# Synthesia
Synthesia allows you to create videos directly in a web browser. Simply select an actor, type in the text and use AI to generate your video without the need for actors, film crew or expensive equipment and post-production. You can create stunning business videos in minutes.
## Resources
[Bulk download](https://security.synthesia.io/doc/trust-zip?r=bgaqilc1h4h1jme68icyq) Opens in new tab
### Reports
| |
| --- |
| #### Futuresafe: Synthesia's 2025 Responsible Creation Report
Copy link for Futuresafe: Synthesia's 2025 Responsible Creation Report
Request access Futuresafe: Synthesia's 2025 Responsible Creation Report |
### Certificates
| |
| --- |
| #### ISO/IEC 27001:2022 Certificate
Copy link for ISO/IEC 27001:2022 Certificate
View ISO/IEC 27001:2022 Certificate |
| #### ISO/IEC 27701:2019 Certificate
Copy link for ISO/IEC 27701:2019 Certificate
View ISO/IEC 27701:2019 Certificate |
| #### ISO/IEC 42001:2023 Certificate
Copy link for ISO/IEC 42001:2023 Certificate
View ISO/IEC 42001:2023 Certificate |
| #### SOC2 Bridge Letter - May 2026
Copy link for SOC2 Bridge Letter - May 2026
Request access SOC2 Bridge Letter - May 2026 |
| #### SOC 2 Type II report 2025
Copy link for SOC 2 Type II report 2025
Request access SOC 2 Type II report 2025 |
| #### CyberEssentials Certificate
Copy link for CyberEssentials Certificate
Cyber Essentials Certificate of Assurance
Request access CyberEssentials Certificate |
| #### ISO/IEC 27001:2022 Statement of Applicability
Copy link for ISO/IEC 27001:2022 Statement of Applicability
View ISO/IEC 27001:2022 Statement of Applicability |
| #### ISO/IEC 42001:2023 Statement of Applicability
Copy link for ISO/IEC 42001:2023 Statement of Applicability
View ISO/IEC 42001:2023 Statement of Applicability |
### Assessments
| |
| --- |
| #### Synthesia_2026_Penetration_Test_Executive_summary_Report.pdf
Copy link for Synthesia_2026_Penetration_Test_Executive_summary_Report.pdf
Synthesia 2026 Penetration_Test_Executive summary Report
Request access Synthesia_2026_Penetration_Test_Executive_summary_Report.pdf |
| #### Synthesia_2026_Penetration_Test_Report.pdf
Copy link for Synthesia_2026_Penetration_Test_Report.pdf
Penetration Test Report
Request access Synthesia_2026_Penetration_Test_Report.pdf |
| #### Data Protection Impact Assessment
Copy link for Data Protection Impact Assessment
Request access Data Protection Impact Assessment |
| #### AI Impact Assessment
Copy link for AI Impact Assessment
Request access AI Impact Assessment |
| #### Transfer Impact Assessment (TIA) - US Processors
Copy link for Transfer Impact Assessment (TIA) - US Processors
Request access Transfer Impact Assessment (TIA) - US Processors |
### Questionnaires
| |
| --- |
| #### CAIQv4.0.2 STAR Security Questionnaire
Copy link for CAIQv4.0.2 STAR Security Questionnaire
Request access CAIQv4.0.2 STAR Security Questionnaire |
| #### SIG Lite questionnaire
Copy link for SIG Lite questionnaire
Request access SIG Lite questionnaire |
| #### AI Governance FAQ
Copy link for AI Governance FAQ
See also https://www.synthesia.io/legal/ai-governance-practices
Request access AI Governance FAQ |
| #### Higher Education Community Vendor Assessment Toolkit
Copy link for Higher Education Community Vendor Assessment Toolkit
The Higher Education Community Vendor Assessment Toolkit™ (HECVAT) is a tool designed to help college and university professionals more easily measure vendor risk.
