Runway
high riskAI Media Generationrunwayml.com, app.runwayml.comverified 2026-06-27
Data-handling profile
- Trains on input
- Yes, on all tiers
- Retention
- Free, Standard, Pro, and Unlimited plans: Runway retains a license to train on user inputs/outputs with no opt-out. Enterprise tier: customer data is excluded from training per separate contract terms.
- Data region
- US
- Certifications
- SOC 2 Type II
- DPA available
- Yes
- Breach history
- none known (a former-employee leak of internal spreadsheets alleging planned training on YouTube creator/studio content surfaced in 2024, but this was a training-data sourcing controversy, not a customer data breach)
- EU AI Act
- High-risk-adjacent as a generative media (deepfake-capable) system; likely subject to GPAI transparency and content-provenance/watermarking obligations under the EU AI Act.
Sources
- https://runwayml.com/data-security
- https://runwayml.com/privacy-policy
- https://help.runwayml.com/hc/en-us/articles/24300377879827-Understanding-Runway-s-security-and-privacy-standards
- https://venturebeat.com/ai/runway-faces-backlash-after-report-of-copying-ai-video-training-data-from-youtube
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.