VeraxConsole
← All vendors

HeyGen

medium risk

AI Video Generationheygen.comverified 2024-05-22

Data-handling profile

Trains on input
No — does not train on customer inputs
Retention
User content is retained to provide the service; users may delete content at any time. For Enterprise accounts, specific data retention policies can be configured via DPA.
Data region
United States (primarily AWS us-east-1)
Certifications
SOC 2 Type IIISO 27001
DPA available
Yes
Breach history
No public record of major data breaches.
EU AI Act
As a provider of AI-generated media, HeyGen is subject to transparency obligations under the EU AI Act, requiring explicit disclosure that content is AI-generated (watermarking).

Sources

Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.

Watch this vendor

Get an email the day HeyGen changes what it does with your data. Your address is never shown publicly or shared.

Change history

No material changes recorded since monitoring began.