# HeyGen ## Kurzbeschreibung **“Turn text into video with AI”** **HeyGen **is an AI video platform that enables the creation, localization, and personalization of avatar-based videos from text, images, audio, presentations, or templates. The product includes, among other things, AI Studio, Video Translation, Digital Twins, Voice Cloning, Video Agent, as well as API, CLI, and MCP access. Officially, HeyGen states that it has 100,000+ teams on the web platform and 1,000,000+ developers on the developer platform. ## Claim Turn text into video with AI ## Geeignet für - API Integration - Education - Email / Communication - Marketing & Advertising - Social Media - Translations - Sales / Sales - Video ## Kernfunktionen - Avatar Creation - Voice output - Voice cloning - Subtitling - Video generation - Video Translation ## Preismodell - **free:** Limited number of short videos, custom digital twin, standard processing, stock avatars, 720p export, sharing/download, as well as trial access to premium features. - **subscription:** **Creator** For solo creators; longer videos, Custom Digital Twin, unlimited Photo Avatars, many Stock Video Avatars, Voice Cloning, many languages, faster processing, 1080p, Brand Kit, and watermark removal. **Pro** For advanced individuals; everything in Creator plus significantly more premium usage, faster processing, translation script editing, and 4K export. **Business** For teams/businesses; everything in Creator plus more generative usage, multiple Custom Digital Twins, centralized billing, Auto-Reload Credits, team members, Workspace Collaboration, comments, interactive videos, Screen Recorder, SCORM export, LMS and automation integrations. - **other:** **Enterprise** Custom offer with unlimited videos, no maximum video duration, 4K, fastest processing, multi-workspace control, role management, SCIM, MFA, commercial contract terms, priority support, dedicated CSM, and onboarding. **API Pricing** Separate API access for developers and product teams; HeyGen refers to a separate API pricing overview. ## DSGVO und Datenschutz **Gesamteinschätzung:** Conditional **On-prem / local hosting: indirect / not available** An on-premises or local hosting option is not listed on the website. The documented deployment is public cloud on AWS in the U.S. **Private Cloud / Data Center: Unclear** A dedicated private cloud or isolated EU/EEA data center option is not specified on the website. Only logical data separation and public cloud operation on AWS in the U.S. are mentioned. **EU SaaS / Managed: Partially** HeyGen offers a managed SaaS service and mentions GDPR, SCCs, and the EU-US DPF. However, EU data residency or storage within the EU/EEA is not documented; instead, according to the website, all customer data is stored in the U.S. **Hybrid: Indirect / Not Available** A hybrid operating model involving partly internal, local, or private processing and partly external SaaS is not specified on the website. **T&C / DPA: Covered** A Data Processing Addendum is published on the website. The DPA is expressly incorporated into the Enterprise SaaS Agreement; Enterprise customers can enter into a DPA. **No Training: Partially** According to the Security page, Enterprise customer data is excluded from AI training by default. According to the Security page and Privacy Policy, non-Enterprise customers can object to training via email. At the same time, the Privacy Policy lists AI model training as a separate processing purpose of HeyGen. **Open Source / Transparency Path: Indirect / Not Available** Open-source components, open models, or self-hostable parts are not specified on the website. The only positively documented aspect is the return of customer data in a common format upon contract termination. **Data Processing** HeyGen describes itself as either a data processor or a data controller, depending on the context of the processing. For customer data in the service context, HeyGen processes data as a data processor in accordance with customer instructions and the DPA. According to the Security page, the technical infrastructure is hosted in the public cloud on AWS in the U.S. According to the website, transfers to third countries for EU/EEA customers are to be safeguarded via the EU-US DPF and SCCs. Subprocessors are provided for and referenced via the security portal; new subprocessors are to be announced, with customers having the option to object in the DPA. For Enterprise customers, AI training using customer data is excluded by default; for non-Enterprise customers, there is an opt-out option via email. **Conclusion** From a GDPR perspective, HeyGen can be **conditionally** classified as an EU/EEA tool: legal and organizational components are documented, but data processing remains U.S.