about your voice for longer than 3 years after your last interaction with us, unless the law requires or allows otherwise.”
✓Who else can access your data?Clear
The ElevenAgents LLM option list includes third-party models named by model ID (gpt-6-sol, gpt-6-luna, glm-52, deepseek-v41-flash, claude-opus-5, claude-opus-5-5; later entries add gpt-6.1-sol, claude-sonnet-5-5 and gemini-3.8-flash). The changelog names the models but not the providers, the hosting arrangement, or how conversation data reaches them.
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“Vendors and Service Providers. We share your personal information with vendors and service providers who help us run the Services and handle data on our behalf. They help with things like content moderation, service eligibility, intellectual property protection, analytics, web hosting, data analysis or enrichment, advertising, marketing, IT, customer service and auditing.”
!Where is your data processed?Ask the vendor
Personal information of direct users is transferred to the United States for storage regardless of where the user is located.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Wherever you are, your personal information will be transferred to the United States for storage.”
“Data residency stores your data in isolated environments in the EU, India or Singapore instead of the default U.S. location. It is an Enterprise feature.”
“Notwithstanding any selected or agreed upon Data Residency or any other term to the contrary, Customer Personal Data may nevertheless be processed outside of such Data Residency location, including, but not limited to, the following instances: 13.1.1. Subprocessors: ElevenLabs may engage Subprocessors (per the process set forth in Section 6 hereof) located outside of the selected Data Residency location.”
“Moderation Team: ElevenLabs’ safety team may, in the course of their responsibilities, access Customer Personal Data from outside of the Data Residency location for purposes of reviewing and managing Customer Content, including to ensure compliance with the Prohibited Use Policy.”
“Private deployments run ElevenAgents, Text to Speech and Speech to Text inside your own cloud account, so text, audio and transcripts stay in your network.”
!What happens in a security incident?Ask the vendor
ElevenLabs commits to notify the customer 'without undue delay' upon confirming a Security Incident and to provide reasonable information and cooperation; no fixed notification window (e.g. 24/72 hours) is committed and the clock runs from confirmation rather than detection.
Requires written confirmation, see Before you sign ↓
“ElevenLabs shall notify Customer without undue delay upon confirming a Security Incident, providing Customer with reasonable information relating to such Security Incident, including information required to be provided by ElevenLabs to Customer under Applicable Data Protection Laws.”
Email to send the vendor9 items to confirm in writing
Hello ElevenLabs team, We are assessing ElevenLabs as part of our supplier review. Before we proceed, please confirm the following in writing: 1. What is your commitment to notify customers of a security incident affecting our data, including the timeframe? 2. Please provide your current, dated subprocessor list and explain how you notify customers of changes. 3. Do you use our data (inputs, outputs or uploaded files) to train or improve your models? Please confirm in writing, including any opt-out and whether it applies to every plan. 4. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 5. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? 6. Provide the current SOC 2 Type II report (period and scope), the FedRAMP 20x authorisation boundary and sponsoring agency, the Annex II TOMs document, and any published evaluation or safety-testing results for the Eleven v4 and Scribe v2 model families. 7. Google appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. 8. Stripe appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. 9. Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
Key findingsclick a row for the evidence
✓Public DPA gives enterprise buyers a usable contractual baselineStrong
ElevenLabs publishes a current DPA (8 April 2026) with instruction-only processing, a maintained subprocessor register with 30-day change notice and objection/termination rights, breach notification, a 30-day post-termination deletion commitment for enterprise Services, pre-completed SCCs/UK Addendum/Brazil SCCs, and a right to a third-party audit report. Product documentation adds EU/India/Singapore data residency, private deployments in the customer's own cloud, SSO and OCSF audit logs for enterprise workspaces, and a maintained security.txt reporting channel.
These are the mechanisms a buyer needs to bind the vendor on data handling, subprocessor changes and incident notice without negotiating from scratch, and the residency/private-deployment options give a path to keep audio and transcripts in-region or in-network.
“ElevenLabs shall not Process Customer Personal Data other than: (i) on Customer’s relevant documented instructions, which, for avoidance of doubt, are set forth in the Agreement (including this DPA); or (ii) as expressly permitted by Applicable Data Protection Laws.”
“For Customers licensing ElevenLabs’ enterprise-level Services, Customer Content will be deleted from the Services within thirty (30) days of the expiration or termination of the Agreement, unless Customer consents to retention beyond such period;”
“Data residency stores your data in isolated environments in the EU, India or Singapore instead of the default U.S. location. It is an Enterprise feature.”
