ElevenLabs

Name: ElevenLabs business-data verdict
Item: ElevenLabs
Author: Aaron Simmons

Careful

Last checked 10 Nov 2026 · Reviewed by Aaron Simmons, security practitioner · How we decide

ElevenLabs says you can opt out of using your personal information and content for training, and that the opt-out only stops later training use. For voice cloning, it may ask you to record yourself so it can check the uploaded voice is yours, and it says that check can be biometric data. A day count for keeping voice recordings, and a business associate agreement, were not in the privacy policy, terms, or data processing addendum we read. Turn the training opt-out off before you upload a client's voice.

Data-safety checklist

Trains on your data by default

Yes

The privacy policy says you can opt out of use of your personal information for training in the Data use menu, and that this only affects training use after you opt out. The terms also say you may opt out of use of your content for training. They also say ElevenLabs obtains publicly available or licensed information to train models. That is separate from customer audio.

How to opt out

Steps

In the ElevenLabs account, open Terms and Privacy, then Data use, and opt out of training. The privacy policy says the opt-out does not undo training use from before that change.

Data retention

What they keep

Unknown for voice recordings and voice models. The privacy policy describes access, correction, and deletion rights. It does not state a number of days for audio or voice models.

BAA / HIPAA

Unknown

The pages we read do not offer a business associate agreement. The data processing addendum covers personal data in content that business clients provide. It does not say that content is excluded from training.

Certifications

1 listed

Unknown

Enterprise and admin controls

Controls

Business clients have a data processing addendum. The addendum we read does not describe an admin switch that turns training off for the whole organization. Voice cloning can require a recording to confirm the voice belongs to you. A ban on cloning someone else was not stated in the privacy policy or terms we read.