// Trust & Security Report
Endel Sound GmbH
Endel is a sound wellness application that generates personalized, adaptive soundscapes using AI to help users focus, relax, sleep, and move. Available across iOS, Android, Apple Watch, Apple TV, Amazon Alexa, Mac, Windows, and web.
Certifications held
2
Maturity
Growth
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on fairlytrained.org“Endel is among the companies that has received the Licensed Model (L) certification from Fairly Trained, a non-profit that certifies generative AI companies for training data practices that respect creators' rights.”
Verify on endel.io“Endel is the 'controller' within the meaning of the EU General Data Protection Regulation (GDPR) and complies with applicable US data protection laws, including the California Consumer Privacy Act (CCPA). Data transfers to the US are secured by the EU-US Data Privacy Framework.”
> Show 6 unconfirmed / not-held certifications
source: endel.ioNo public evidence of SOC 2 certification found. Privacy policy and website do not mention SOC 2 audit or certification.
source: endel.ioNo public evidence of ISO 27001 certification found. Privacy policy and security documentation do not reference this certification.
source: endel.ioNo public evidence of ISO 27018 certification found despite AWS data storage. This certification would apply to cloud service providers, not necessarily to Endel as a consumer application.
source: endel.ioNo public evidence of HIPAA compliance. HIPAA applies to covered entities in healthcare; Endel is a consumer wellness application outside the scope of HIPAA regulatory requirements.
source: endel.ioNo public evidence of ISO 42001 certification. This is an emerging standard and not commonly held by consumer AI applications.
source: endel.ioNo public evidence of CSA STAR certification found.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Primary storage via Amazon Web Services SARL (38 avenue John F. Kennedy, L-1855, Luxembourg, EU); some data transferred to the US via third-party tools (e.g., Facebook Connect) under the EU-US Data Privacy Framework
Endel holds Fairly Trained certification, indicating its generative AI models are trained on licensed data, not on user-generated soundscapes or personal listening data. User data is used for real-time personalization within the app but not for retraining the underlying AI model.
// Security controls
Encryption in Transit
Not explicitly documented; standard HTTPS inferred but no formal specification provided
endel.io// Products & data scope
data: Heart rate (Apple Watch), location, time of day, weather; personal subscription and listening history
4+ million downloads, Apple Watch App of the Year 2020, includes biometric sensor access
data: Location, time of day, weather; personal subscription and listening history
Google Play Best of 2021, no Apple Watch biometric integration
data: Heart rate, light intake, movement, biometric data
Standalone app, runs independently from iPhone, uses biometric sensors for real-time personalization
data: Voice commands, Routine automation data
Includes integration with Alexa Routines and smart home automation
data: Viewing history, device identifiers
Full-screen soundscape with generative visuals
data: Viewing history, device identifiers
Full-screen soundscape with generative visuals
data: App usage patterns, subscription data
Streamlined interface designed for productivity focus sessions
data: App usage patterns, subscription data
Generative soundscape player with real-time adaptation
data: Browser-based session data, subscription information
Accessible from any browser, includes signature visual generation
data: Limited - pre-generated static albums, not personalized
Albums on Spotify, Apple Music, etc.; collaborations with James Blake, Grimes, Ta-ku; not adaptive/real-time
// What to watch
- No published trust center or security documentation page on vendor domain.
- No SOC 2 or ISO 27001 certifications despite using AWS; these are common for SaaS companies but not universally required for consumer wellness apps.
- Fairly Trained certification is an AI ethics/training-data certification, not a traditional security/compliance certification. It confirms licensed AI training practices but does not cover infrastructure security, encryption standards, or data protection audits.
- Encryption specifications (algorithms, key lengths, in-transit/at-rest) are not publicly documented.
- HIPAA is not mentioned; this is appropriate as Endel is not a covered entity under HIPAA, though it does collect health-adjacent data (heart rate, location). GDPR protections apply instead.
- Data storage on AWS SARL is noted, but no reference to AWS's own certifications (SOC 2, ISO 27001) is made in Endel's privacy policy—the vendor should clarify whether AWS certifications extend to Endel's use.
- No formal security audit report or certification letter found on public vendor domain.
- Company maturity is 'growth' (Series A funded, 4M+ downloads, 1M+ monthly active users) rather than 'enterprise' due to lack of formal security certifications typical of enterprise software.
// At a glance
Pricing model
Freemium subscription: free tier with limited soundscapes; premium subscription (individual and family plans)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Endel Sound GmbH's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
endel.io