Snapshot 14017

Document
Trust center
URL
https://compliance.elevenlabs.io/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
150633 bytes
SHA-256 (raw)
e92b9c97bb5aca152a26d54a442502f0e85afd4ae219f62161b6f14761d11bc1
SHA-256 (normalized text)
2bedb30d4e39b012e8f614f1552600284243a1989b0f43fa5fe32c73ee004002

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
ElevenLabs
We are an audio AI research & product deployment company on a mission to build the singular most important audio AI platform in the world, solve AI audio intelligence and make information accessible in any voice, language & sound.
security-assurance@elevenlabs.io
Privacy PolicyOpens in new tab
Filter by
ElevenLabs Customer StoriesOpens in new tab Discover how the world’s leading teams use ElevenLabs for better customer experiences and high-quality content production.
Compliance
SOC 2 Type 2
ISO 27001:2022
ISO 27017:2015
ISO 27018:2019
ISO 27701:2019
ISO/IEC 42001:2023
PCI DSS 4.0.1 Level 1
FedRAMP® 20x Class A
CSA STAR L1
AIUC-1
HIPAA
HDS
GDPR
CCPA
CPRA
LGPD
DORA
EU AI ACT
UK Cyber Essentials Plus
TX-RAMP Level 2
NHS DSPT
EcoVadis Committed
Trusted Partner Network - Blue Shield
Resources
View all
Whitepapers and Case Studies
HIPAA Whitepaper - ElevenLabs v1.2.pdf
NIST AI Risk Management Framework Readiness Case Study
Opens in new tab
Audit Reports
2025 SOC 2 Type 2 + HIPAA Report Final.pdf
ElevenLabs SOC 2 Type II Bridge Letter 2026-09-03.pdf
AIUC-1 Audit Report for ElevenLabs Docs Agent.pdf
Certificates
View 6 more
Model Cards
View 6 more
Legal
View 5 more
Pentests
WebApp & API Penetration Testing Report v3.0.pdf
Internal Network Penetration Testing Report v1.0.pdf
Mobile App Pentest 2 Apr 2026.pdf
Questionnaires
CAIQv4.1.0Opens in new tab
SIG LITE.xlsx
Customer Resources
FedRAMP 20x
certification-overview-package.jsonOpens in new tab
elevenlabs-agency-use-case-PUBLIC.docxOpens in new tab
elevenlabs-fedramp-progress-PUBLIC.docxOpens in new tab
mas-in-scope-resources.json
View 12 more
Controls
Updated less than a minute ago
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 10 more Infrastructure security controls
Organizational security
Employee background checks performed
Code of Conduct acknowledged by employees and enforced
Confidentiality Agreement acknowledged by employees
View 4 more Organizational security controls
Product security
Control self-assessments conducted
Vulnerability and system monitoring procedures established
Data encryption utilized
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and disaster recovery plans tested
Configuration management system established
View 25 more Internal security procedures controls
Data and privacy
Data retention procedures established
Data classification policy established
Customer data deleted upon leaving
Data supported
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
Subprocessors
View all
ElevenLabs Affiliates
•
Affiliates
Global
ElevenLabs leverages its affiliates in connection with providing Services to its customers. These affiliates include Eleven Labs Ltd. (UK), Eleven Labs Poland Sp. z o.o (Poland), Eleven Labs Japan Godo Kaisha (Japan), Eleven Labs Tech Middle East Ltd (UAE), Eleven Labs Auto India Pvt Ltd (India) and Eleven Labs Ireland Global Empl. Ltd (Ireland).
Google Cloud Platform
•
Cloud infrastructure, security, data storage & LLM Services
Enterprise: US or Customer's Selected Hosting Location; Non-Enterprise: US, EU or Singapore
Enterprise plan customers may select from a set of specified data hosting locationsOpens in new tab, subject to availability and ElevenLabs’ discretion. This includes Gemini & Anthropic models available in ElevenAgents via Vertex AI.
For non-Enterprise plan customers, customer data may be processed in the US, EU, or Singapore for latency and service performance purposes. LLM Services may also be used for research, development, training, and product improvement purposes, to the extent permitted under the applicable agreement with the customer.
AWS
•
Cloud infrastructure & data storage
Enterprise: US or Customer's Selected Hosting Location; Non-Enterprise: US, EU or Singapore
Enterprise plan customers may select from a set of specified data hosting locationsOpens in new tab, subject to availability and ElevenLabs’ discretion.
For non-Enterprise plan customers, customer data may be processed in the US, EU, or Singapore for latency and service performance purposes.
Azure
•
Cloud infrastructure, data storage & LLM Services
India
With respect to LLM Services, to the extent India Data Residency is selected by the customer per the terms of such customer's agreement, LLMs may be provided through Azure. Availability subject to ElevenLabs' discretion.
FAQ
View all
Updates
View all
Compliance
ISO 27701 & ISO 42001 Certification
Published February 10, 2026
ElevenLabs has officially achieved ISO 27701 (Privacy Information Management) and ISO 42001 (AI Management Systems) certifications, marking a major milestone in our commitment to secure and ethical AI development. By meeting these rigorous international standards, we ensure our PII handling is world-class and our AI models are governed by a framework of transparency and accountability. These certifications provide our creators and enterprise partners with the highest level of assurance that as we scale the future of AI audio, responsible innovation remains our top priority.
Compliance
LGPD Alignment
Published February 7, 2026
ElevenLabs is pleased to announce the successful completion of an independent audit against the requirements of the Brazilian General Data Protection Law (LGPD). This milestone, confirmed by Insight Assurance, underscores our commitment to data privacy for our customers in the Brazilian region.
The LGPD Compliance Status Report is now available to our Enterprise customers via the Compliance Portal.
Compliance
HDS Certification
Published January 22, 2026
Our Agents and API platforms are now HDS certified - the French standard required for hosting and processing personal health data.
When used with EU Data Residency and Zero Retention mode, the HDS (Hébergeur de Données de Santé) certification by Schellman confirms that our systems meet the highest standards of data protection and compliance under French law - marking another step forward in delivering secure, compliant AI infrastructure for our customers.
Media
View all
Guardrails 2.0 in ElevenAgents Opens in new tab