ElevenLabs

Security and trust center evidence

ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning

elevenlabs.io AI toolsLast verified 3 Nov 2026

Request the report Are you ElevenLabs?

ISO 27001Vendor-stated

CSA STARVendor-stated

ISO 27701Vendor-stated

ISO 42001Vendor-stated

SOC 3Verified

ISO 27017Vendor-stated

ISO 27018Vendor-stated

NHS DSPTVendor-stated

ElevenLabs has 2 registry-verified rows and 14 vendor-stated rows in the CertReports index, last verified 3 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

ElevenLabs has a SOC 2 Type II report, evidenced by its public SOC 3 report (Insight Assurance) for the period ending 30 Jun 2026, issued 29 Sep 2026, as of 26 Oct 2026. The vendor states on its trust centre as of 21 Sep 2026 that it holds ISO/IEC 27001:2022, ISO/IEC 42001:2023, ISO/IEC 27701:2019, ISO/IEC 27017:2015, and ISO/IEC 27018:2019. ElevenLabs displays a HIPAA badge on its trust centre as of 21 Sep 2026, with BAA availability unconfirmed. The same trust centre statement, also dated 21 Sep 2026, lists GDPR, PCI DSS 4.0.1 Level 1, CSA STAR L1, CCPA/CPRA, TX-RAMP Level 2, UK Cyber Essentials Plus, HDS, and NHS DSPT. These vendor-stated frameworks reflect claims from 21 Sep 2026, while the SOC 2 and SOC 3 evidence is independently verified as of 26 Oct 2026.

SOC 2 Type II report evidenced via SOC 3 (Insight Assurance), period ending 30 Jun 2026, issued 29 Sep 2026, as of 26 Oct 2026.
States ISO/IEC 27001:2022, ISO/IEC 42001:2023 and related ISO standards on its trust centre as of 21 Sep 2026.
Displays a HIPAA badge on its trust centre as of 21 Sep 2026; BAA availability not confirmed.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.

Among ai tools vendors

2verified rows

Category median 0, across 96 indexed ai tools vendors. ElevenLabs has more verified rows than 95 percent of them.

ai audiospeech synthesistext-to-speechvoice cloning

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, Cyber Essentials. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 29 subprocessors listed on the trust centre · as of 21 Sep 2026

Open

Public · as of 21 Sep 2026

Open

Public trust centre documents

Public · 2025 SOC 3 Report Final.pdf; ISO 27001/17/18 - ISMS Certificate - ElevenLabs.pdf; ISO 27701 - PIMS Certificate - Eleven Labs.pdf; ISO 42001 - AIMS Certificate - Eleven Labs.pdf; Cyber Essentials Plus Certificate 2025.pdf; Cyber Essentials Certificate 2025.pdf · as of 19 Sep 2026

Open

Subprocessors (29)

AnthropicLLM Services · United States
AsanaCollaboration · US
AW
AWSCloud infrastructure & data storage · Enterprise: US or Customer's Selected Hosting Location; Non-Enterprise: US, EU or Singapore
AZ
AzureCloud infrastructure, data storage & LLM Services · India
BY
ByteDanceGeneration and processing of synthetic media content · Indonesia, Malaysia, EU
CI
CinderModeration · EU
CR
CreatifyGeneration and processing of synthetic media content · United States
ElevenLabs AffiliatesAffiliates · Global
FA
FalGeneration and processing of synthetic media content · Global
FivetranData processing · US
Google Cloud PlatformCloud infrastructure, security, data storage & LLM Services · Enterprise: US or Customer's Selected Hosting Location; Non-Enterprise: US, EU or Singapore
HI
HiveAI Safety · United States
KL
KlingGeneration and processing of synthetic media content · Singapore
MongoDBEngineering · Enterprise: US or Customer's Selected Hosting Location; Non-Enterprise: US, EU or Singapore
OP
OpenAILLM Services · US/EU
OWND ApS (ParaHelp)Customer support · US
PL
PlainCustomer support · United Kingdom
PO
PostHogCloud monitoring · EU
PY
PylonCustomer support · US
RunwayGeneration and processing of synthetic media content · United States
SI
SigmaAnalytics · US
SlackCollaboration · US
ST
StripePayments · US
SY
SyncGeneration and processing of synthetic media content · United States
TR
TrustpilotReviews · EU
TwilioCommunications · US
xAILLM Services · US
ZapierCollaboration · US
ZE
ZendeskCustomer Support · US

Security profile

Pen test cadence: annual

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

26 Oct 2026SOC 2 state changedState moved from Vendor-stated to Verified.
26 Oct 2026SOC 3 state changedState moved from Expired to Verified.
26 Oct 2026SOC 2 auditor changedAuditor changed from unknown to Insight Assurance.
1 Oct 2026SOC 2 state changedState moved from Verified to Vendor-stated.
1 Oct 2026SOC 3 state changedState moved from Verified to Expired.
25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
25 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Verified.
25 Sep 2026SOC 2 auditor changedAuditor changed from unknown to Insight Assurance.
19 Sep 2026First indexed by CertReports15 evidence rows across 15 frameworks entered the index.