“Private deployments run ElevenAgents, Text to Speech and Speech to Text inside your own cloud account, so text, audio and transcripts stay in your network.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“ElevenLabs shall make available to Customer a then-current, industry standard third-party audit certification or report, which may include a SOC 2 Type II report. The Parties hereby agree that the provision of such report(s) shall satisfy any audit rights Customer may have under Applicable Data Protection Laws.”
“Contact: https://elevenlabs.io/security/report Expires: 2027-10-06T00:00:00.000Z”
“ElevenLabs shall notify Customer without undue delay upon confirming a Security Incident, providing Customer with reasonable information relating to such Security Incident, including information required to be provided by ElevenLabs to Customer under Applicable Data Protection Laws.”
“Workspaces centralize billing, shared resources, team access and API key management. Enterprise workspaces add SSO over SAML 2.0 or OIDC, and audit logs of administrative actions in the OCSF schema.”
“In respect of the SCCs incorporated herein: (i) the Parties hereby agree such SCCs shall be deemed executed upon this DPA taking effect; (ii) the Parties conclude the relevant module applicable to Controller-to-Processor transfers, or to the extent Customer is a Processor of a Third-Party Controller, the Processor-to-Processor module; (iii) ElevenLabs shall be deemed the “data importer” and Customer shall be deemed the “data exporter”, and each party’s details shall be as set forth in the Agreement;”
✗Direct-use inputs and outputs train ElevenLabs models by default; the DPA is silent on trainingGap
The Privacy Policy (9 October 2026) states ElevenLabs uses personal information, including Inputs & Outputs, to research, build, train and improve its AI models, with only a prospective opt-out in account settings. The Policy expressly excludes processing done for business customers, which is governed by the customer contract instead — but the DPA limits processing to documented instructions without saying whether model training is excluded. Anyone using the API or apps on a self-serve account is inside the Privacy Policy's training scope.
Voice recordings and generated audio are sensitive and sometimes biometric. A buyer must know whether its content is excluded from training by contract (enterprise) or only by a user-level toggle (self-serve), and whether the opt-out covers API traffic as well as app usage.
Question for vendor: Confirm in writing whether Customer Content processed under the DPA/enterprise agreement is excluded from model training and evaluation, whether the 'Data use' opt-out applies to API traffic on self-serve accounts, and what happens to data already used for training before an opt-out.
“Research and develop our AI models: We use your personal information to research, build, train and improve our AI models. This includes our models learning patterns in speech and audio. For more information about our training practices, and controls we offer you, see here . Inputs & Outputs”
“Opt out of training: You can opt out of our use of your personal information at any time by navigating to the 'Data use' menu in the 'Terms and Privacy' section of your ElevenLabs account. The opt-out only applies to and affects use of your personal information for training after you opt-out.”
“This Policy does not cover personal information we collect when you use ElevenLabs services through one of our business customers (for example, if you use an ElevenLabs service through your employer or our technology powers voice functionality on a service offered by another company).”
“ElevenLabs shall not Process Customer Personal Data other than: (i) on Customer’s relevant documented instructions, which, for avoidance of doubt, are set forth in the Agreement (including this DPA); or (ii) as expressly permitted by Applicable Data Protection Laws.”
!Third-party LLM and media-model providers sit in the request path without provider-level disclosureGap
ElevenAgents lets customers select third-party LLMs identified only by model ID (gpt-6.x, claude-*, gemini-3.8-flash, deepseek-v41-flash, glm-52). The Image & Video feature depended on OpenAI's Sora API (retired when OpenAI discontinued it) and ByteDance's Seedance models. None of the collected documents say which legal entity hosts these models, where they run, what they retain, or whether they appear on the subprocessor list at compliance.elevenlabs.io (not collected).
When a customer picks a third-party LLM, the conversation transcript and knowledge-base content are processed by that provider. Residency and private-deployment assurances may not extend to that leg, and the subprocessor list is the only place this could be reconciled.
Question for vendor: For each selectable agent LLM and media model, name the provider, the hosting region, whether zero-retention terms are in place, and whether it is listed as a subprocessor; confirm how the Data Residency and Private deployment options apply to third-party model calls.
“ElevenAgents combines speech recognition, an LLM of your choice, text to speech and turn-taking into a single voice agent that you configure in the dashboard or through the SDKs.”
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“Seedance 1.5 Pro deprecated : ByteDance retires Seedance 1.5 Pro on November 11, 2026. The model is no longer offered for new generations and will stop working on that date. Use a Seedance 2.0 model instead.”
