Sub-processors-20260313
Third Party Sub-processors
Synthesia uses the third party entities below (each, a “sub-processor”) to process personal data on behalf of Synthesia Customers and in accordance with contract terms between Synthesia and the sub-processor.
You can sign-up here to receive email notifications when we add new sub-processors.
Synthesia Affiliates
Depending on the geographic location of a Customer or their Authorized Users, and the nature of the Services provided, Synthesia may engage the following Affiliates, as Sub-processors, to deliver some or all of the Services provided to a Customer:
1. Name: Synthesia Inc.
Address: 874 Walker Road, Suite C, City of Dover, DE 19904, United States
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
2. Name: Synthesia B.V.
Address: Grote Bickersstraat 74, 1013 KS Amsterdam, Netherlands
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
3. Name: Synthesia GmbH
Address: Pacellistraße 8, 80333 München, Germany
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
4. Name: Synthesia ApS
Address: Vesterbrogade 149, bygning 4, 1.tv, 1620 København V. Denmark
Contact person’s name, position and contact details: Sasa Markota, Legal Counsel & DPO, dpo@synthesia.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Subsidiary engaging employees for various roles involved in the delivery of the SaaS to the customer
Infrastructure Sub-processors
Synthesia may use the following Sub-processors to host Customer Data or provide other infrastructure that helps with delivery of our Services:
1. Name: Amazon Web Services EMEA SARL
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
Contact person’s name, position and contact details: Laura Wainwright, AWS account manager lauwai@amazon.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Web hosting, data storage and compute for video processing services. Scripts, audio, and video data is stored and transmitted for the purpose of video creation.
2. Name: MongoDB Limited
Address: Building Two, Number One Ballsbridge, Dublin 4, Ballsbridge, Dublin, Ireland
Contact person’s name, position and contact details: MongoDB’s DPO at privacy@mongodb.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Structuring and storing production data
3. Name: Mux Inc.
Address: 1182 Market St. Suite 425 San Francisco, CA 94102, United States
Contact person’s name, position and contact details: Mrs. Becca Axvig – becca@mux.com, Head of People
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video content delivery network
4. Name: StackOne Technologies Ltd
Address: 2 Communications Road, Newbury, Berkshire, England, RG19 6AB
Contact person’s name, position and contact details: Trust Keith LTD, dpo@stackone.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Processing of data from customer-enabled third party integrations.
Script Processing Sub-processors
Synthesia may use the following Sub-processors to perform other Services functions that involve processing of the scripts uploaded by the Customer:
1. Name: Google Cloud EMEA Limited
Address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Contact person’s name, position and contact details: Emil Ochotta, Data Protection Officer, https://support.google.com/cloud/contact/dpo
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): text-to-speech conversion, speech-to-text conversion, machine translation of scripts to different languages, other content processing
2. Name: IBM United Kingdom Limited
Address: PO Box 41 North Harbour, Portsmouth, PO6 3AU, United Kingdom
Contact person’s name, position and contact details: chiefprivacyoffice@ca.ibm.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion
3. Name: CoeFont Co.,Ltd.
Address: Ark Mori Building, 36th Floor, 1-12-32 Akasaka, Minato-ku, Tokyo,107-6063
Contact person’s name, position and contact details: contacts@yellston.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion
4. Name: WellSaid Labs Inc.
Address: 2157 N Northlake Way, Ste 110, Seattle, WA, 98103-9184, United States
Contact person’s name, position and contact details: Marta Mueller, Customer Success Manager, marta@wellsaidlabs.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion
5. Name: Microsoft Ireland Operations Limited
Address: South County Business Park Leopardstown, Dublin 18, D18 P521, Ireland
Contact person’s name, position and contact details: Contact web form available here https://www.microsoft.com/en-us/concern/privacy or via phisical address
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Content moderation, text-to-speech, speech-to-text conversion, and voice cloning.
