Skip to main content
ShadowAI Defense GitHub
← All services

ElevenLabs · Specialized

ElevenLabs

Allow with DLP Enterprise tier: Available DPA: Yes

Network signatures

Domains: elevenlabs.io, beta.elevenlabs.io

API endpoints: api.elevenlabs.io

SNI patterns: *.elevenlabs.io

Client signatures

Process names: ElevenLabs.exe (Windows)

Risk profile (1–5)

  • Data exfiltration: 4
  • IP loss: 3
  • Output quality (hallucination / legal): 2
  • Integration risk (OAuth, extensions, agentic): 3

Data egress concerns

  • Voice samples uploaded for cloning may contain biometric data subject to privacy regulation (BIPA, GDPR)
  • Text scripts sent for synthesis may contain confidential communications, internal memos, or PII
  • Cloned voice profiles could be misused for social engineering if access is not controlled
  • Audio outputs may reproduce sensitive meeting content or privileged legal discussions

Training-use default

Free-tier voice data and generated audio may be used for model improvement. Enterprise plans offer contractual training exclusion and custom voice isolation. Review current ElevenLabs terms.

Applicable detection rules

References