!Residency carve-outs and uneven retention terms need confirming per tierGap
Data residency is at ElevenLabs' discretion and the DPA allows processing outside the chosen region by subprocessors, by support staff and by the safety/moderation team reviewing Customer Content. Retention differs by tier: enterprise content is deleted within 30 days of termination, self-serve content has no deletion obligation (a discretionary 180-day inactivity purge), backups purge on unstated schedules, and voice-derived data for direct users may be kept up to 3 years after last interaction. Default storage for direct users is the United States.
A buyer relying on in-region processing or a defined deletion window needs these exceptions and tier differences written into the order form; self-serve use gives materially weaker retention terms than the enterprise DPA language suggests.
Question for vendor: State the backup purge period, whether moderation-team and support access can be restricted to the residency region, and whether a self-serve account can obtain a committed deletion window.
“For Customers licensing ElevenLabs’ non-enterprise Services (“ Self-Serve Services ”), ElevenLabs reserves the right, but has no obligation to, delete Customer Content from such Self-Serve Services after a period of inactivity of one-hundred and eighty (180) days.”
“Contained in ElevenLabs’ backup systems pursuant to an automatic archival process, provided such information is purged in accordance with ElevenLabs’ standard retention policies in respect thereof.”
“We won't keep data we generate about your voice for longer than 3 years after your last interaction with us, unless the law requires or allows otherwise.”
“Wherever you are, your personal information will be transferred to the United States for storage.”
“Notwithstanding any selected or agreed upon Data Residency or any other term to the contrary, Customer Personal Data may nevertheless be processed outside of such Data Residency location, including, but not limited to, the following instances: 13.1.1. Subprocessors: ElevenLabs may engage Subprocessors (per the process set forth in Section 6 hereof) located outside of the selected Data Residency location.”
“Moderation Team: ElevenLabs’ safety team may, in the course of their responsibilities, access Customer Personal Data from outside of the Data Residency location for purposes of reviewing and managing Customer Content, including to ensure compliance with the Prohibited Use Policy.”
!Certifications, security measures and model evaluation are stated but not evidenced in the collected materialGap
The DPA says an audit report 'may include' a SOC 2 Type II report, available only on request under confidentiality; the DPF certification is self-declared and limited to the U.S. entity; FedRAMP 20x Class A appears only as a 1 October 2026 headline with no boundary or assessor; the technical and organisational measures are incorporated by reference from compliance.elevenlabs.io, which was not collected. On evaluation, the documents show customer-side agent test tooling and one vendor-reported accuracy figure (Scribe v2 Medical) but no published model evaluation, safety testing or red-team results. These domains are marked partial, not not_applicable: a hosted AI vendor can supply all of this evidence.
None of the assurance statements can be cited as verified from vendor pages alone. Buyers should obtain the SOC 2 Type II report, the FedRAMP authorisation details and the TOMs document before relying on them.
Question for vendor: Provide the current SOC 2 Type II report (period and scope), the FedRAMP 20x authorisation boundary and sponsoring agency, the Annex II TOMs document, and any published evaluation or safety-testing results for the Eleven v4 and Scribe v2 model families.
“ElevenLabs shall make available to Customer a then-current, industry standard third-party audit certification or report, which may include a SOC 2 Type II report. The Parties hereby agree that the provision of such report(s) shall satisfy any audit rights Customer may have under Applicable Data Protection Laws.”
“For transfers from the EU, UK and Switzerland to ElevenLabs in the United States, ElevenLabs relies on and complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. You can find further information about our DPF Certification and commitment to the DPF at elevenlabs.io/eu-us-data-privacy-framework-policy . Please note that this certification applies only to ElevenLabs’ U.S. entity.Transfers”
“ElevenLabs is now FedRAMP 20x Class A certified Category Company Date Oct 1, 2026”
“Test version metadata : Agent test results now identify the agent version they ran against and whether they included draft changes. Invocation summaries also indicate when partial resubmissions ran against different versions.”
“35% fewer transcription errors on clinical audio than Scribe v2 Same accuracy on everyday speech as Scribe v2”
“In processing Customer Personal Data hereunder, ElevenLabs will implement the relevant technical and organizational measures set forth in the document titled ‘Annex II (Technical and Organizational Measures)’, available at https://compliance.elevenlabs.io/ .”
