Podcastle Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Podcastle

Risk Overview

Moderate Risk

/10

Speech to Text

Audio Generation

Audio Editing

Top Risks

Training consent is embedded in ToS acceptance rather than a separate opt-in — users who accept ToS consent to their voice recordings being used for AI training. Revoice voice clone models have no clear deletion guarantee. No SOC 2 or ISO 27001 certification. Engineering in Armenia adds sovereignty ambiguity. Broad sublicensable license over voice recordings and AI outputs is legally significant.

Mitigations

Review and negotiate the license and training consent provisions before uploading voice recordings for Revoice. Request explicit written confirmation of data deletion procedures for voice models upon account closure. Avoid uploading sensitive or proprietary voice content until SOC 2 certification is achieved. Do not use for HIPAA or GDPR-sensitive audio recording workflows without a signed DPA.

Get started

Is your team using

Podcastle

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Training Use

Privacy policy (updated December 2024) explicitly states that by using the service, users provide explicit consent for Podcastle to use (including to modify, adjust, and process for training and research) submitted content — including voice recordings — for service improvement. This is broad consent embedded in the terms of service rather than a separate opt-in. Biometric voiceprint data used for AI training is noted as being for research/training of AI tools, not for ads. This is a default consent-via-ToS model, which is more aggressive than opt-in models.

/10

Security Posture

No SOC 2 Type II or ISO 27001 certification publicly documented. No dedicated security page or trust center found. Engineering team in Armenia may limit enterprise security audit accessibility. Recording and editing platform that handles audio data at scale without published enterprise security certifications is a gap. No bug bounty program found. Received $13.5M Series A in 2024 — still building out compliance infrastructure.

/10

Data Retention

No specific public retention period for uploaded audio, recorded podcasts, or voice models. Podcastle's Revoice feature creates an AI voice clone of the user — this voice model may persist beyond account closure without a clear deletion guarantee. Podcast platform model means audio content is stored for distribution duration. No zero-retention mode available.

/10