"Building AI to Simulate the World"
Runway is an AI platform for generative media production with a focus on AI video, image generation, video editing, performance capture, audio/voice features, workflows, and API access.
The tool is aimed at creators, marketing teams, film/media production, agencies, developers, and companies that want to create or edit visual content with AI.
Runway
Building AI to Simulate the World
Location: USA ⓘ Runway AI, Inc., 18 West 18th Street, 11th Floor, New York, NY 10011, USA
Pro More credits, access to all apps, workflows, generative video models, third-party models, more storage, and advanced creative features.
Unlimited Everything in Pro plus Explore Mode for unlimited image and video generations at a relaxed speed; additionally, monthly credits for features without Explore Mode. Other Enterprise Custom enterprise offering with SSO, custom credits, configurable organization and team spaces, Advanced Security, onboarding, success program, and priority support.
Credits / Additional Credits Runway uses credits for many generation features; additional credits are available for paid plans.
Target audience
Runway is primarily aimed at creative professionals, filmmakers, motion designers, social media teams, marketing departments, agencies, content creators, educational providers, and developers who want to integrate AI-powered media production into their workflows. The tool is particularly strong wherever short to high-quality video clips, visual campaign assets, animated characters, product videos, social media content, or AI-powered video editing are needed. For companies, Runway is especially interesting when enterprise features such as SSO, DPA, compliance, priority support, and internal integrations are required.
Outstanding features
The most important features are AI video generation with Gen-4.5, in-context video editing with Aleph, performance capture via Act-Two or Act-One technologies, interactive Runway Characters, generative image features, audio and voice features, workflows, and an API for developers. Particularly noteworthy are the combination of video creation, video editing, image generation, audio features, and API access in one platform, as well as the option to contractually exclude enterprise customer content from model training.
Main use cases
Runway is used for AI video clips, commercials, social media videos, product visualizations, visual moodboards, storyboards, performance-based character animation, AI video editing, experimental filmmaking, interactive learning and support characters, as well as API-based integration of generative media models. The platform is particularly strong in creative and media-related workflows, and less suitable as a general office, text, research, or project management tool.
Usage & notes
Usage takes place via web app, workflows, and API. For productive use, at least the Standard plan should be chosen, as Free only offers limited testing options. Users should pay attention to the credit system: monthly credits expire, credits are shared in workspaces, and API credits are separate from web app credits. For sensitive personal data, faces, voices, or confidential company content, Enterprise with DPA and contractual exclusion from training is clearly preferable. With consumer or regular self-service plans, it is especially important to check whether inputs and outputs may be used for training or model improvement.
| Target audience | Assessment |
|---|---|
| Creators / Filmmakers / Video teams | Very suitable – for AI videos, image-to-video, text-to-video, video editing, motion, performance capture, and creative film production. |
| Marketing / Social Media / Agencies | Very suitable – for campaign videos, ads, product visuals, social clips, moodboards, and visual concepts. |
| Self-employed / Freelancers | Suitable – for high-quality video assets, prototyping, and client presentations. |
| SMEs / Teams | Suitable to very suitable – if AI video content is created regularly and cloud processing is acceptable. |
| Large enterprises | Suitable – Enterprise offers SSO, custom credits, team spaces, advanced security, onboarding, and priority support. |
| Privacy-sensitive organizations | Conditionally suitable – due to video, image, and audio data as well as cloud processing, only with Enterprise/DPA/security review. |
Hosting & Data
1) On-prem / local hosting
Meaning: The company operates the solution on its own hardware or within its own infrastructure. In the strictest sense, not only the application runs locally, but ideally the model as well.
2) Private cloud / data center
Meaning: The solution runs in a dedicated or more clearly separated cloud environment, often with a hosting provider or hyperscaler, but in a German data center or in a particularly controlled environment.
3) EU SaaS / managed
Meaning: The provider operates the solution itself as a service. The company uses the tool as a ready-made cloud service, ideally with EU data residency.
4) Hybrid
Meaning: One part of the processing remains internal / local / in a private cloud, while another part runs in an external cloud or EU SaaS.
5) AVV / DPA
Meaning: This is the data processing agreement or Data Processing Addendum. It governs that the provider processes personal data on behalf of the customer and is bound by the customer's instructions.
6) No training
Meaning: The provider does not use your prompts, uploads, attachments, chat histories, or outputs for training or improving the general model — ideally excluded by contract.
7) Open-source / transparency path
Meaning: There is a path toward greater technical transparency and sovereignty, for example through:
- open models
- documented components
- self-hostable parts
- traceable architecture
- export / switching options
| On-prem / local hosting | ❓ |
| Private cloud / data center | ⚠️ |
| EU SaaS / Managed | ❓ |
| Hybrid | ❓ |
| DPA / AVV | ✅ |
| No training on customer data | ⚠️ |
| Open source / transparency path | ❓ |
On-Prem / local hosting: indirect / not available
Not specified on the website. No on-premise, local, or self-hosting option was found.