6. Name: Eleven Labs Inc.
Address: 169 Madison Ave #2484 New York, NY 10016, United States
Contact person’s name, position and contact details: Carles Reina, carles@elevenlabs.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Text-to-speech conversion, voice cloning
7. Name: DeepL SE
Address: Maarweg 165, 50825 Cologne, Germany
Contact person’s name, position and contact details: DeepL's external corporate Data Protection Officer, Dr. Christian Lenz, can be contacted at the following address: dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, via email to datenschutz(at)dhpg.de, or by telephone on +49 2261 8195 0.
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Machine translation of scripts to different languages
8. Name: OpenAI OpCo, LLC
Address: 3180 18th St., San Francisco, CA 94110, United States
Contact person’s name, position and contact details: Jason Kwon, General Counsel, legal@openai.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): generating outputs from the inputs provided within the product or within the video, content moderation, text-to-speech conversion. Sub-processor will not use the data for any internal purpose including training of the LLM models (https://openai.com/policies/api-data-usage-policies)
9. Name: Cinder Technologies, Inc.
Address: 169 Madison Ave #2258, New York, NY 10016, United States
Contact person’s name, position and contact details: Data Protection Officer, support@cndr.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): content moderation.
10. Name: Anthropic PBC
Address: 548 Market St, PMB 90375, San Francisco, CA 94104
Contact person’s name, position and contact details: dpo@anthropic.com.
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Generating outputs, including visuals, from the inputs provided within the product or within the video.
Asset Processing Sub-processors
Synthesia may use the following Sub-processors to perform other Services functions that involve processing of the other assets uploaded by the Customer:
1. Name: UAB ConvertAPI
Address: Lauksargio g. 111, Vilnius LT-10105, Lithuania
Contact person’s name, position and contact details: data-protection@convertapi.com
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Conversion of PowerPoint presentations uploaded by the customers into slides in STUDIO. No persistent storage is utilised.
2. Name: Canva Austria GmbH (formerly named Kaleido AI GmbH)
Address: Ungargasse 37/BT1/3.3, 1030 Wien, Austria
Contact person’s name, position and contact details: Michal Dzujka, Customer Success Manager, michal@kaleido.ai
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Video processing to prepare a custom avatar. Video data of a person is transmitted and stored for a time-limited period for the purpose of pre-processing video to create a custom avatar for the service.
3. Name: Runway AI, Inc.
Address: 18 West 18th Street, 11th Floor, New York, NY 10011, USA
Contact person’s name, position and contact details: Runway Legal, legal@runwayml.com
Description of processing: Video generation based on an image prompt
4. Name: Features & Labels, Inc.
Address: 6020 Adeline St, Oakland, CA 94608, United States
Contact person’s name, position and contact details: support@fal.ai
Description of processing: Processes text, audio, and video inputs via hosted generative AI models.
5. Name: AssemblyAI, Inc.
Address: 2261 Market Street, #4577, San Francisco, CA, 94114
Contact person’s name, position and contact details: 226 Market Street, #4577, San Francisco, California 94114, support@assemblyai.com
Description of processing: speech-to-text conversion
6. Name: LiveKit Incorporated.
Address: 4285 Payne Avenue Suite 9154. San Jose, California, 95157, United States
Contact person’s name, position and contact details: Data Protection Officer, privacy@livekit.io.
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Processing for voice-based, text-based, and other interactions for interactive videos.
7. Name: ai-coustics GmbH
Address: Rosenthaler Str. 38/4, 10178 Berlin, Germany
Contact person’s name, position and contact details: contact@ai-coustics.com.
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Pre-processing of the audio submissions for the quality improvement.
8. Name: BFL GmbH
Address: Bertoldstrasse 48, 79098 Freiburg im Breisgau, Germany
Contact person’s name, position and contact details: legal@blackforestlabs.ai
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Processes text, audio, and video inputs via hosted generative AI models.
Other Sub-processors
Synthesia may use the following Sub-processors to perform other Services functions that involve processing of the other data supplied by the Customer:
1. Name: Intercom R&D Unlimited Company
Address: 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland
Contact person’s name, position and contact details: Intercom Privacy Team, legal@intercom.io
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Support ticketing system and widget
2. Name: Datadog, Inc.
Address: 620 8th Avenue, Floor 45, New York, NY 10018
Contact person’s name, position and contact details: privacy@datadoghq.com.
Description of processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): Observability and error monitoring for the Services.