?Technical dependency observed: GoogleObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Google as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Google appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Models control the quality, latency, and language coverage of generated audio. eleven_v4 produces the most expressive output across 90+ languages. eleven_v4_turbo targets real-time use at median inference latency of ~100ms. Each capability — speech-to-text, music, sound effects — has its own dedicated model.”
“Its features are powered by an in-house developed deep learning model for speech synthesis which realistically renders human intonation and inflections, and can adjust delivery based on context. ElevenLabs also offers a suite of tools for voice cloning and designing synthetic voices, aimed at providing users with new creative outlets.”
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“Vendors and Service Providers. We share your personal information with vendors and service providers who help us run the Services and handle data on our behalf. They help with things like content moderation, service eligibility, intellectual property protection, analytics, web hosting, data analysis or enrichment, advertising, marketing, IT, customer service and auditing.”
?Technical dependency observed: StripeObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Stripe as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Stripe appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Models control the quality, latency, and language coverage of generated audio. eleven_v4 produces the most expressive output across 90+ languages. eleven_v4_turbo targets real-time use at median inference latency of ~100ms. Each capability — speech-to-text, music, sound effects — has its own dedicated model.”
“Its features are powered by an in-house developed deep learning model for speech synthesis which realistically renders human intonation and inflections, and can adjust delivery based on context. ElevenLabs also offers a suite of tools for voice cloning and designing synthetic voices, aimed at providing users with new creative outlets.”
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“Vendors and Service Providers. We share your personal information with vendors and service providers who help us run the Services and handle data on our behalf. They help with things like content moderation, service eligibility, intellectual property protection, analytics, web hosting, data analysis or enrichment, advertising, marketing, IT, customer service and auditing.”
?Technical dependency observed: MicrosoftObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Microsoft as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“Models control the quality, latency, and language coverage of generated audio. eleven_v4 produces the most expressive output across 90+ languages. eleven_v4_turbo targets real-time use at median inference latency of ~100ms. Each capability — speech-to-text, music, sound effects — has its own dedicated model.”
“Its features are powered by an in-house developed deep learning model for speech synthesis which realistically renders human intonation and inflections, and can adjust delivery based on context. ElevenLabs also offers a suite of tools for voice cloning and designing synthetic voices, aimed at providing users with new creative outlets.”
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“Vendors and Service Providers. We share your personal information with vendors and service providers who help us run the Services and handle data on our behalf. They help with things like content moderation, service eligibility, intellectual property protection, analytics, web hosting, data analysis or enrichment, advertising, marketing, IT, customer service and auditing.”
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the score40
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“ElevenLabs is also unveiling its AI Speech Classifier . This tool will enable anyone to upload an audio sample and find out whether the clip contains AI-generated audio from ElevenLabs. This product is the first of its kind in the generative audio space. It is now available to the public and to selected partners as an API. The release of the AI Speech Classifier is the latest step in the company’s push for transparency, and it is a cornerstone of their commitment to creating a safe generative media landscape.”
“The data controller is: ElevenLabs Poland sp. z o.o. Plac Marszałka Józefa Piłsudskiego 8, 00-073 Warsaw Poland You can contact ElevenLabs Poland sp. Z.o.o using the details provided above or by email to [email protected]”
“Workspaces centralize billing, shared resources, team access and API key management. Enterprise workspaces add SSO over SAML 2.0 or OIDC, and audit logs of administrative actions in the OCSF schema.”
AI system15% of the score53
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“ElevenLabs provides AI voice infrastructure: text-to-speech, speech-to-text, voice cloning, voice agents, and generative audio. You can use it in four ways, suited to different audiences. ElevenCreative is a no-code web application where creators, producers, and editors generate voiceovers, music, dubs, and studio projects directly in the browser. ElevenAgents is the platform for designing and operating voice agents, with a visual builder for non-technical users and full programmatic control for developers. ElevenAPI exposes every capability as a REST interface with official Python and TypeScript SDKs, so developers can embed voice into their own applications and workflows. Reception.ai is a ready-to-deploy AI phone receptionist for small and medium businesses that answers calls, books appointments, and manages day-to-day operations from a single dashboard.”
“ElevenAgents combines speech recognition, an LLM of your choice, text to speech and turn-taking into a single voice agent that you configure in the dashboard or through the SDKs.”
“Models control the quality, latency, and language coverage of generated audio. eleven_v4 produces the most expressive output across 90+ languages. eleven_v4_turbo targets real-time use at median inference latency of ~100ms. Each capability — speech-to-text, music, sound effects — has its own dedicated model.”