Private Cloud / data center: partial
For Enterprise, there are organizational and contractual security features such as SSO, Enterprise Terms, and control options for third-party models. However, a dedicated EU/EEA private cloud or a segregated EU data center is not specified on the website.
EU SaaS / Managed: unclear
Runway is available as a cloud service, but EU data residency or EU/EEA operation of the SaaS is not specified on the website. Instead, the privacy policy refers to transfers to the USA and other countries.
Hybrid: indirect / not available
Not specified on the website. No hybrid model was found in which parts remain local or in a customer-owned environment.
DPA / DPA: covered
The Enterprise Services Terms explicitly mention a DPA and incorporate it by reference: 'customer-data-processing-addendum.pdf'. This covers a DPA for Enterprise.
No training: partial
For Enterprise, it is clearly stipulated that Runway may not use 'Customer Content' as training data for the services. In addition, the Third-Party Models FAQ mentions contractual commitments by third-party providers not to train on 'Customer Content'. For general non-Enterprise use, no equally strong general commitment was found on the website.
Open source / transparency path: indirect / not available
Open-source models, open core components, or self-hostable parts are not specified on the website. The only positive aspect is a limited transparency path via subprocessors, Trust Center, and export of 'Customer Content' after the end of the contract in the Enterprise context.
Data processing
Runway describes itself as a cloud-based browser service. According to the Privacy Policy, data may be transferred to the USA and other countries. Amazon Web Services is named as one of the providers/vendors. The security page mentions multiple physically separate data centers, but without location details. For Enterprise, Runway refers to a DPA, a subprocessors list, SOC 2 Type II, and contractual restrictions on the use of 'Customer Content'. Third-party models can be administratively disabled in the Enterprise account; according to the FAQ, no data is then sent to these model providers.
Conclusion
For an EU/EEA tool directory, Runway cannot be verified as a clearly EU-resident standard SaaS. The best documented path to a more GDPR-compatible use lies in the Enterprise model with DPA, contractual no-training for 'Customer Content', subprocessor transparency, and administrative control over third-party models. However, due to the lack of EU data residency, the lack of specific EU/EEA data center details, and explicit US data transfers, the overall assessment remains conditional.
Sources
- https://runwayml.com/privacy-policy
- https://runwayml.com/data-security
- https://runwayml.com/enterprise-terms
- https://runwayml.com/customer-data-processing-addendum.pdf
- https://runwayml.com/subprocessors
- https://help.runwayml.com/hc/en-us/articles/51248305153683-Enterprise-FAQ-Third-party-Models-in-Runway
- https://help.runwayml.com/hc/en-us/articles/49237697417875-Enabling-Disabling-Third-Party-Models
- https://help.runwayml.com/hc/en-us/articles/37784857333011-When-to-Choose-an-Enterprise-Subscription
- https://help.runwayml.com/hc/en-us/articles/24300377879827-Understanding-Runway-s-security-and-privacy-standards
| On-prem / local hosting | ❓ |
| Private cloud / data center | ⚠️ |
| EU SaaS / Managed | ❓ |
| Hybrid | ❓ |
| DPA / AVV | ✅ |
| No training on customer data | ⚠️ |
| Open source / transparency path | ❓ |
On-Prem / local hosting: indirect / not available
Not specified on the website. No on-premise, local, or self-hosting option was found.
Private Cloud / data center: partial
For Enterprise, there are organizational and contractual security features such as SSO, Enterprise Terms, and control options for third-party models. However, a dedicated EU/EEA private cloud or a segregated EU data center is not specified on the website.
EU SaaS / Managed: unclear
Runway is available as a cloud service, but EU data residency or EU/EEA operation of the SaaS is not specified on the website. Instead, the privacy policy refers to transfers to the USA and other countries.
Hybrid: indirect / not available
Not specified on the website. No hybrid model was found in which parts remain local or in a customer-owned environment.
DPA / DPA: covered
The Enterprise Services Terms explicitly mention a DPA and incorporate it by reference: 'customer-data-processing-addendum.pdf'. This covers a DPA for Enterprise.
No training: partial
For Enterprise, it is clearly stipulated that Runway may not use 'Customer Content' as training data for the services. In addition, the Third-Party Models FAQ mentions contractual commitments by third-party providers not to train on 'Customer Content'. For general non-Enterprise use, no equally strong general commitment was found on the website.
Open source / transparency path: indirect / not available
Open-source models, open core components, or self-hostable parts are not specified on the website. The only positive aspect is a limited transparency path via subprocessors, Trust Center, and export of 'Customer Content' after the end of the contract in the Enterprise context.
Data processing
Runway describes itself as a cloud-based browser service. According to the Privacy Policy, data may be transferred to the USA and other countries. Amazon Web Services is named as one of the providers/vendors. The security page mentions multiple physically separate data centers, but without location details. For Enterprise, Runway refers to a DPA, a subprocessors list, SOC 2 Type II, and contractual restrictions on the use of 'Customer Content'. Third-party models can be administratively disabled in the Enterprise account; according to the FAQ, no data is then sent to these model providers.
Conclusion
For an EU/EEA tool directory, Runway cannot be verified as a clearly EU-resident standard SaaS. The best documented path to a more GDPR-compatible use lies in the Enterprise model with DPA, contractual no-training for 'Customer Content', subprocessor transparency, and administrative control over third-party models. However, due to the lack of EU data residency, the lack of specific EU/EEA data center details, and explicit US data transfers, the overall assessment remains conditional.
Sources
- https://runwayml.com/privacy-policy
- https://runwayml.com/data-security
- https://runwayml.com/enterprise-terms
- https://runwayml.com/customer-data-processing-addendum.pdf
- https://runwayml.com/subprocessors
- https://help.runwayml.com/hc/en-us/articles/51248305153683-Enterprise-FAQ-Third-party-Models-in-Runway
- https://help.runwayml.com/hc/en-us/articles/49237697417875-Enabling-Disabling-Third-Party-Models
- https://help.runwayml.com/hc/en-us/articles/37784857333011-When-to-Choose-an-Enterprise-Subscription
- https://help.runwayml.com/hc/en-us/articles/24300377879827-Understanding-Runway-s-security-and-privacy-standards
Strengths & weaknesses at a glance
| Strengths | Weaknesses |
|---|---|
| • Very strong focus on high-quality AI video generation and creative control. | • The free version is only suitable for testing: one-time credits, no Gen-4 video, limited projects, and limited storage. |
| • Broad media platform: video, image, audio, workflows, third-party models, and API. | • Monthly credits expire; workspace credits are shared per workspace and are not increased per additional editor. |
| • According to Runway, commercial use of the outputs is not restricted; according to the Help Center, users retain rights to uploaded and generated content. | • Web app credits and API credits are separate. |
| • Enterprise option with SSO, DPA, security/compliance features, and “no training on Customer Content.” | • Unlimited uses “Explore Mode” with a relaxed rate; generations may take longer and concurrent generations are limited. |
| • Well suited for professional media, agency, and marketing workflows. | • According to Runway, Gen-4.5 still has typical video AI limitations in causal reasoning, object permanence, and “success bias.” |
| • For non-Enterprise use, the Terms allow the use of inputs/outputs for training and improving the models. |
Reviews
0 reviews in total
There are no confirmed reviews for this tool yet.
Submit review
Your review will only become visible after email confirmation. This protects the portal against abuse.
Report review
Please select the reason why this review should be checked.
GDPR-compliant usage possible?
For users in the EU/EEA, GDPR-compliant use of Runway is only partially demonstrable. Positive aspects include a published privacy policy with a section for the EEA, an expressly incorporated DPA for Enterprise customers, a published subprocessor reference, SOC 2 Type II evidence, as well as contractual assurances for Enterprise customers that 'Customer Content' is not used as training data. Negative aspects are that the website does not specify EU data residency or concrete EU/EEA data center locations for standard SaaS use, while the privacy policy expressly refers to transfers to the USA and other countries. This means that privacy-compliant use appears more feasible via the Enterprise route with a DPA and contractual safeguards, but not clearly and straightforwardly for all usage variants.
Positive
The website includes a privacy policy with EEA relevance, a DPA incorporated into the Enterprise terms, a reference to subprocessors, SOC 2 Type II, private default visibility for uploaded assets, and for Enterprise the contractual statement that 'Customer Content' may not be used as training data for the services. In addition, Enterprise admins can disable third-party models; according to the FAQ, Runway then does not send any data to these model providers.
Negative
No concrete EU/EEA server location is specified on the website. EU data residency is not stated. The privacy policy expressly mentions international transfers to the USA and other countries. On-premise, self-hosting, or local operating options are not specified on the website. An ISO 27001 certification is not stated; it is only described that elements from ISO 27001 and NIST are incorporated into the security program.
Server location
Not specifically stated on the website. Several physically separate data centers are mentioned for redundancy, but without specifying countries or regions. The privacy policy also states that Runway is based in the USA and that information may be transferred to the USA and other countries.
