The policy states that personal data may be transferred outside the UK and EEA, with transfers protected by European Commission adequacy decisions under GDPR Article 45 or standard contractual clauses under GDPR Article 46. Users may obtain copies of applicable decisions or clauses by contacting support@synthesia.io.
This analysis describes what Synthesia's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the legal mechanisms Synthesia relies on for cross-border personal data transfers, directly engaging GDPR Chapter V obligations. The disclosure that biometric data may be transferred to third-party vendors including Amazon Web Services EMEA SARL is particularly relevant for compliance assessments given the special category status of biometric data under GDPR Article 9.
Under these terms, personal data including potentially biometric data may be transferred outside the UK and EEA to countries where Synthesia operates or where its vendors including AWS EMEA SARL are located. The policy states that such transfers are protected by adequacy decisions or standard contractual clauses, and users may request copies of these transfer mechanisms by emailing support@synthesia.io.
How other platforms handle this
Okta operates globally and may transfer your personal data to countries outside of your home country, including the United States, which may not provide the same level of data protection as your home country. Where required by applicable law, we use Standard Contractual Clauses or other appropriate ...
"We may transfer your personal data to recipients located outside of the United Kingdom ("UK") and European Economic Area ("EEA"). When we transfer your personal data outside of the UK or EEA, we ensure it benefits from an adequate level of data protection by relying on: Adequacy decisions. These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) which recognise that a country outside of the EEA offers an adequate level of data protection. Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 GDPR that allow companies in the EEA to transfer data outside the EEA.Excerpt from Synthesia's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the legal mechanisms Synthesia relies on for cross-border personal data transfers, directly engaging GDPR Chapter V obligations. The disclosure that biometric data may be transferred to third-party vendors including Amazon Web Services EMEA SARL is particularly relevant for compliance assessments given the special category status of biometric data under GDPR Article 9.
Under these terms, personal data including potentially biometric data may be transferred outside the UK and EEA to countries where Synthesia operates or where its vendors including AWS EMEA SARL are located. The policy states that such transfers are protected by adequacy decisions or standard contractual clauses, and users may request copies of these transfer mechanisms by emailing support@synthesia.io.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Synthesia.