Descript procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Transfer of Information to the U.S. and Other Countries ” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “Descript is based in the United States and we process and store information in the U.S. Therefore, we and our service providers may transfer your information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “If you wish to delete or deactivate your account, you can delete your Descript account in your account settings ( article here ), but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “and service providers” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “law, such as law enforcement or other governmental authorities” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ ownership; and We disclose personal information with your consent or at your direction, including if we notify you through the Descript Service or otherwise that the information you provide will be disclosed in a particular manner and you choose to provide such information. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We disclose personal information to vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, including, but not limited to, third-party payment processors, advertising partners, and vendors who assist us in providing, developing, testing and improving the Descript Service and our technology;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may disclose personal information between and among us and our current and future parents, affiliates, and subsidiaries and other companies under common control and ownership; and” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may also disclose aggregated or anonymized information that does not directly identify you. Please note that any Projects that are designated as “public” or any other information you post in a public area of the Descript Service may be publicly viewable, including any information about you that may be contained in such Project, and will no longer be treated as confidential.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ As a general rule, we limit the circumstances in which we disclose your information to third parties and there is no human access to your Projects except as described above. However, in certain circumstances, as described below or as otherwise described in this Privacy Policy, we disclose personal information as follows: We disclose personal information to vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, including, but not limited to, third-party payment processors, advertising partners, and vendors who assist us in providing, developing, testing and improving the Descript Service and our technology; We may disclose personal information to legal authorities and others if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule, or regulation or if we believe your actions are inconsistent with the spirit or language of our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of us or others; We disclose personal information to third parties who assist us with marketing; We may disclose personal information to our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests; We may disclose personal information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company; We may disclose personal information between and among us and our current and future parents, affiliates, and subsidiaries and other companies under common control and” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “(d) our employees, vendors, and contractors (including Amazon Mechanical Turk workers) may use your AI Voices to create a series of non-defamatory utterances, solely for internal quality assurance purposes.Other than as described above, only you, and people you explicitly share access with, will have access to generate synthesized audio using your AI Voice. We will not share your Training Audio or your AI Voice with third parties except as expressly described above and in our Privacy Policy .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “providers” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We may disclose personal information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We obtain information from other sources. For example, we may collect information from social networks, advertising networks, internet service providers, and data analytics providers. This information includes handles, content, and other information shared with us through third-party features that you use on the Descript Service or posted on social media pages (such as our social media page or other pages accessible to us). Additionally, if you create or log into your account through a third-party platform (such as Google), we will have access to certain information from that platform, such as your name, in accordance with the authorization procedures determined by that platform.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Materials contained in Stock Photos, Stock Illustrations, Stock Footage, Stock Backgrounds, and Stock Music that are made available through the Descript Service as Premium Media are provided by Storyblocks (the “Storyblocks Materials”) and are subject to the Storyblocks EULA” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We obtain information from other sources. For example, we may collect information from social networks, advertising networks, internet service providers, and data analytics providers. This information includes handles, content, and other information shared with us through third-party features that you use on the Descript Service or posted on social media pages (such as our social media page or other pages accessible to us).” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.