Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.

Does ElevenLabs train on your data? (Business plans)

ElevenLabs · Voice · Last verified

Not stated

Vendor pages don't say clearly.

Short answer: Unknown

Privacy policy says ElevenLabs uses personal information (incl. inputs & outputs) to build, train and improve its models; business/enterprise defaults not stated on pages checked. Third-party LLM providers are barred from training.

Why this matters: Unknown doesn't mean no. Ask ElevenLabs to confirm in writing before sharing confidential data, because training can't be undone. Why training matters →

5/7 assurances found·7 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for ElevenLabs, each linked to ElevenLabs's own page.

Summary of ElevenLabs's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with ElevenLabs before relying on it.

Trains on your data by default

Unknown

Privacy policy says ElevenLabs uses personal information (incl. inputs & outputs) to build, train and improve its models; business/enterprise defaults not stated on pages checked. Third-party LLM providers are barred from training.

Source:

Data retention

Varies by product; Zero Retention Mode deletes on completion

Default retention listed per product; e.g. fine-tune training data retained 30 days.

SOC 2 Type II

Type not stated

SOC 2 renewed (type not stated in post).

Source:

ISO/IEC 27001

Yes

ISO/IEC 27001:2022.

Source:

ISO/IEC 42001

Yes

ISO/IEC 42001:2023.

Source:

DPA available

Unknown

Not stated on the ElevenLabs pages we checked.

BAA / HIPAA

Yes

HIPAA support for enterprise workspaces with a BAA plus Zero Retention Mode.

Source:

Data residency options

Yes

EU and US residency workspaces.

Zero-retention option

Yes

Zero Retention Mode (Enterprise) for eligible endpoints.

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

Compare with

See all Voice tools · Why AI training on your data matters · How we source and verify this