90 Days Gen AI Risk Trial -Start Now
Book a demo
Video·Free; Starter $18/mo (annual); Creator $64/mo; Enterprise custom·synthesia.io

Synthesia

Synthesia generates studio-quality videos from text using AI avatars and voice clones in 140+ languages, targeting enterprise L&D, sales, and comms teams.

Risk Score
Medium
5/10

Independent assessment across data handling, compliance, security and transparency.

Overview

Synthesia is an enterprise-focused AI video platform that turns scripts into presenter-led videos featuring stock or custom avatars, synthetic voices, and branded templates. It is widely used for training, onboarding, product marketing, and internal communications where recording real presenters is impractical. The platform emphasizes responsible synthetic media: every avatar requires verified consent, videos carry C2PA Content Credentials, and the company maintains SOC 2 Type II, ISO 27001, and ISO 42001 certifications. Enterprise plans add SSO, data residency options, and brand controls, though generative avatars still carry deepfake-abuse and likeness-rights risks that governance teams should track.

Risk factors

3
  • Cloud-based service with potential data sharing
  • User-generated video content may be stored
  • No explicit opt-out for data usage in training

Recommendations

8
  • Require enterprise plan with SSO and audit logging for business use
  • Establish an internal avatar-consent workflow mirroring Synthesia's 3Cs framework
  • Prohibit creating avatars of executives, customers, or third parties without written release
  • Review DPA and configure EU data residency where required by GDPR
  • Keep C2PA Content Credentials intact on all published videos
  • Restrict personal-avatar creation to a small, governed group of power users
  • Classify scripts before upload; block regulated data (PHI, MNPI, source code)
  • Log and review generated videos before external distribution

Data handling

Storage
AWS cloud with EU and US data residency options for enterprise; encryption at rest and in transit
Retention
Videos and scripts retained while account is active; deletion on request per privacy policy and DPA
Training on inputs
Customer scripts and videos are not used to train core avatar or voice models; personal avatars only trained with explicit consent from the individual depicted