-centric according to the website. Those with strict requirements regarding EU data residency, EU/EEA hosting, or sovereign operating models will find no documented path to meet these requirements on the website. For less stringent scenarios, use of the service—with a DPA, SCCs/DPF, and careful configuration—may be more justifiable, particularly in an enterprise context. **Sources** - [https://www.heygen.com/privacy](https://www.heygen.com/privacy) - [https://www.heygen.com/security](https://www.heygen.com/security) - [https://www.heygen.com/data-processing-addendum](https://www.heygen.com/data-processing-addendum) - [https://www.heygen.com/master-saas-agreement](https://www.heygen.com/master-saas-agreement) - [https://www.heygen.com/faq](https://www.heygen.com/faq) - [https://www.heygen.com/trust-and-safety](https://www.heygen.com/trust-and-safety) - [https://security.heygen.com/](https://security.heygen.com/) For users in the EU/EEA, GDPR-compliant use of HeyGen is only plausible under certain conditions that are properly documented; it is not considered standard use that is entirely unproblematic. Positive aspects include an available DPA, SCCs, the EU-US Data Privacy Framework, a European DPO, and documented sub-processor arrangements. However, a negative aspect is that, according to the website*, all* customer data is stored on AWS in the U.S., and the website does not specify any EU/EEA data residency, any EU data center, or any on-premises/self-hosting option. For standard SaaS in the EU/EEA, a third-country transfer to the U.S. therefore remains an inherent part of the service. **Positive** The website documents a privacy policy, a Data Processing Addendum, SCC information for EU/UK/Switzerland transfers, EU-US DPF certification, a DPO based in Europe, SOC 2 Type II, and an opt-out from AI training. For Enterprise customers, data use for AI training is excluded by default. **Negative** The website states that all HeyGen customer data is stored in the U.S. on AWS. The website does not specify EU data residency, EU/EEA data centers, a private cloud option in the EU/EEA, a hybrid model, or on-premises/self-hosting. Furthermore, according to the privacy policy, HeyGen reserves the right to process data for its own purposes, including service improvement and AI model training; for non-enterprise customers, the only option mentioned is to opt out by contacting the company. **Server Location** According to the website, the services are hosted on AWS in the U.S.; all customer data is stored in the U.S. EU/EEA server locations are not specified on the website. ## Hosting und Daten - **On-Prem / lokales Hosting:** unknown - **Private Cloud / Rechenzentrum:** unknown - **EU SaaS / Managed:** teilweise / indirekt - **Hybrid:** unknown - **AVV / DPA:** abgedeckt - **Kein Training auf Kundendaten:** teilweise / indirekt - **Open-Source / Transparenz-Pfad:** unknown ## Standort **Land:** USA **Taxonomie:** USA HeyGen Technology, Inc., 12130 Millennium Drive, Suite/STE 300, Los Angeles, CA 90094, USA ## Vorteile - Very strong focus on scalable AI video creation rather than just individual files. - Strong in multilingualism/localization with voice cloning and lip-sync. - Well suited for marketing, sales, L&D, internal communication, and customer success. - Team/business features such as workspace collaboration, centralized billing, team management, SCORM/LMS, and admin/security features. - Developer access via API, CLI, and MCP. ## Nachteile - According to the official GDPR page, all data is stored in the USA; EU data residency is not mentioned as a standard feature. - Non-Enterprise customers are not excluded from AI training by default; opting out is required. - Many governance/security features such as SCIM, SSO/MFA, and multi-workspace controls are only available in higher Business/Enterprise tiers. - Web plans and API plans are separate; API credits are not included in standard web subscriptions. - As of February 2026, there are no longer any free API credits for the API. ## Quellen - Offizielle Website: https://www.heygen.com/pricing ## Letzter Datenstand 2026-04-16 ## Originalseite https://kifox.ai/en/ki-tools/heygen-en/