Written for the people who have to sign it off
How your content is handled, where the responsibility sits when you publish AI-translated video, and what we will put in writing.
How to read this page
Most trust pages are written to end a conversation. This one is written to give your security team a shorter list of questions.
Where we can tell you something definitively, it is below. Where the honest answer is “it depends on your account and belongs in a signed document”, the page says that instead of implying a guarantee it cannot make. A trust page that overstates is worse than one with gaps, because the gaps come out in the questionnaire anyway.
What we can tell you today
- An EU company, building for European rules first
- A data processing agreement available on request, with the subprocessor list attached
- You are the controller for your content; we are the processor
- Nothing is exported until you have reviewed it
- No advertising cookies or cross-site tracking on this website
- No certification claimed that we do not hold
Bring the questionnaire
If you have a security questionnaire, send it before the call rather than after. We would rather answer it in full, including the questions where the answer is not yet what you want, than discover the blocker three weeks into a procurement.
What happens to what you upload
It is processed to do the job you asked for
Your videos, slides and the personal data inside them, including faces, voices and names, are processed to deliver the localisation you requested. That is the purpose, and the agreement is where it is written down in terms that bind us.
Access is limited
Your account users, and the subprocessors named in the agreement. If you need the specific access controls documented for an audit, ask and we will document them for your account rather than describe them in general.
Deletion is a request you can make
Retention and deletion are set out in the agreement so they are enforceable rather than aspirational. If you have a retention policy you have to comply with, bring it to the conversation and we will tell you whether we can meet it.
Permission is not our call to make
A translated video puts words in a real person’s mouth in a language they may never have spoken. Whatever the technology allows, that is a decision about a person, and it belongs to them.
Our position is simple and it is in the terms: only send material you have the rights to, and that includes the speaker’s permission for their voice to be used in a translated version. We cannot verify that for you and we do not pretend to.
If you are setting this up properly, get the permission at the point you record, not at the point you localise. It is a paragraph in a release form and it saves an argument later.
Guests, contractors and former employees
The awkward cases are predictable. A guest agreed to appear on your show. A contractor delivered a session two years ago. Someone has since left.
None of those is automatically a permission to generate their voice in another language. Sort the list out before a project rather than after a publication.
Transparency duties sit with the publisher
The EU AI Act’s transparency rules for AI-generated audio and video have applied since 2 August 2026. They split in two: the provider of a generative system has duties about marking the output, and the deployer who publishes it has duties toward the audience.
You are the deployer. That means the disclosure to the people watching is yours to make, and no tool can make it for you. What we can do is keep the record of what was produced and when, which is the part you will want if someone asks you to account for a published version later.
What we will not tell you
We will not tell you that using edon.ai makes you compliant. No software makes an organisation compliant, and a vendor who says otherwise is selling you a risk you keep.
Your duties are yours. Ours is to make them cheaper to meet and easier to evidence.
Nothing publishes itself
The product is built around the assumption that a person checks the output. You edit the transcript, the subtitles and the timing, and the translated audio regenerates from your edit. Export happens when you decide it reads correctly.
That matters beyond quality. In regulated training the question is rarely only whether a translation was good; it is whether anyone looked at it before it reached a worker.
Found something?
If you believe you have found a security problem, write to security@edon.ai with enough detail to reproduce it. We would rather hear it from you than read about it.
For data protection questions, privacy@edon.ai reaches a person.
Questions security and legal teams ask
Can we get a data processing agreement?
Yes, on request, with the subprocessor list attached. Request it from the DPA page and it goes out within one working day.
Which AI models process our content?
They are named in the data processing agreement. We choose per language and the choice changes as models improve, which is why the list travels with the agreement rather than sitting on a web page that would go stale.
Is our content used to train anyone else’s models?
Your content is yours and it is processed to deliver the service you asked for. If you need that as a contractual commitment covering every provider in the chain, ask for it in the agreement, where it belongs and where it binds us.
Do you hold SOC 2 or ISO 27001?
No. We would rather tell you that plainly than imply otherwise with a badge. If a certification is a hard requirement for your procurement, say so early and we will tell you honestly where we are rather than string it out.
Where is our content processed?
We are an EU company and we build for European customers first. For the specific regions that apply to your account and the retention that goes with them, ask us and take the answer in writing in the agreement rather than from a marketing page.
Can edon.ai run on our own infrastructure?
Ask us. It depends on what you need and on your volume, and it is a real conversation rather than a checkbox.
Bring the questionnaire to the call
We would rather answer it in full than find the blocker three weeks in.