Descript · Specialized
Descript
Allow with DLP Enterprise tier: Available DPA: Yes
Network signatures
Domains: descript.com, www.descript.com, app.descript.com
API endpoints: api.descript.com
SNI patterns: *.descript.com
Client signatures
Process names: Descript.exe (Windows), Descript.app (macOS)
Risk profile (1–5)
- Data exfiltration: 4
- IP loss: 3
- Output quality (hallucination / legal): 2
- Integration risk (OAuth, extensions, agentic): 3
Data egress concerns
- Video and audio recordings uploaded for editing may contain confidential meetings, interviews, or internal presentations
- Automatic transcription processes all spoken content through cloud AI, potentially exposing sensitive dialogue
- Voice cloning features (Overdub) capture biometric voice data subject to privacy regulations (BIPA, GDPR)
- Screen recordings may inadvertently capture sensitive on-screen content (dashboards, credentials, internal tools)
- Filler word removal and AI editing features process entire media files server-side
Training-use default
Descript states it does not use customer content to train AI models. Enterprise plans provide additional contractual commitments. Voice clone data is handled separately with explicit user consent. Review current privacy documentation.