Vendor Privacy Scorecard · Descript
Descript: is it safe for client information?
AI audio and video editing, transcription and voice cloning.
Bottom line
Fine for marketing videos and podcasts. Get written consent before cloning anyone's voice.
Does it train on your data? By plan
Free, Hobbyist and Creator: User or admin setting
Check the AI training setting in your account privacy settings.
Business and Enterprise: User or admin setting
Admins can manage settings. Confirm training terms in your contract.
What an auditor will ask
- Trains AI on your data? Depends on plan
- Controlled by account settings and plan terms.
- Retention you can control? Depends on plan
- Files stay in your account until deleted.
- Signs a HIPAA BAA? No
- Not designed for health information.
- Staff may read your content? Depends on plan
- Follows plan terms.
Security certifications
- SOC 2 Type II
Set it up the safe way
- Turn off AI training in account settings if available.
- Get written consent before cloning any voice.
- Keep client recordings out unless the client agreed.
Descript trust centerBusiness privacy terms
Summarized from Descript's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.
Using Descript at work? An unvetted tool can cost you your license.
When an employee pastes client information or confidential files into Descript without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.
Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.