Independent AI index
for professionals

Home / Safety / Descript for communications & media

DDescript, Inc., San Francisco (US)

How safe is Descript for communication & media?

GDPR profileOur summary of what the provider itself publishes about your data: whether the data is held in the EU (2 points), whether there is certification or a GDPR guarantee (1), and whether the provider is based in the Netherlands or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure for communication & mediaUnknown

The maker of Descript publishes little about data protection. Ask before you put confidential communications & media data into it.

Where does Descript stand in communications & media?

Shared place 28 of 38 options for communications & media (professional tools and general assistants) on GDPR profile. 4 options, like Descript, have an unknown profile. Each tile is an option we track for this field; click for the check.

Strong9
Good7
AP
Limited11
DHSML
Unknown4
D
Caution7

Published safeguards

None of these three found in what the provider publishes; you can read what is there below. Is this your tool? Add the details

US company (not EU), California law. Transcription via Rev and a self-hosted Whisper model, avatars via Hedra, custom voices via Google Cloud; the language model Underlord uses is not stated. Descript may use inputs and outputs to train its own models unless you opt out; third parties may not contractually train on them. Storage in the US (Amazon S3 or Google Cloud). SOC 2 Type II; a data processing agreement for customers and a transfer mechanism were not found.

How to use Descript safely

  • Use the business variant and sign a data processing agreement (DPA).
  • Do not enter unnecessary personal data into prompts; anonymise where possible.
  • Ask the provider explicitly where data is stored and processed.
  • Keep a professional in the loop: copyright and source protection weigh heavily: check whether AI output can be used without rights issues, and never put informants' source material into a consumer chatbot.

Stronger or equally strong in communications & media

AmberScriptAmberScript (Amsterdam, Netherlands)TrintTrint Limited (London, UK)LimecraftLimecraft, Ghent (BE)PresspagePresspage B.V. (Amsterdam, NL)Cyaniteelceedee UG (haftungsbeschränkt), Mannheim (Germany)

Questions

How safe is Descript for communications & media?
The maker of Descript publishes little about data protection. Ask before you put confidential communications & media data into it. The provider publishes little on this, so ask before business use.
Does Descript train on my data?
US company (not EU), California law. Transcription via Rev and a self-hosted Whisper model, avatars via Hedra, custom voices via Google Cloud; the language model Underlord uses is not stated. Descript may use inputs and outputs to train its own models unless you opt out; third parties may not contractually train on them. Storage in the US (Amazon S3 or Google Cloud). SOC 2 Type II; a data processing agreement for customers and a transfer mechanism were not found.
What should I look out for with AI in communication & media?
Copyright and source protection weigh heavily: check whether AI output can be used without rights issues, and never enter informants' source material into a consumer chatbot.

Source documents

www.descript.comwww.descript.comwww.descript.comwww.descript.com

Everything about DescriptBest AI for communications & media

Summarised by the editorial team from provider documentation · not legal advice

Last checked: 9 November 2026 · How we check

Next stepAll 38 options for communications & mediaProfessional tools and general assistants side by side, on GDPR profile, price and quality.

Every Friday: what changed in AI for communications & media

New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.

View a sample

We only use your address for this newsletter. You confirm first by email.