ElevenLabs
ElevenLabs · Audio and voice · US · elevenlabs.io
services/elevenlabs.yamlVendor data-handling terms
“We process your Input (which may include text, audio, or other content) and Output and any other information you provide in connection with your use of the Services, including any Personal Information contained therein. / We may process your Personal Data to research, develop, train and/or otherwise improve our AI models.”
“We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it unless we are required or permitted by law to keep this information for a longer period.”
“We maintain hosting and/or server locations in the United States, the Netherlands, and Singapore.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.elevenlabs.io | api | observed |
| elevenlabs.io | app | observed |
Assessment
Reasoning: Voice synthesis and cloning: input audio is voice data, output is a reusable voice. The policy permits training on personal data including input and output, with no opt-out described on standard plans, and retention is open-ended. Hosting includes the Netherlands, so EU residency may be available but is not promised per plan. A cloned employee voice is a fraud instrument in itself. Enterprise terms are separate and not verified here.
Flags: Training on input and output · Voice cloning (impersonation risk) · Biometric-adjacent data (voice) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and hosting terms verified against the ElevenLabs privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.