{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"descript","name":"Descript","domain":"descript.com","category":"Media and content","one_liner":"Descript is the AI video and audio editor that makes editing as easy as editing","trust_center_url":"https://www.descript.com/","security_page_url":null,"url":"https://certreports.com/vendors/descript/security","last_verified_at":"2026-09-21T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on custom as of 21 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"custom","url":"https://certreports.com/vendors/descript/soc-2","evidence":[{"source_type":"trust_center","source_name":"Descript trust centre (Custom)","url":"https://www.descript.com/","fetched_at":"2026-09-21 23:04:14.361802+00","content_hash":"b1c32e7a0557881eeb43082479fdee46619b290d577be9553556a1e7d56d9587","wayback_url":null,"quote":"SOC 2 Type II","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on custom as of 21 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"custom","url":"https://certreports.com/vendors/descript/gdpr","evidence":[{"source_type":"trust_center","source_name":"Descript trust centre (Custom)","url":"https://www.descript.com/","fetched_at":"2026-09-21 23:04:14.361802+00","content_hash":"b1c32e7a0557881eeb43082479fdee46619b290d577be9553556a1e7d56d9587","wayback_url":null,"quote":"GDPR","confidence":1}]}],"brief":{"summary":"Descript, a media and content vendor, states SOC 2 Type II on its trust centre as of 21 Sep 2026. No auditor name or report period is included in the SOC 2 Type II evidence as of 21 Sep 2026. Descript states GDPR on its trust centre as of 21 Sep 2026. No further scope detail accompanies the GDPR claim as of 21 Sep 2026. Both the SOC 2 Type II and GDPR claims for Descript are vendor statements sourced from its trust centre as of 21 Sep 2026, rather than independently verified registry listings or third-party audit reports.","bullets":["SOC 2 Type II: vendor-stated, no auditor or period end captured (as of 21 Sep 2026).","GDPR: vendor-stated, no scope detail captured (as of 21 Sep 2026).","Evidence set for Descript covers two vendor-stated frameworks as of 21 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-22 10:07:27.053236+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/descript/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-22T10:07:40.116Z"}