How AI features are evaluated before and after release, evals, red-teaming, monitoring.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
“Test version metadata : Agent test results now identify the agent version they ran against and whether they included draft changes. Invocation summaries also indicate when partial resubmissions ran against different versions.”
“35% fewer transcription errors on clinical audio than Scribe v2 Same accuracy on everyday speech as Scribe v2”
How changes to models and AI features are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“Seedance 1.5 Pro deprecated : ByteDance retires Seedance 1.5 Pro on November 11, 2026. The model is no longer offered for new generations and will stop working on that date. Use a Seedance 2.0 model instead.”
“Added eleven_v4 and eleven_v4_turbo to the conversational TTS model options. The default changed from eleven_flash_v2 to eleven_v4_turbo .”
AI system description: vendor-evidenced, not yet independently corroborated.
Change management: vendor-evidenced, not yet independently corroborated.
Model10% of the score40
Which model providers and versions process customer data, and how changes to them are disclosed.
Assessed against NIST GenAI · ISO 42001
“Models control the quality, latency, and language coverage of generated audio. eleven_v4 produces the most expressive output across 90+ languages. eleven_v4_turbo targets real-time use at median inference latency of ~100ms. Each capability — speech-to-text, music, sound effects — has its own dedicated model.”
“Its features are powered by an in-house developed deep learning model for speech synthesis which realistically renders human intonation and inflections, and can adjust delivery based on context. ElevenLabs also offers a suite of tools for voice cloning and designing synthetic voices, aimed at providing users with new creative outlets.”
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
Customer data15% of the score77
Whether customer data trains models, how long it is retained, where it is processed, and how it is protected.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“Research and develop our AI models: We use your personal information to research, build, train and improve our AI models. This includes our models learning patterns in speech and audio. For more information about our training practices, and controls we offer you, see here . Inputs & Outputs”
“Opt out of training: You can opt out of our use of your personal information at any time by navigating to the 'Data use' menu in the 'Terms and Privacy' section of your ElevenLabs account. The opt-out only applies to and affects use of your personal information for training after you opt-out.”
“ElevenLabs shall not Process Customer Personal Data other than: (i) on Customer’s relevant documented instructions, which, for avoidance of doubt, are set forth in the Agreement (including this DPA); or (ii) as expressly permitted by Applicable Data Protection Laws.”
“For Customers licensing ElevenLabs’ enterprise-level Services, Customer Content will be deleted from the Services within thirty (30) days of the expiration or termination of the Agreement, unless Customer consents to retention beyond such period;”
“For Customers licensing ElevenLabs’ non-enterprise Services (“ Self-Serve Services ”), ElevenLabs reserves the right, but has no obligation to, delete Customer Content from such Self-Serve Services after a period of inactivity of one-hundred and eighty (180) days.”
“Contained in ElevenLabs’ backup systems pursuant to an automatic archival process, provided such information is purged in accordance with ElevenLabs’ standard retention policies in respect thereof.”
“We won't keep data we generate about your voice for longer than 3 years after your last interaction with us, unless the law requires or allows otherwise.”
“Wherever you are, your personal information will be transferred to the United States for storage.”
“Data residency stores your data in isolated environments in the EU, India or Singapore instead of the default U.S. location. It is an Enterprise feature.”
“Notwithstanding any selected or agreed upon Data Residency or any other term to the contrary, Customer Personal Data may nevertheless be processed outside of such Data Residency location, including, but not limited to, the following instances: 13.1.1. Subprocessors: ElevenLabs may engage Subprocessors (per the process set forth in Section 6 hereof) located outside of the selected Data Residency location.”
“Moderation Team: ElevenLabs’ safety team may, in the course of their responsibilities, access Customer Personal Data from outside of the Data Residency location for purposes of reviewing and managing Customer Content, including to ensure compliance with the Prohibited Use Policy.”
“Private deployments run ElevenAgents, Text to Speech and Speech to Text inside your own cloud account, so text, audio and transcripts stay in your network.”
Customer data treatment: the certifications above are independently corroborated, but they cover the management system — these specific disclosures are the vendor's own statements, not yet independently verified.
AI supply chain10% of the score40
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“Agent models : Added gpt-6-sol , gpt-6-luna , glm-52 , deepseek-v41-flash , claude-opus-5 and claude-opus-5-5 to the supported agent LLM options.”
