Descript
medium riskAudio & Video Editingdescript.comverified 2026-03-29
Data-handling profile
- Trains on input
- Unknown / not publicly stated
- Retention
- Content is retained as long as the account is active. Deleted projects are kept in the trash for 30 days before permanent deletion. Upon account deletion, content and personal data are deleted from active databases within 30 days and from backup systems within 90 days.
- Data region
- United States (AWS)
- Certifications
- SOC 2 Type II
- DPA available
- Yes
- Breach history
- None documented
- EU AI Act
- Primarily classified as low-risk or general-purpose AI. However, synthetic media generation capabilities (such as the Overdub voice cloning feature) fall under transparency disclosure obligations, requiring users to clearly label AI-generated or altered audio/video content.
Sources
- https://www.descript.com/security
- https://www.descript.com/privacy
- https://www.descript.com/terms
- https://help.descript.com/hc/en-us/articles/17391963068941-GDPR-and-Descript
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.