Request access Higher Education Community Vendor Assessment Toolkit |
### Diagrams
| |
| --- |
| #### Data flow & Architecture Diagrams
Copy link for Data flow & Architecture Diagrams
Request access Data flow & Architecture Diagrams |
### General
| |
| --- |
| #### AI Screen Recorder - Security Overview.pdf
Copy link for AI Screen Recorder - Security Overview.pdf
Security overview of the Synthesia AI Screen Recorder Chrome extension
Request access AI Screen Recorder - Security Overview.pdf |
### Policies
| |
| --- |
| #### Privacy and Information Security Policy (AUP)
Copy link for Privacy and Information Security Policy (AUP)
Request access Privacy and Information Security Policy (AUP) |
| #### Access Control Policy
Copy link for Access Control Policy
Request access Access Control Policy |
| #### Asset Management Policy
Copy link for Asset Management Policy
Request access Asset Management Policy |
| #### Business Continuity and Disaster Recovery Plan
Copy link for Business Continuity and Disaster Recovery Plan
Request access Business Continuity and Disaster Recovery Plan |
| #### Cryptography Policy
Copy link for Cryptography Policy
Request access Cryptography Policy |
| #### Incident Response Plan
Copy link for Incident Response Plan
Request access Incident Response Plan |
| #### Information Security Roles and Responsibilities
Copy link for Information Security Roles and Responsibilities
Request access Information Security Roles and Responsibilities |
| #### Secure Development Policy
Copy link for Secure Development Policy
Request access Secure Development Policy |
| #### Code of Conduct
Copy link for Code of Conduct
Request access Code of Conduct |
| #### Human Resource Security Policy
Copy link for Human Resource Security Policy
Request access Human Resource Security Policy |
| #### Physical Security Policy
Copy link for Physical Security Policy
Request access Physical Security Policy |
| #### Third-Party Management Policy
Copy link for Third-Party Management Policy
Request access Third-Party Management Policy |
| #### Anti-discrimination Policy
Copy link for Anti-discrimination Policy
Request access Anti-discrimination Policy |
| #### Anti-harassment Policy
Copy link for Anti-harassment Policy
Request access Anti-harassment Policy |
| #### Data Subject Request Policy
Copy link for Data Subject Request Policy
Request access Data Subject Request Policy |
| #### Operations Security Policy
Copy link for Operations Security Policy
Request access Operations Security Policy |
| #### Data Privacy and GDPR Compliance Policy
Copy link for Data Privacy and GDPR Compliance Policy
Request access Data Privacy and GDPR Compliance Policy |
| #### Data Management Policy
Copy link for Data Management Policy
Request access Data Management Policy |
### Other resources
| |
| --- |
| #### Synthesia Assistant Security Data Privacy Overview
Copy link for Synthesia Assistant Security Data Privacy Overview
Synthesia Assistant is an AI-powered video creation feature integrated directly into Synthesia Studio. It enables creators to build, edit, and iterate on videos through natural language conversation — describe what you want, attach URLs or documents, and the Assistant orchestrates all the work automatically.
Request access Synthesia Assistant Security Data Privacy Overview |
| #### Scaling AI Avatars Responsibly - Template Avatar Governance Framework and Policy Template
Copy link for Scaling AI Avatars Responsibly - Template Avatar Governance Framework and Policy Template
A template to help Synthesia customers establish governance for the use of avatars.
Request access Scaling AI Avatars Responsibly - Template Avatar Governance Framework and Policy Template |
| #### Scaling Avatar's Responsibily - Template Avatar Use Policy
Copy link for Scaling Avatar's Responsibily - Template Avatar Use Policy
A template policy to help customers establish governance and provenance when using avatars.
Request access Scaling Avatar's Responsibily - Template Avatar Use Policy |
| #### Risk Management Policy
Copy link for Risk Management Policy
Request access Risk Management Policy |
| #### Synthesia Limited - 2026 - Type 2 SOC 2 - CoAO
Copy link for Synthesia Limited - 2026 - Type 2 SOC 2 - CoAO
View Synthesia Limited - 2026 - Type 2 SOC 2 - CoAO |