Is this your company? Buyers are checking WellSaid Labs here. Claim wellsaidlabs.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
WellSaid Labs
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
WellSaid Labs is SOC 2 Type II compliant.
About
WellSaid empowers creatives by putting lifelike synthetic voices at their fingertips. WellSaid's machine learning model powers an ever-expanding library of the highest quality synthetic voice avatars in the world. Simply select an avatar, enter your script, and generate high-quality content within seconds. Studio provides flexibility, efficiency, and reliability that businesses seek to streamline their production processes. As the leader in AI voice, we’re keenly aware of our duty to provide our technology ethically. Our ethical code is at the core of our business, and informs all of our decis
Compliance & infrastructure
Hosting
GCPAzure
Data handled
Customer personally identifiable informationText data to synthesize custom audioIncidental script content
Documents
22Documents
- SOC 2 Type II - 2025Request
- SOC2 Type II - 2024Request
- Human Resource Security PolicyRequest
- Code of ConductRequest
- Access Control PolicyRequest
- Information Security Roles and ResponsibilitiesRequest
- Information Security Policy (AUP)Request
- Physical Security PolicyRequest
- Third-Party Management PolicyRequest
- Incident Response PlanRequest
- Asset Management PolicyRequest
- Risk Management PolicyRequest
- Secure Development PolicyRequest
- Data Management PolicyRequest
- Business Continuity and Disaster Recovery PlanRequest
- System Architecture DiagramRequest
- Operations Security PolicyRequest
- Penetration TestRequest
- VPAT - Voluntary Product Accessibility TemplateRequest
Subprocessors
7- GGoogle Cloud Platform · gcpUS
- VVerisoul · User verificationUS
- MMixpanel · AnalyticsUS
- HHive.ai · Content moderationUS
- AAzure · Language mechanicsUS
- PPerspective API · Content moderationUS
- MMongoDB Atlas · Cloud data storage, APIUS
Compliance leadership
The person who leads WellSaid Labs's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. WellSaid Labs's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
CSR and AI Ethical DevelopmentMar 2024
New posted policy on Corporate Social Responsibility
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is WellSaid Labs SOC 2 compliant?
WellSaid Labs is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is WellSaid Labs SOC 2 Type I or Type II?
WellSaid Labs is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use WellSaid Labs's SOC 2 for a vendor risk assessment?
Yes. WellSaid Labs's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is WellSaid Labs penetration tested?
WellSaid Labs hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get WellSaid Labs's SOC 2 report?
WellSaid Labs's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is WellSaid Labs secure?
Security isn't a single yes/no, but WellSaid Labs is SOC 2 Type II compliant and holds SOC 2 Type I, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does WellSaid Labs have a bug bounty or vulnerability disclosure program?
WellSaid Labs hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@wellsaidlabs.com or via a /security page (WellSaid Labs lists a security contact).
Who are WellSaid Labs's subprocessors?
WellSaid Labs lists 7 subprocessors on its trust center, including Google Cloud Platform, Verisoul, Mixpanel, Hive.ai, Azure. Buyers use this for fourth-party risk review.
Where does WellSaid Labs host or store data?
WellSaid Labs hosts on GCP, Azure, and handles Customer personally identifiable information, Text data to synthesize custom audio, Incidental script content. Data residency details are on its trust center.
Where is WellSaid Labs's trust center or security page?
WellSaid Labs's trust center is at https://trust.wellsaidlabs.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Do you support Single Sign-On (SSO)?
The WellSaid platform supports SSO. Our sales team is available to discuss the security needs of your organization and project specifications. Feel free to connect with a team member for more information or reach out to sales@wellsaidlabs.com.
Are measures in place to respond to a Business Continuity event or Disaster Recovery scenario?
Our Business Continuity and Disaster Recovery documents are available at trust.wellsaidlabs.com and comply with the related SOC2 Type II controls. Real-time updates on system availability can be viewed at wellsaidlabs.statuspage.io.
How does WellSaid use customer data?
WellSaid's text-to-speech algorithms convert your text into synthetic human voice audio files. We may process organizational data from within your site to deliver services or provide support, subject to the terms of our Privacy Policy and Terms of Service. However, we do not use your inputs and outputs to train our models and do not claim ownership of your content.
What measures are in place to prevent the misuse of generative AI capabilities?
WellSaid maintains its own proprietary model and is, therefore, able to fully ensure that customer data is never used to train the model. We also employ content moderation subject to the provisions in our terms of service and user conduct agreements, to protect against harmful or hateful speech.
Will personal information be used to train or run the AI algorithms?
WellSaid is committed to customer privacy and ownership rights. We do not use customer data to train our Text-to-Speech model, and we do not sell customer data or PII. In addition, we do not claim ownership over the content that customers render on our platform.
How does WellSaid train its AI model?
WellSaid prioritizes consent in the development and training of its model. We obtain permission from voice actors to use their voice data, and compensate them both for their datasets as well as the on-going use of the synthetic voices that we build using their data. The scripts we use for our training and recording purposes are purchased from script writers or used for free with appropriate permission.
Where is customer data processed and stored?
Customer data is processed and stored in the Google Cloud Platform, hosted in the US. This environment is managed by WellSaid’s engineers also located in the US. Our sub-processors are available at: trust.wellsaidlabs.com/subprocessors
How is data encrypted at rest and in transit?
Data in transit is encrypted using Transport Layer Security (TLS) 1.2. All data at rest is protected using AES 256 bit encryption.
What type of data will be transmitted, processed, and stored using WellSaid Studio or API?
Email, first name, and last name are required data fields. In addition, the customer supplied text will be processed and stored in our cloud environment.
How can I control the data shared with the WellSaid platform?
The data submitted to WellSaid's text-to-speech algorithm is at the customer's discretion. Customers can adjust their cookie preferences at any time on our homepage.
What is your data backup procedure?
Database snapshots are taken every 24 hours to ensure we meet our recoverability and data governance commitments. Point-in-time recovery capabilities have been implemented to support our Recovery Time Objectives (RTO) in the event of a business continuity event or disaster scenario.
Is the hosting environment actively scanned and protected against security vulnerabilities?
The hosting environment includes 24/7/365 monitoring and continuous vulnerability scanning. This is further supported by intrusion detection services and regular penetration testing.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public