ElevenLabs’ commitment to security, privacy, and responsible AI: certified and renewed

At ElevenLabs, safety and security are foundational to how we design, develop, and operate our voice AI products every day. It’s why some of the Fortune 500’s largest companies trust us with their data. But trust isn't a claim a company gets to make about itself,  it has to be independently verified. 

That's why we put our security, privacy, and AI governance practices in front of independent auditors and measure them against the most rigorous standards available: the ISO/IEC family for information security, privacy, and AI management; SOC 2 for how our controls hold up in daily operation; and FedRAMP for the demands of the U.S. federal government. Today we're announcing that we've renewed the following certifications we already hold, and added two more.

We recently renewed the following certifications:

• ISO/IEC 27001:2022: the global standard for information security management systems.
• ISO 27701:2019: an extension of 27001 focused on privacy information management.
• ISO/IEC 42001:2023: the first international standard for AI management systems, reflecting an approach to responsible AI development.
• ISO 27017 and 27018: provides cloud-specific security controls, extending ISO 27001's controls with standards covering cloud security controls and the protection of personal data in the cloud.
• SOC 2 Type II:  an independent attestation confirming that our security controls have been designed and implemented over the past year.
• PCI DSS Level 1 Service Provider: the highest level of payment card industry security standards, validating our security controls for processing and safeguarding payment data.
• Cyber Essentials & Cyber Essentials Plus (CE+): UK government-backed cybersecurity certifications demonstrating our protection against common cyber threats through independently verified technical controls.

And we recently added the two new certifications to our list:

• SOC 2 Type I: an independent attestation confirming that our security controls are designed and implemented effectively as of a specific point in time for ElevenProductions.
• FedRAMP 20x Class A: FedRAMP is how the U.S. government decides which cloud services it will trust with federal data, and it's among the most demanding assessments in the industry. Class A is the new entry pathway under FedRAMP 20x, and it builds directly on the independent audit work listed above. See our listing on the FedRAMP Marketplace.

You can view the complete, up-to-date list of our certifications and compliance reports on our compliance page. 

Three pillars of trustworthiness

Taken together, these certifications rest on three pillars of trustworthiness: security, privacy, and quality management. Security certifications confirm we have the right controls to protect systems and data from threats. Privacy certifications show we handle personal information responsibly and transparently. Quality management certifications, including our ISO 42001 AI management system certification, prove we have consistent, auditable processes for how we build and operate our AI systems.

Why this matters for our customers

If you build with us, send us data, trust us with your voice, or your customers' information, these certifications are a signal that we hold ourselves accountable to recognized, external standards, not just our own word.

An ongoing commitment

Certifying trustworthiness across information security, data privacy, cloud security, and AI governance requires rigorous, independent audits. Each has to be actively maintained. Passing them once is a milestone, but renewing them is proof that the underlying practices are real and ongoing for ElevenLabs, not a one-time exercise.

This is a signal that we have demonstrated continued commitment to the highest level of security, privacy, and quality management to protect our users and enterprise customers. These are ongoing commitments that we plan to continually evaluate and improve.

If you have questions about our security or compliance posture, please don’t hesitate to reach out to our security assurance team.