// Trust & Security Report
Epidemic Sound AB
Royalty-free music and sound effects licensing platform for video creators and brands; includes AI-powered tools (Studio, Adapt) for soundtrack generation and audio editing.
Certifications held
1
Maturity
Enterprise
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on epidemicsound.com“Epidemic Sound acknowledges GDPR compliance: 'responsible for ensuring it uses personal data in compliance with applicable privacy and data protection laws, primarily the General Data Protection Regulation (EU) 2016/679'; applies Standard Contractual Clauses for international data transfers; mentions Swedish Authority for Privacy Protection as supervisory authority.”
> Show 7 unconfirmed / not-held certifications
source: nudgesecurity.comNo public evidence found on vendor-domain; Nudge Security third-party profile claims certification but vendor's own site (site:epidemicsound.com) yields no results for 'SOC 2'
source: nudgesecurity.comNo public evidence found on vendor-domain; Nudge Security claims held but no matching pages on epidemicsound.com
source: nudgesecurity.comNo public evidence found on vendor-domain; Nudge Security claims held but no vendor-domain documentation supports this
No public evidence of AI governance certification found
source: nudgesecurity.comNo public evidence found on vendor-domain; Nudge Security claims held but no vendor-domain documentation supports this
source: nudgesecurity.comNo public evidence found on vendor-domain; Nudge Security claims Level 1 but no vendor-domain documentation supports this
source: nudgesecurity.comNo public evidence found on vendor-domain; Nudge Security claims held but no vendor-domain documentation supports this
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Not offered
Data region
EU/EEA (based in Stockholm, Sweden); data may be transferred outside EU/EEA via Standard Contractual Clauses
Epidemic Sound trains AI tools (Studio, Adapt) exclusively on its own licensed music catalog. Does NOT train on customer-uploaded content. Does NOT sell or license customer data to other AI companies. Does NOT accept AI-generated music from creators. All artists can opt out of AI features and receive direct compensation for AI usage (expanded artist bonus pool from $3.7M to $4.2M in 2026, plus $1M dedicated AI fund).
// Security controls
Data Protection Under GDPR
Epidemic Sound implements Standard Contractual Clauses for international data transfers and complies with GDPR requirements. Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) is the supervisory authority.
epidemicsound.comCookie & Analytics
Uses cookies in conjunction with partners to store and access personal data for content personalization and advertising analytics
epidemicsound.comMulti-Factor Authentication
Supports multiple authentication methods (Okta, Google, Microsoft); two-factor authentication options noted as unsupported per third-party assessment
nudgesecurity.com// Products & data scope
data: Access to 55,000+ licensed tracks; personal account data for subscription
Fully owned catalog; no copyright/IP disputes; available via web app, mobile apps (iOS/Android), and Adobe/DaVinci Resolve plugins
data: Access to 250,000+ sound effects; usage analytics
Integrated with music licensing; available across same platforms
data: Analyzes uploaded video frames; generates synchronized soundtrack suggestions; trained on Epidemic Sound's own catalog only
Launched 2025; does not train on customer videos; does not retain video data; generates audio from licensed catalog + AI-generated ambient/foley
data: Allows editing/adaptation of licensed tracks via AI; does not train on user-provided audio
Launched Sept 2025; trained on Epidemic Sound catalog; artists can opt out; artists compensated via dedicated AI fund
data: Custom licensing, indemnification, dedicated support
Includes legal indemnification against third-party copyright claims; used by major brands (New Balance, GoPro, Levi's, Warner Bros Discovery)
data: Background music for physical retail locations; usage analytics
Separate product; data governed by https://spaces.epidemicsound.com/legal/privacy-policy
// What to watch
- OVER-CLAIM RISK: Nudge Security third-party profile claims SOC 2, ISO 27001, HIPAA, FedRAMP, CSA STAR Level 1, and PCI DSS certifications. However, site:epidemicsound.com search for these terms yields NO results, and no dedicated security/trust center page exists on Epidemic Sound's public website. Per HARD RULES, certifications require vendor-domain proof, not third-party assessment. These claims cannot be verified and are marked held=false.
- NO DEDICATED TRUST CENTER: Unlike enterprise software vendors, Epidemic Sound does not publish a dedicated trust center or security documentation page. Security/compliance information is minimal and scattered across privacy policy fragments.
- Complete data handling, retention, and processing details remain opaque.
- NO IDENTITY-CONFLATION RISK: Epidemic Sound AB (Swedish music licensing, founded 2009) is clearly distinct from other companies. Identity confirmed.
- AI POSTURE: Transparently disclosed and customer-friendly (no customer data training, artist opt-out, artist compensation). No red flags.
// At a glance
Pricing model
Subscription-based; free tier (limited); Creator (monthly/annual); Teams; Enterprise (custom)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Epidemic Sound AB's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
epidemicsound.com