AIVA

AI music composition engine from Luxembourg for creating original soundtracks and scores

by AIVA

Luxembourg🌐EU (Luxembourg-based company)

TrustKit ScoreRated across 5 compliance dimensions: data residency, legal jurisdiction, data retention, certifications, and regulatory fit.Strong

About AIVA

AIVA (Artificial Intelligence Virtual Artist) was founded in 2016 in Luxembourg. The platform is an AI composer that generates original music compositions in various styles — classical, electronic, cinematic, pop, and more. Users can customise parameters like genre, mood, tempo, and instrumentation to generate music tailored to their needs. AIVA was notably one of the first AI systems to be registered as a composer with a music rights society (SACEM in France), giving its compositions legal copyright status in some jurisdictions. The company received funding through the EU Horizon 2020 programme, alongside investments from Kima Ventures, NetEase, and Kayacan Holding. Use cases include: background music for video content, game soundtracks, corporate presentations, advertisements, and podcast intros. The platform serves both individual content creators and businesses that need royalty-free original music at scale. As a Luxembourg-based company funded partly by EU programmes, AIVA represents the EU's investment in creative AI. Luxembourg is an EU member state with strong data protection regulations. For European businesses looking for AI-generated music without relying on US platforms, AIVA provides an EU-native alternative to tools like Suno and Udio.

TrustKit Score Breakdown

?68% Strong

Data Residency

Where is your data stored and processed?

Luxembourg-based company operating within EU. Data handling under EU jurisdiction. Specific data centre locations not publicly documented.

4/5

Legal Jurisdiction

Which laws govern the company and your data?

Luxembourg S.A., fully under EU law. EU Horizon 2020 funded. No US parent or control.

5/5

Data Retention & Training

Is your data used for model training?

Generated compositions from proprietary models. User inputs not used for retraining. Music outputs owned by user (licensing varies by plan).

4/5

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

No SOC 2 or ISO 27001 certifications publicly confirmed. Small company serving primarily creative use cases with lower compliance requirements.

1/5

Regulatory Fit

Suitability for regulated industries and professional services

EU-native legal structure. GDPR applies natively. Suitable for European creative and marketing use cases. Certification gaps may matter for enterprise procurement.

3/5

Pricing

FreemiumFree tier

FreeFree3 downloads/month · Non-commercial use · Limited styles

Standard€11/mo15 downloads/month · Monetise on social media · All styles · …

Pro€33/mo300 downloads/month · Full commercial use · You own copyright · …

Full pricing details →

Quick Facts

Starting PriceFree / €11/mo StandardData HostingEU (Luxembourg-based company)Trains on Your DataCompositions generated from proprietary training; user inputs not used for retrainingFounded2016Employees11-50

Visit AIVA

Frequently Asked Questions

Is AIVA GDPR compliant?

AIVA has a TrustKit compliance score of 68% (Strong). Data Residency: Luxembourg-based company operating within EU. Data handling under EU jurisdiction. Specific data centre locations not publicly documented.. Legal Jurisdiction: Luxembourg S.A., fully under EU law. EU Horizon 2020 funded. No US parent or control..

Where does AIVA store data?

AIVA hosts data in: EU (Luxembourg-based company). Luxembourg-based company operating within EU. Data handling under EU jurisdiction. Specific data centre locations not publicly documented.

Does AIVA train on user data?

AIVA: Compositions generated from proprietary training; user inputs not used for retraining. Generated compositions from proprietary models. User inputs not used for retraining. Music outputs owned by user (licensing varies by plan).

What certifications does AIVA hold?

No certifications have been confirmed for AIVA yet. No SOC 2 or ISO 27001 certifications publicly confirmed. Small company serving primarily creative use cases with lower compliance requirements.