# Description

## Kurzbeschreibung
**"AI editing for every kind of video."**


**Descript** is an AI-powered audio and video editor that lets you record, transcribe, edit, and publish content.


A key feature is text-based editing: video and audio editing works similarly to editing a document. Added to that are features like Underlord as an AI co-editor, screen recording, remote recording, AI voices, automatic clips, subtitles, and translation/dubbing.

## Claim
AI editing for every kind of video

## Geeignet für
- Audio / Voice
- Education
- Marketing & Advertising
- Social Media
- Translations
- Sales / Sales
- Video

## Kernfunktionen
- Audio Cleanup
- Podcast Production
- Text-to-Speech
- Voice Cloning
- Transcription
- Subtitling
- Video Editing

## Preismodell
- **free:** Free entry for recording, transcription, text-based editing, and limited AI/media usage.
- **subscription:** **Hobbyist** For individuals; watermark-free projects, more media time, and basic AI features.


**Creator** For active creators and small teams; more media time, more AI credits, and advanced creative AI features.


**Business** For teams; more media time, more AI credits, Brand Studio, team features, translation/dubbing, and collaboration.
- **other:** **Enterprise** Custom offer with SSO, SCIM, centralized administration, dedicated Customer Success, security documentation, and Enterprise support.


**AI Credits / Media Hours** Usage is based on media time and AI credits depending on the plan; additional Enterprise and Team quotas are possible.

## DSGVO und Datenschutz
**Gesamteinschätzung:** Conditional

**On-prem / local hosting: indirect / not available**

No on-premises, self-hosted, or locally operated version was found on the website. The website describes web and desktop apps whose project data is stored on Descript servers.

**Private Cloud / Data Center: Unclear**

There are references to enterprise offerings and a “trust report,” but the website does not specifically describe a dedicated private cloud, a segregated EU/EEA data center, or a controlled single-tenant environment.

**EU SaaS / Managed: Indirect / Not Available**

A self-hosted SaaS solution exists, but the website does not specify EU data residency or an EU/EEA hosting option. Instead, the privacy policy refers to processing and storage in the U.S.

**Hybrid: unclear**

No documented hybrid model was found on the website in which relevant processing components are operated separately locally, in a private cloud, or in EU SaaS.

**T&Cs / DPA: Partially**

The security page states that Descript only works with third-party providers who commit to Data Processing Agreements. However, no DPA directly accessible to customers or a clear process for entering into such agreements was explicitly found on the website.

**No Training: Partially**

The Help page explains that current production models do not use Descript user data, and internal research and development models only use data from users who have consented to data sharing; an opt-out is available and is disabled by default for Enterprise accounts. At the same time, the privacy policy for “AI Speakers” includes broader use for research, analysis, and improvement purposes, which is why there is no evidence on the website of a completely general exclusion for any training use.

**Open Source / Transparency Path: Partial**

There is a limited transparency path: The Security page refers to Whisper as an “open-source transcription model,” and the Help page links to “Show software licenses” for open-source licenses within the app. However, a true open-source, self-hostable, or model-open sovereignty path for the entire solution is not documented on the website.

**Data Processing**

According to the website, project data is stored on Descript servers to enable collaboration, version history, and access from different computers. Media, audio, video, and transcription data are stored on Amazon S3 or Google Cloud after initial transcription. Descript also lists various subprocessors. It is important for EU/EEA users to note that the privacy policy explicitly mentions processing and storage in the U.S. and does not guarantee EU data residency.

**Conclusion**

For an EU/EEA tool directory, Descript is *not* documented as a clearly EU-resident or sovereign service in terms of data protection and hosting. There are transparent data protection and security documents, but standard use involves processing in the U.S., transfers to third countries, and a lack of explicitly stated EU data residency. Therefore, from the perspective of the entire European region, its use under the GDPR is rather **limited** and cannot be reliably presented as fully compliant without further review.

**Sources**

- [https://www.descript.com/privacy](https://www.descript.com/privacy)
- [https://www.descript.com/security](https://www.descript.com/security)
- [https://www.descript.com/subprocessors](https://www.descript.com/subprocessors)
- [https://help.descript.com/hc/en-us/articles/10255866490125-Account-data-and-privacy](https://help.descript.com/hc/en-us/articles/10255866490125-Account-data-and-privacy)
- [https://help.descript.com/hc/en-us/articles/10337720480653-Contact-Descript](https://help.descript.com/hc/en-us/articles/10337720480653-Contact-Descript)

Descript provides several pieces of data protection and security information relevant to the EU/EEA region on its website, including a privacy policy outlining EEA rights, a list of subprocessors, information on data encryption, a DPO contact, and statements regarding AI training and opt-out options. At the same time, the website does not specify EU/EEA data residency or EU servers as mandatory options for standard SaaS use; rather, it states that Descript is based in the United States and processes and stores information in the United States. Thus, GDPR-compliant use from an EU/EEA perspective is not generally guaranteed, but is subject to conditions such as careful contract review, third-country transfer assessments, and internal risk assessments.

**Positive**

Positive aspects include the existing privacy policy, the explicit address to users in the EEA, the designated contact address of the Data Protection Officer, the published list of subprocessors, the statement regarding SOC 2 Type II compliance, the reference to DPAs with third-party providers, and an opt-out option for data sharing for internal AI training purposes. Additionally, Descript describes encryption at rest and in transit.

**Negative**

From an EU/EEA perspective, it is a negative that the website does not list any EU data residency, any EU/EEA data center, or any on-premises/self-hosting option. The privacy policy states that Descript is based in the U.S. and processes and stores information in the U.S. The subprocessors page lists locations primarily in the U.S. For AI Speakers, the privacy policy also reserves the right to use associated training data for research and development purposes; a general contractual exclusion for any form of training is not comprehensively documented on the website.

**Server Location**

The website does not specify an EU/EEA server location for customer data in a binding manner. The Security page lists Amazon S3 or Google Cloud as storage locations without guaranteeing an EU region. The privacy policy explicitly states that Descript is based in the U.S. and processes and stores information in the U.S.

## Hosting und Daten
- **On-Prem / lokales Hosting:** unknown
- **Private Cloud / Rechenzentrum:** unknown
- **EU SaaS / Managed:** unknown
- **Hybrid:** unknown
- **AVV / DPA:** teilweise / indirekt
- **Kein Training auf Kundendaten:** teilweise / indirekt
- **Open-Source / Transparenz-Pfad:** teilweise / indirekt

## Standort
**Land:** USA

**Taxonomie:** USA

Descript, Inc., 385 Grove St., San Francisco, CA 94102, USA

## Vorteile
- Very low barrier to entry thanks to text-based editing.
- All-in-one for recording, transcription, audio/video editing, and publishing.
- Broad AI feature set: Underlord, Studio Sound, Remove Filler Words, Create Clips, AI Speech, Video Generate, avatars.
- Collaboration and team features available; Enterprise with SSO/SCIM and granular controls.
- Good transparency regarding security/subprocessors.

## Nachteile
- US-based processing and storage; therefore only limitedly suitable for GDPR-sensitive use cases.
- Many subprocessors with US data regions.
- Advanced governance/security features are in the Enterprise tier.
- The free plan is rather limited for real ongoing work.
- A publicly linked DPA/AVV or SCC details are not clearly indicated.

## Quellen
- Offizielle Website: https://www.descript.com/

## Letzter Datenstand
2026-04-28

## Originalseite
https://kifox.ai/en/ki-tools/description-en/