Data

HeyGen and the GDPR: AI training, data location and DPA

Business: Trains on your data unless you switch it off. EU hosting not documented · DPA in the terms.

Vendor: HeyGen Technology Inc.Design, images and videoChecked on How we check

Verdict

Is HeyGen GDPR compliant?

Business

Business

Trains on your data unless you switch it off

EU hosting not documented · DPA in the terms

Price: $149 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does HeyGen train on your data?

Trains on your data by default?

Checked

Trains on your data unless you switch it off.

Yes. HeyGen says data of non-enterprise customers may be used to train and enhance the models behind its services; only enterprise customers' data is excluded. Users can opt out by email

Source: security.heygen.comTrust centre FAQ 'Does HeyGen train its models on my data?'Second source: heygen.comChecked on

Switch-off

How do you turn off AI training in HeyGen?

How to switch training off

Checked

You can switch the training off.

Yes, by email: users can ask HeyGen to opt them out of training using the contact address in the privacy policy; no setting is documented

Source: heygen.comSection on using input to train and enhance models ('You may request to opt-out … by contacting us')Second source: security.heygen.comChecked on

Location

Where does HeyGen store your data?

Where data is stored by default

Checked

United States: HeyGen's services are hosted on AWS in the US

Source: heygen.comInfrastructure sectionChecked on

Contract

Does HeyGen sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes, for organisations: when the terms are accepted for an entity, HeyGen's Data Processing Addendum governs personal data in the content uploaded

Source: heygen.comClause on Data Processing Addendum ('where you agree to these terms on behalf of an entity')Second source: heygen.comChecked on

Processors

Who else handles HeyGen data?

Sub-processors (companies that handle the data for them)

Checked

20 listed.

Public. 20 entries, 19 in the US and BytePlus in Singapore; AI from Anthropic, OpenAI, xAI, Google, Microsoft Azure, ElevenLabs, fal, Cartesia and Gladia

Source: security.heygen.comTrust centre section 'Subprocessors' (View all)Second source: heygen.comChecked on

Security

Which certifications and admin controls does HeyGen have?

The vendor doesn't say: EU hosting, retention, admin controls, price.

Alternatives

HeyGen alternatives that don't train on your data

Other design, images and video tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Canva

    Business · €170 / user / yr

    Doesn't train on your dataEU hosting only on higher plans · DPA on request

    ✓✕✓✓✓

  • remove.bg

    monthly subscription · See details

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

  • Synthesia

    Pro · $89 / mo

    Doesn't train on your dataNo EU hosting · DPA on request

    ✓✕✓✓✓

  • VEED

    Business · See details

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓?✓

  • Gamma

    Business · €35 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✕

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices