Documents reviewed

HeyGen

Name: HeyGen
Price: 24.00 USD
Author: HeyGen Technology Inc.

Logo: official trademark, served by us

AI avatar and video translation platform that can turn scripts and slides into presenter videos.

Visit vendor website ↗ More in Video & Voice Presentations

Unpaid listing. The link is marked rel="nofollow".

Documents reviewed on Oct 6, 2026

DPA, privacy policy, sub-processor list, legal notice and pricing page read and recorded below, each with its source.

How this was researched: AI-assisted. An AI assistant retrieved the vendor’s pages and linked every answer to the source where it appears. Where a page couldn’t be read, it says “unclear” – not a guess. An editorial spot check is still pending; please report errors via the correction form.

Not tested hands-on yet, so there is no rating. The full review adds that.

At a glance

All eight questions with sources →

DPA available?	yes · Public Data Processing Addendum (October 2024), part of the Terms of Service or the Enterprise agreement
Is your content used for training by default?	depends on plan · Enterprise: excluded. Other plans: training on – opt out by email to HeyGen.
Data location disclosed?	yes · Hosting on AWS in the US
Independently certified (ISO 27001, SOC 2)?	yes · SOC 2 Type II per the security page

8 of 8 privacy questions answered with evidence in HeyGen Technology Inc.’s documents, as of Oct 6, 2026.

Export and import

documented facts – each with its own source

Capability	Status	Source
Builds from an uploaded document	yes – Free plan and up (ppt, pptx, pdf) PPT, PPTX or PDF up to 50 MB, no password; speaker notes become script; PowerPoint animations/transitions not carried over	Vendor page ↗ checked Oct 16, 2026 Pricing table row 'PowerPoint & PDF Imports' per-plan ticks not readable; free availability inferred from landing page wording

"Not documented" means we found no statement either way – not that the tool can’t do it. Whether an export stays fully editable is part of the hands-on review.

Key facts

Category	Video & Voice Presentations
Domain	heygen.com visit ↗
Pricing model	Free plan + paid plans
Starting paid plan	Creator: USD 24 per month, billed annually · Vendor page ↗, checked Oct 16, 2026 – Annual total not shown
Headquarters	United States
Often used for	building decks from documents
Server location	United States
Vendor	HeyGen Technology Inc.
More in this category	8 tools
In the directory since	Sep 19, 2026
Documents reviewed on	Oct 6, 2026

Not checked yet: rating from our test brief. How we review

Screenshots

HeyGen homepage on Sep 19, 2026 — Public homepage of HeyGen, captured by us on Sep 19, 2026. This is the vendor’s website, **not the product interface** – that requires an account and is part of the full review.

Rating

How we rate →

Not rated yet – ratings come from the hands-on test brief.

GDPR and privacy check

How we review →

Question	Answer	Evidence
Data processing agreement (DPA) available	yes Public Data Processing Addendum (October 2024), part of the Terms of Service or the Enterprise agreement; no plan restriction stated.	Source Oct 6, 2026
Server location disclosed	yes Hosting on AWS in the US; all customer data stored in the US, no EU option found.	Source Oct 6, 2026
Sub-processors listed publicly	yes List in the security portal (security.heygen.com/#subprocessors) per the DPA; content was not readable when accessed.	Source Oct 6, 2026
Training on customer data: default and opt-out, by plan	not used on business plans only Enterprise: excluded. Other plans: training on – opt out by email to HeyGen.	Source Oct 6, 2026
EU representative appointed (Art. 27 GDPR)	yes Jan Czarnocki named as DPO and representative for the EEA, UK and Switzerland (email only, no postal address).	Source Oct 6, 2026
Standard Contractual Clauses (SCCs) for transfers outside the EU	yes EU-US DPF incl. the UK and Swiss extensions; the DPA additionally includes EU SCCs Module 2/3 and the UK Addendum.	Source Oct 6, 2026
Deletion periods documented	yes After deletion, 60 days in backups, then permanently removed; deletion requests handled within 72 h where possible. DPA: deletion within a reasonable period after contract end.	Source Oct 6, 2026
Independent certification (ISO 27001, SOC 2)	yes SOC 2 Type II per the security page; scope and audit period not stated, no ISO 27001 found.	Source Oct 6, 2026

“Unclear” means we didn’t find the information in the public documents – not that the vendor doesn’t meet it. The check is a documented snapshot of the vendor’s public commitments. It is not a certification and not legal advice – see the disclaimer.