“Sora 2 and Sora 2 Pro retired : OpenAI is discontinuing the Sora API on September 24, 2026. Both models have been removed from the Image & Video model picker and stop generating on that date. Existing generations remain available in your history. Flows and templates that use a Sora node need to be switched to another video model, such as Gemini Omni 1.1 Flash , before they can run again.”
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io (“ Subprocessor List ”). 6.2. ElevenLabs will enter into a written agreement with such Subprocessors which imposes relevant privacy and data security obligations in respect of the Customer Personal Data, which shall be substantially as protective as the terms set forth in this DPA. 6.3. ElevenLabs will notify Customer at least thirty (30) days prior to appointing any new or replacement Subprocessor (“ Notice Period ”) by updating the Subprocessor List.”
“Vendors and Service Providers. We share your personal information with vendors and service providers who help us run the Services and handle data on our behalf. They help with things like content moderation, service eligibility, intellectual property protection, analytics, web hosting, data analysis or enrichment, advertising, marketing, IT, customer service and auditing.”
Security foundation15% of the score50
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
“Contact: https://elevenlabs.io/security/report Expires: 2027-10-06T00:00:00.000Z”
“ElevenLabs shall notify Customer without undue delay upon confirming a Security Incident, providing Customer with reasonable information relating to such Security Incident, including information required to be provided by ElevenLabs to Customer under Applicable Data Protection Laws.”
Independent assurance evidence10% of the score55
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
“ElevenLabs shall make available to Customer a then-current, industry standard third-party audit certification or report, which may include a SOC 2 Type II report. The Parties hereby agree that the provision of such report(s) shall satisfy any audit rights Customer may have under Applicable Data Protection Laws.”
“For transfers from the EU, UK and Switzerland to ElevenLabs in the United States, ElevenLabs relies on and complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. You can find further information about our DPF Certification and commitment to the DPF at elevenlabs.io/eu-us-data-privacy-framework-policy . Please note that this certification applies only to ElevenLabs’ U.S. entity.Transfers”
“ElevenLabs is now FedRAMP 20x Class A certified Category Company Date Oct 1, 2026”
Read from the registry record above, cited, not reproduced.
None of the corroborated certifications is AI-specific (ISO/IEC 42001 or AIUC-class) — this assurance is security and data-transfer attestation, not AI-management-system assurance.
Legal & contractual10% of the score60
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“This Policy does not cover personal information we collect when you use ElevenLabs services through one of our business customers (for example, if you use an ElevenLabs service through your employer or our technology powers voice functionality on a service offered by another company).”
“ElevenLabs shall make available to Customer a then-current, industry standard third-party audit certification or report, which may include a SOC 2 Type II report. The Parties hereby agree that the provision of such report(s) shall satisfy any audit rights Customer may have under Applicable Data Protection Laws.”
“In processing Customer Personal Data hereunder, ElevenLabs will implement the relevant technical and organizational measures set forth in the document titled ‘Annex II (Technical and Organizational Measures)’, available at https://compliance.elevenlabs.io/ .”
“In respect of the SCCs incorporated herein: (i) the Parties hereby agree such SCCs shall be deemed executed upon this DPA taking effect; (ii) the Parties conclude the relevant module applicable to Controller-to-Processor transfers, or to the extent Customer is a Processor of a Third-Party Controller, the Processor-to-Processor module; (iii) ElevenLabs shall be deemed the “data importer” and Customer shall be deemed the “data exporter”, and each party’s details shall be as set forth in the Agreement;”
Legal & contractual transparency: vendor-evidenced, not yet independently corroborated.
Not graded: Agent, not applicable to this scan.
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 53 → up to 78 with every identified gap resolved.
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesAssurance evidence: certifications 5, registry checks and verification ladders, click to view
DPA 10.1 says the audit report made available on request 'may include a SOC 2 Type II report'; the documents do not assert a report currently exists or state its scope, period or auditor.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Self-declared in the Privacy Policy; stated to apply only to ElevenLabs' U.S. entity. Not checked against the DPF list from these documents.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Evidenced only by a related-article headline dated 1 October 2026; authorisation boundary, services in scope and sponsoring agency are not in the collected documents.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Not claimed in any public source scanned. This is the AI-management-system certification — in its absence, the vendor’s AI governance rests on its general security and privacy certifications.
Checked against Data Privacy Framework (dataprivacyframework.gov), Oct 21, 2026: Verified on the registry
Sources 13, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
Want to go further?
This scan assesses ElevenLabs at an organisational level. Assurance can vary significantly between products, models and agents, enter the product you’re evaluating to run a deeper AI System Assurance Scan.
Scan a specific product →This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.