Resemble AI

AI voice generation, voice cloning, and deepfake audio detection platform

by Resemble AI

TrustKit ScoreRated across 5 compliance dimensions: data residency, legal jurisdiction, data retention, certifications, and regulatory fit.Caution

About Resemble AI

Resemble AI was founded in 2019 and has built a platform covering the full AI voice lifecycle: voice creation, customisation, deployment, and authenticity verification. The core product enables developers and content teams to generate realistic synthetic speech from text, clone specific human voices from audio samples, and deploy AI voices in real time for conversational AI applications. Resemble's text-to-speech supports over 100 languages and a library of pre-built AI voice characters, as well as custom voice creation from as little as a few minutes of recorded audio. The real-time voice cloning API enables applications to generate speech dynamically with latency suitable for live applications such as AI phone agents, interactive voice response (IVR), and customer service bots. In addition to voice generation, Resemble has developed Detect—an AI model that identifies whether audio has been synthetically generated, addressing the growing challenge of voice deepfakes for fraud prevention, media authentication, and compliance purposes. This dual focus on generation and detection reflects a more mature approach to responsible AI voice technology. For European businesses, Resemble AI is a US company (incorporated in California) with US-based cloud infrastructure. Voice data—including voice samples used for cloning and audio processed through the API—is processed in the US. European businesses using Resemble for voice cloning must consider that voice data constitutes biometric data under GDPR Article 9, which is a special category subject to stricter processing requirements. GDPR transfer mechanisms (SCCs) and explicit consent for biometric voice processing would be required. Resemble does not publish ISO 27001 or SOC 2 Type II certifications as of early 2026.

TrustKit Score Breakdown

?32% Caution

Data Residency

Where is your data stored and processed?

US-only infrastructure. Voice data—which may constitute biometric data under GDPR Article 9—processed in the US. European businesses must implement SCCs and explicit consent mechanisms for biometric voice data processing.

1/5

Legal Jurisdiction

Which laws govern the company and your data?

California incorporation, US jurisdiction, CLOUD Act applies. GDPR privacy documentation available but no enterprise DPA structure. Biometric voice data requires GDPR Article 9 compliance under explicit consent or legitimate purpose.

2/5

Data Retention & Training

Is your data used for model training?

Custom voice samples used only to build the commissioned voice profile; not shared across customers. Data retention policies for voice samples should be reviewed in vendor agreement before deployment.

3/5

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

No published ISO 27001 or SOC 2 Type II certifications. Self-attested security practices. Not suitable for enterprise regulated-industry procurement without significant additional due diligence.

1/5

Regulatory Fit

Suitability for regulated industries and professional services

Significant GDPR compliance challenges for European businesses due to biometric voice data classification. US jurisdiction and absence of certifications make this unsuitable for regulated EU industries. Best suited for non-EU markets or non-personal voice synthesis use cases.

1/5

Pricing

FreemiumFree tier

FreeFree10,000 free characters/month · Pre-built AI voices · Web editor

Basic$29/mo($24/mo annual)50,000 characters/month · Custom voice creation · API access · …

Pro$99/mo($83/mo annual)500,000 characters/month · Real-time voice synthesis · Emotion control · …

Full pricing details →

Quick Facts

Starting PriceFree tier / from $0.006/secData HostingUS onlyTrains on Your DataVoice samples used to build custom voice only; not sharedFounded2019Employees11-50

Visit Resemble AI

Frequently Asked Questions

Is Resemble AI GDPR compliant?

Resemble AI has a TrustKit compliance score of 32% (Caution). Data Residency: US-only infrastructure. Voice data—which may constitute biometric data under GDPR Article 9—processed in the US. European businesses must implement SCCs and explicit consent mechanisms for biometric voice data processing.. Legal Jurisdiction: California incorporation, US jurisdiction, CLOUD Act applies. GDPR privacy documentation available but no enterprise DPA structure. Biometric voice data requires GDPR Article 9 compliance under explicit consent or legitimate purpose..

Where does Resemble AI store data?

Resemble AI hosts data in: US only. US-only infrastructure. Voice data—which may constitute biometric data under GDPR Article 9—processed in the US. European businesses must implement SCCs and explicit consent mechanisms for biometric voice data processing.

Does Resemble AI train on user data?

Resemble AI: Voice samples used to build custom voice only; not shared. Custom voice samples used only to build the commissioned voice profile; not shared across customers. Data retention policies for voice samples should be reviewed in vendor agreement before deployment.

What certifications does Resemble AI hold?

No certifications have been confirmed for Resemble AI yet. No published ISO 27001 or SOC 2 Type II certifications. Self-attested security practices. Not suitable for enterprise regulated-industry procurement without significant additional due diligence.