Synthesia

Synthesia allows you to create videos directly in a web browser. Simply select an actor, type in the text and use AI to generate your video without the need for actors, film crew or expensive equipment and post-production. You can create stunning business videos in minutes.

As a company pioneering this new kind of media, we’re aware of the responsibility we have. It is clear to us that artificial intelligence and similarly powerful technologies cannot be built with ethics and security as an afterthought. They need to be front and centre and an integral part of the company. This is reflected in our SOC2 report, our company policies and in the technology we are building. It is also the reason why we are an active member of Content Authenticity Initiative which was started by Adobe in 2019.

See this page for more details on our commitment to ethics and our 3Rs framework ( Review, Report, and React).

We are SOC2 Type II compliant and fully certified within ISO/IEC 27001:2022, ISO/IEC 27701:2019, and ISO/IEC 42001:2023.

Controls

Updated 8 minutes ago

Infrastructure security

• Unique production database authentication enforced
• Encryption key access restricted
• Unique account authentication enforced

Organizational security

• Employee background checks performed
• Confidentiality Agreement acknowledged by contractors
• Confidentiality Agreement acknowledged by employees

Product security

• Data encryption utilized
• Control self-assessments conducted
• Penetration testing performed

Internal security procedures

• Cybersecurity insurance maintained
• Configuration management system established
• SOC 2 - System Description

Data and privacy

• Customer data deleted upon leaving

Compliance

ISO/IEC 42001:2023

ISO/IEC 27001:2022

ISO/IEC 27701:2019

SOC 2 Type II

GDPR

UK Cyber Essentials

FAQ

Do you support Single Sign-On (SSO)?

Where is your data stored?

Will any of the data be shared with any third parties (e.g., sub-processors) at any point?

What encryption methods and processes are used to protect data in-transit or at-rest?

Data collected

• Video data of a person to create a custom avatar
• Voice audio data of a person to create a custom voice
• Incidental PII as part of video scripts
• Music and image assets uploaded as part of the video generation process
• Employee personally identifiable information (name, email address, IP address)

Updates

Synthesia

Published December 19, 2025

We’re proud to announce that Synthesia has successfully achieved ISO/IEC 27701:2019 certification — the leading international standard for Privacy Information Management Systems (PIMS). This certification confirms that our controls for handling and protecting personal data meet rigorous global requirements for both PII Controllers and PII Processors, as validated by A-LIGN with zero nonconformities during the Stage 2 audit.

This achievement builds on our existing ISO/IEC 27001 and ISO/IEC 42001 certifications, reinforcing Synthesia’s ongoing commitment to continuous improvement, transparency, and the highest standards of security and privacy. Customers can rely on Synthesia to safeguard personal data with independently verified controls aligned with international best practices.