Subprocessors v2024.11.15

Synthesia Legal Hub

Last updated November 15, 2024

Third Party Sub-processors

Synthesia uses the third party entities below (each, a “sub-processor”) to process personal data on behalf of Synthesia Customers and in accordance with contract terms between Synthesia and the sub-processor.

You can sign-up here to receive email notifications when we add new sub-processors.

Synthesia Affiliates

Depending on the geographic location of a Customer or their Authorized Users, and the nature of the Services provided, Synthesia may engage the following Affiliates, as Sub-processors, to deliver some or all of the Services provided to a Customer:

1. Name: Synthesia Inc.

Address: 874 Walker Road, Suite C, City of Dover, DE 19904, United States
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

2. Name: Synthesia B.V.

Address: Grote Bickersstraat 74, 1013 KS Amsterdam, Netherlands
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

3. Name: Synthesia GmbH

Address: Pacellistraße 8, 80333 München, Germany
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

4. Name: Synthesia ApS

Address: Vesterbrogade 149, bygning 4, 1.tv, 1620 København V. Denmark
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer

Infrastructure Sub-processors

Synthesia may use the following Sub-processors to host Customer Data or provide other infrastructure that helps with delivery of our Services:

1. Name: Amazon Web Services EMEA SARL

Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
Contact person’s name, position and contact details: Laura Wainwright, AWS account manager lauwai@amazon.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Web hosting, data storage and compute for video processing services. Scripts, audio, and video data is stored and transmitted for the purpose of video creation.

2. Name: MongoDB Limited

Address: Building Two, Number One Ballsbridge, Dublin 4, Ballsbridge, Dublin, Ireland
Contact person’s name, position and contact details: MongoDB’s DPO at privacy@mongodb.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Structuring and storing production data

3. Name: Mux Inc.

Address: 1182 Market St. Suite 425 San Francisco, CA 94102, United States
Contact person’s name, position and contact details: Mrs. Becca Axvig – becca@mux.com, Head of People
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video content delivery network

Script Processing Sub-processors

Synthesia may use the following Sub-processors to perform other Services functions that involve processing of the scripts uploaded by the Customer:

1. Name: Google Cloud EMEA Limited

Address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Contact person’s name, position and contact details: Emil Ochotta, Data Protection Officer, https://support.google.com/cloud/contact/dpo
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): text-to-speech conversion, speech-to-text conversion, machine translation of scripts to different languages

2. Name: IBM United Kingdom Limited

Address: PO Box 41 North Harbour, Portsmouth, PO6 3AU, United Kingdom
Contact person’s name, position and contact details: chiefprivacyoffice@ca.ibm.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion

3. Name: Deep Zen Ltd.

Address: Flat 1, 66 Upper, Richmond Road, London SW15 2RP, United Kingdom
Contact person’s name, position and contact details: Taylan Kamis CEO, taylank@deepzen.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion

4. Name: WellSaid Labs Inc.

Address: 2157 N Northlake Way, Ste 110, Seattle, WA, 98103-9184, United States
Contact person’s name, position and contact details: Marta Mueller, Customer Success Manager, marta@wellsaidlabs.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion

5. Name: Microsoft Ireland Operations Limited

Address: South County Business Park Leopardstown, Dublin 18, D18 P521, Ireland
Contact person’s name, position and contact details: Contact web form available here https://www.microsoft.com/en-us/concern/privacy or via physical address
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Content moderation, text-to-speech, speech-to-text conversion

6. Name: Eleven Labs Inc.

Address: 169 Madison Ave #2484 New York, NY 10016, United States
Contact person’s name, position and contact details: Carles Reina, carles@elevenlabs.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion, voice cloning

7. Name: DeepL SE

Address: Maarweg 165, 50825 Cologne, Germany
Contact person’s name, position and contact details: DeepL's external corporate Data Protection Officer, Dr. Christian Lenz, can be contacted at the following address: dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, via email to datenschutz(at)dhpg.de, or by telephone on +49 2261 8195 0.
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Machine translation of scripts to different languages

8. Name: OpenAI OpCo, LLC

Address: 3180 18th St., San Francisco, CA 94110, United States
Contact person’s name, position and contact details: Jason Kwon, General Counsel, legal@openai.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Provides responses to the user’s queries when prompted to create a video script using AI from within the product. Content moderation. Sub-processor will not use the data for any internal purpose including training of the LLM models (https://openai.com/policies/api-data-usage-policies)

Asset Processing Sub-processors

Synthesia may use the following Sub-processors to perform other Services functions that involve processing of the other assets uploaded by the Customer:

1. Name: UAB ConvertAPI

Address: Lauksargio g. 111, Vilnius LT-10105, Lithuania
Contact person’s name, position and contact details: data-protection@convertapi.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Conversion of PowerPoint presentations uploaded by the customers into slides in STUDIO. No persistent storage is utilised.

2. Name: Deepgram, Inc.

Address: 548 Market St, Suite 25104, San Francisco, CA 94104-5401, United States
Contact person’s name, position and contact details: Chris Dyer, VP of Sales, security@deepgram.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Speech-to-text conversion, speaker diarization.

3. Name: Canva Austria GmbH (formerly named Kaleido AI GmbH)

Address: Ungargasse 37/BT1/3.3, 1030 Wien, Austria
Contact person’s name, position and contact details: Michal Dzujka, Customer Success Manager, michal@kaleido.ai
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video processing to prepare a custom avatar. Video data of a person is transmitted and stored for a time-limited period for the purpose of pre-processing video to create a custom avatar for the service.

4. Name: Runway AI, Inc.

Address: 18 West 18th Street, 11th Floor, New York, NY10011, USA
Contact person’s name, position and contact details: Runway Legal, legal@runwayml.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video generation based on an image prompt.

5. Name: Features &Labels, Inc.

Address: 6020 Adeline St, Oakland, CA 94608, United States
Contact person’s name, position and contact details: support@fal.ai
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): processing uploaded images and prompts to fine-tune and perform inference on models for customising certain Avatar types.

6. Name: AssemblyAI, Inc.

Address: 2261 Market Street, #4577, San Francisco, CA, 94114
Contact person’s name, position and contact details: 226 Market Street, #4577, San Francisco, California 94114, support@assemblyai.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): speech-to-text conversion.

Other Sub-processors

Synthesia may use the following Sub-processors to perform other Services functions that involve processing of the other data supplied by the Customer:

1. Name: Intercom R&D Unlimited Company

Address: 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland
Contact person’s name, position and contact details: Intercom Privacy Team, legal@intercom.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Support ticketing system and widget