Data

Descript and the GDPR: AI training, data location and DPA

Business: Trains on your data unless you switch it off. EU hosting not documented · DPA not stated.

Vendor: Descript, Inc.Meetings and notesChecked on How we check

Verdict

Is Descript GDPR compliant?

Business

Business

Trains on your data unless you switch it off

EU hosting not documented · DPA not stated

Price: $50 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Descript train on your data?

Trains on your data by default?

Checked

Trains on your data unless you switch it off.

Yes, unless the customer opts out: the Terms allow Descript to use inputs and outputs of its AI tools to train its models; opt out under App Settings > Profile > Share data with Descript. Enterprise drives have sharing disabled.

Vendor's wording: “This includes use by Descript to train, improve, and develop its models and technologies (unless you have opted out of such use)”

Source: descript.com8.4 Generated Output (e)Checked on

Switch-off

How do you turn off AI training in Descript?

How to switch training off

Checked

You can switch the training off.

Switch off "Share data with Descript": App Settings (Cmd/Ctrl + comma) > Profile tab > Share data with Descript > click Allowed to toggle it off. Enterprise drives have no toggle; sharing is disabled by default there

Vendor's wording: “Enterprise drives do not have the option to toggle data sharing, which is disabled by default.”

Source: help.descript.comDisabling data sharing; introSecond source: descript.comChecked on

Location

Where does Descript store your data?

Where data is stored by default

Checked

United States: the subprocessor list shows Data Region US for AWS and Google Cloud, Descript's hosting providers

Vendor's wording: “Here’s a list of subprocessors we work with, and the teams that use their services.”

Source: descript.comData Region columnChecked on

Processors

Who else handles Descript data?

Sub-processors (companies that handle the data for them)

Checked

Published.

Yes, public list at descript.com/subprocessors: 49 rows, 46 distinct companies; AI-related include OpenAI API, Anthropic API, OpenRouter, Hugging Face, Baseten, ElevenLabs, Braintrust

Vendor's wording: “Here’s a list of subprocessors we work with, and the teams that use their services.”

Source: descript.comDescript Data SubprocessorsChecked on

EU–US Data Privacy Framework

Checked

Not listed.

No listing found for search term 'Descript'

Source: dataprivacyframework.govSearch 'Descript' returned 'Query returned no results'Checked on

Retention

How long does Descript keep your data?

How long data is kept

Checked

Deleting a project removes it from servers within 30 days; deleting the user account permanently deletes all its data

Vendor's wording: “When you delete a project from Descript, we delete it permanently from our servers within 30 days.”

Source: descript.comData deletionChecked on

Security

Which certifications and admin controls does Descript have?

Security certifications

Checked

1 named: SOC 2 Type II

Vendor's wording: “We have achieved SOC 2 Type II compliance by going through a Certified Public Accounting firm”

Source: descript.comSOC 2Checked on

The vendor doesn't say: EU hosting, DPA, admin controls, price.

Alternatives

Descript alternatives that don't train on your data

Other meetings and notes tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • jamie

    Team · €33 / user / mo

    Doesn't train on your dataData in the EU by default · DPA on request

    ✓✓✓✓✓

  • Leexi

    Business · €39 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Noota

    Business · $39 / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • tl;dv

    Business (+1) · €29 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Trint

    Advanced · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices