90 Days Gen AI Risk Trial -Start Now
Book a demo
Video·Free (limited credits); Standard $15/mo; Pro $35; Unlimited $95; Enterprise custom·runwayml.com

Runway

Runway is an AI video generation and editing platform (Gen-3, Gen-4) used by filmmakers, studios, and marketing teams for text/image-to-video, inpainting, motion brush, and multi-clip editing.

Risk Score
High
6/10

Independent assessment across data handling, compliance, security and transparency.

Overview

Runway provides state-of-the-art generative video (Gen-3 Alpha, Gen-4) plus an integrated editor with AI tools for inpainting, green-screen, motion tracking, lip-sync, and upscaling. It is used across Hollywood productions, advertising agencies, and brand marketing teams. Outputs raise standard generative-AI concerns: IP provenance of training data, deepfake and likeness misuse, and C2PA-style attribution of synthetic media. Runway offers Free through Enterprise tiers, with Enterprise providing SSO, custom DPAs, indemnity, private workspaces, and opt-out from training on customer assets. SOC 2 Type II is attested. For corporate use, Enterprise is the recommended configuration; consumer and Standard tiers train on or retain uploaded assets in ways that are inappropriate for client work under NDA.

Risk factors

3
  • Cloud-based tool that generates video content from user inputs.
  • User data may be used for training without explicit opt-out.
  • Potential for data sharing with third parties.

Recommendations

8
  • Use the Enterprise tier with signed DPA and training opt-out for any client or brand work
  • Require licensing or documented rights for every reference image or source clip uploaded
  • Do not upload unreleased product imagery, talent footage, or NDA material on non-Enterprise tiers
  • Embed C2PA or visible AI-generated disclosure in finished creative per advertising regulations
  • Centralize workspace ownership so assets survive employee offboarding and can be deleted on request
  • Add generative-video policy to creative ops and agency contracts (who may use, for what)
  • Rotate API keys and scope them to specific projects to limit blast radius
  • Review outputs for inadvertent resemblance to real people before release

Data handling

Storage
Assets and generated videos stored on AWS (US-East by default). Workspace assets are private to the team; no regional residency selection outside Enterprise.
Retention
Assets retained while the account is active; deletion requests honored within 30 days. Enterprise can negotiate custom retention and deletion SLAs.
Training on inputs
Free and Standard assets may be used to improve models unless opted out in settings; Enterprise customers are contractually opted out of training on their content.